AT&T 585-310-231 manual Detecting Toll Fraud, Call Detail Recording

If call transfers are restricted to subscribers, a caller cannot initiate a transfer to an off-premises destination unless the digits entered match an administered subscriber’s mailbox identifier. To ensure the integrity of the “subscriber” restriction, do not administer mailboxes that start with the same digit(s) as a valid switch trunk access code.

Detecting Toll Fraud

Some of the Intuity system reports are valuable in determining if your voice messaging or automated attendant systems are being used for fraudulent purposes.

Call Detail Recording

With Station Message Detail Recording (SMDR) activated for incoming calls, you can check the calls into your voice mail ports. A series of short holding times may indicate repeated attempts to enter voice mailbox passwords.

Review SMDR reports for the following symptoms of voice messaging abuse:

■Short holding times on calls where voice messaging is the originating endpoint or terminating endpoint

■Calls to international locations not normal for your business

■Calls to suspicious destinations

■Numerous calls to the same number

■Undefined account codes

NOTE:

The MERLIN LEGEND system only records the last extension on the call. Internal toll abusers transfer unauthorized calls to another extension before they disconnect so that the SMDR does not track the originating station. If the transfer is to your voice messaging system, it could give a false indication that your voice messaging system is the source of the toll fraud.

Review the Call Accounting System (CAS) and HackerTracker documentation on how to use SMDR reports.

Issue 2.0 December 1995 A-9