{"id":574,"date":"2013-12-16T06:46:39","date_gmt":"2013-12-16T06:46:39","guid":{"rendered":"http:\/\/frslabs.com\/frsblog\/?p=574"},"modified":"2025-10-31T05:26:19","modified_gmt":"2025-10-31T05:26:19","slug":"what-is-irsf-fraud","status":"publish","type":"post","link":"https:\/\/www.frslabs.com\/frsblog\/2013\/12\/16\/what-is-irsf-fraud\/","title":{"rendered":"What is IRSF Fraud?"},"content":{"rendered":"<p>International Revenue Share Fraud (<strong>IRSF Fraud<\/strong>) has been a bane for communication service providers for over a decade. IRSF perpetrators make vicious attacks, often taking the operators by surprise, and in some cases, leaving smaller operators at the brink of closure.<\/p>\n<p><a href=\"https:\/\/frslabs.com\/frsblog\/wp-content\/uploads\/2013\/12\/Rombus-Image-v2.jpg\"><img loading=\"lazy\" class=\"size-large wp-image-1588 aligncenter\" src=\"https:\/\/frslabs.com\/frsblog\/wp-content\/uploads\/2013\/12\/Rombus-Image-v2-750x400.jpg\" alt=\"\" width=\"750\" height=\"400\" \/><\/a><\/p>\n<p>The GSMA provides a comprehensive definition of what IRS Fraud is: \u201cInternational Revenue Share Fraud is a form of fraud whereby the perpetrator artificially inflates traffic by generating calls to certain portions of international number ranges with no intention to pay for the calls (or paying where there exists some form of arbitrage opportunity), or by stimulating calls by others to the number ranges. The fraudster receives a share of the revenue from termination charges obtained by the number range holder for inbound traffic to the number ranges.\u201d<\/p>\n<p>\u00a0<\/p>\n<p><div class=\"embed-responsive embed-responsive-16by9 mb-30\"><iframe loading=\"lazy\" title=\"Rombus IRSF Fraud Overview\" width=\"1170\" height=\"658\" src=\"https:\/\/www.youtube.com\/embed\/cxS26YYfPsw?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe><\/div><\/p>\n<p>The modus operandi for fraudsters includes:<\/p>\n<ol>\n<li>Acquiring SIM cards illegally.<\/li>\n<li>Hijacking SIM cards from unsuspecting customers.<\/li>\n<li>Using SIM cards from stolen phones.<\/li>\n<li>Obtaining SIM cards through subscription fraud.<\/li>\n<li>Hacking into PBX systems or hijacking number ranges.<\/li>\n<li>Installing malware on devices that generates calls discreetly.<\/li>\n<\/ol>\n<p>Once fraudsters obtain SIM cards or compromise PBX systems, they often select International Revenue Share (IRS) destinations in collaboration with IPRN providers and content providers that offer lucrative payouts to generate traffic. To maximize their revenues, fraudsters employ various techniques such as international call forwarding, malware, and deploying multiple moles simultaneously to drive traffic.<\/p>\n<blockquote>\n<p><span style=\"color: #3366ff;\">Many IRSF numbers are regular numbers advertised as premium rate numbers. There are no centralized premium rated number that you can readily use for blocking or analysing before allowing the call to proceed. So, having a bunch of rules in your FMS is not going to cut it.<\/span><\/p>\n<\/blockquote>\n<p>Frequently, these calls continue until the number range owner or the operator detects the attack and blocks access. Typically, fraudsters then move on to another number or destination to continue their attack until the SIM cards are blocked by the originating home operator. In many cases, the originating operator may struggle to recover money from the perpetrators.<\/p>\n<blockquote>\n<p>Each operator routes the calls based on a convoluted algorithm and routing agreements. Therefore, it would be futile to go down the rabbit hole to identify the perpetrators of IRSF or Wangiri fraud.<\/p>\n<\/blockquote>\n<p>Having worked with a number of operators, both large and small, it becomes apparent that no one is immune to IRSF attacks. This fact is further supported by the wide range of IRSF destinations, which spans over 220 countries, covering virtually every nation on the planet. Even if one number is blocked, fraudsters have thousands of other numbers and destinations to choose from.<\/p>\n<blockquote>\n<p>Agreements are often out of reach of investigators, so even if you have a mandate, you will keep wondering why you couldn\u2019t figure out that you couldn\u2019t figure out. Fraudulent operators are lean and efficient over regular operators. They use numerous techniques to terminate, mis-route such that investigations are impossible as only a small proportion is re-routed.<\/p>\n<\/blockquote>\n<p>The cross-border nature of IRSF also poses significant challenges for law enforcement agencies attempting to track down the perpetrators. For instance, the complex IRSF cycle begins when SIM cards are acquired by Mr. X, a national of Country A, who then ships the SIM cards to Mr. Y, a national of Country B, residing in Country C. Subsequently, calls are placed to Country D, and these calls are rerouted to an IRS or PRS number located in Country E, owned by a company registered in Country F, with money being channeled through multiple bank accounts. This intricate web of international connections makes it an exceptionally formidable task for law enforcement teams.<\/p>\n<blockquote>\n<p>Numbers are often hijacked for short periods to test and arrangements made to defraud \u2013 usually between 4 and 48 hours. If you are using a number database for prevention, you better make sure that it is a real time.<\/p>\n<\/blockquote>\n<p>Having strong primary fraud controls such as <a title=\"Atreus FAQ\" href=\"http:\/\/frslabs.com\/frsblog\/2014\/09\/17\/atreus-application-fraud-faq\/\" target=\"_blank\" rel=\"noopener\">Application Fraud Prevention<\/a> and <a title=\"Orpheus FAQ\" href=\"http:\/\/frslabs.com\/frsblog\/2013\/07\/02\/orpheus-subscription-fraud-management-faq\/\" target=\"_blank\" rel=\"noopener\">Subscription Fraud Detection<\/a> are indeed a must. On top of this, operators will need more than just a fraud management system to detect and prevent IRSF attacks. For instance, numbers called in IRSF incidents are usually not part of official national numbering plans, so the originating operator cannot easily identify the B-numbers as premium rate service numbers and add them in the fraud management system to generate alerts.<\/p>\n<blockquote>\n<p>The IRSF fraud schemes are ever growing from fraudulent SIMs, hacking computers and communication systems to malware that automatically dials while you are still swiping your screen, RCS messages that are virtually undetected and delivered to your inbox as real (apart from wiping out your savings, you also get charged a premium for returning the call that purportedly came from the post office announcing of a missed parcel delivery \u2013 pretty painful!).<\/p>\n<\/blockquote>\n<p>Recognizing the unique methods employed in IRSF fraud, we have developed a novel IRSF database called <a href=\"https:\/\/www.frslabs.com\/irsf-fraud\/\">Rombus,<\/a> which contains pretty much all of the test numbers advertised by IPRN providers. Utilized as a hotlist, this database could prove to be a valuable weapon in the battle against IRSF fraud.<\/p>\n<p>If you would like to learn more about our IRSF fraud prevention solution, <a href=\"https:\/\/www.frslabs.com\/book-demo\/\">please get in touch<\/a>.<\/p>\n\n\n<hr class=\"wp-block-separator\"\/>\n\n\n\n<p><strong><span style=\"color:#bd006f\" class=\"has-inline-color\">About<\/span><\/strong><\/p>\n\n\n\n<p><strong><span style=\"color:#bd006f\" class=\"has-inline-color\">We are your friends at frslabs<\/span><\/strong><\/p>\n\n\n\n<p><a href=\"https:\/\/www.frslabs.com\/\">FRSLABS<\/a> is an award-winning research and development company specialising in customer onboarding, identity verification and fraud prevention solutions for businesses. Whether you are a big bank, insurance, telco or a small investment broker, we help you onboard and verify your customers with greater flexibility, compliance and reliability.<\/p>\n\n\n\n<p><strong><span style=\"color:#bd006f\" class=\"has-inline-color\">Built for you, not for investors<\/span><\/strong><\/p>\n\n\n\n<p>We do what is right for you (and only you) at scale. Nothing is off-limits for us when it comes to innovation, a culture best reflected in the array of patents we have filed. We want to be your trusted partner, to build the solutions you need, and to succeed when you succeed.<\/p>\n\n\n\n<p><strong><span style=\"color:#bd006f\" class=\"has-inline-color\">Priced for success<\/span><\/strong><\/p>\n\n\n\n<p>We are driven by our mission to touch a billion lives with our tools and not beholden by venture capital or mindless competition. We therefore have the freedom to do the right thing, and price our products sensibly, keeping your success and our staff in mind.<\/p>\n\n\n\n<p><strong><span style=\"color:#bd006f\" class=\"has-inline-color\">Supported by humans<\/span><\/strong><\/p>\n\n\n\n<p>Whatever it takes, we are here to help you succeed with our products and services. For a start, you get to talk to a human for help, not bots, to figure things out one-to-one. Whatever your needs, however trivial or complex it may seem, we have you covered.<\/p>\n\n\n\n<p>**<\/p>\n","protected":false},"excerpt":{"rendered":"<p>International Revenue Share Fraud (IRSF) has been around for a decade, yet, there is little awareness among leading communication service providers, let alone start-ups and small service providers. While this has caused severe damages in the past, it\u2019s once again beginning to raise its ugly head with a spate of vicious attacks, often taking the operators by surprise, and in some cases, leaving them at the brink of closure. So what is IRSF Fraud and what should be done to control it.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_s2mail":"yes"},"categories":[112],"tags":[113,46],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v16.7 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>What is IRSF Fraud? Protect your business from IRSF and Wangiri attacks<\/title>\n<meta name=\"description\" content=\"IRSF fraud occurs when fraudsters artificially inflate traffic to certain international number ranges with no intention to pay.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.frslabs.com\/frsblog\/2013\/12\/16\/what-is-irsf-fraud\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Shankar\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.frslabs.com\/frsblog\/#website\",\"url\":\"https:\/\/www.frslabs.com\/frsblog\/\",\"name\":\"FRSLABS\",\"description\":\"Privacy Protection | Identity Verification | Fraud Managment\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.frslabs.com\/frsblog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.frslabs.com\/frsblog\/2013\/12\/16\/what-is-irsf-fraud\/#primaryimage\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/frslabs.com\/frsblog\/wp-content\/uploads\/2013\/12\/Rombus-Image-v2-750x400.jpg\",\"contentUrl\":\"https:\/\/frslabs.com\/frsblog\/wp-content\/uploads\/2013\/12\/Rombus-Image-v2-750x400.jpg\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.frslabs.com\/frsblog\/2013\/12\/16\/what-is-irsf-fraud\/#webpage\",\"url\":\"https:\/\/www.frslabs.com\/frsblog\/2013\/12\/16\/what-is-irsf-fraud\/\",\"name\":\"What is IRSF Fraud? Protect your business from IRSF and Wangiri attacks\",\"isPartOf\":{\"@id\":\"https:\/\/www.frslabs.com\/frsblog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.frslabs.com\/frsblog\/2013\/12\/16\/what-is-irsf-fraud\/#primaryimage\"},\"datePublished\":\"2013-12-16T06:46:39+00:00\",\"dateModified\":\"2025-10-31T05:26:19+00:00\",\"author\":{\"@id\":\"https:\/\/www.frslabs.com\/frsblog\/#\/schema\/person\/44aa0b93c2b856fcc15543185e8dbf3d\"},\"description\":\"IRSF fraud occurs when fraudsters artificially inflate traffic to certain international number ranges with no intention to pay.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.frslabs.com\/frsblog\/2013\/12\/16\/what-is-irsf-fraud\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.frslabs.com\/frsblog\/2013\/12\/16\/what-is-irsf-fraud\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.frslabs.com\/frsblog\/2013\/12\/16\/what-is-irsf-fraud\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.frslabs.com\/frsblog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What is IRSF Fraud?\"}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.frslabs.com\/frsblog\/#\/schema\/person\/44aa0b93c2b856fcc15543185e8dbf3d\",\"name\":\"Shankar\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.frslabs.com\/frsblog\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2b71e9e7aa03a6cdafa4d0ae11becd9b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2b71e9e7aa03a6cdafa4d0ae11becd9b?s=96&d=mm&r=g\",\"caption\":\"Shankar\"},\"sameAs\":[\"http:\/\/www.frslabs.com\"],\"url\":\"https:\/\/www.frslabs.com\/frsblog\/author\/shankar\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What is IRSF Fraud? Protect your business from IRSF and Wangiri attacks","description":"IRSF fraud occurs when fraudsters artificially inflate traffic to certain international number ranges with no intention to pay.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.frslabs.com\/frsblog\/2013\/12\/16\/what-is-irsf-fraud\/","twitter_misc":{"Written by":"Shankar","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/www.frslabs.com\/frsblog\/#website","url":"https:\/\/www.frslabs.com\/frsblog\/","name":"FRSLABS","description":"Privacy Protection | Identity Verification | Fraud Managment","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.frslabs.com\/frsblog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"ImageObject","@id":"https:\/\/www.frslabs.com\/frsblog\/2013\/12\/16\/what-is-irsf-fraud\/#primaryimage","inLanguage":"en-US","url":"https:\/\/frslabs.com\/frsblog\/wp-content\/uploads\/2013\/12\/Rombus-Image-v2-750x400.jpg","contentUrl":"https:\/\/frslabs.com\/frsblog\/wp-content\/uploads\/2013\/12\/Rombus-Image-v2-750x400.jpg"},{"@type":"WebPage","@id":"https:\/\/www.frslabs.com\/frsblog\/2013\/12\/16\/what-is-irsf-fraud\/#webpage","url":"https:\/\/www.frslabs.com\/frsblog\/2013\/12\/16\/what-is-irsf-fraud\/","name":"What is IRSF Fraud? Protect your business from IRSF and Wangiri attacks","isPartOf":{"@id":"https:\/\/www.frslabs.com\/frsblog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.frslabs.com\/frsblog\/2013\/12\/16\/what-is-irsf-fraud\/#primaryimage"},"datePublished":"2013-12-16T06:46:39+00:00","dateModified":"2025-10-31T05:26:19+00:00","author":{"@id":"https:\/\/www.frslabs.com\/frsblog\/#\/schema\/person\/44aa0b93c2b856fcc15543185e8dbf3d"},"description":"IRSF fraud occurs when fraudsters artificially inflate traffic to certain international number ranges with no intention to pay.","breadcrumb":{"@id":"https:\/\/www.frslabs.com\/frsblog\/2013\/12\/16\/what-is-irsf-fraud\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.frslabs.com\/frsblog\/2013\/12\/16\/what-is-irsf-fraud\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.frslabs.com\/frsblog\/2013\/12\/16\/what-is-irsf-fraud\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.frslabs.com\/frsblog\/"},{"@type":"ListItem","position":2,"name":"What is IRSF Fraud?"}]},{"@type":"Person","@id":"https:\/\/www.frslabs.com\/frsblog\/#\/schema\/person\/44aa0b93c2b856fcc15543185e8dbf3d","name":"Shankar","image":{"@type":"ImageObject","@id":"https:\/\/www.frslabs.com\/frsblog\/#personlogo","inLanguage":"en-US","url":"https:\/\/secure.gravatar.com\/avatar\/2b71e9e7aa03a6cdafa4d0ae11becd9b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2b71e9e7aa03a6cdafa4d0ae11becd9b?s=96&d=mm&r=g","caption":"Shankar"},"sameAs":["http:\/\/www.frslabs.com"],"url":"https:\/\/www.frslabs.com\/frsblog\/author\/shankar\/"}]}},"_links":{"self":[{"href":"https:\/\/www.frslabs.com\/frsblog\/wp-json\/wp\/v2\/posts\/574"}],"collection":[{"href":"https:\/\/www.frslabs.com\/frsblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.frslabs.com\/frsblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.frslabs.com\/frsblog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.frslabs.com\/frsblog\/wp-json\/wp\/v2\/comments?post=574"}],"version-history":[{"count":35,"href":"https:\/\/www.frslabs.com\/frsblog\/wp-json\/wp\/v2\/posts\/574\/revisions"}],"predecessor-version":[{"id":2025,"href":"https:\/\/www.frslabs.com\/frsblog\/wp-json\/wp\/v2\/posts\/574\/revisions\/2025"}],"wp:attachment":[{"href":"https:\/\/www.frslabs.com\/frsblog\/wp-json\/wp\/v2\/media?parent=574"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.frslabs.com\/frsblog\/wp-json\/wp\/v2\/categories?post=574"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.frslabs.com\/frsblog\/wp-json\/wp\/v2\/tags?post=574"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}