Understanding IRSF Fraud: Protecting Against...
summary
Explains that SMS 2FA can fund International Revenue Share Fraud by routing huge SMS/voice volumes to premium numbers, with 8 million IPRNs created in a year and cases like a $2 million weekend from a voicemail callback abuse; attackers use email tumbling and scripted resends to onboard thousands of numbers. Detection centers on anomaly alerts (traffic spikes, new country codes, Linux user agents) and tools like Datadog Cloudflare OpenAI are used; mitigations are rate limits, country and domain denylists, and an operations playbook.
AI-written summary · about
chapters (10)
- 0:00Welcome and introductions
- 1:53What is IRSF fraud
- 3:59IRSF fraud landscape
- 7:35International premium rate numbers
- 10:31How IRSF attacks work
- 12:16Attacker system exploitation
- 14:45Detecting IRSF fraud
- 17:29Mitigating IRSF attacks
- 22:00Recap and resources
- 23:27Q&A session
related talks
42mThe Old is New Again: An Intro to SMS Security and Why It’s Vital
30mFair game: the ethics of telco fraud
54mLifecycle of a Phone Fraudster: Exposing Fraud Activity
29mGuardians of the Gateway: Battling SMS Fraud in Real Time
48m2FA2Furious: New Threats to MFA
29mProtecting Phone Verification
26mIntegrating Identity and Fraud
30mAuthentication Strategies to Protect Your Customers and Your Brand from Sophisticated Attacks