What Is Toll Fraud? VoIP Toll Fraud Explained
You arrive on Monday to a phone bill with fifty thousand dollars of calls to places you've never dialled, made overnight while the office was empty. Nobody broke a window. They walked in through an open SIP port.
Toll fraud is the unauthorised use of a phone system to place calls — usually to international or premium-rate numbers — at the victim's expense. It's one of the most common and costly attacks against VoIP systems, and it's almost always preventable.
How toll fraud happens
The classic attack is simple. Automated tools scan the internet for exposed SIP ports, try to register as an extension using weak or default credentials, and — once in — place a flood of calls to premium-rate numbers the fraudster controls, collecting the payout. Because it runs at machine speed, overnight and on weekends, the bill can reach tens of thousands before anyone notices.
Other routes include compromised voicemail systems that allow outbound dialling, and dialplans that permit international calling from any extension by default.
Why VoIP is especially exposed
A traditional phone line could only be abused by someone physically on it. A VoIP system is reachable by anyone on the internet unless you lock it down. The global reach that makes VoIP powerful is the same reach that lets an attacker in Lagos bill calls to your account in Bangalore.
How to shut it down
Toll fraud is defended in layers: never expose raw SIP to the public internet; enforce strong, unique per-extension credentials; restrict which destinations each extension can dial (most users never need premium-rate or exotic international numbers); cap concurrent and daily call volume; block registration floods with rate limiting and automated banning; and watch call records for anomalies.
The strongest position is a platform that ships these controls on by default — encrypted signalling, no anonymous calling, sane dialplan limits — rather than one that leaves them as optional settings a busy administrator may never enable.
Frequently asked questions
How much can toll fraud cost?
Industry losses run into billions of dollars a year, and a single compromised system can rack up tens of thousands in a weekend. The fraud is automated, so it scales fast once an attacker is in.
What's the single most effective prevention?
Don't expose SIP to the public internet, and restrict outbound dialling by destination. Most toll fraud relies on an open port and an unrestricted dialplan — close both and you remove the easy attack.