SIM Farms, OTPs, and Fake Social Media Accounts
Many online platforms – including social media and OTT providers – use One-Time Passcodes (OTP) via SMS for account registration and verification to inhibit the creation of fake accounts. However, the problem continues to persist. LATRO recently discovered and helped to take down a SIM Box-based SIM farming operation in Africa, which was being used to receive OTPs to set up fake accounts for Amazon, AliPay, Facebook, and WhatsApp. LATRO’s work enabled law enforcement to confiscate >2 million SIM cards related to this operation.
It is widely known that Social Media companies and Over-the-Top (OTT) communication providers are facing a major issue with fake accounts and bots. Elon Musk, CEO of X (Twitter), publicly declared his ambition to “defeat the spam bots or die trying. Meta (Facebook) has released data suggesting that they have deleted nearly 30 billion fake social media accounts (more than 3 times the entire population of the planet) since 2017.
The challenge
The proliferation of fake accounts and bots poses a significant threat to the digital ecosystem, impacting social media and OTT platforms in numerous ways. These fraudulent profiles erode user trust, diminish content credibility, and compromise platform integrity. A major financial burden for these platforms stems from the cost of Application-to-Person (A2P) SMS messages, which they must pay to CPaaS providers to deliver One-Time Passcodes (OTPs) used in creating these very fake accounts. This issue contributes to Artificial Inflation of Traffic (AIT) within the A2P messaging ecosystem, with industry experts estimating losses from AIT reaching up to $2.4 billion USD. Communication Service Providers (CSPs) face a complex dilemma; while they generate revenue from OTP SMS delivery, they also risk reputational damage and future A2P revenue loss if they fail to effectively address the underlying fraudulent activity and inflated traffic on their networks.
The solution
LATRO’s expertise went beyond simply detecting the problem; our comprehensive solution effectively eradicated the SIM Box-based SIM farming operation. LATRO’s Bypass Shield, a powerful tool designed to protect Communication Service Providers (CSPs) from revenue losses, played a crucial role. Unlike traditional
fraud detection methods, Bypass Shield employs a unique approach, probing the core network signaling to perform device classification based on network signaling events and
messages.
In this case, Bypass Shield identified devices exhibiting SIM Box-related Protocol Signatures and an atypical usage pattern – the receipt of a high volume of A2P SMS messages instead of the origination of voice calls. To further address the issue, LATRO deployed our Geolocation Services. Our RF Geolocation Team worked collaboratively with the CSP, Regulator, and Law Enforcement in Africa to pinpoint the physical location of these illicit operations. This combined approach enabled the complete takedown of the SIM farms.
Effective Strategies to Prevent OTP SIM Box Fraud
LATRO estimates that the CSP was exposed to ~ $8M in direct losses due to these OTP Sim Farm operations on its network; however, due to LATRO’s ability to detect and locate these operations the CSP will be able to seek retribution from the fraudsters and mitigate the exposure to future losses from these types of fraud operations
Large-Scale Fraud Disruption:
2 million SIM Cards confiscated
Financial Loss Identification
LATRO removed the CSPs exposure to approximately $8 million in direct loss
Fraud Prevention and Future Loss Mitigation:
LATRO’s solution enabled the CSP to ”seek retribution from the fraudsters and mitigate the exposure to future losses from these types of fraud operations.”
CSPs can effectively mitigate OTP SIM Farms through multi-layered, proactive fraud controls established within the CSP’s ecosystem
New SIM Activation Policies for Fraud Prevention:
CSPs should apply strict policies on new account activation to avoid mass activation done by dealers, which can provide fraudsters with an adequate supply of SIM cards. SIM card activation should be done after providing enough documentation to ensure that numbers are not activated with fake identification documents. It is important to ensure alignment of incentives within the CSP to ensure behavior that can lead to fraud is not incentivized (mass activation done by dealers to accelerate commissions). Working together is key to achieve common goals which serve the company’s aim.
Usage-Based Analytics (CDR Analytics SIM Activation Policies for Fraud Detection:
CDR Analytics is a technique that combines usage-based algorithms and truth data to detect OTP Fraud identifiers based on behavior.
Signaling-Event Based Analytics to Combat Telecom Fraud
Signaling Analytics is a technique that leverages Protocol Signature™ technology to detect fraudulent OTP devices based on advanced signaling behavior anomalies
Geolocation and Interdiction of Fraudulent SIM Box Operations:
The ability to geolocate, interdict, and arrest those who are running OTP SIM Farm operations is another proactive approach that MNOs can follow in order to raise the risk to SIM Box operators and deter the behavior on their networks.
Conclusion
This case study demonstrates LATRO’s innovative approach to combating fraud and its ability to protect CSPs from significant financial losses. By extending its Bypass Shield solution to address the issue of OTP SIM farms, LATRO showcases its commitment to securing the digital ecosystem. Download [hyperlink to download form] the full case study to gain a deeper understanding of the operation, the technological solutions employed, and the far-reaching impact of LATRO’s expertise.
