FlagThis - #Fraud

The FCC has proposed a ~$4.5 million fine against Telnyx related to government imposter robocalls made on its network. This action comes after robocallers, posing as employees of the Federal Communications Commission, targeted FCC staff and their family members. The robocalls purported to be from a fictitious FCC “Fraud Prevention Team” and were made to both personal and work telephone numbers. The FCC alleges that Telnyx violated "Know Your Customer (KYC)" rules by providing access to calling services without verifying the customers' identities.

The scheme involved an artificial voice directing recipients to press one to speak with the "Fraud Prevention Team" or two to schedule a callback. One recipient reported being connected to someone who demanded payment in Google gift cards to avoid jail time. The FCC has stated it doesn't have any such "Fraud Prevention Team" and doesn't share staff personal phone numbers, and it "remains unclear how these individuals were targeted." The FCC believes the purpose of the calls was to threaten, intimidate, and defraud. Despite the severity of the situation, Telnyx has denied the allegations and plans to contest the proposed fine.


References :

• arstechnica.com: Robocallers posing as FCC staff blocked after robocalling real FCC staff You can ignore robocalls from FCC "Fraud Prevention Team," which doesn't exist.
• www.bleepingcomputer.com: The FCC has proposed a $4,492,500 fine against VoIP service provider Telnyx for allegedly allowing customers to make robocalls posing as fictitious FCC "Fraud Prevention Team," by failing to comply with Know Your Customer (KYC) rules. However, Telnyx says the FCC is mistaken and denies the accusations.
• www.fcc.gov: FCC proposes a ~$4.5 million fine against Telnyx related to government imposter robocalls made on its network. Among other potential victims, the calls were made to FCC staff and their family members and purported to be from a fictitious FCC “Fraud Prevention Team.â€�
• BleepingComputer: The FCC has proposed a $4,492,500 fine against VoIP service provider Telnyx for allegedly allowing customers to make robocalls posing as fictitious FCC "Fraud Prevention Team," by failing to comply with Know Your Customer (KYC) rules. However, Telnyx says the FCC is mistaken and denies the accusations.
• Steve Herman: FCC proposes a ~$4.5 million fine against Telnyx related to government imposter robocalls made on its network. Among other potential victims, the calls were made to FCC staff and their family members and purported to be from a fictitious FCC “Fraud Prevention Team.â€�
• BleepingComputer: The FCC has proposed a $4,492,500 fine against VoIP service provider Telnyx for allegedly allowing customers to make robocalls posing as fictitious FCC "Fraud Prevention Team," by failing to comply with Know Your Customer (KYC) rules.
• ciso2ciso.com: Source: go.theregister.com – Author: Iain Thomson In its first enforcement action of the Trump presidency, the FCC has voted to propose fining Telnyx $4,492,500 – after scammers pretending to be the watchdog’s staff started calling actual FCC staffers via the VoIP telco.
• The Register - Security: Robocallers who called the FCC pretending to be from the FCC land telco in trouble
• go.theregister.com: The Register reports on the FCC's first enforcement action under the Trump administration.
• ciso2ciso.com: Robocallers who phoned the FCC pretending to be from the FCC land telco in trouble – Source: go.theregister.com
• The Register: Robocallers who called the FCC pretending to be from the FCC land telco in trouble Don't laugh: The $4.5m fine proposed for carrier Telnyx shows how the Trump administration will run its comms regulator In its first enforcement action of the Trump presidency, the FCC has voted to propose fining Telnyx $4,492,500 – after scammers pretending to be the watchdog's staff started calling actual FC…
• TechSpot: Rookie robocallers impersonate FCC, accidentally target actual FCC employees
• Ars Technica: Robocallers posing as FCC staff blocked after robocalling real FCC staff

Classification:

• HashTags: #Robocalls #FCC #VoIPFraud
• Company: Telnyx, FCC
• Target: FCC Staff
• Product: VoIP
• Feature: VoIP Security, Fraud Preventio
• Type: Fraud
• Severity: Medium

India's central bank, the Reserve Bank of India (RBI), is set to introduce the exclusive "bank.in" domain for banks, a strategic move aimed at combating the rising tide of digital financial fraud. This initiative intends to significantly reduce cybersecurity threats and malicious activities such as phishing. The goal is to streamline secure financial services to enhance trust in digital banking and payment systems. With over 2,000 banks currently operating in India, assigning them an exclusive domain is expected to make it harder for fraudsters to create fake bank websites and lure victims.

This plan was detailed in a policy update, addressing the "significant concern" around increased digital payment fraud in India. Registration for bank.in domains is scheduled to commence in April. The RBI is also planning a separate domain, "fin.in," for other non-bank entities in the financial sector. To further enhance trust in online payments, the RBI is also introducing Additional Factor Authentication (AFA) for cross-border card-not-present online transactions. The Institute for Development and Research in Banking Technology (IDRBT) will serve as the exclusive registrar.


References :

• The Register - Security: With over 2,000 banks in operation, the potential to make life harder for fraudsters is obvious India’s Reserve Bank last week announced a plan to use adopt dedicated second-level domains – bank.in and fin.in – in the hope it improves trust in the financial services sector.…
• The Hacker News: India’s RBI Introduces Exclusive "bank.in" Domain to Combat Digital Banking Fraud
• The Register: India wants all banking to happen at dedicated bank.in domain With over 2,000 banks in operation, the potential to make life harder for fraudsters is obvious India’s Reserve Bank last week announced a plan to use adopt dedicated second-level domains – bank.in and fin.in – in the hope it improves trust in the financial services sector.…
• Techmeme: Techmeme post on the India's bank.in plan.

Classification:

• HashTags: #India #Banking #Fraud
• Company: India
• Target: Digital banking in India
• Attacker: Unspecified
• Product: bank.in
• Feature: Bank.in Domain
• Type: News
• Severity: Medium