Over-The-Top Bypass: Study of a Recent Telephony Fraud
Merve Sahin, Aurélien Francillon
Abstract
In this paper, we study the Over-The-Top (OTT) bypass fraud, a recent form of interconnect telecom fraud. In OTT bypass, a normal phone call is diverted over IP to a voice chat application on a smartphone, instead of being terminated over the normal telecom infrastructure. This rerouting (or hijack) is performed by an international transit operator in coordination with the OTT service provider, but without explicit authorization from the caller, callee and their operators. By doing so, they collect a large share of the call charge and induce a significant loss of revenue to the bypassed operators. Moreover, this practice degrades the quality of service without providing any benefits for the users. In this paper, we study the possible techniques to detect and measure this fraud and evaluate the real impact of OTT bypass on a small European country. For this, we performed more than 15,000 test calls during 8 months and conducted a user study with more than 8,000 users. In our measurements, we observed up to 83% of calls being subject to OTT bypass. Additionally, we show that OTT bypass degrades the quality of service, and sometimes collide with other fraud schemes, exacerbating the quality issues. Our user study shows that OTT bypass and its effects are poorly understood by users.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 9919205f-83f7-4742-a4ce-3c4f44bfa2c6Cited by top-tier papers8
- AuthentiCall: Efficient Identity and Content Authentication for Phone CallsBradley Reaves, Logan Blue, Hadi Abdullah, Luis Vargas et al.USENIX Security 2017 · 39 citations
- Sonar: Detecting SS7 Redirection Attacks with Audio-Based Distance BoundingChristian Peeters, Hadi Abdullah, Nolen Scaife, Jasmine D. Bowers et al.S&P 2018 · 20 citations
- Diffie-Hellman Picture Show: Key Exchange Stories from Commercial VoWiFi DeploymentsGabriel Karl Gegenhuber, Florian Holzbauer, Philipp É. Frenzel, Edgar R. Weippl et al.USENIX Security 2024 · 8 citations
- Jäger: Automated Telephone Call TracebackDavid Adei, Varun Madathil, Sathvik Prasad, Bradley Reaves et al.CCS 2024 · 2 citations
- Preventing SIM Box Fraud Using Device Model FingerprintingBeomseok Oh, Junho Ahn, Sangwook Bae, Mincheol Son et al.NDSS 2023
Related papers
- Understanding and Detecting International Revenue Share FraudMerve Sahin, Aurélien FrancillonNDSS 2021
- Preventing Artificially Inflated SMS Attacks through Large-Scale Traffic InspectionJun Ho Huh, Hyejin Shin, Sunwoo Ahn, Hayoon Yi et al.USENIX Security 2025
- Insights from operating an IP exchange providerAndra Lutu, Diego Perino, Marcelo Bagnulo, Fabián E. BustamanteSIGCOMM 2021 · 12 citations
- Into the Deep Web: Understanding E-commerce Fraud from Autonomous Chat with CybercriminalsPeng Wang, Xiaojing Liao, Yue Qin, XiaoFeng WangNDSS 2020
- One Click to Leak: Characterizing the Real-World Usage and Threat Impact of MNO-based Single Sign-On WebsitesJiasheng Huang, Mingxuan Liu, Pei Chen, Baojun Liu et al.CCS 2026
