Fraud & Anomaly Alerts
Real-time fraud detection covering AIT, call pumping, CLI spoofing, robocall abuse, SIM-box, and volume anomalies.
Open · High
1
Action required
Open · Medium
2
Under review
Acknowledged (24h)
7
By 3 operators
Auto-blocked Today
14
12 numbers · 2 accounts
| ALERT ID | TYPE | SEV | TRIGGERED | ACCOUNT / CAMPAIGN | DETECTION | CALLS | STATUS | |
|---|---|---|---|---|---|---|---|---|
| FRD-20260520-001 | AIT Pattern | High | 11:14:02 | 17321 · Outreach-Co CMP-202605-00874 |
412 calls in 5 min to prefix 9090* (premium); baseline ≈ 2/5 min | 412 | Open | View → |
| FRD-20260520-002 | Call Pumping | Medium | 11:14:14 | 17298 · Promo-Lab CMP-202605-00866 |
14 long-duration repeats to 5XXXXX231 · avg 298s (PBX answer pattern) | 14 | Open | View → |
| FRD-20260520-003 | CLI Spoofing | Medium | 09:11:42 | 17298 · Promo-Lab CMP-202605-00866 |
Attempted sender-id BANK_AR not in approved registry — campaign rejected | 1 | Open | View → |
| FRD-20260519-024 | Volume Spike | Low | 22:30:15 | 17221 · LabTestTenant CMP-202605-00859 |
Hourly volume 12,400 vs baseline 6,800 (+82%) — within configured tolerance | 89 | Ack’d · John D. | View → |
| FRD-20260519-021 | AIT Pattern | High | 18:42:11 | 17321 · Outreach-Co CMP-202605-00855 |
256 calls / 4 min to prefix 80XX* (VAS) — auto-blocked, account suspended | 256 | Resolved | View → |
| FRD-20260519-018 | Robocall Abuse | Medium | 16:08:32 | 17112 · Survey-Plus CMP-202605-00842 |
Auto-answer + 0-DTMF pattern across 612 calls — throttled to 10 CPS | 612 | Resolved | View → |
| FRD-20260519-014 | SIM-box | High | 13:42:18 | — · external origination N/A |
Bypass traffic detected via CLI gateway signature (5XXXX014-range) | 128 | Resolved | View → |
| FRD-20260519-009 | Unauthorized Campaign | Medium | 09:55:14 | 17221 · LabTestTenant CMP-202605-00827 |
Campaign launched without separate approver — segregation-of-duties violation, blocked | 0 | Resolved | View → |
Showing 8 of 8 matching alerts · 14 auto-blocked filtered out (toggle “All status”)
Last refresh 14:21:09 · auto-refresh 5s
Fraud rules govern thresholds per account · all alerts streamed to MIC1 SIEM in real-time (Annex D §6.2)