Slashdot Mirror
24 People Have Now Been Sentenced In India-Based Phone-Scam Case (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: A total of 24 people who pleaded guilty to their involvement in a massive years-long phone scam often involving fake Internal Revenue Service and United States Citizenship and Immigration Services officials have now been given prison sentences from four to 20 years. The indictment was originally filed in October 2016 against 61 people and includes charges of conspiracy to commit identity theft, impersonation of an officer of the United States, wire fraud, and money laundering. If victims didn't pay up, callers threatened arrest, deportation, or heavier fines. There were also related scams involving fake payday loans and bogus U.S. government grants, according to the criminal complaint. The lead defendant was Miteshkumar Patel, who was given 20 years.
A whole 24 people? That should solve the problem.
The root of the problem is the American telecom companies that enable these scams by offering spoofing services to criminals. Some big fines on Verizon and AT&T would do way more good than going after some low level scammers in Mumbai.
then you both have no clue. The feature that allows this to happen is actually a business feature utilised by millions of legitimate businesses. Unfortunately like many things in this world when it was built into phone systems throughout the world (this is not a US only problem) there wasn't much thought put on the security or potential abuses of the technology. Now it is hard to turn off without screwing over a fuck load of companies with legitimate reasons for using it.
Amateur. YouTube has a few people who can get scammers on the phone for at least an hour, approaching 4 and a half. Though to be honest, a good chunk of it is simply dead air - they ask the victim to go out and buy gift cards or something (which is good for a couple of hours of scammers on hold).
And scammers have an "emergency out" - if they get exposed, they immediately lock the machine and syskey it to ensure it is unbootable. Of course, it all happens in a virtual machine, so restoring the damage is trivial, but it's funny.
Some YouTube channels:
Kitboga. He's had scammers insult him, make death threats and all sorts of fun.
This guy enacts revenge on the scammers by infecting their PC. Most of the scammers are just doing a script, so their PCs are often wide open and infectable, so it's possible to get RATs and such installed on their PC.
This guy investigates scammers computers. His latest video involves a bank login scam where he manages to install a RAT on the scammer's computer. He watches as a scammer attempts to register for and log into some elderly guy's bank account (luckily, the bank actually sends something to customers when this happens, so the scammer not only had no chance. He also alerted the bank who locked the online account for fraud.
Yes, it's fun watching scammer's computers and call centers get infected. Perhaps they can call themselves for tech support.
I admit, I get a lot of those calls. It's amazing how they always use the most robotic of voices. Also, apparently retailers are alert to the scam as well - several times they've been stopped when they see people buying thousands of dollars worth of iTunes or other gift cards. Though, someone was so embarrassed they made up a whole story about being "arrested" and transported and caused the police to issue an alert.
then you both have no clue. The feature that allows this to happen is actually a business feature utilised by millions of legitimate businesses.
...to trick their customers into thinking their call center is actually not in Bangalore. Yeah, what a noble cause.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
No, it was designed to present outgoing calls as originating from (for example) the main switchboard / reception phone number
Spoofing from one number to another controlled by the same legal entity is reasonable. Allowing criminals to spoof a random phone number that they DO NOT OWN is not.
The telecoms can shut this activity down very quickly if they are given sufficient financial incentive to do so, like maybe $10M per day in fines until it is fixed.