Case Studies Of Telco Scams

What Happened?

The telco received a call from someone claiming to be the account holder, requesting signal improvements and new services. The caller passed verification using stolen personal and banking details, and the telco proceeded to add a new number and approve a high-value device order. The genuine customer later reported unexpected emails and a handset they had not ordered. The telco failed to identify the suspicious activity earlier, allowing the fraudulent order to progress and the account to be misused before the customer intervened.

What Should The Telco Company Have Done Better?

• Weak identity-verification checks:
  • • The criminal successfully impersonated the customer and accessed the account without triggering worker suspicion
• No detection of unusual account activity:
  • • The fraudulent new number and device were processed without alerting internal fraud systems
• Failure to flag high risk service additions:
  • • Adding a new number to an account should have prompted additional verification
• Late intervention led to financial loss:
  • • The fraudulent order processed to delivery before the telco recognised the compromise