Solutions / Wholesale Carrier Services

CLI Refiling Detection

A-party number manipulation that lets a call ride a cheaper route. The B-number says international; the A-number says local. The rate card pays local. We detect the refile before the rate card does.

The scheme

When the A-number lies.

Refiling, also called A-party refiling or CLI refiling, is the practice of changing the calling party number (A-number) so the call appears to originate from a cheaper trunk. International call becomes domestic on paper. International rate becomes domestic rate on the bill. The settlement gap is the fraud.

A-number consistency

A-number consistency

We compare the A-number that arrives at each hop against the A-number that left the previous hop. Refiling shows up as a mismatch in the chain.

Numbering plan analysis

Numbering plan analysis

A-numbers are checked against national numbering plans. An A-number from country X terminating on a Y dial plan is the refiling signature.

Pattern baselines

Pattern baselines

Sudden shifts in A-number distribution on a corridor, usually towards domestic ranges on what should be international traffic, flag a refile operation warming up.

How it works

Per-hop A-number integrity.

The detection principle is simple: track the A-number end-to-end through the call chain. Where it changes, refiling has happened. Implementation is harder, you need visibility at every hop, not just at your own switch.

01

Origin-side A-number capture

We capture the A-number as it leaves the origin switch. This is the reference against which all downstream hops are compared.

02

Per-hop A-number verification

At every interconnect point we have visibility into, we verify the A-number against the origin-side reference. A mismatch is logged with the hop, the timestamp and the route.

03

Numbering plan cross-check

We cross-check the A-number against the destination numbering plan. International numbers dressed as local are the most common refiling pattern.

04

Pattern drift detection

We baseline A-number distribution per corridor. Drift towards domestic ranges on what should be international traffic flags a refile operation.

Why it matters

Because rate cards reward refiling.

If you bill per minute based on the A-number presented, refiling is printing money. The only defences are: (1) end-to-end A-number integrity verification, or (2) accept that some percentage of your billed minutes are mispriced. We do (1).

Worked example

International call to country Y. Direct route rate: $0.18/min. Local termination rate: $0.022/min.

Fraudster refiling the A-number from Y ranges bills the call at $0.022/min on the rate card, terminates it locally, pockets $0.158/min.

10 million refilled minutes per month on a corridor = $1.58M/month settlement revenue lost. That is the math refiling is built around.

Field note

Refiling is one of the oldest interconnect fraud schemes, and still one of the most lucrative. The reason it persists: end-to-end A-number verification requires cooperation across multiple carriers. We bring that visibility to the corridors we operate.

Where we cannot see every hop, we work with partner carriers under NDA to close the gap.

Next

Concerned about A-number refiling on your routes?

Send us a sample of your call records. We will run the integrity check and report the gaps we find.