Looking for fraud, pay-per-call numbers to test out

[dtrobert]

Hi,
I need to exercise a PBX to verify that blocked carribean and other pay-per-call numbers are blocked.

Does anyone have a list of such numbers (calling from the US)?

A followup is, does anyone have a comprehensive set of milliwatt test numbers for positive test passing as well?


Thanks

[Will.Spencer]

Originally Posted by dtrobert

I need to exercise a PBX to verify that blocked carribean and other pay-per-call numbers are blocked.
Does anyone have a list of such numbers (calling from the US)?

This excerpt from my standard telephone security audit proposal should put you one step ahead:

Originally Posted by Telephone Security Audit Proposal

The telephone security audit should answer the following questions:

• Does the PBX system allow transfer of calls outside the PBX system (i.e., to long-distance numbers)?
• What is the review policy for long-distance call charges?
• Does the PBX system have dial-up or Internet-based maintenance capabilities? How are those secured?
• Does the PBX system restrict the use of 700, 900, and 976 numbers?
• Does the PBX system restrict the use of Area Codes: 242, 246, 264, 268, 284, 340, 343 345, 441, 473, 649, 664, 758, 767,784, 809, 868, 869, and 876? (These Area Codes conform to the North American Numbering Plan and give the "appearance" of a continental U.S. call; however, the countries include Grenada, Montserrat Islands, Dominican Republic, and Trinidad & Tobago. The caller is not required to dial 011 before entering one of these Area Codes; therefore; these codes are the highest destination toll fraud routes.)
• Does the PBX block 1010 codes and Operator Assisted calls?
• Does the PBX allow internal telephones to be forwarded to the number 9?
• What is the minimum required length of a voicemail password?
• What is the maximum expiration time for a voicemail password?
• How many attempts are allowed to guess a voicemail password before disconnection?

Originally Posted by dtrobert

A followup is, does anyone have a comprehensive set of milliwatt test numbers for positive test passing as well?

A comprehensive set of test numbers will always be impossible, because telcos do not share that information.