In this section, the color scheme shown in the screenshots may differ from the actual appearance of the Control Centre.
On this page, you will find detailed information about the modules that allow you to set up the needed traffic protection policy and control active blockages. Use the respective buttons on the left to browse the following modules:
- Proactive Monitoring;
- Behavioral Analysis;
- Custom Rules;
- Block & Allow Lists;
- Active Blockages.
We strongly advise to read the “Recommendations” section before making any changes in these modules.
¶ How to Set Proactive Monitoring
The Proactive Monitoring method uses both artificial intelligence and a database of high-risk number ranges to detect fraud preparations in the partner’s traffic. By establishing well-designed blocking and alerting policies for each fraud type, the partner can prevent fraud attacks before they happen, avoiding even minor fraud-related damages.
You can view this and any corresponding documentation page directly from the Control Centre by clicking the ? ABOUT button in the top-right corner of the page.
In the Proactive Monitoring module, you can set blocking and alerting actions for the fraud types that are available in your antifraud system version. You can find information about each fraud type (and its description) that the antifraud system is capable of detecting, including those that are not yet available in your version, in the corresponding module Fraud Types (described in the Information module group).
The algorithms of Proactive Monitoring can discover a single high-risk call attempt or a fraud attack preparation, which may include several fraudulent call attempts.
You can change the current settings for each fraud type by clicking the corresponding row (fraud type rule). This will take you to the Edit Rule page.
Here you will find the fraud type of the rule, and the corresponding configurable blocking and alerting actions.
You can select a blocking action from the dropdown list:
In this list:
- The “None” option means that no blocking actions are applied to fraudulent call attempts of the specified fraud type;
- The “Reject Calls” option means that fraudulent call attempts of the specified fraud type will be rejected (without blocking A-/B-number ranges).
Depending on your antifraud system version, the blocking actions may be unavailable. To upgrade your version, you can contact your manager.
For some fraud types, the blocking action is not applied in the antifraud system, e.g. Flashcalls.
However, you can request a special flashcalls blocking feature to enable flashcalls blocking. In order to do that, you can contact your manager.
Following that, you can select an alerting option from the dropdown list:
In this list:
- The “No alerts” option means that no alerts will be sent to you through any communication channel;
- The “Attacks” option means that only fraud attacks (but not detected, rejected, or broken fraudulent call attempts) will trigger alerts via communication channels;
- The “All events” option means that both fraud attacks and detected, rejected, or broken fraudulent call attempts will trigger alerts via communication channels.
The Partner can adjust communication channels for alerts in the module Alerts & Reports of the Settings module group.
After selecting the needed options from the lists, click the SAVE button to apply the changes, or the CANCEL button to cancel the changes and exit the Edit Rule page.
¶ How to Set Behavioral Analysis
The Behavioral Analysis method utilizes unique, in-house developed approaches to fraud analysis, based on advanced machine learning (deep neural networks) and mathematical modeling. This method can detect even well-disguised fraud attacks on hubbing & retail traffic in real-time. After the parameters of fraudulent traffic are determined, the pre-configured blocking actions for each fraud type allow the partner to eliminate fraud with minimal possible losses.
You can view this and any corresponding documentation page directly from the Control Centre by clicking the ? ABOUT button in the top-right corner of the page.
In the Behavioral Analysis module, you can set blocking and alerting actions for the fraud types that are available in your antifraud system version. You can find information about each fraud type (and its description) that the antifraud system is capable of detecting, including those that are not yet available in your version, in the corresponding module Fraud Types (described in the Information module group).
When the AI of the Behavioral Analysis method detects a fraud attack, it determines the attack's parameters (including A-/B-number ranges of the attack).
The Behavioral Analysis method has extremely high performance: an almost complete absence of undetected or late detection attacks and an extremely low false positive rate.
The antifraud system uses over 200 fraud parameters to identify a fraud attack.
You can change the current settings for each fraud type by clicking the corresponding row (fraud type rule). This will take you to the Edit Rule page.
Here you will find the fraud type of the rule, and the corresponding configurable blocking and alerting actions.
You can select a blocking action from the dropdown list:
In this list:
- The “None” option means that no blocking actions are applied to fraudulent call attempts of the specified fraud type;
- The “Break calls + Block” option means that active fraudulent call attempts of the specified fraud type, that match the corresponding A-/B-number ranges of the attack, will be broken, the blockage (A-/B-number ranges) will be set for a selected time window (3 hours, 6 hours, 12 hours, 24 hours, 2 days, or 7 days), and all further fraudulent call attempts that match the blockage within the chosen window will be rejected.
The blockage window should be long enough to ensure that, after its expiration, fraudsters do not continue the activity.
Depending on your antifraud system version, the blocking actions may be unavailable. To upgrade your version, you can contact your manager.
For some fraud types, the blocking action is not applied in the antifraud system, e.g. Flashcalls.
However, you can request a special flashcalls blocking feature to enable flashcalls blocking. In order to do that, you can contact your manager.
Following that, you can select an alerting option from the dropdown list:
In this list:
- The “No alerts” option means that no alerts will be sent to you through any communication channel;
- The “Attacks” option means that only fraud attacks (but not detected, rejected, or broken fraudulent call attempts) will trigger alerts via communication channels;
- The “All events” option means that both fraud attacks and detected, rejected, or broken fraudulent call attempts will trigger alerts via communication channels.
You can adjust communication channels for alerts in the module Alerts & Reports of the Settings module group.
After selecting the needed options from the lists, click the SAVE button to apply the changes, or the CANCEL button to cancel the changes and exit the Edit Rule page.
¶ How to Set Custom Rules
The Custom Rules method allows you to configure any real-time, threshold-based rules to monitor usage and end customers’ behavior. Once the threshold is reached, the incident can be alerted to the partner, active calls can be broken, and the corresponding traffic can be blocked for a pre-defined period.
You can view this and any corresponding documentation page directly from the Control Centre by clicking the ? ABOUT button in the top-right corner of the page.
First and foremost, these rules are HIGH USAGE rules.
If you know high usage patterns of your customers, you can define the thresholds (cost, duration, the number of attempts or calls, the number of simultaneous calls, etc.) to alert suspicious usage for:
- all users;
- each individual user;
- specified user(s).
It is important to note that since you set the threshold value, you also set the severity level of the corresponding threshold. You can configure a few usage thresholds with the corresponding severity values from low to critical and trace the evolution of the situation.
Custom rules are primarily used as a probe for retail traffic, mainly to protect the operator’s retail network, but you can try using these rules to monitor hubbing traffic as well.
Rules are grouped by country and can be enabled or disabled individually, or for the entire country, using the slider in the “On/Off” column.
To create a new rule, click the Add new Rule button in the top-right corner of the page and specify the country (or select “All countries”) to which the new rule will apply.
A new rule to edit will appear under the country name:
To determine the A-Side Grouping, select the appropriate option:
• A-number for any individual number;
• All A-numbers for all A-numbers;
• Empty A-number for missing numbers due to number masking, the use of invalid numbers, etc.;
• Specified A-range for a defined number range (first digits) or a specific number.
If you select “Specified A-range”, you will also need to enter the first digits of a range or number in the field “Specified A-range”:
To determine the B-Side Grouping, select an appropriate option:
- Country for all traffic to a given country;
- Destination for a specific network (proper or mobile) in a given country;
- B-number in Destination for any individual number in a specific network (proper or mobile);
- B-number in Country for any individual number in a given country;
- Specified B-range for a defined number range (first digits) or a specific number.
If you select “Specified B-range”, you will also need to enter the first digits of a range or a number in the field “B-Destination”:
If you select “Destination” or “B-number in Destination”, you will need to choose a destination from the dropdown list:
A-Side Grouping and B-Side Grouping together form a traffic pattern.
Select a threshold parameter from the dropdown list: 
- Total charge;
- Total duration;
- Number of call attempts;
- Number of calls (with duration);
- Number of simultaneous calls;
- Average call duration (ACD);
- Answer seizure ratio (ASR).
Then enter the value of the upper-threshold (i.e., the rule is triggered if the value exceeds the threshold) for the chosen parameter:
Next, select the value for the rule's monitoring window (i.e., the period during which statistics are collected and the threshold is applied):
After that, specify the threat severity (CRITICAL, HIGH, MEDIUM, LOW) for the rule, set a blocking action (none or break calls + block for a predefined period), and select an alerting option (no alerts, attacks, or all events). Detailed information about these settings can be found in the “How to Set Behavioral Analysis” section of the manual.
Depending on your antifraud system version the blocking actions may be unavailable. To upgrade your version, you can contact your manager.
Click the Save button on the left side of the newly created rule to put it into action.
Example: You know that new traffic will soon be directed to a high-risk country (high-risk in terms of fraud termination), and you would like to set a usage rule to control the charge for each A-number calling that destination. Specifically, you want to trigger an alert if the total charge exceeds 20 USD within 24 hours per A-number. You would also like to make it a medium-severity threat, as you would like to gather more information about the A-number before taking any actions.
Click the Add new Rule button at the top-right corner of the screen, select the country name, then click Ok.
In the newly added rule select “A-number” in the A-Side Grouping column, and “Country” in the B-Side Grouping column.
Next, select “Total Charge (USD)” in the Max Threshold column, enter “20” next to it, and select “24h” as a term.
Choose the “Medium” severity, set “None” as the blocking action, and choose the “Attacks” option in the Alerting column.
Click the Save button to activate the rule. Otherwise, click the undo button 
.
To delete the rule check the box
on the left side of the rule, and click the Delete button at the top of the page.
If you want to copy the rule (or multiple rules) from one country to another, select the rule the same way and click the Copy Rules to button.
Next, select a country to which you wish to apply the selected rules, click the Save button, and use the slider on the right to enable or disable the rule(s).
If you want to create a general usage rule which is not linked to a specific country, you should click the Add new Rule button, select “All countries”, and click Ok. A new rule for editing will appear on the page:
- Country for any specific country (all traffic to that country);
- Destination for any individual network among all existing networks;
- All B-numbers for all traffic;
- B-number for an individual number (it can belong to any destination);
- Specified B-range for a defined number range (first digits) or a specific number.
¶ Adding a Number Range to Block or Allow Lists
The Block & Allow Lists module allows you to add A-number ranges and B-number ranges to the Block List and to the Allow List.
On the main page of the module, there is a table which includes four lists:
- Block List of A-numbers;
- Block List of B-numbers;
- Allow List of A-numbers;
- Allow List of B-numbers.
The table provides the description of each list, as well as the quantity of number ranges in every list and the date of the last update.
You can view this and any corresponding documentation page directly from the Control Centre by clicking the ? ABOUT button in the top-right corner of the page.
You can learn more about a particular list by clicking on it.
¶ Block List of A-numbers
The Block List operates as the highest priority rule. Adding an A-number or range to the Block List means that no further investigation will be conducted for this number or range. All calls from blocklisted A-numbers or ranges will be rejected without any analysis.
At the top of the page, there is information about the quantity of A-number ranges in the list, the key field (the list ID), the date and time of the last update, and the description of the list.
In the table below the description, you can find all blocklisted A-number ranges, along with the details such as country, network, and the date and time the range was added. The table shows 10 most recently added ranges (of the total amount).
To view more blocklisted A-number ranges, click the LOAD MORE button at the bottom left of the page.
To find a specific number range, you can use multiple filters located at the top of the table:
- Range: Enter the number or range manually.
- Country: Select a country from a dropdown list or enter the name manually.
- Network: Select a network from a dropdown list or enter the name manually.
You can remove a filter by hovering over it and clicking the x (cross) button or by clicking the RESET button, which clears all selected filters.
You can download a CSV file of the blocklisted A-number ranges by clicking the download button 
.
To delete a specific number range (or multiple ranges), check the box 
on the left side of the range, and click the DELETE button at the top right of the table.
To delete all A-number ranges from the Block List, load the full list, check the box at the top left of the table, and click the DELETE button.
A pop-up notification will appear, asking you to confirm the deletion. Click the CANCEL button to stop or the DELETE button to proceed with the deletion.
To add a new A-number range (or several ranges) to the Block List click the + ADD NEW button at the top right above the table. You will be directed to the Add Ranges page.
There are two ways to add a new A-number range (or several ranges) to the Block List:
Manual Entry
At the top half of the page, you can enter multiple numbers or number ranges, separated by commas, semicolons, or line breaks. You can use the “x” symbol to define the amount of digits in the number range. For example, entering 12345xxxxx blocks the range 12345, with phone numbers that must have 10 digits. Numbers with more or fewer digits will not match.
Enter the number or range in international format: country code and the subscriber number (or the first digits of the subscriber number). For example, 1234567890, where 1 is the country code, 234567890 is the subscriber's number.
Check the box at the bottom left side of the page to override existing ranges with the new ones, or leave it unchecked to keep the existing ranges.
Next, click the SAVE button to add the new ranges to the list, or click the RESET button to reset the changes.
Upload a CSV File
Alternatively, you can upload a CSV file containing the numbers or ranges by dragging the file from your computer and dropping it into the upload section of the page, or by clicking the upload box to browse for the file on your system.
To undo the most recent addition of A-number ranges to the Block List, return to the Block List of A-numbers page and click the UNDO LAST INSERT button located in the middle right section of the page.
Next, click the UNDO button to remove the most recent addition to the list, or click the CANCEL button to abort this action.
¶ Block List of B-numbers
The Block List operates as the highest priority rule. Adding a B-number or range to the Block List means that no further investigation will be conducted for this number or range. All calls to blocklisted B-numbers or ranges will be rejected without any analysis.
At the top of the page, there is information about the quantity of B-number ranges in the list, the key field (the list ID), the date and time of the last update, and the description of the list.
In the table below the description, you can find all blocklisted B-number ranges, along with the details such as country, network, and the date and time the range was added. The table shows 10 most recently added ranges (of the total amount).
To view more blocklisted B-number ranges, click the LOAD MORE button at the bottom left of the page.
To find a specific number range, you can use multiple filters located at the top of the table:
- Range: Enter the number or range manually.
- Country: Select a country from a dropdown list or enter the name manually.
- Network: Select a network from a dropdown list or enter the name manually.
You can remove a filter by hovering over it and clicking the x (cross) button or by clicking RESET, which clears all selected filters.
You can download a CSV file of the blocklisted B-number ranges by clicking the download button .
To delete a specific number range (or multiple ranges), check the box on the left side of the range, and click the DELETE button at the top right of the table.
To delete all B-number ranges from the Block List, load the full list, check the box at the top left of the table, and click the DELETE button.
A pop-up notification will appear, asking you to confirm the deletion. Click the CANCEL button to stop or the DELETE button to proceed with the deletion.
To add a new B-number range (or several ranges) to the Block List click the + ADD NEW button at the top right above the table. You will be directed to the Add Ranges page.
There are two ways to add a new B-number range (or several ranges) to the Block List:
Manual Entry
At the top half of the page, you can enter multiple numbers or number ranges, separated by commas, semicolons, or line breaks. You can use the “x” symbol to define the amount of digits in the number range. For example, entering 12345xxxxx blocks the range 12345, with phone numbers that must have 10 digits. Numbers with more or fewer digits will not match.
Enter the number or range in international format: country code and the subscriber number (or the first digits of the subscriber number). For example, 1234567890, where 1 is the country code, 234567890 is the subscriber's number.
Check the box at the bottom left side of the page to override existing ranges with the new ones, or leave it unchecked to keep the existing ranges.
Next, click the SAVE button to add the new ranges to the list, or click the RESET button to reset the changes.
Upload a CSV File
Alternatively, you can upload a CSV file containing the numbers or ranges by dragging the file from your computer and dropping it into the upload section of the page, or by clicking the upload box to browse for the file on your system.
To undo the most recent addition of B-number ranges to the Block List, return to the Block List of B-numbers page and click the UNDO LAST INSERT button located in the middle right section of the page.
Next, click the UNDO button to remove the most recent addition to the list, or click the CANCEL button to abort this action.
¶ Allow List of A-numbers
The Allow List operates as the second highest priority rule. Adding an A-number or range to the Allow List means that no further investigation will be conducted for this number or range. All calls from allowlisted A-numbers or ranges will pass through without any analysis.
At the top of the page, there is information about the quantity of A-number ranges in the list, the key field (the list ID), the date and time of the last update, and the description of the list.
In the table below the description, you can find all allowlisted A-number ranges, along with the details such as country, network, and the date and time the range was added. The table shows 10 most recently added ranges (of the total amount).
To view more allowlisted A-number ranges, click the !the LOAD MORE button at the bottom left of the page.
To find a specific number range, you can use multiple filters located at the top of the table:
• Range: Enter the number or range manually.
• Country: Select a country from a dropdown list or enter the name manually.
• Network: Select a network from a dropdown list or enter the name manually.
You can remove a filter by hovering over it and clicking the x (cross) button or by clicking RESET, which clears all selected filters.
You can download a CSV file of the allowlisted A-number ranges by clicking the download button .
To delete a specific number range (or multiple ranges), check the box on the left side of the range, and click the DELETE button at the top right of the table.
To delete all A-number ranges from the Allow List, load the full list, check the box at the top left of the table, and click the DELETE button.
A pop-up notification will appear, asking you to confirm the deletion. Click the CANCEL button to stop or the DELETE button to proceed with the deletion.
To add a new A-number range (or several ranges) to the Allow List click on the + ADD NEW button at the top right above the table. You will be directed to the Add Ranges page.
There are two ways to add a new A-number range (or several ranges) to the Allow List:
Manual Entry
At the top half of the page, you can enter multiple numbers or number ranges, separated by commas, semicolons, or line breaks. You can use the “x” symbol to define the amount of digits in the number range. For example, entering 12345xxxxx allows the range 12345, with phone numbers that must have 10 digits. Numbers with more or fewer digits will not match.
Enter the number or range in international format: country code and the subscriber number (or the first digits of the subscriber number). For example, 1234567890, where 1 is the country code, 234567890 is the subscriber's number.
Check the box at the bottom left side of the page to override existing ranges with the new ones, or leave it unchecked to keep the existing ranges.
Next, click the SAVE button to add the new ranges to the list, or click the RESET button to reset the changes.
Upload a CSV File
Alternatively, you can upload a CSV file containing the numbers or ranges by dragging the file from your computer and dropping it into the upload section of the page, or by clicking the upload box to browse for the file on your system.
To undo the most recent addition of A-number ranges to the Allow List, return to the Allow List of A-numbers page and click the UNDO LAST INSERT button located in the middle right section of the page.
Next, click the UNDO button to remove the most recent addition to the list, or click the CANCEL button to abort this action.
¶ Allow List of B-numbers
The Allow List operates as the second highest priority rule. Adding a B-number or range to the Allow List means that no further investigation will be conducted for this number or range. All calls to allowlisted B-numbers or ranges will pass through without any analysis.
At the top of the page, there is information about the quantity of B-number ranges in the list, the key field (the list ID), the date and time of the last update, and the description of the list.
In the table below the description, you can find all allowlisted B-number ranges, along with the details such as country, network, and the date and time the range was added. The table shows 10 most recently added ranges (of the total amount).
To view more allowlisted B-number ranges, click the LOAD MORE button at the bottom left of the page.
To find a specific number range, you can use multiple filters located at the top of the table:
• Range: Enter the number or range manually.
• Country: Select a country from a dropdown list or enter the name manually.
• Network: Select a network from a dropdown list or enter the name manually.
You can remove a filter by hovering over it and clicking the x (cross) button or by clicking RESET, which clears all selected filters.
You can download a CSV file of the allowlisted B-number ranges by clicking the download button .
To delete a specific number range (or multiple ranges), check the box on the left side of the range, and click the DELETE button at the top right of the table.
To delete all B-number ranges from the Allow List, load the full list, check the box at the top left of the table, and click the DELETE button.
A pop-up notification will appear, asking you to confirm the deletion. Click the CANCEL button to stop or the DELETE button to proceed with the deletion.
To add a new B-number range (or several ranges) to the Allow List click on the + ADD NEW button at the top right above the table. You will be directed to the Add Ranges page.
There are two ways to add a new B-number range (or several ranges) to the Allow List:
Manual Entry
At the top half of the page, you can enter multiple numbers or number ranges, separated by commas, semicolons, or line breaks. You can use the “x” symbol to define the amount of digits in the number range. For example, entering 12345xxxxx allows the range 12345, with phone numbers that must have 10 digits. Numbers with more or fewer digits will not match.
Enter the number or range in international format: country code and the subscriber number (or the first digits of the subscriber number). For example, 1234567890, where 1 is the country code, 234567890 is the subscriber's number.
Check the box at the bottom left side of the page to override existing ranges with the new ones, or leave it unchecked to keep the existing ranges.
Next, click the SAVE button to add the new ranges to the list, or click the RESET button to reset the changes.
Upload a CSV File
Alternatively, you can upload a CSV file containing the numbers or ranges by dragging the file from your computer and dropping it into the upload section of the page, or by clicking the upload box to browse for the file on your system.
To undo the most recent addition of B-number ranges to the Allow List, return to the Allow List of B-numbers page and click the UNDO LAST INSERT button located in the middle right section of the page.
Next, click the UNDO button to remove the most recent addition to the list, or click the CANCEL button to abort this action.
¶ Active Blockages
This module provides information about all active blockages set by the antifraud system.
The Active Blockages module consists of the following parts:
- Filters for the table of active blockages;
- The table of active blockages;
- The Active Blockage Details page.
You can view this and any corresponding documentation page directly from the Control Centre by clicking the ? ABOUT button in the top-right corner of the page.
In order to find the needed active blockages, you can use multiple filters in the top section of the page:
- Fraud Type: A dropdown list which allows you to specify the fraud type (PBX Hacking, Wangiri, Spam/Scam Calls and others).
- Methods: A dropdown list, which allows you to narrow the results, based on the protection methods used (Behavioral Analysis, Proactive Monitoring, Custom Rule).
- A-Side: Filter blockages based on the calling (source) side, which can include a number range, a country or a network; this information can be entered manually.
- B-Side: Filter blockages based on the called (destination) side, which can include a number range, a country or a network; this information can be entered manually.
- Expires In: Select the expiration time for displaying active blockages by choosing one of the suggested intervals from the dropdown list (Less than 1 hour, From 1 hour to 12 hours, From 12 hours to 24 hours, From 1 day to 7 days, More than 7 days).
All filters affect the table of active blockages.
Each active blockage includes the following details: fraud type, protection method, A-side (number range, country, or network), B-side (number range, country, or network), date and time of blocking, and blockage expiration time. You can hover over the 
symbol for a brief description of the detected fraud type.
You can click the three dots 
on the right side of the blockage to see the available options. There will be two options: 'View Fraud Call Attempts' and 'Unblock'.
If you click on the 'View Fraud Call Attempts' option, you will be taken to the corresponding Fraud Call Attempts page with the selected Blockage ID and the fraudulent call attempts blocked by it.
You can also use the 'Unblock' option to remove the blockage (if the fraud management team decides that the blockage is unnecessary or excessive). Click the UNBLOCK button to unblock the traffic, or click the CANCEL button to cancel the unblocking action.
You can click the LOAD MORE button at the bottom of the page to view more active blockages.
You can learn more about a particular active blockage by clicking on it. You will be taken to the Active Blockage Details page.
This page consists of two sections:
- General. This section contains the following information:
- Blockage ID: The unique Blockage ID, which can be copied by clicking
on the right; - Rule ID: The ID of the applied rule (this information can be helpful if custom rules are used);
- Fraud Type: The type of fraud identified by the system; you can hover over the symbol for a brief description of the fraud type;
- Method: The protection method used (Proactive Monitoring, Behavioral Analysis or Custom Rules);
- Blocked at: The date and time when the blockage was set;
- Expires at: The date and time when the blockage expires;
- Expires in: The current duration of the blockage before its expiration.
- Blockage ID: The unique Blockage ID, which can be copied by clicking
- Scope. This section contains the following information:
- A-Side: The calling (source) side, which can contain a number range, a country, or a network;
- B-Side: The called (destination) side, which can contain a number range, a country, or a network.
Under the Scope section, you can find a table of fraudulent call attempts affected by the blockage.
If you want to delete this blockage, click the UNBLOCK button in the top right corner of the page.