In this section, the color scheme shown in the screenshots may differ from the actual appearance of the Control Centre.
On this page, you will find detailed information about the modules that allow you to set up the needed traffic protection policy and control active blockages. Use the respective buttons on the left to browse the following modules:
We strongly advise to read the “Recommendations” section before making any changes in these modules.
The Proactive Monitoring method uses both artificial intelligence and a database of high-risk number ranges to detect fraud preparations in traffic. By establishing well-designed blocking and alerting policies for each fraud type, you can prevent fraud attacks before they happen, avoiding even minor fraud-related damages.
You can view this and any corresponding documentation page directly from the Control Centre by clicking the ? ABOUT button in the top-right corner of the page.
In the Proactive Monitoring module, you can set blocking and alerting actions for the fraud types that are available in your antifraud system version. You can find information about each fraud type (and its description) that the antifraud system is capable of detecting, including those that are not yet available in your version, in the corresponding module Fraud Types (described in the Information module group).
The algorithms of Proactive Monitoring can discover a single high-risk call attempt or a fraud attack preparation, which may include several fraudulent call attempts.
You can change the current settings for each fraud type by clicking the corresponding row (fraud type rule). This will take you to the Edit Rule page.
Here you will find the fraud type of the rule, and the corresponding configurable blocking and alerting actions.
The blocking action can be enabled or disabled using the toggle:
Depending on your antifraud system version, the blocking actions may be unavailable. To upgrade your version, you can contact your manager or reach out to us at contact@abhandshake.com.
For some fraud types, the blocking action is not applied in the antifraud system, e.g. Flashcalls.
However, you can request a special flashcalls blocking feature to enable flashcalls blocking. In order to do that, you can contact your manager or reach out to us at contact@abhandshake.com.
Following that, you can enable or disable alerting to the specified Notification Channels:
You can adjust communication channels for alerts in the module Fraud Alerts of the Alerts & Reports module group.
After selecting the needed options, click the SAVE button to apply the changes, or the CANCEL button to cancel the changes and exit the Edit Rule page.
The Behavioral Analysis method utilizes unique, in-house developed approaches to fraud analysis, based on advanced machine learning (deep neural networks) and mathematical modeling. This method can detect even well-disguised fraud attacks on hubbing & retail traffic in real-time. After the parameters of fraudulent traffic are determined, the pre-configured blocking actions for each fraud type allow you to eliminate fraud with minimal possible losses.
You can view this and any corresponding documentation page directly from the Control Centre by clicking the ? ABOUT button in the top-right corner of the page.
In the Behavioral Analysis module, you can set blocking and alerting actions for the fraud types that are available in your antifraud system version. You can find information about each fraud type (and its description) that the antifraud system is capable of detecting, including those that are not yet available in your version, in the corresponding module Fraud Types (described in the Information module group).
When the AI of the Behavioral Analysis method detects a fraud attack, it determines the attack's parameters (including A-/B-number ranges of the attack).
The Behavioral Analysis method has extremely high performance: an almost complete absence of undetected or late detection attacks and an extremely low false positive rate.
The antifraud system uses over 200 fraud parameters to identify a fraud attack.
You can change the current settings for each fraud type by clicking the corresponding row (fraud type rule). This will take you to the Edit Rule page.
Here you will find the fraud type of the rule, and the corresponding configurable blocking and alerting actions.
The blocking action can be enabled or disabled using the toggle:
The blockage window should be long enough to ensure that, after its expiration, fraudsters do not continue the activity.
Depending on your antifraud system version, the blocking actions may be unavailable. To upgrade your version, you can contact your manager or reach out to us at contact@abhandshake.com.
For some fraud types, the blocking action is not applied in the antifraud system, e.g. Flashcalls.
However, you can request a special flashcalls blocking feature to enable flashcalls blocking. In order to do that, you can contact your manager or reach out to us at contact@abhandshake.com.
Following that, you can enable or disable alerting to the specified Notification Channels:
You can adjust communication channels for alerts in the module Fraud Alerts of the Alerts & Reports module group.
After selecting the needed options, click the SAVE button to apply the changes, or the CANCEL button to cancel the changes and exit the Edit Rule page.
The Custom Rules method allows you to configure any real-time, threshold-based rules to monitor usage and end customers’ behavior. Once the threshold is reached, the incident can be alerted to the specified notification channels, active calls can be broken, and the corresponding traffic can be blocked for a pre-defined period.
First and foremost, these rules are HIGH USAGE rules. If you know high usage patterns of your customers, you can define the thresholds (cost, duration, the number of attempts or calls, the number of simultaneous calls, etc.) to alert suspicious usage for:
It is important to note that since you set the threshold value, you also set the severity level of the corresponding threshold. You can configure a few usage thresholds with the corresponding severity values from low to critical and trace the evolution of the situation.
Custom rules are primarily used as a probe for retail traffic, mainly to protect the operator’s retail network, but you can try using these rules to monitor hubbing traffic as well.
The Custom Rules module consists of the following parts:
You can view this and any corresponding documentation page directly from the Control Centre by clicking the ? ABOUT button in the top-right corner of the page.
The filters for the rules table inclide the following options:
Clicking the plus icon allows you to customize your filters. After selecting the needed filter parameters click the SAVE button to apply changes, or click the RESET button to revert the changes to the previous setup. Click the CANCEL button to cancel the changes and exit the pop-up window.
The rules table includes the following columns:
The total number of created rules is displayed above the table in the top-right corner.
To create a new rule, click the + ADD NEW button in the top-right corner of the page, this will take you to the New Rule page.
Select the rule severity level. Choose the importance of the rule from Low, Medium, High, or Critical. We recommend that you use the chosen severity level for prioritizing monitoring efforts and alert management processes:
Next, determine the scope of the rule by selecting the appropriate options from A-side and B-side groupings.
A-side groiping allows you to choose between:
If you select “Specified A-range”, you will also need to enter the first digits of a range or number in the field “Specified A-range”:
To determine the B-Side Grouping, select an appropriate option:
If you select “Specified B-range”, you will also need to enter the first digits of a range or a number in the field “B-Destination”:
If you select "Destination Network" or "B-number", you need to choose a country and, optionally, a destination from the dropdown list, or enter them manually (by default, any country and all networks are selected):
A-Side Grouping and B-Side Grouping together (Scope) form a traffic pattern.
Select a threshold parameter from the dropdown list:
Then enter the value of the upper-threshold (i.e., the rule is triggered if the value exceeds the threshold) for the chosen parameter.
Next, select the value for the rule's monitoring window (i.e., the period during which statistics are collected and the threshold is applied):
After that, decide how the system should respond when the rule threshold is triggered:
Depending on your antifraud system version the blocking actions may be unavailable. To upgrade your version, you can contact your manager or reach out to us at contact@abhandshake.com.
Next, decide whether you want to receive notifications when this rule is triggered:
You can adjust communication channels for alerts in the module Fraud Alerts of the Alerts & Reports module group.
Alerting is the only option that can be changed later. Click the SAVE button at the bottom of the page to save the rule, or CANCEL to discard the changes.
After that, you will be taken to the page of the created rule (Rule #) where you can enable or disable the rule.
Example: You know that new traffic will soon be directed to a high-risk country (high-risk in terms of fraud termination), and you would like to set a usage rule to control the charge for each A-number calling that destination. Specifically, you want to trigger an alert if the total charge exceeds 20 USD within 24 hours per A-number. You would also like to make it a medium-severity threat, as you would like to gather more information about the A-number before taking any actions.
Click the + ADD NEW button at the top-right corner of the screen and choose the "Medium" Severity.
In the newly created rule select "A-number" in the A-side Grouping column, and "Destination Country" in the B-side Grouping column.
Next, select "Total Charge (USD)" in the Threshold section of the page, enter “20” next to it, and select “1d” as the monitoring window.
Use the toggles at the bottom of the page to disable the Blocking Action and enable Alerting.
Click the SAVE button and, on the next page, enable the rule. Otherwise, click the CANCEL button.
Clicking any rule in the main table opens that rule's page. Using the buttons at the top of this page, you can DELETE a rule or COPY it.
Copying opens a new page with the same parameters as the current rule, which you can then edit to suit your needs. You can also click the EDIT button to toggle alerting for the rule on or off.
The Block & Allow Lists module allows you to add A-number ranges and B-number ranges to the Block List and to the Allow List.
On the main page of the module, there is a table which includes four lists:
The table provides the description of each list, as well as the quantity of number ranges in every list and the date of the last update.
You can view this and any corresponding documentation page directly from the Control Centre by clicking the ? ABOUT button in the top-right corner of the page.
You can learn more about a particular list by clicking on it.
The Block List operates as the highest priority rule. Adding an A-number or range to the Block List means that no further investigation will be conducted for this number or range. All calls from blocklisted A-numbers or ranges will be rejected without any analysis.
At the top of the page, there is information about the quantity of A-number ranges in the list, the key field (the list ID), the date and time of the last update, and the description of the list.
In the table below the description, you can find all blocklisted A-number ranges, along with the details such as country, network, and the date and time the range was added. The table shows 10 most recently added ranges (of the total amount).
To view more blocklisted A-number ranges, click the LOAD MORE button at the bottom left of the page.
To find a specific number range, you can use multiple filters located at the top of the table:
You can remove a filter by hovering over it and clicking the x (cross) button or by clicking the RESET button, which clears all selected filters.
You can download a CSV file of the blocklisted A-number ranges by clicking the download button .
To delete a specific number range (or multiple ranges), check the box on the left side of the range, and click the DELETE button at the top right of the table.
To delete all A-number ranges from the Block List, load the full list, check the box at the top left of the table, and click the DELETE button.
A pop-up notification will appear, asking you to confirm the deletion. Click the CANCEL button to stop or the DELETE button to proceed with the deletion.
To add a new A-number range (or several ranges) to the Block List click the + ADD NEW button at the top right above the table. You will be directed to the Add Ranges page.
There are two ways to add a new A-number range (or several ranges) to the Block List:
Manual Entry
At the top half of the page, you can enter multiple numbers or number ranges, separated by commas, semicolons, or line breaks. You can use the “x” symbol to define the amount of digits in the number range. For example, entering 12345xxxxx blocks the range 12345, with phone numbers that must have 10 digits. Numbers with more or fewer digits will not match.
Enter the number or range in international format: country code and the subscriber number (or the first digits of the subscriber number). For example, 1234567890, where 1 is the country code, 234567890 is the subscriber's number.
Check the box at the bottom left side of the page to override existing ranges with the new ones, or leave it unchecked to keep the existing ranges.
Next, click the SAVE button to add the new ranges to the list, or click the RESET button to reset the changes.
Upload a CSV File
Alternatively, you can upload a CSV file containing the numbers or ranges by dragging the file from your computer and dropping it into the upload section of the page, or by clicking the upload box to browse for the file on your system.
To undo the most recent addition of A-number ranges to the Block List, return to the Block List of A-numbers page and click the UNDO LAST INSERT button located in the middle right section of the page.
Next, click the UNDO button to remove the most recent addition to the list, or click the CANCEL button to abort this action.
The Block List operates as the highest priority rule. Adding a B-number or range to the Block List means that no further investigation will be conducted for this number or range. All calls to blocklisted B-numbers or ranges will be rejected without any analysis.
At the top of the page, there is information about the quantity of B-number ranges in the list, the key field (the list ID), the date and time of the last update, and the description of the list.
In the table below the description, you can find all blocklisted B-number ranges, along with the details such as country, network, and the date and time the range was added. The table shows 10 most recently added ranges (of the total amount).
To view more blocklisted B-number ranges, click the LOAD MORE button at the bottom left of the page.
To find a specific number range, you can use multiple filters located at the top of the table:
You can remove a filter by hovering over it and clicking the x (cross) button or by clicking RESET, which clears all selected filters.
You can download a CSV file of the blocklisted B-number ranges by clicking the download button .
To delete a specific number range (or multiple ranges), check the box on the left side of the range, and click the DELETE button at the top right of the table.
To delete all B-number ranges from the Block List, load the full list, check the box at the top left of the table, and click the DELETE button.
A pop-up notification will appear, asking you to confirm the deletion. Click the CANCEL button to stop or the DELETE button to proceed with the deletion.
To add a new B-number range (or several ranges) to the Block List click the + ADD NEW button at the top right above the table. You will be directed to the Add Ranges page.
There are two ways to add a new B-number range (or several ranges) to the Block List:
Manual Entry
At the top half of the page, you can enter multiple numbers or number ranges, separated by commas, semicolons, or line breaks. You can use the “x” symbol to define the amount of digits in the number range. For example, entering 12345xxxxx blocks the range 12345, with phone numbers that must have 10 digits. Numbers with more or fewer digits will not match.
Enter the number or range in international format: country code and the subscriber number (or the first digits of the subscriber number). For example, 1234567890, where 1 is the country code, 234567890 is the subscriber's number.
Check the box at the bottom left side of the page to override existing ranges with the new ones, or leave it unchecked to keep the existing ranges.
Next, click the SAVE button to add the new ranges to the list, or click the RESET button to reset the changes.
Upload a CSV File
Alternatively, you can upload a CSV file containing the numbers or ranges by dragging the file from your computer and dropping it into the upload section of the page, or by clicking the upload box to browse for the file on your system.
To undo the most recent addition of B-number ranges to the Block List, return to the Block List of B-numbers page and click the UNDO LAST INSERT button located in the middle right section of the page.
Next, click the UNDO button to remove the most recent addition to the list, or click the CANCEL button to abort this action.
The Allow List operates as the second highest priority rule. Adding an A-number or range to the Allow List means that no further investigation will be conducted for this number or range. All calls from allowlisted A-numbers or ranges will pass through without any analysis.
At the top of the page, there is information about the quantity of A-number ranges in the list, the key field (the list ID), the date and time of the last update, and the description of the list.
In the table below the description, you can find all allowlisted A-number ranges, along with the details such as country, network, and the date and time the range was added. The table shows 10 most recently added ranges (of the total amount).
To view more allowlisted A-number ranges, click the !the LOAD MORE button at the bottom left of the page.
To find a specific number range, you can use multiple filters located at the top of the table:
• Range: Enter the number or range manually.
• Country: Select a country from a dropdown list or enter the name manually.
• Network: Select a network from a dropdown list or enter the name manually.
You can remove a filter by hovering over it and clicking the x (cross) button or by clicking RESET, which clears all selected filters.
You can download a CSV file of the allowlisted A-number ranges by clicking the download button .
To delete a specific number range (or multiple ranges), check the box on the left side of the range, and click the DELETE button at the top right of the table.
To delete all A-number ranges from the Allow List, load the full list, check the box at the top left of the table, and click the DELETE button.
A pop-up notification will appear, asking you to confirm the deletion. Click the CANCEL button to stop or the DELETE button to proceed with the deletion.
To add a new A-number range (or several ranges) to the Allow List click on the + ADD NEW button at the top right above the table. You will be directed to the Add Ranges page.
There are two ways to add a new A-number range (or several ranges) to the Allow List:
Manual Entry
At the top half of the page, you can enter multiple numbers or number ranges, separated by commas, semicolons, or line breaks. You can use the “x” symbol to define the amount of digits in the number range. For example, entering 12345xxxxx allows the range 12345, with phone numbers that must have 10 digits. Numbers with more or fewer digits will not match.
Enter the number or range in international format: country code and the subscriber number (or the first digits of the subscriber number). For example, 1234567890, where 1 is the country code, 234567890 is the subscriber's number.
Check the box at the bottom left side of the page to override existing ranges with the new ones, or leave it unchecked to keep the existing ranges.
Next, click the SAVE button to add the new ranges to the list, or click the RESET button to reset the changes.
Upload a CSV File
Alternatively, you can upload a CSV file containing the numbers or ranges by dragging the file from your computer and dropping it into the upload section of the page, or by clicking the upload box to browse for the file on your system.
To undo the most recent addition of A-number ranges to the Allow List, return to the Allow List of A-numbers page and click the UNDO LAST INSERT button located in the middle right section of the page.
Next, click the UNDO button to remove the most recent addition to the list, or click the CANCEL button to abort this action.
The Allow List operates as the second highest priority rule. Adding a B-number or range to the Allow List means that no further investigation will be conducted for this number or range. All calls to allowlisted B-numbers or ranges will pass through without any analysis.
At the top of the page, there is information about the quantity of B-number ranges in the list, the key field (the list ID), the date and time of the last update, and the description of the list.
In the table below the description, you can find all allowlisted B-number ranges, along with the details such as country, network, and the date and time the range was added. The table shows 10 most recently added ranges (of the total amount).
To view more allowlisted B-number ranges, click the LOAD MORE button at the bottom left of the page.
To find a specific number range, you can use multiple filters located at the top of the table:
• Range: Enter the number or range manually.
• Country: Select a country from a dropdown list or enter the name manually.
• Network: Select a network from a dropdown list or enter the name manually.
You can remove a filter by hovering over it and clicking the x (cross) button or by clicking RESET, which clears all selected filters.
You can download a CSV file of the allowlisted B-number ranges by clicking the download button .
To delete a specific number range (or multiple ranges), check the box on the left side of the range, and click the DELETE button at the top right of the table.
To delete all B-number ranges from the Allow List, load the full list, check the box at the top left of the table, and click the DELETE button.
A pop-up notification will appear, asking you to confirm the deletion. Click the CANCEL button to stop or the DELETE button to proceed with the deletion.
To add a new B-number range (or several ranges) to the Allow List click on the + ADD NEW button at the top right above the table. You will be directed to the Add Ranges page.
There are two ways to add a new B-number range (or several ranges) to the Allow List:
Manual Entry
At the top half of the page, you can enter multiple numbers or number ranges, separated by commas, semicolons, or line breaks. You can use the “x” symbol to define the amount of digits in the number range. For example, entering 12345xxxxx allows the range 12345, with phone numbers that must have 10 digits. Numbers with more or fewer digits will not match.
Enter the number or range in international format: country code and the subscriber number (or the first digits of the subscriber number). For example, 1234567890, where 1 is the country code, 234567890 is the subscriber's number.
Check the box at the bottom left side of the page to override existing ranges with the new ones, or leave it unchecked to keep the existing ranges.
Next, click the SAVE button to add the new ranges to the list, or click the RESET button to reset the changes.
Upload a CSV File
Alternatively, you can upload a CSV file containing the numbers or ranges by dragging the file from your computer and dropping it into the upload section of the page, or by clicking the upload box to browse for the file on your system.
To undo the most recent addition of B-number ranges to the Allow List, return to the Allow List of B-numbers page and click the UNDO LAST INSERT button located in the middle right section of the page.
Next, click the UNDO button to remove the most recent addition to the list, or click the CANCEL button to abort this action.
This module provides information about all active blockages set by the antifraud system.
The Active Blockages module consists of the following parts:
You can view this and any corresponding documentation page directly from the Control Centre by clicking the ? ABOUT button in the top-right corner of the page.
In order to find the needed active blockages, you can use multiple filters in the top section of the page:
All filters affect the table of active blockages.
Each active blockage includes the following details: fraud type, protection method, A-side (number range, country, or network), B-side (number range, country, or network), date and time of blocking, and blockage expiration time. You can hover over the symbol for a brief description of the detected fraud type.
You can click the three dots on the right side of the blockage to see the available options. There will be two options: 'View Fraud Call Attempts' and 'Unblock'.
If you click on the 'View Fraud Call Attempts' option, you will be taken to the corresponding Fraud Call Attempts page with the selected Blockage ID and the fraudulent call attempts blocked by it.
You can also use the 'Unblock' option to remove the blockage (if the fraud management team decides that the blockage is unnecessary or excessive). Click the UNBLOCK button to unblock the traffic, or click the CANCEL button to cancel the unblocking action.
You can click the LOAD MORE button at the bottom of the page to view more active blockages.
You can learn more about a particular active blockage by clicking on it. You will be taken to the Active Blockage Details page.
This page consists of two sections:
Under the Scope section, you can find a table of fraudulent call attempts affected by the blockage.
If you want to delete this blockage, click the UNBLOCK button in the top right corner of the page.