User manual BIZFON PROTECT YOURSELF AGAINST TOLL FRAUD

[. . . ] Passwords are not required to be used to access the BIZFON system, but they are required to gain access as a remote user (e. g. If an unauthorized person obtains the password for an extension, they may be able to log into the system and make unauthorized phone calls to outside numbers or change the phone system's settings. Under most long distance carrier agreements, if a call has originated with, or passed through a customers' equipment, that customer is responsible for the charges associated with the call, whether the call is authorized or not. This means that if you are the victim of toll fraud, you are liable for the costs. [. . . ] Unplugging the BIZFON 680 phone system's AC power will disconnect all cal ls and prevent anyone from dialing through the phone system. Since valid calls will also be unable to get through, you could temporarily wire around the system until the problem can be resolved by connecting the individual phone lines directly to BizTouch 1 or 2 or generic analog phonesets. An alternate temporary workaround after unplugging the 680's AC power would be to plug an analog phone into the emergency port on the Bizfon 680. This would give you the ability to use Line 1 only. How could an unau thorized person gain access to your long distance service?· Thieves or hackers can: · · · · · · Break into your voice-mail system and take over mailboxes, and/or steal long distance by obtaining an outside line, or by programming mailboxes to accept third party billed calls. Use your Toll Free (800, 888, or 877) numbers and make calls that you didn't intend to or want to pay for. Call your office and guess easy passwords or con your employees into giving out passwords while posing as telephone company personnel. Please note that neither Bizfon employees nor telephone company employees have any need to ask for your passwords. Go through your trash - commonly known as 'dumpster diving' - searching for codes. Use your printed internal telephone directory to try & "recruit" your employees. Con your switchboard and reception staff into accepting collect calls or connecting them to long distance trunks - a technique known as "social engineering. " Toll Fraud Information Sheet Page4 of 7 · · Bill international calls to your telephone number by employing a third number billing scam. "Shoulder surf" in airports or other public locations to obtain calling card or other access numbers and authorization codes by looking over callers' shoulders as they use them. What are some warning signs that could indicate toll fraud?· · · · · Calls (especially international) you don't recognize on your telephone bill. Warnings from your telephone company regarding unusual call activity not matching your typical call profile. Phone lines in use for extended periods when no one else is on the phone (including valid remote users). Complaints by incoming callers getting busy signals or outside lines not being available when the office isn't using all the phone lines (can be caused by other issues like call forwarding settings, or lack of disconnect signals from the telephone service provider). Secure your Systems. Voice -mail systems: · · · · · Either don't use any passwords (disables remote extension log-in), or assign and change passwords regularly. Increase password length, and prohibit the use of trivial, simple passwords such as 222 or 123 or extension numbers. Prohibit the sharing or posting of passwords, or entering them into programmable keys or speed dial buttons. Restrict out-calling. Long-distance calling (through your local/long-distance telephone service provider(s) : · Block all toll calls at night, on weekends and on holidays. Toll Fraud Information Sheet Page5 of 7 · · · Block or limit access to overseas calls. If your company has no requirement to call overseas, block overseas calls completely. Review carefully all billing information to identify unauthorized calling patterns. [. . . ] Warn staff about "shoulder surfing" and ensure they know who to notify if they believe their company calling card or access codes have been compromised. Warn switchboard operators, receptionists, and employees about "social engineering, " i. e. con -artists impersonating security investigators, phone company installers, or telecom managers trying to obtain calling access or be transferred to an outside telephone line through your phone system. Establish procedures for staff to report suspected security breaches immediately. [. . . ]