Overnight international calls on the invoice that nobody recognises.
Classic toll fraud: an attacker compromised a SIP account or a PBX with a weak PIN. Between 11pm and 7am, calls go to premium-rate in countries you do not visit. Time matters, block first.
Try this first
- 1PBX immediately: tighten outbound rules or pause the trunk.
- 2Rotate SIP passwords for all accounts, including old test users.
- 3Call the provider for an outbound cap or geo-block on the trunk.
- 4Analyse logs: which extension, IP, time window. Document for the insurer.
When to bring us in
Amount is significant: report to provider and insurer, and get the toll-fraud clause in your contract straight before the next time.
See also
- Voys, BelXS or RoutIT, which cloud PBX fits?Three popular NL platforms, differences are admin UI, partner model and per-user price.
- Teams Phone: Calling Plan, Direct Routing or Operator Connect?Three ways to connect PSTN to Teams, cost and management differ a lot.
- 3CX: self-host on VPS or take 3CX cloud?Self-host saves licence, but you own SBC, backup and updates.
None of the above fits?
Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.
Or skip the DIY entirely
Our Managed IT clients do not look these things up. One point of contact, a fixed monthly price, resolved within working hours.