Telephone systems hackers have established a thriving black market in reselling stolen VoIP minutes.

Hackers are breaking into gateway servers used to connect a carrier's phone network to the internet and reselling this access to smaller, unscrupulous operators, sometimes via web-based wholesale minutes markets. Wholesale purchasers of the purloined access are often small telco operations who resell access to ordinary punters via printed phone cards.

These telephone phreakers steal 200m minutes a month, worth $26m, estimates New York telecom firm Stealth Communications.

Telecoms fraud is a well known, if under-reported problem, that pre-dates the internet by years. It is a multimillion-dollar business, with estimates of direct damages resulting from fraud varying from $35bn to $40bn a year.

This fraud comes in many guises of which the growing trade in VoIP phreaking is just one relatively small but growing component. Newsweek reports that uncovering the perpetrators of this illicit trade is extremely difficult, if not impossible.

A Panamanian telco that recently lost $110,000 as a result of VoIP fraud hired Hong Kong consultancy TSTF to track down the phreakers involved. The trail led through Bulgaria, Canada, Costa Rica, Hong Kong, and the US before going cold. Phreaker trails are far too complex to track successfully, Emmanuel Gadaix, head of TSTF, told Newsweek. ®

Related stories

• Asterisk mauled by buffer overflow bug (20 March 2008)
• 911 phone phreakers face jail (19 November 2007)
• Tiscali touts 'voice-ready' business broadband (14 May 2007)
• Deutsche Telekom profits plunge 58% (11 May 2007)
• Terror phone clone scam exposed (19 December 2005)
• Update The Sun exposes UK ID theft racket at Indian call centre (23 June 2005)
• eCrime cost UK.biz £2.4bn in 2004 (5 April 2005)
• Alcatel offloads telecoms fraud biz to India (30 July 2004)
• Filipino phone phreakers foiled (20 July 2004)
• Multi-million pound mobile phone fraudster goes to jail (11 April 2001)
• Telecoms fraud costs $55 billion a year (16 March 2001)