The fraud bureau for digital connections
Every account takeover, scam call and mule payment arrives first on a phone number, a device or an IP address. We see these connections from telephony networks globally, share and score them before they reach you.
142 ms · A ranking, never a probability. No subscriber identity returned.
The people behind FIL
Fraud operations at operator groups across emerging markets. Cyber defence for national networks. Platforms scaled to global audiences. One idea: stop fraud at the connection.
Andrew WongCo-founder and Chief Executive OfficerScaled global platforms and fintech infrastructure at Yahoo, Yahoo Japan, 8 Securities and Liquid by Quoine.
Anthony SaniCo-founder and Chief Operating Officer25+ years in revenue assurance and fraud. Led fraud and risk across 19 markets at MTN Group.
Dmitrii CreedChief Technology OfficerDistributed ledgers and enterprise engineering. Architected a national retail central bank digital currency.
Mike MullinsChief Information Security and Privacy OfficerThree decades in cyber defence, including cyber security operations for the US Department of Defense.
Identity checks ask who you are. Transaction monitoring asks what you are doing with the money. By the time either runs, the fraudster has already connected, and usually already has a working account and a convincing story.
A number, a device or an IP reaches your service.
Where fraud is decidedKYC, document checks, onboarding.
Where most budgets goPayment monitoring, case management, recovery.
Where losses get countedMost connection checks take a snapshot: is the number valid, which carrier, what kind of line. Fraudsters know exactly what the snapshot looks at, so they make sure they pass it.
| The check asks | The fraudster answers | FIL sees |
|---|---|---|
| Is the caller ID valid? | Spoofs a real, valid number. | The number arriving from origin networks it has never used. |
| Is it a real carrier and line? | Rotates through fresh SIMs on real networks. | The range already carrying reported fraud, flagged before the new SIM is. |
| Is the IP a consumer address? | Routes through VPNs, proxies and hosting. | Hundreds of caller IDs sharing a handful of hosting addresses. |
| Does the number match the account? | Swaps or ports the number first. | A caller ID that does not match the account, after a run of failed logins. |
Lenders once judged you on age, address and marital status. Credit bureaus changed that by recording what you actually do. We do the same for the connections fraud travels on.
What it is.
Allocated or not. Mobile, fixed or premium rate. Consumer line or data centre. Consumer IP or anonymiser.
How it is being used.
Reported fraud against it or its range. Bursts of attempts. Many caller IDs sharing a few addresses. One number arriving from places no journey could reach.
The Exchange gathers raw signals. The Scoring API turns them into decisions. Confirmed fraud flows back, and the next score gets sharper.
A neutral ledger where operators and their partners share raw fraud signals securely, and are credited for it.
Connection intelligence for any digital business. One call returns a risk ranking, a band, a recommended action and the evidence behind it.
Tiers are cumulative. Each one adds evidence, and nothing moves a call down.
See how scoring works500,000 interactions screened against FIL intelligence alongside the client's existing tools.
Vodafone recognizes the importance of sharing intelligence securely and efficiently. We're on board with this initiative, ready to continue our support for its objectives in safeguarding customers and our networks.
Through secure, shared real-time intelligence, we aim to give our customers even broader visibility into global fraud activity, further strengthening the robust fraud management capabilities already in place.