FRAUD INTELLIGENCE LIMITED
10
QUARTERLY REPORT
Q1 2026
Fraud Intelligence Platform Analytics

Q1 WINS

โšก Platform Performance Upgrade
Growing fraud signal volumes drove a significant infrastructure upgrade across the FIB platform. The Web UI and API now deliver faster contribution and retrieval performance, with payload sizes increased to 5,000 records per API call โ€” enabling higher-throughput integrations and more efficient batch workflows.
๐ŸŒ World First: Fraud Firewall & Blockchain Integration
A landmark industry milestone โ€” the first live global integration between a real-time fraud firewall and a blockchain-based fraud intelligence ledger. Achieved through our collaboration with Six Degrees and one of their operator clients, this bi-directional connection sets a new standard for operationalising fraud intelligence at the network edge โ€” instantly, transparently, and at scale.
๐Ÿค Symmetry Solutions Partnership
Symmetry curates PRISM โ€” the world's largest source of real-time threat intelligence for IRSF destinations. Integrating PRISM with the FIB network strengthens collective defence against one of telecom's most costly fraud types, delivering powerful, real-time, actionable insights to every member.
๐Ÿค Neural Technologies Partnership
Neural Technologies is a globally recognised leader in fraud management and revenue assurance software for CSPs. This partnership deepens FIL's reach into the operational fraud management layer, connecting blockchain intelligence with proven network-level detection and response capabilities.
๐Ÿ“Š Coming Soon: Benchmarking
Benchmarking will give telcos a clear picture of how their network assets โ€” numbers, IP ranges, and routes โ€” are being targeted across the consortium. Operators will be able to compare their exposure against the broader network and make informed, evidence-based blocking decisions that avoid over-blocking.
๐Ÿ”” Coming Soon: Alerts
An opt-in service that notifies telcos in real time whenever a member adds one of their network assets to the FIB ledger. Operators can immediately investigate, take action, or flag false positives โ€” transforming the FIB from a passive intelligence source into an active monitoring tool.

Q1 INSIGHTS SUMMARY

โ†—
0M
Total Identifiers in Q1
+1611% QoQ Growth
โ†—
0
Fraud Signals Per Second
+1649% Acceleration
โ†—
0
Countries Originating Fraud
Global Distribution
โ†—
69.1%
Flashcalling Share
Dominant Fraud Type
1
Signal Growth
A 16-fold increase in fraud signals contributed to the ledger was accompanied by a significant performance upgrade on the Fraud Intelligence Blockchain โ€” driven by the demands of scale.
2
Velocity
Almost 3 fraud signals per second are now being added to the ledger. The world-first integration of a fraud firewall into our threat intelligence has dramatically improved detect-to-insight time.
3
225 Countries
A 20% increase in the number of countries originating fraud reinforces our global reach across both established and emerging markets.
4
Developed Market Shift
North America and Europe increased their share of fraud signal origins from 25.5% in Q4 2025 to 52.5% in Q1 2026 โ€” signalling a significant shift toward developed market fraud origins and the growing sophistication of operations in these regions.

DATA GROWTH

โ†—
0M
Total Identifiers
Q1 2026
โ†—
+1611%
QoQ Growth
vs Q4 2025
Cumulative Identifier Growth by Quarter
Record Quarter
23M fraud identifiers were added to the ledger in Q1 2026. This brings the cumulative total in the Fraud Intelligence Blockchain to over 30M fraud identifiers.
Firewall Integration
The 10x data growth has been supported through the integration of the Fraud Intelligence Blockchain with vendor fraud firewall systems, enabling real-time threat intelligence sharing with telcos.

VELOCITY INSIGHTS

โ†—
0
Signals Per Second
Current Rate
โ†—
+1649%
QoQ Increase
Signal Velocity
Signal Velocity Evolution QoQ
Why Speed Matters
The speed of threat intelligence sharing is critical to protecting customers โ€” particularly as the automation and complexity of fraud continues to increase.
Q1 Velocity Achievement
A 1,649% improvement in fraud signal velocity โ€” spanning all fraud types โ€” was achieved in Q1 2026, significantly improving the usefulness and timeliness of intelligence data for FIB members.

FRAUD TYPE INSIGHTS

Q4 2025 Mix
Q1 2026 Evolution
69.1%
Flashcalling
+24.9% vs Q4
USA
Flash Call Leader
38.6K signals
Sri Lanka & Baltic States
Wangiri Leader
21.0K signals
China
Scam Leader
41.0K signals
Quarterly Fraud Mix Evolution
Q1 2026 witnessed a significant increase in both the volume and proportion of flash call signals, highlighting the growing risk to A2P SMS revenues that telcos are facing.
Geographic Concentration
The concentration of certain fraud types by region โ€” Scam (China), Wangiri (Sri Lanka & Baltic States) and Flash Call (North America) โ€” highlights the need for broad-based fraud type data coupled with geographic anti-fraud strategies.

GEOGRAPHIC DISTRIBUTION

โ†—
0
Fraud Originating Countries
+25 vs Q4 2025
โ†—
0
Fraud Concentration (90%)
+6 Countries QoQ
Top 15 Countries โ€” % Share of Fraud Contributions
Global Market Growth
225 countries contributing fraud intelligence in Q1 2026 reflects strong and growing participation across both established and emerging markets worldwide.
Decentralised Attack Patterns
45 countries now account for 90% of fraud contributions โ€” up from 39 in Q4 2025. This broadening base indicates that fraudster attack patterns are increasingly decentralised, making traditional geographic blocking strategies less effective.

FRAUD ORIGIN PROFILING

Q1 2026 โ€” Fraud Type Specialisation by Country  |  โ–ฒ Specialising  โ–ผ Diversifying  ๐Ÿ†• New  vs Q4 2025
๐ŸŽฏ
LASER
One fraud type. Total commitment.
HHI > 0.86  |  15 countries
โšก Flashcalling
Russia โ–ฒ Turkey โ–ฒ Azerbaijan โ–ฒ Israel โ–ฒ Greece Italy โ–ฒ Kazakhstan Iran โ–ฒ Spain โ–ฒ UAE โ–ฒ Saudi Arabia โ–ฒ
๐Ÿ’ฌ Scam
Pakistan
๐Ÿ“ž Wangiri
Maldives ๐Ÿ†• Burkina Faso โ–ฒ Algeria โ–ฒ
๐Ÿ”ซ
RIFLE
Dominant type, secondary presence.
HHI 0.65โ€“0.86  |  10 countries
โšก Flashcalling
USA โ–ฒ France โ–ฒ Armenia โ–ฒ Ukraine โ–ฒ Poland โ–ฒ Switzerland โ–ฒ Sweden โ–ฒ
๐Ÿ’ฌ Scam
China
๐Ÿ“ž Wangiri
Estonia โ–ฒ
๐ŸŒ IP Fraud
Romania โ–ฒ
๐Ÿ’ฅ
SHOTGUN
Two active fraud types.
HHI 0.45โ€“0.65  |  14 countries
India
Flash 49% ยท Scam 46%
Germany
Flash 57% ยท Scam 36%
Zimbabwe โ–ผ
Flash 59% ยท Wangiri 41%
Austria
Wangiri 68% ยท Flash 32%
UK โ–ฒ
Flash 78% ยท Scam 12%
S. Korea โ–ฒ
Flash 59% ยท IP 33%
Philippines โ–ผ
Flash 59% ยท Scam 37%
Hong Kong
IP 65% ยท Scam 27%
Japan โ–ฒ
Flash 76% ยท IP 21%
Lithuania
Flash 60% ยท IP 28%
Moldova
Flash 63% ยท Scam 29%
Mexico โ–ผ
Scam 67% ยท IP 26%
Slovenia โ–ฒ
Scam 63% ยท Flash 30%
Iraq
Flash 59% ยท Wangiri 36%
๐Ÿ’ฃ
CANNON
Three or more active fraud types.
HHI < 0.45  |  10 countries
Netherlands โ–ผ
Scam ยท IP ยท Flash
Singapore โ–ผ
Scam ยท Flash ยท IP
Vietnam
Flash ยท Scam ยท Wangiri
Brazil โ–ผ
Scam ยท Flash ยท IP
Indonesia โ–ผ
Flash ยท Scam ยท Wangiri
Canada
Flash ยท Scam ยท IP
Thailand
Flash ยท Scam ยท Wangiri
Bulgaria
Flash ยท Wangiri ยท Scam
Ethiopia
Wangiri ยท Flash ยท Scam
Australia โ–ผ
IP ยท Flash ยท Scam

EMERGING THREATS

Slovenia
Fastest Growing
+214.5%
Portugal
2nd Fastest
+134.3%
Estonia
3rd Fastest
+127.2%
Lithuania
4th Fastest
+109.7%
Quarterly Emerging Threats
A New European Threat Corridor
Rapid QoQ growth across Slovenia, Portugal, Estonia and Lithuania points to an emerging European fraud corridor, where regulatory variation and cross-border connectivity are being exploited.
Rising Tide
The double and triple-digit growth rates seen across all six emerging markets signal that Q1 2026 is not an isolated spike but an early indicator of a broader escalation in fraud activity across previously lower-risk geographies.
JOIN THE FIGHT
AGAINST FRAUD
Real-time fraud identifier sharing across 225+ countries
Blockchain-verified threat intelligence at network speed
Fraud firewall integration for automated blocking
50+ member operators ยท 30M+ fraud identifiers
fraudintelligencelimited.com
FIL Logo