User manual BIZFON PROTECT YOURSELF AGAINST TOLL FRAUD

[. . . ] The BIZFON phone system has powerful features including call forwarding and remote access to qualified outside (remote) users. Passwords are not required to be used to access the BIZFON system, but they are required to gain access as a remote user (e. g. If an unauthorized person obtains the password for an extension, they may be able to log into the system and make unauthorized phone calls to outside numbers or change the phone system's settings. Under most long distance carrier agreements, if a call has originated with, or passed through a customers' equipment, that customer is responsible for the charges associated with the call, whether the call is authorized or not. [. . . ] Note that you will lose any extension voicemails and personal extension greetings, so you may want to clear out Toll Fraud Information Sheet Page3 of 7 voicemails and write down the greetings first. When you set the extensions back up, make sure to follow the other suggestions in this document concerning the use of extension passwords. Unplugging the BIZFON 680 phone system's AC power will disconnect all cal ls and prevent anyone from dialing through the phone system. Since valid calls will also be unable to get through, you could temporarily wire around the system until the problem can be resolved by connecting the individual phone lines directly to BizTouch 1 or 2 or generic analog phonesets. An alternate temporary workaround after unplugging the 680's AC power would be to plug an analog phone into the emergency port on the Bizfon 680. This would give you the ability to use Line 1 only. How could an unau thorized person gain access to your long distance service?· Thieves or hackers can: · · · · · · Break into your voice-mail system and take over mailboxes, and/or steal long distance by obtaining an outside line, or by programming mailboxes to accept third party billed calls. Use your Toll Free (800, 888, or 877) numbers and make calls that you didn't intend to or want to pay for. Call your office and guess easy passwords or con your employees into giving out passwords while posing as telephone company personnel. Once they have a password, they may gain access to your system. Please note that neither Bizfon employees nor telephone company employees have any need to ask for your passwords. Use your company calling card numbers to place international calls. Go through your trash - commonly known as 'dumpster diving' - searching for codes. Use your printed internal telephone directory to try & "recruit" your employees. Con your switchboard and reception staff into accepting collect calls or connecting them to long distance trunks - a technique known as "social engineering. " Toll Fraud Information Sheet Page4 of 7 · · Bill international calls to your telephone number by employing a third number billing scam. "Shoulder surf" in airports or other public locations to obtain calling card or other access numbers and authorization codes by looking over callers' shoulders as they use them. What are some warning signs that could indicate toll fraud?· · · · · Calls (especially international) you don't recognize on your telephone bill. Warnings from your telephone company regarding unusual call activity not matching your typical call profile. Increases in calls after business hours. Phone lines in use for extended periods when no one else is on the phone (including valid remote users). Complaints by incoming callers getting busy signals or outside lines not being available when the office isn't using all the phone lines (can be caused by other issues like call forwarding settings, or lack of disconnect signals from the telephone service provider). Secure your Systems. Voice -mail systems: · · · · · Either don't use any passwords (disables remote extension log-in), or assign and change passwords regularly. [. . . ] Warn staff about "shoulder surfing" and ensure they know who to notify if they believe their company calling card or access codes have been compromised. Warn switchboard operators, receptionists, and employees about "social engineering, " i. e. con -artists impersonating security investigators, phone company installers, or telecom managers trying to obtain calling access or be transferred to an outside telephone line through your phone system. Establish procedures for staff to report suspected security breaches immediately. [. . . ]