BroadNet
Operations BroadNet answer

What is IRSF (International Revenue Share Fraud)?

Last reviewed 1 min readReviewed by BroadNet engineering
Quick answer

IRSF (International Revenue Share Fraud) is a telecom fraud in which criminals lease international premium-rate numbers and then generate artificial calls or messages to them, so the originating operator or business pays inflated termination fees while the fraudster and the number provider split the revenue.

Plain-language definitionVendor-neutralReviewed October 20, 2026
The long answer

Everything worth knowing, nothing that isn't.

§01

How does IRSF work?

International premium-rate numbers (IPRNs) carry an above-standard termination fee that is shared with whoever leases the range. Fraud starts when the traffic is generated artificially: the originating party — usually unaware — pays the inflated interconnect and settlement charges, and the payout to the fraudster is automatic. By the time the wholesale bill arrives weeks later, the money has moved down the settlement chain.

§02

Where does IRSF traffic come from?

Hacked enterprise PBXs that dial out overnight or over a weekend, SIM boxes and malware-infected handsets, Wangiri missed-call bait that tricks subscribers into calling a premium number back, stolen or fraudulently acquired SIMs used while roaming, and number ranges reserved for testing or not yet in service. In messaging, the same economics drive SMS pumping: automated sign-ups that trigger one-time passcodes to numbers the fraudster profits from.

§03

How do operators detect IRSF?

No single control stops it. Operators score traffic in real time against baselines for destination, duration, concurrency and time of day, screen destinations against databases of known premium and high-risk ranges, enforce credit, velocity and spend limits, harden PBX and SIP edges, and reconcile settlement data for sudden spikes towards obscure destinations.

§04

How can a business protect its OTP traffic from revenue-share fraud?

Rate-limit verification requests per number, per IP address and per destination country; block countries you do not serve; watch conversion from code sent to code entered; and use a number lookup to reject invalid or high-risk numbers before sending. BroadNet's operator-grade anti-fraud scoring and firewall controls baseline traffic across messaging and signalling, so anomalous traffic is held before it becomes a settlement liability.

BNWritten by the BroadNet engineering team·Operating carrier-grade messaging since 2003, headquartered in Dubai·Editorial standards
Build with this

Need help wiring this up?

The pages below are the products and integration guides that put this concept on the wire. If you'd rather walk through it live, our engineering team takes calls same-day during MENA working hours.

Talk to our engineering team
Feedback

Was this answer helpful?

Your vote helps us prioritise which answers to expand with examples, diagrams, and code snippets.

Was this answer helpful?
Thanks — noted. We'll keep this answer maintained.
Got it. Tell us what was missing — send a quick note.

How we write and review content

Still need help?

Talk to a real engineer about your build.

We reply within one business day, and production accounts get 24/7 support. Our solutions engineers ship code, not scripts.

$ curl -X POST https://api.broadnet.me/sms/sendSms
Response SLA
Test-access requestsReply within 1 business day
Production24 / 7 · < 15 min
Operator NOC24 / 7 · pager