Everything worth knowing, nothing that isn't.
How the fraud works for SMS
An aggregator with weak governance buys 500 consumer SIMs in a target country, racks them into a SIM box, and configures their A2P traffic to be terminated through that SIM box. From the operator's perspective, 500 subscribers are each sending what looks like P2P SMS. The aggregator pays the consumer SMS bundle rate (effectively zero on most plans); the operator loses the wholesale A2P fee they would otherwise have charged the legitimate aggregator.
How operators detect it
Behavioural fingerprinting. A real subscriber's SMS traffic has a daily diurnal rhythm, conversation-pair density, and content variety. A SIM box's SIMs send constantly, never receive, send to unrelated MSISDNs, and emit identical templated content. Modern SMS firewalls (BroadNet's included) score SIM-box-likeness per source MSISDN and quarantine the SIMs. Time-to-detection: 24-72 hours on a well-tuned firewall.
Why it persists
Because the wholesale A2P market is opaque enough that you can buy SMS termination at sub-cost rates and look the other way. Operator firewalls are the only enforcement mechanism — regulators rarely prosecute individual SIM-box operators directly. BroadNet does not operate SIM boxes anywhere. Every direct route we sell is A2P-agreement-backed, which is why our prices are above market for some destinations.
What buyers should ask
If your aggregator is quoting >50% below your other aggregator's price for the same destination, ask them to show you the operator A2P agreement for that route. They cannot show you one for a SIM-box route. Cheap traffic is cheap for a reason, and the reason is that you are buying minutes from operator that will be blocked the moment the firewall catches the pattern.