Wangiri fraud: one-ring callback scams and how carriers can spot them

Wangiri is Japanese for "one ring and drop". In a Wangiri attack, fraudsters place huge numbers of very short calls that ring once and hang up, leaving a missed call. Curious recipients call back, and the number they reach is a premium-rate or high-cost international number that charges them and pays the fraudster.

How Wangiri works

An automated system dials large lists of numbers, often in sequence, and ends each call after one ring. The caller ID shown is a number that looks innocent or foreign. The call-back number is the one that earns money. The traffic that matters to a carrier is the burst of short, unanswered calls and, later, the call-back traffic to the premium numbers.

Warning signs in call records

• A high volume of calls from one account or source with very short ring time and no answer.
• Calls to numbers in sequence, or across a wide spread of unrelated numbers.
• High call-per-second (CPS) rates that are new for that account.
• Caller IDs that are unusual, foreign or change often.
• A later rise in call-back traffic to a small group of premium or high-cost destinations.

Why fixed rules cause false alarms

Auto-dialer campaigns also create many short calls with low answer rates. A fixed rule such as "block if answer rate is below a threshold" will hit genuine call-centre traffic. The better test is whether the pattern is new for that customer, and whether it combines with other signs such as sequential dialing or risky destinations.

How to reduce exposure

• Monitor for bursts of short, unanswered calls per account and per route.
• Apply CPS and concurrency limits sized to each customer's normal traffic.
• Validate or restrict caller ID where your interconnect allows it.
• Watch call-back destinations, and warn customers when a pattern is spreading.

How Smart Gravity Shield approaches Wangiri

Smart Gravity Shield includes Wangiri-pattern rules and compares call volume, ring time and answer rate with each customer's own baseline. It alerts your team with the account, pattern and a suggested action, and can rate-limit when you allow it. It reads call records and does not record or analyse call audio.

Common questions

Does a low answer rate always mean Wangiri?

No. Auto-dialers and call centres normally have low answer rates and short calls. The signal is a change from that customer's own normal, together with other signs.

Who pays for Wangiri?

The person who calls back pays the premium charge. Carriers carry the cost and reputation risk of the outbound burst and may face complaints and disputes.

This guide is general information, not legal or security advice. Fraud patterns change, and no detection system catches every case.