GUIDELINE
1.0 SUBJECT: Fraudulent Use of KANS-A-N Calling Cards
2.0 DISTRIBUTION: All State Agencies, Including Regents Institutions
3.0 FROM: Donald C. Heiman, Director of DISC
4.0 PURPOSE: To remind State agencies that the possibility of fraud exists when using a KANS-A-N calling card.
5.0 BACKGROUND: Recently we have experienced several instances of fraudulent calls associated with KANS-A-N calling card. From all indications, unknown parties obtained a State agency traveler's KANS-A-N calling card number while a call was being made. Between the time that this authorization number was compromised and KANS-A-N network operations was made aware of the problem several thousand dollars worth of calls were made. While we are unable to determine exactly how these numbers were compromised, it is essential that all state agencies be made aware that this problem exists and that they take all steps necessary to prevent it in the future.
6.0 PROCEDURES:
6.1 DISC has instituted procedures that monitor all calling card calls. A threshold number of calls per calling card, per day, has been established. If this threshold is exceeded, the appropriate state agency will be notified. If fraud is suspected, the appropriate calling number will immediately be disabled. Since this may occur on a weekend, it is possible that a card could be disabled before any notification is provided to the agency.
fraudulent call department that monitors all calling patterns for all calling cards. If they identify a calling card that fits predetermined patterns, they will automatically notify DISC. DISC will immediately disable the card that is suspected of being compromised and then notify the agency. Since this may occur on a weekend, it is possible that a card could be disabled before any notification is provided to the agency.
the potential fraud problem. Since DISC might disable a calling card on the weekend, and a traveler would not be aware of this situation, all users should be advised to contact the DISC Network Control Center at 1-800-255-3555, if they experience a situation where their calling card is no longer active.
until DISC has been notified of one of the following situations.
6.4.1 The loss or destruction of a calling card.
6.4.2 The suspected compromise of a calling card.
6.4.3 The deactivation of a calling card as a result of the call detail evaluation procedure described in section 6.1 and 6.2.
6.5 All state agencies should take steps to advise all holders of KANS-A-N calling cards that they must always avoid situations that make it possible to have their authorization number compromised. Some of those situations, and ways to avoid problems are:
6.5.1 If the KANS-A-N calling card is being used to make a call through the KANS-A-N operator, and the user tells the operator their number, be aware that someone may be listening and copying down the number. Be cautious of anyone standing close to you when dialing the access telephone numbers.
6.5.2 Some users have gotten into the habit of writing the KANS-A-N access telephone number, the number they are dialing and their KANS-A-N authorization number on a separate piece of paper to aid in dialing. This practice is not recommended. If that is done, and those pieces of paper are lost or stolen, you should immediately assume that the number has been compromised.
When using the automated access method to make a KANS-A-N calling card call, be aware that anyone in your immediate vicinity may be able to copy down the access telephone number and your calling card.
6.6 All agencies should review their use of KANS-A-N calling cards. This review should include, but not necessarily be limited to the following.
6.6.1 Remind holders of calling cards of their responsibility to protect that card from compromise. Have any cards been lost but not reported?
6.6.2 Review the list of holders of calling cards. If holders of cards don't use them on a regular basis perhaps those cards should be returned to the central pool until they are needed.
6.6.3 Is the central pool of calling cards kept to a minimum and are those cards properly protected to prevent lose or compromise?
6.7 During the investigation of the recent fraud situation the security or fraud offices of several long distance telephone companies were consulted. Without exception, they all stress that calling cards and other telephone access type cards have become popular targets for fraud.
7.0 CANCELLATION: Originally this publication was Bulletin 5006.00 dated 06/01/91 and is being reissued as a Guideline.
8.0 CONTACT PERSON: Andy Scharf - Bureau of Telecommunications, 785-296-3463