Loading story…
The Federal Communications Commission proposed and then ordered a $4.5 million penalty against U.S. voice service provider Voxbeam Telecommunications for allegedly accepting and routing suspicious robocall traffic from Axfone, a Czech Republic-based provider that was not listed in the FCC’s Robocall Mitigation Database. The agency said Voxbeam was barred from carrying Axfone’s traffic over U.S. networks but still transmitted calls between March 31 and April 3, 2025, enabling tens of thousands of scam calls to reach Americans.
According to the FCC, the robocalls spoofed fraud prevention and customer service numbers tied to Bank of America, Chase, and other financial institutions, using non-compliant and long-dormant accounts to impersonate banks and target customers. The investigation began after a bank reported the scam activity, and FCC Chairman Brendan Carr said gateway providers are responsible for blocking illegal foreign call traffic rather than serving as pass-throughs for it.
See the reporting duties and controls this puts on the clock.
3 events from the most recent confirmed update back to the earliest known activity.
The FCC announced a proposed $4.5 million fine against Voxbeam Telecommunications for allegedly routing suspicious foreign robocall traffic from unauthorized provider Axfone into U.S. networks. The penalty was not yet final at the time of the announcement because Voxbeam was given an opportunity to respond.
After a bank reported that its customers had received the scam calls, the FCC opened an investigation into the suspicious traffic routed by Voxbeam. The probe focused on robocalls impersonating financial institutions and fraud departments.
Between March 31 and April 3, 2025, Voxbeam Telecommunications allegedly accepted and routed call traffic from Czechia-based Axfone, which was not listed in the FCC's Robocall Mitigation Database. The traffic enabled tens of thousands of financial impersonation robocalls spoofing numbers associated with Bank of America, Chase, and other institutions.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcetherecord.media
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Europol has issued a position paper highlighting the severe financial impact of caller ID spoofing, which enables criminals to impersonate trusted organizations and commit fraud, resulting in nearly $1 billion in annual losses. The agency calls for urgent, coordinated regulatory and technical solutions, such as international traceback mechanisms, standardized information sharing, and tools to validate inbound calls, to address the cross-border nature of these scams and improve law enforcement's ability to trace perpetrators. In parallel, the U.S. Federal Communications Commission (FCC) has adopted a new rule aimed at combating the surge in robocalls, particularly those originating overseas. The rule expands the definition of caller identity information, requires service providers to verify and display accurate caller data—including verified names and potentially brand logos—and mandates alerts for calls from foreign sources. These measures are designed to increase transparency, help consumers make informed decisions, and reduce the effectiveness of fraudulent robocalls and caller ID spoofing schemes.
Jun 29, 2026
UK authorities have charged five people following a National Crime Agency investigation into **Russian Coms**, a fraud-enablement platform accused of powering large-scale scam calling campaigns. Investigators said the service, launched in 2020, allowed criminals to spoof trusted caller IDs and impersonate banks, telecommunications providers, and law enforcement agencies to steal money and personal information. The defendants face allegations including conspiracy to supply articles for use in connection with fraud, along with multiple money-laundering-related offenses tied to proceeds allegedly generated by selling the platform’s devices and applications. The NCA said Russian Coms was linked to more than **1.8 million scam calls**, roughly **170,000 victims**, and **tens of millions** in losses. The platform was promoted through Telegram, Snapchat, and Instagram, accepted cryptocurrency payments, and offered handset and web-based tools with features including encrypted calls, no-logs functionality, voice changing, and instant handset wipes. Authorities previously disrupted the service in March 2024 as part of **Operation Henhouse**, a wider anti-fraud campaign that led to 290 arrests across the UK, and the five defendants are due to appear at Westminster Magistrates’ Court.
Jul 14, 2026
The Federal Communications Commission proposed a consumer-facing **Robocall Scorecard** that would rate domestic retail voice providers on how effectively and transparently they prevent illegal robocalls. The FCC is seeking public input on the scorecard’s usability, rating methodology, data sources, reliability limitations, and which providers should be included. Proposed measures combine operational controls—such as call labeling, blocking, and responsiveness to traceback requests—with outcomes, including whether illegal calls reach consumers and whether legitimate calls are wrongly blocked. The FCC is considering information from the Robocall Mitigation Database, consumer complaints, enforcement actions, the Industry Traceback Group, and the Federal Trade Commission. Chairman Brendan Carr said the scorecard is intended to help consumers compare providers while pressuring carriers to strengthen their controls. Separately, the agency removed 14 providers from the Robocall Mitigation Database for failing to correct or respond to deficient certifications; other U.S. providers must block traffic from those companies within two days.
Sep 3, 2026