Uncover the criminal secret behind the "95" segment

Jiangsu police cracked the country's first case of using "95" to help cybercrime

  "Do you need a loan?" At the end of 2019, Mr. Sun, a citizen of Nantong, Jiangsu, accidentally received a strange call. Considering the tightness at the end of the year, he told the other party that there was a loan intention, and the other party added Mr. Sun's WeChat through the mobile phone number. talk. Then, the other party asked through WeChat the amount of money Mr. Sun wanted, and Mr. Sun replied "300,000 yuan". The other party instructed Mr. Sun to download a "360 Finance" App, register personal information, and bind the bank card number.

  Later, Mr. Sun was informed that there was a "welfare" that "recharge 1799 yuan can be exempted from 6 months of interest." In order to save interest, he moved to the other party's account under the temptation. He thought that he could wait for the next loan, but the software prompts "The bank account is incorrect". In order to "change" the account, he paid 20% of the loan principal, which is a handling fee of 60,000 yuan.

  Account error, cash withdrawal requires insurance payment, VIP recharge is required to obtain points... After the above series of routines, Mr. Sun not only did not get a loan, but also led the other party to pay a total of 297123 yuan. Only then did he realize that he might have been cheated and immediately called the police.

  Coincidentally, Mr. Fan of Anhui also received the same loan inquiry call, was induced to download a software, and successively transferred 11 transactions to strange accounts, accumulating more than 230,000 yuan. It was not until he received a call from the Nantong Anti-Fraud Center that he realized that he had been deceived.

  "There are many such victims, without exception, the caller ID call numbers start with '95'." Xu Pingnan, deputy captain of the third team of the network security detachment of the Nantong Municipal Public Security Bureau, Jiangsu said, "95" is generally used in enterprises The call center and customer service hotline will reduce the vigilance of the victim to a certain extent when receiving the call.

  Since March this year, the Nantong City Public Security Bureau Network Security Detachment has discovered that the "952750xx" segment has been used to make a large number of fraudulent calls, which has been linked to 266 fraud cases across the country. The investigation of the task force of the bureau found that the "95xxxxxx" segment involved was applied for by a communication technology company in Nantong, and the legal person was Qin Moutong, a 39-year-old man in Tongzhou District of Nantong City. Police arrested 4 suspects including Qin Moutong in April.

  According to Qin Moutong, he had subleased the "0513-85xxxxxx" fixed telephone number segment applied by a communications technology company in Nantong to others, earning more than 2 million yuan a year. These numbers are used for fraud, advertising, etc. After being reported by the public, the number segment is disabled and the company is on the "blacklist" of local operators. Later, he applied for the "952750xx" code number certificate through the agency. To use the number to access the network, the operator needs to perform voice landing, that is, to enable the dialing function. He also implemented the "landing and line transformation" of this section through Zhang Mouzhong's communication company in Shenzhen, and the reconstructed lines were shared and used by both parties in proportion.

  On April 29, the task force arrested 5 criminal suspects including Zhang Mouzhong. After interrogation, Zhang Mouzhong was just a "two traders". It was Yang Mou and his Shenzhen-based technology company that implemented the landing and line transformation. The next day, the task force arrested 6 suspects headed by Yang. So far, all 15 criminal suspects in the "95" section of the cybercrime industry chain in Nantong, Jiangsu have been arrested.

  According to Yang's account, he completed the voice landing through an operator from other provinces, and allocated 100 numbers in the "952750xx" number segment into 5000 Internet telephone lines through network equipment, Yang Mou allocated 4000, Zhang Mouzhong allocated 600 Article, Qin Moutong received 400 articles. The above three people searched for customers separately and sub-lease the lines at a higher price than the operators for profit. Most of the customers who rent these lines use these numbers to commit fraud and other criminal activities.

  According to Zhang Jian, head of the network security detachment of the Nantong Public Security Bureau, when the suspect rents out these numbers, the upstream company’s access screening mechanism is useless. Even if the criminal gang provides false company information, they can also rent network lines and use dynamic numbers. Make an Internet call. Internet telephony is not geographically restricted and is highly concealed, and fraud gangs hide deeply.

  "Of the 266 cases implicated, the most are credit card and loan fraud." Cao Yang, a policeman from the Network Security Brigade of the Chongchuan Branch of Nantong City Public Security Bureau, who is responsible for investigating the case, introduced that fraudsters used Internet phones to import contacts in bulk, using groups Calling the function "Guangsa"; some people use the intelligent voice function to dial the number to try, and wait for the victim to "hook" and then switch to manual operation to further implement fraud.

  The task force also discovered that not all of the "95xxxxxx" segments held by Yang were provided by Qin Moutong. In fact, since 2018, the criminal gang led by Yang has "deployed" more than 10 "95xxxxxx" voice services through an operator in other provinces, and leased it to downstream business companies after the transformation of the line. Profit of more than 8 million yuan.

  At a press conference held on July 16, the Public Security Bureau of Nantong City, Jiangsu Province announced the "Net Net 2020" special action, the first case of the nationwide cracked use of the "95xxxxxx" segment by the Ministry of Public Security and the Jiangsu Provincial Public Security Bureau. Helped 15 fraud suspects in communication network fraud cases, smashed 3 communication technology companies engaged in criminal activities, seized 21 "95xxxxxx" segments, and more than 20,000 illegal Internet phone lines, and found 155 downstream business relationship companies. The amount involved is more than 22 million yuan. At present, all the suspects involved in the above case have been transferred to the procuratorial organ for review and prosecution for being suspected of assisting information network criminal activities.

  According to the "Telecommunication Network Code Number Resource Management Measures" issued by the Ministry of Industry and Information Technology, users of the "95" segment number shall not transfer or lease the line, and shall not operate other telecom services such as fixed-line telephone services and Internet telephony services in disguise. However, with the rapid development of the Internet, the number of "95" section numbers that have been transacted by agencies and resold at various levels have formed an underground illegal industrial chain. This time, the public security organs ran out of number holding companies, line transfer companies, and voice landing companies, prompting the hidden "black industrial chain" to show the tip of the iceberg.

  "Public security organs will further crack down on new types of online fraud while also urging industry regulators to improve control measures, prevent harassment of phone loopholes, handle violations in accordance with law, and improve long-term management mechanisms." said Chen Bing, deputy director of the Nantong Public Security Bureau.

  Newspaper Nantong, July 16th

  Zhao Benyi Su Jinan China Youth Daily · China Youth Network reporter Li Chao Source: China Youth Daily

  July 07, 2020 Version 07