Volumetric Changes Alerts

A Volumetric Changes Fraud Alert is generated when an abnormal traffic volume increase is detected; this happens if the observed traffic volume in the past 12 hours is abnormally high from the historical traffic mean over the past 90 days for the API key and country.

We cannot disclose a generalized value for the traffic increase (in percentage for instance) that would trigger a Volumetric Change. Our algorithm is fine tuned to trigger a Volumetric Alert only when current traffic volume and traffic patterns indicate an abnormal traffic increase.

The above criteria are applied on a per-country basis. As a result, the volumetric fraud alert should only fire during a traffic increase that deviates significantly from normal traffic towards a destination.

You can review Volumetric Fraud Alerts in the Alerts page.

Minimum requirements

• Country traffic in the last 12 hours must be greater than 1000 Calls/SMS. Countries showing a lower traffic won’t generate Volumetric Changes alerts.
• At least 48 hours of historical traffic.

Important

Is not possible to influence when a Volumetric Changes fraud alert is raised, our methodology defines when to raise a Volumetric Changes alert based on your current and historical traffic. What you can influence is what happens in case of an alert, as is discussed below.

Alert Actions

Alert Actions can be triggered once a Volumetric Change fraud alert is raised. It allows you to receive email notifications and to automatically apply a Prefix Rule to block country traffic.

Visit the Alert Actions page to review and update them.

Alert Action Threshold

You can choose to trigger an Alert Action:

• As soon as a new Volumetric Changes alert is generated.

• Or when the Volumetric changes alert reaches a certain traffic volume (calls/sms) has been reached in the last 12 hours.

Keep in mind that the Action Threshold only influences when Alert Action will trigger, but not when a Volumetric Changes alert will be raised. This value must be at least 1000 to be in line with how alerts are generated.

Alert Action Time interval

Time interval allows you define how often you want to trigger an alert action for a repeated Volumetric Changes fraud alert.

A Volumetric Changes fraud alert is considered repeated when it is for the same country and product.

As an example: being a time interval of 60 min, if Fraud Defender generates 2 consecutive Volumetric Changes Fraud Alerts for product SMS and country “Spain” within the same 60 min period, only the first alert will trigger an alert action, second Fraud Alert won’t trigger the action again as 60 min time intervale hasn’t passed. Of course if the alert is for a different country or product, the time interval doesn’t apply so the alert action will trigger.

Email notifications

To receive email notifications once a Volumetric Alert is raised:

1. Assure you are subscribed to Fraud notification, go to the API Settings page and click on the “Notifications tab”. Please note that this action can only be performed by the primary user (the one who created the account).

2. Assure you have an Alert Action with option “Notify me” selected.

3. If all previous steps are correct, you will receive an email notification as soon as there is a Volumetric Changes fraud alert. Here is an example email: