В России ужесточат регулирование использования сим-боксов и виртуальных АТС

Draft laws will introduce mandatory identification of devices and subscribers through ESIA

The Ministry of Digital Development, together with the FSB and the Ministry of Internal Affairs, is developing a package of draft laws aimed at limiting the use of SIM boxes and virtual automatic telephone exchanges (PBXs). These technologies have become popular among attackers who massively activate accounts on the Internet, as well as among fraudsters who use number spoofing.

A SIM box is a device into which you can install several dozen SIM cards, allowing you to simultaneously make many calls and send SMS messages en masse. This technology is often used to create call centers, but it is currently not regulated by law in any way, which makes it attractive to fraudsters.

The new draft law implies that mobile communication services using SIM boxes can only be provided on the basis of an agreement with a telecom operator. The document must indicate that SIM cards are purchased for use in a SIM box, while it is necessary to indicate the device identifier, the address of its installation and the purpose of use. If this data is missing or incorrect, the operator will be obliged to refuse to provide communication. Only legal entities or individual entrepreneurs will be able to use SIM boxes.

A virtual PBX is a cloud-based telephony system that allows companies to manage calls without physical equipment. Russian organizations use this technology for call routing, voice mail, analytics, and integration with CRM systems. However, attackers use it to spoof numbers, create anonymous communication channels, and phishing attacks. According to the draft law being developed, virtual PBXs will be required to be located on the territory of Russia, ensure the identification of subscribers through the ESIA system, use a network address belonging to the Russian Federation, use a specially allocated numbering resource and be equipped with a SORM system.

SORM (system of operative-investigative measures) is a set of technical means and measures designed to conduct operative-investigative activities in communication networks.

Read materials on the topic:

Only through the Ministry of Internal Affairs - Russia may restrict the sale and activation of SIM cards

Roskomnadzor will block more than 4.5 million SIM cards used by foreigners

Russian "NM-Tech" will localize the production of chips for cards and documents