Russia to Tighten Regulation of SIM Box and Virtual PBX Use

Draft laws will introduce mandatory identification of devices and subscribers through ESIA

The Ministry of Digital Development, together with the FSB and the Ministry of Internal Affairs, is developing a package of draft laws aimed at limiting the use of SIM boxes and virtual automatic telephone exchanges (PBX). These technologies have become popular among attackers who massively activate accounts on the Internet, as well as among fraudsters who use number spoofing.

A SIM box is a device into which several dozen SIM cards can be installed, allowing you to make many calls and send SMS messages en masse at the same time. This technology is often used to create call centers, but it is currently not regulated by law, which makes it attractive to fraudsters.

The new draft law stipulates that mobile communication services using SIM boxes can only be provided on the basis of an agreement with a telecom operator. The document must state that SIM cards are purchased for use in a SIM box, while it is necessary to indicate the device identifier, the address of its installation and the purpose of use. If this data is missing or incorrect, the operator will be obliged to refuse to provide communication services. Only legal entities or individual entrepreneurs will be able to use SIM boxes.

A virtual PBX is a cloud-based telephony system that allows companies to manage calls without physical equipment. Russian organizations use this technology for call routing, voice mail, analytics, and integration with CRM systems. However, attackers use it for number spoofing, creating anonymous communication channels, and phishing attacks. According to the draft law being developed, virtual PBXs will be required to be located on the territory of Russia, ensure the identification of subscribers through the ESIA system, use a network address belonging to the Russian Federation, use a specially allocated numbering resource and be equipped with a SORM system.

SORM (system of operative-investigative measures) is a set of technical means and measures designed to conduct operative-investigative activities in communication networks.

Read more on the topic:

Only through the Ministry of Internal Affairs - Russia may restrict the sale and activation of SIM cards

Roskomnadzor will block more than 4.5 million SIM cards used by foreigners

Russian "NM-Tech" will localize the production of chips for cards and documents

Now on home