Picture your voice AI bill jumping from $500 to $15,000 in three days. You made none of those calls. Someone else did, through your agent.

That is toll fraud, and an unprotected voice agent is an open door to it. The good news: the fixes are simple, and we build them in by default.

What is toll fraud on a voice agent?

Toll fraud is when an attacker uses your voice system to place calls you never authorised. They route to expensive international or premium rate numbers and leave you the bill.

It is not rare and it is not personal. Bots scan the internet for unprotected agents and hit whatever they find.

The damage is quiet until the invoice lands. By then the calls have run around the clock for days.

How do attackers get in?

Three ways, mostly. Bot farms flood your agent with thousands of calls at once to burn your minutes.

Premium number routing turns your agent into a dialler for costly destinations, with you on the hook for the charges.

Resource exhaustion is the quiet one. The attack ties up your lines so your real customers cannot get through.

How does Waboom AI prevent toll fraud?

We lock the front door before a single fraudulent call connects. Every web and call widget authenticates with a public key, so only your own site can start a session.

Human verification sits behind that. A challenge that is invisible to real visitors stops the automated bots that drive most fraud.

On the phone side, we cap the number of calls that run at once. We also restrict the regions an agent can dial. An agent built for New Zealand and Australia has no reason to reach a premium line offshore, so it cannot.

What if an attack still gets through?

We watch the numbers, so a spike shows up fast. A jump in call volume trips an alert. So does a run of calls to one costly destination.

You are not the last to know. The pattern surfaces while it is happening, and the agent can be capped or paused on the spot.

Why this matters beyond the bill

The obvious cost is the money. The quieter cost is reliability and trust.

An agent buried under a bot flood cannot answer your real customers. So stopping fraud is also protecting the service your customers rely on.

We take the same belt and braces view across security, the way we describe in how we war-test agents before they go live. It sits alongside our wider data security setup and our security overview.

Frequently Asked Questions

What is toll fraud?

Toll fraud is the unauthorised use of your voice system to place calls. They usually route to expensive international or premium rate numbers, and leave you the bill. Bots scan for unprotected agents and exploit them.

Can it really run up thousands in charges?

Yes. An unprotected agent hit by a bot farm can turn a $500 bill into a five figure one in days. The calls run around the clock until someone notices.

How does Waboom AI stop it?

Four layers. Public key authentication on every widget, and invisible human verification against bots. Caps on simultaneous calls, and region limits so an agent only dials where it should. We also watch for spikes and alert on them.

Do I have to configure any of this?

No. The protections are on by default. We set the allowed regions and the caps to match your business during setup.

A voice agent should answer your customers, not fund someone else's scam.

Want an agent locked down against toll fraud from day one? Book a setup conversation and we will set the guardrails to your business.