Anatomy of a Scam Call: What 10,000 real scam and spam calls reveal about how phone scammers operate

• URL: http://arxiv.org/abs/2608.24127v1
• Date: Tue, 25 Aug 2026 06:41:12 GMT
• Title: Anatomy of a Scam Call: What 10,000 real scam and spam calls reveal about how phone scammers operate
• Abstract summary: We analyze a complete corpus of 10,211 inbound scam and spam calls.<n>We separate outright scams, which solicit sensitive information, from the larger stream of predatory but legal lead generation.<n>Scam operations keep office hours (6.6x more calls per weekday than weekend day)
• Score: 6.015147919395612
• License: http://creativecommons.org/licenses/by-nc-sa/4.0/
• Abstract: Telephone fraud is pervasive and costly, but its inner workings are rarely observed at scale. We analyze a complete corpus of 10,211 inbound scam and spam calls -- 913 hours of audio and 330,956 transcribed turns from 5,780 distinct numbers -- collected over 54 days by an AI voice-agent honeypot that answered callers and kept them talking, and introduced in a companion data descriptor. We separate outright scams, which solicit sensitive information, from the larger stream of predatory but legal lead generation ("spam") that feeds them. Scam operations keep office hours (6.6x more calls per weekday than weekend day); thousands of disposable numbers run a small catalog of recycled scripts (thirty opening clusters, half the traffic in the top five); and callers solicit identity anchors -- a home address and a date of birth -- far more often than payment credentials, pressing through persistence and manufactured authority rather than overt threats. Our central experiment asks: does it matter who picks up? Every seeded lead carried one of ten fictitious identities drawn uniformly at random, so the identity a fraud operation reaches is fixed before the caller exists. Across 1,823 randomized calls, scammers spent about 15% more conversational turns per decade of the target's apparent age (rate ratio 1.15, 95% CI 1.08-1.23; randomization p = 0.005) -- yet what they asked for did not change (26.3% of calls reached a request for sensitive information; odds ratio 0.99 per decade, 95% CI 0.90-1.08). A second experiment casts early detection as a benchmark: from a scammer's opening lines alone, on a caller-disjoint split, escalation is predictable at 0.72 ROC-AUC from the first line and 0.87 by the eighth, and a plain bag-of-words classifier matches a fine-tuned on-device language model. Telephone fraud emerges as a templated industry that varies how hard it works a target, but not what it wants.

Related papers

• Lie to me: Detecting Managerial Evasiveness in Earnings Calls via Conversational Audio Encoders [9.284552035393796]
  We propose a two-branch framework for detecting managerial evasiveness as a predictor of extrinsic SEC events.<n>We show that conversational audio dynamics encode managerial evasiveness beyond lexical content and call length.
  arXiv  Detail & Related papers  (2026-09-12T11:42:53Z)
• The Machines Are Calling: Measuring Automated and Synthetic Voices in Unwanted Inbound Calls [8.497127814945147]
  In 2024 the FCC placed AI-generated voices under the Telephone Consumer Protection Act ( TCPA)<n>No peer-reviewed measurement says how much unwanted call traffic is placed by a machine.<n>An interactive voice honeypot recorded 10,987 calls over 66 days.
  arXiv  Detail & Related papers  (2026-09-10T06:28:50Z)
• An Explainable Agentic System for Detection of Conversational Scams with Summary-Based Memory [0.7712979281505654]
  This paper extends single-message phishing detection and presents an explainable agentic system for detecting sophisticated conversational scams.<n>ConScamBench-278 is an initial public multi-category benchmark for conversational scam detection spanning eight scam types.<n>On isolated messages the single-message detector attains 100% phishing recall, while the conversation-level detector identifies all conversational scams in the public LoveFraud02 corpus.
  arXiv  Detail & Related papers  (2026-07-13T15:36:19Z)
• PreScam: A Benchmark for Predicting Scam Progression from Early Conversations [22.864427809364397]
  We introduce PreScam, a benchmark for modeling scam progression from early conversations.<n>We benchmark models on two tasks: real-time termination prediction and scammer action prediction.<n>Results show a clear gap between surface-level fluency and progression modeling.
  arXiv  Detail & Related papers  (2026-05-12T15:11:41Z)
• One Turn Too Late: Response-Aware Defense Against Hidden Malicious Intent in Multi-Turn Dialogue [55.98008208209856]
  Hidden malicious intent in multi-turn dialogue poses a growing threat to large language models (LLMs)<n>Recent studies show that even modern commercial models with advanced guardrails remain vulnerable to such attacks despite advances in safety alignment and external guardrails.<n>In this work, we address this challenge by detecting the earliest turn at which delivering the candidate response would make the accumulated interaction sufficient to enable harmful action.
  arXiv  Detail & Related papers  (2026-05-07T03:35:31Z)
• Characterizing Robocalls with Multiple Vantage Points [50.423738777985314]
  We show that unsolicited calls are in slow decline, though complaints and call volumes remain high. We find that robocallers have managed to adapt to STIR/SHAKEN, a mandatory call authentication scheme. In total, our findings highlight the most promising directions for future efforts to characterize and stop telephone spam.
  arXiv  Detail & Related papers  (2024-10-22T18:54:12Z)
• Jäger: Automated Telephone Call Traceback [45.67265362470739]
  We introduce J"ager, a distributed secure call traceback system. J"ager can trace a call in a few seconds, even with partial deployment.
  arXiv  Detail & Related papers  (2024-09-04T16:09:28Z)
• Transaction Fraud Detection via an Adaptive Graph Neural Network [64.9428588496749]
  We propose an Adaptive Sampling and Aggregation-based Graph Neural Network (ASA-GNN) that learns discriminative representations to improve the performance of transaction fraud detection. A neighbor sampling strategy is performed to filter noisy nodes and supplement information for fraudulent nodes. Experiments on three real financial datasets demonstrate that the proposed method ASA-GNN outperforms state-of-the-art ones.
  arXiv  Detail & Related papers  (2023-07-11T07:48:39Z)
• Feature-Level Fusion of Super-App and Telecommunication Alternative Data Sources for Credit Card Fraud Detection [106.33204064461802]
  We review the effectiveness of a feature-level fusion of super-app customer information, mobile phone line data, and traditional credit risk variables for the early detection of identity theft credit card fraud. We evaluate our approach over approximately 90,000 users from a credit lender's digital platform database.
  arXiv  Detail & Related papers  (2021-11-05T19:10:35Z)
• Intra-Camera Supervised Person Re-Identification [87.88852321309433]
  We propose a novel person re-identification paradigm based on an idea of independent per-camera identity annotation. This eliminates the most time-consuming and tedious inter-camera identity labelling process. We formulate a Multi-tAsk mulTi-labEl (MATE) deep learning method for Intra-Camera Supervised (ICS) person re-id.
  arXiv  Detail & Related papers  (2020-02-12T15:26:33Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.