SIM Box (GSM Gateway)

Also known as: GSM Gateway, SIMbox

A SIM box is a device holding many mobile SIMs that terminates international voice traffic as if it were on-net local calls. Fraudsters route international minutes over VoIP into the SIM box, which then dials the destination subscriber from a local SIM, capturing the price gap between international termination and local retail tariffs. Operators detect SIM boxes through calling pattern analysis, test call generation and velocity checks.

Categories: Identity and SubscriberFraudInternet and Routing

SIM Box in context

Subscriber identifiers (IMSI, SUPI, MSISDN, IMEI) are the anchor for authentication, charging, lawful interception and fraud analytics. Any protocol or interface that leaks a permanent identifier is treated as a serious privacy defect, which is why 5G introduced SUCI concealment on the air interface.

Telecom fraud costs operators an estimated $40+ billion per year. Common vectors include International Revenue Share Fraud (IRSF), Wangiri callback scams, SIM box bypass, PBX hacking, subscription fraud and A2P grey routing. Effective defense combines real-time signaling analytics with CDR-side machine learning.

To place SIM Box in the wider telecom-security picture, review DSL, Interconnect Bypass Fraud, OTT Bypass, Bypass Fraud, Traffic Pumping and Toll Fraud.

Related terms

Equipment

SIM, eSIM and provisioning (UICC, eUICC, SM-DP+, OTA)

Articles in the P1 mobile network security guide

Related topic hubs

More from the TelcoSec Glossary

Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.