Toll fraud prevention and voice security

Verified 2026-09-16 · 8 sources · tier 2

Also known as Premium Services I, Require Authorization Code, Verify Call Routing.

Webex Calling provides outgoing call permissions across 10 outbound call types to govern dialing and transfer behavior 6​1. These rules apply at the location level and support overrides through custom digit patterns, authorization codes, and entity-specific settings 3​2​5.

How it works

Outgoing call permissions are configured on a Webex Calling location in Control Hub under Management, then Locations, selecting the location, and navigating to Calling, then Call Handling, then Outgoing Call Permissions 5. These settings serve as defaults for users, workspaces, virtual lines, and features within that location, though administrators can override them on individual users, workspaces, or virtual lines 5. Cisco states that if an organization does not have the Cisco calling plan, internal calls are the only allowed type, and all other call types are blocked 4.

Webex Calling categorizes outbound traffic into 10 call types, of which 3 default to blocked status: International, Premium Services I, and Premium Services II, while Internal, National, Toll Free, Operator Assistance, Chargeable Directory Assistance, Special Services I, and Special Services II default to Allow 6. Cisco defines international calls as destinations outside the country requiring an international calling code, but notes that calls between the United States, Canada, and Puerto Rico are an exception not currently treated as international 7.

Each Webex Calling outbound call type can be set to Allow, Block, Require Authorization Code, or Auto-transfer to number 1, 2, or 3 3. Administrators can define up to 1000 authorization codes per location, with an additional 1000 available for each user, workspace, or virtual line on an outbound calling plan 3.

The same 3 call types that Webex Calling blocks by default, International and both Premium Services classes, also have the Transfers and Forwards flag set to No by default, while the 7 allowed types have it set to Yes 1.

Rule evaluation and testing

Cisco states that defined digit patterns take precedence over call-type permissions 2. When evaluating location and custom settings, custom digit patterns assigned to a user, workspace, or virtual line apply first, and the system defaults to location settings only when no matching configuration is found 2.

To validate these rules, Cisco provides a Verify Call Routing feature within Control Hub that enables administrators to test and verify outgoing call permissions 8.

Applicability

Applies to: Cisco Webex Calling. Sources checked 2026-09-16.

What remains uncertain

What the Pindrop fraud detection integration for Webex Calling does and what it costs is not covered by the sources below. Whether Webex Calling detects anomalous outbound volume or only enforces static permissions is not covered by the sources below. Cisco's toll fraud controls for Unified CM rather than Webex Calling are not covered by the sources below. What a caller hears and what is logged when an authorization code is required or entered wrongly is not covered by the sources below. What the auto-transfer numbers 1, 2, and 3 are intended for and where they are set is not covered by the sources below.

WarmTransfer. (2026, September 16). Toll fraud prevention and voice security. WarmTransfer. https://warmtransfer.net/knowledge/voice-security-toll-fraud

@misc{warmtransfer-voice-security-toll-fraud,
  title  = {Toll fraud prevention and voice security},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/voice-security-toll-fraud},
  note   = {Verified 2026-09-16}
}