# Toll fraud prevention and voice security Canonical: https://warmtransfer.net/knowledge/voice-security-toll-fraud Last verified: 2026-09-16 Webex Calling provides outgoing call permissions across 10 outbound call types to govern dialing and transfer behavior[^6][^1]. These rules apply at the location level and support overrides through custom digit patterns, authorization codes, and entity-specific settings[^3][^2][^5]. ## How it works Outgoing call permissions are configured on a Webex Calling location in Control Hub under Management, then Locations, selecting the location, and navigating to Calling, then Call Handling, then Outgoing Call Permissions[^5]. These settings serve as defaults for users, workspaces, virtual lines, and features within that location, though administrators can override them on individual users, workspaces, or virtual lines[^5]. Cisco states that if an organization does not have the Cisco calling plan, internal calls are the only allowed type, and all other call types are blocked[^4]. Webex Calling categorizes outbound traffic into 10 call types, of which 3 default to blocked status: International, Premium Services I, and Premium Services II, while Internal, National, Toll Free, Operator Assistance, Chargeable Directory Assistance, Special Services I, and Special Services II default to Allow[^6]. Cisco defines international calls as destinations outside the country requiring an international calling code, but notes that calls between the United States, Canada, and Puerto Rico are an exception not currently treated as international[^7]. Each Webex Calling outbound call type can be set to Allow, Block, Require Authorization Code, or Auto-transfer to number 1, 2, or 3[^3]. Administrators can define up to 1000 authorization codes per location, with an additional 1000 available for each user, workspace, or virtual line on an outbound calling plan[^3]. The same 3 call types that Webex Calling blocks by default, International and both Premium Services classes, also have the Transfers and Forwards flag set to No by default, while the 7 allowed types have it set to Yes[^1]. ## Rule evaluation and testing Cisco states that defined digit patterns take precedence over call-type permissions[^2]. When evaluating location and custom settings, custom digit patterns assigned to a user, workspace, or virtual line apply first, and the system defaults to location settings only when no matching configuration is found[^2]. To validate these rules, Cisco provides a Verify Call Routing feature within Control Hub that enables administrators to test and verify outgoing call permissions[^8]. ## Applicability Applies to: Cisco Webex Calling. Sources checked 2026-09-16. ## What remains uncertain What the Pindrop fraud detection integration for Webex Calling does and what it costs is not covered by the sources below. Whether Webex Calling detects anomalous outbound volume or only enforces static permissions is not covered by the sources below. Cisco's toll fraud controls for Unified CM rather than Webex Calling are not covered by the sources below. What a caller hears and what is logged when an authorization code is required or entered wrongly is not covered by the sources below. What the auto-transfer numbers 1, 2, and 3 are intended for and where they are set is not covered by the sources below. ## Sources [^1]: The same 3 call types that Webex Calling blocks by default, International and both Premium Services classes, also have the Transfers and Forwards flag set to No by default, while the 7 allowed types have it set to Yes. Source: [Outgoing call permissions for Webex Calling locations](https://help.webex.com/en-us/article/nt2lz3d/Outgoing-Calling-Permissions-for-Webex-Calling-Locations), Permissions by call type, Transfers slash Forwards column, read as cells. Checked 2026-09-16. [^2]: Cisco states that defined digit patterns have precedence over permissions by call type, and that for location and custom settings the custom digit patterns for a user workspace or virtual line are applied first with the system defaulting to the location settings only when no configuration matches. Source: [Outgoing call permissions for Webex Calling locations](https://help.webex.com/en-us/article/nt2lz3d/Outgoing-Calling-Permissions-for-Webex-Calling-Locations), Permissions by Digit Patterns and the precedence rules. Checked 2026-09-16. [^3]: Each Webex Calling outbound call type can be set to Allow, Block, Require Authorization Code, or Auto-transfer to number 1 2 or 3, and an administrator can configure up to 1000 authorization codes per location with a further 1000 for each user workspace or virtual line on an outbound calling plan. Source: [Outgoing call permissions for Webex Calling locations](https://help.webex.com/en-us/article/nt2lz3d/Outgoing-Calling-Permissions-for-Webex-Calling-Locations), Permissions by call type, control list. Checked 2026-09-16. [^4]: Cisco states that if an organisation does not have the Cisco calling plan then only internal calls are allowed and all other call types are blocked. Source: [Outgoing call permissions for Webex Calling locations](https://help.webex.com/en-us/article/nt2lz3d/Outgoing-Calling-Permissions-for-Webex-Calling-Locations), precedence rules, first rule. Checked 2026-09-16. [^5]: Outgoing call permissions are set on a Webex Calling location at Control Hub under Management then Locations then the location then Calling then Call Handling then Outgoing Call Permissions, apply as defaults to the users workspaces and virtual lines in that location and to features within it, and can be overridden per user workspace or virtual line. Source: [Outgoing call permissions for Webex Calling locations](https://help.webex.com/en-us/article/nt2lz3d/Outgoing-Calling-Permissions-for-Webex-Calling-Locations), opening paragraphs and the Control Hub navigation steps. Checked 2026-09-16. [^6]: Webex Calling ships 10 outbound call types of which 3 are blocked by default: International, Premium Services I and Premium Services II, while Internal, National, Toll Free, Operator Assistance, Chargeable Directory Assistance, Special Services I and Special Services II default to Allow. Source: [Outgoing call permissions for Webex Calling locations](https://help.webex.com/en-us/article/nt2lz3d/Outgoing-Calling-Permissions-for-Webex-Calling-Locations), Permissions by call type, call type and default value table, read as cells. Checked 2026-09-16. [^7]: Cisco defines international calls as calls to locations outside the country that require an international calling code, and states that calls between the United States Canada and Puerto Rico are an exception that is not currently treated as international. Source: [Outgoing call permissions for Webex Calling locations](https://help.webex.com/en-us/article/nt2lz3d/Outgoing-Calling-Permissions-for-Webex-Calling-Locations), Permissions by call type, International Calls definition. Checked 2026-09-16. [^8]: Cisco names a Verify Call Routing feature in Control Hub that allows an administrator to test and verify outgoing call permissions. Source: [Outgoing call permissions for Webex Calling locations](https://help.webex.com/en-us/article/nt2lz3d/Outgoing-Calling-Permissions-for-Webex-Calling-Locations), Verify Call Routing sentence. Checked 2026-09-16.