Artificial Inflation of Traffic — AIT
Qu'est-ce que Artificial Inflation of Traffic?
Cette entrée n'est actuellement disponible qu'en anglais.
Artificial inflation of traffic (AIT) is a messaging-abuse pattern where bots or scripts deliberately generate message volume with no genuine end user behind it, forcing mobile carriers to transport and bill for traffic that has no real recipient. The most common form is SMS pumping fraud, which abuses a business's own OTP or verification flow: automated requests trigger thousands of texts to premium-rate or fraud-controlled numbers, the business is billed for every send, and the scheme operator collects a share of the termination fees.
More detail
AIT is not a single attack but an umbrella covering every scheme that manufactures billable traffic: SMS pumping against an exposed OTP form, scripted resubmissions of a two-factor login page, and bot-driven signup loops that each fire a real, charged message. What unifies them is that the sender of record is a legitimate business whose account pays the bill, while the traffic itself was never requested by a person.
Detection works on both sides of the network. The sending business should rate-limit verification requests per phone number and per IP, challenge automated submissions before an SMS is dispatched, block known-abusive number ranges and destination prefixes, and alert on send volume or cost that spikes against a handful of destinations. Carrier-side SMS firewalls filter suspicious routes in transit, and can start dropping a sender's legitimate messages once its traffic pattern resembles artificially inflated traffic.
Filtering AIT matters to the wider ecosystem because carrier termination fees are the reward economy of the scheme: remove the inflated messages and the payout disappears. This is also where artificial inflation differs from conventional smishing or spam — the goal is not to deceive a recipient but to inflate billable volume, so a flood of messages with near-zero click or reply rates is a stronger AIT signal than any one message's content.
Questions fréquentes
- What is artificial inflation of traffic (AIT)?
- Artificial inflation of traffic (AIT) is manufactured messaging volume — usually bot-triggered — with no genuine end user behind it, run so the attacker can profit from the termination fees billed to the sending business. SMS pumping fraud, which pumps a business's own OTP or verification endpoint until it dispatches thousands of billable texts, is the most common form.
- How do you detect artificially inflated SMS traffic?
- Watch for a sudden spike in outbound message volume or spend concentrated on a small set of countries or destination prefixes, verification flows submitting far faster than real users can type, and near-zero click or reply rates on OTP sends. Pair those signals with per-number and per-IP rate limits plus pre-send challenges like a CAPTCHA on the verification form.
- What is the difference between AIT and SMS pumping fraud?
- AIT is the umbrella term for any manufactured, billable traffic; SMS pumping fraud is its most common form, where bots abuse a business's OTP or verification endpoint to generate the volume. The voice counterpart is toll fraud (IRSF), which inflates a carrier bill through premium-rate international call minutes instead of messages.
- Why do carriers filter artificially inflated traffic?
- Carriers filter artificially inflated traffic because termination fees are what make the scheme profitable, and the fraud also degrades routing quality for every sender sharing the infrastructure. SMS firewalls score traffic in transit and can start filtering a sender's legitimate messages once its pattern resembles inflation — one more reason a business should stop manufactured volume before it sends.
See also
Build it on Orbit
Voice, messaging, email, video, and AI agents on one platform and one pay-as-you-go bill. Start free — no credit card required.