VoIP technology severed phone numbers from physical copper wires decades ago. Today, a virtual phone number provider can lease thousands of DIDs programmatically via basic APIs. This system democratized modern corporate communication, powering delivery updates, medical reminders, and two-factor authentication codes. Bad actors, however, utilize the exact same pipelines.
Overseas call centers and phishing syndicates rarely purchase numbering resources directly from wholesale carriers. Instead, they buy access through layers of white-label VoIP resellers, session initiation protocol (SIP) trunk aggregators, and prepaid messaging platforms. These intermediary platforms frequently lack strict Know-Your-Customer (KYC) onboarding protocols. A malicious operator can register an account with a prepaid digital card, provision a block of Onvoy-registered numbers, blast out 50,000 unsolicited text messages impersonating a bank fraud alert, and discard the account within two hours.
The scam relies on caller ID spoofing alongside legitimate number leasing. In some cases, scammers spoof an inactive phone number that happens to sit inside an Onvoy allocation block. In other instances, they lease the active Onvoy number directly to harvest replies before security teams flag the domain. To the victim, the trail dead-ends at Onvoy Spectrum LLC.
