What Is a SIM Box? How SIM-Box Fraud Works and Why It’s Illegal

A [SIM box](/glossary/sim-box) is a device that holds many SIM cards and turns internet (VoIP) calls into local mobile calls. In “SIM-box fraud”, it is used to route international calls around the licensed interconnect so they arrive as cheap local calls. This interconnect bypass is illegal in most countries and breaches mobile operators’ terms.

This article explains what a SIM box is, how SIM-box fraud works at a high level, who it harms, how operators and regulators detect it, and what lawful alternatives exist. It does not — and will not — explain how to avoid detection.

What is a SIM box?

Physically, a SIM box is a GSM gateway: a chassis with SIM slots and radio modules, connected to the internet. Some designs hold the SIM cards remotely in a SIM bank and move them between gateways electronically; others use racks of mobile phones instead of modules.

The term “SIM box” has come to mean the use rather than the hardware. The same kind of equipment is sold for legitimate purposes — connecting a company’s PBX to its own mobile lines, for example. It becomes a SIM box in the fraud sense when it is used to deliver third-party international traffic as if it were local mobile calls.

How SIM-box fraud works

At a high level, the scheme exploits the gap between what an operator charges to receive an international call and what a local mobile call costs:

1. A caller abroad dials a mobile number in the destination country. Their provider hands the call to a low-cost wholesale route.
2. Instead of reaching the destination through a licensed international gateway, the call is carried over the internet to SIM boxes inside the destination country.
3. The SIM box places a new, local mobile call to the called party using a local SIM card.
4. The destination operator sees a domestic call from one of its own subscribers and earns only the local tariff — not the international termination rate it is owed.

The fraudster pockets the difference between the international termination rate and the local call cost. Where international rates are high and local bundles are cheap, that difference can be large per minute, which is why bypass concentrates on such destinations. Our explainer on wholesale VoIP and call termination describes the legitimate market it undercuts.

Who is harmed by SIM-box fraud?

Industry bodies such as the GSMA and the Communications Fraud Control Association (CFCA) consistently list interconnect bypass among the significant fraud types facing operators.

There is also a hidden cost to ordinary mobile users. SIM boxes generate heavy, concentrated traffic from a handful of locations, which can congest the cells that serve them and degrade service for everyone nearby. And because bypass SIMs are often registered with stolen or borrowed identities, the fraud can leave innocent people linked to numbers they never used.

How operators and regulators detect SIM boxes

Detection is a mature, well-funded discipline. Operators, specialist vendors and regulators combine several approaches; described here only in general terms:

• Test call generation (TCG): controlled calls are placed from abroad through many wholesale routes into the operator’s network. If a test call arrives with a local mobile number instead of the original caller ID, the SIM that delivered it is identified.
• CDR analytics and fraud-management systems: operators analyse call detail records and network data for usage that does not look like ordinary subscribers.
• SIM registration rules: many countries require identity checks for every SIM, which links bypass SIMs back to the people who bought them.
• Interconnect and route audits: carriers audit their suppliers and cut routes that deliver calls without the correct CLI.
• Regulatory enforcement: regulators and police act on operator reports, carry out inspections and seize equipment.

Penalties for SIM-box fraud

Consequences depend on the country, but they typically escalate from the commercial to the criminal:

• Disconnection: SIMs involved are blocked, often in bulk, and associated numbers may be barred.
• Loss of service: wholesale partners terminate contracts and withhold payments.
• Seizure: gateways, SIM banks and servers are confiscated.
• Fines: regulators impose administrative penalties on individuals and companies.
• Prosecution: in many countries, operating unlicensed international gateways is a criminal offence that can lead to imprisonment.

Telecom regulators and law-enforcement agencies in countries across Africa, South Asia, the Middle East and elsewhere have publicised raids and prosecutions against illegal gateway operations. Treat any offer of “cheap termination” into such markets with suspicion.

SIM box vs a legitimate GSM gateway

Lawful alternatives

If you need to reach mobile numbers in another country, the lawful routes are straightforward:

• Buy outbound termination from licensed carriers or a wholesale SIP trunk provider with proper agreements and CLI delivery.
• Use local DIDs from licensed providers for inbound presence in a country.
• Use a mobile gateway only for your organisation’s own lines, on business plans that permit the use, with your real caller ID.
• Check licensing with the regulator before offering voice service to others.

How GSMCalls approaches this

GSMCalls is a platform for lawful, authorised deployments: businesses connecting their own mobile lines to their own phone systems. Our acceptable use policy prohibits carrying traffic you are not licensed or authorised to carry, evading carrier fraud controls or SIM restrictions, and spoofing caller ID, and we may suspend or terminate accounts that breach it. We do not sell termination and we do not build evasion features.

If your use case is connecting mobile lines to a PBX, a contact centre or remote sites, start with the cloud GSM gateway overview or our complete guide to GSM gateways — and talk to our engineers about your deployment.