Blog: For operators

New revenue for mobile operators: scam call protection your subscribers pay for

By the TelecomsXChange engineering team ·

Scam calls are a complaint every mobile operator hears and cannot bill for. With Open Voice Shield the operator sells protection as a monthly add-on that scores every call to or from an enrolled number, tells the subscriber what the call was, and blocks the next attempt from a scam number. It runs on the existing network, over SIP or an SS7-to-SIP node. For an operator with 50 million subscribers, a 5% attach rate is about $60 million a year.

50M subscribers, 5% attach $59.7M/year illustrative, at $1.99 a month; your numbers below
Verdict after hangup minutes next attempt from a scam number blocked automatically
Handset changes 0 one node in the path of enrolled numbers; SIP or SS7-to-SIP
Your brand 100% verdicts through your app, SMS or push; data under your account
The version for the board. A paid add-on that scores every call for enrolled subscribers and blocks scam numbers on their next attempt, delivered under the operator's brand on the network it already runs. Cost scales with analyzed calls, not with subscribers, so the operator sets the margin. A cohort pilot fits in a quarter.

The opportunity

A product subscribers already ask for

Voice revenue per user has been flat or falling for a decade while the cost of handling scam-call complaints, regulator filings and churn has not. Caller-ID authentication such as STIR/SHAKEN, mandated in Canada since 2021, was a necessary step, and the Canadian Centre for Cyber Security's own guidance is clear about its limit: it authenticates the number but does not hear the call. The scammer with a legitimately obtained number, the "bank" calling from a real mobile, the robocall that passes every signalling check, all still reach the subscriber.

Subscribers install third-party blocking apps, complain to the operator, and a growing share would pay the operator itself for protection that works on every call, not only the ones a reputation list has seen before. That is a value-added service with three properties operators rarely get together: high perceived value, a cost per unit the operator controls, and no new handset, SIM or app store dependency.

The service

What the subscriber gets

  • A verdict on every call, in and out, minutes after hangup: block, review or allow, the category (bank impersonation, government or IT impersonation, robocall, pressure sales), and the red flags quoted from what was said. Delivered through the operator's app, SMS or push from the operator's own systems, fed by a signed webhook or the API.
  • The next attempt stopped. A number scored above the operator's threshold is blocked or diverted before it rings the subscriber again, for an hour, a week or for good, with no action from anyone. Most voice scams take more than one call.
  • Evidence on request. The recording, the transcript and a PDF report for a subscriber disputing a charge with a bank, or for the operator's fraud team.
  • Optional, per number. Only enrolled numbers are routed through the node. Everyone else's traffic is untouched, so cost and consent apply only to the subscribers who enrolled.

The verdict engine is the same one carriers use on wholesale routes: a stereo recording with each party on its own channel, a speaker-labelled transcript, and an analysis that returns a probability from 0 to 100 with its evidence. The operator chooses the class of models behind it, and therefore the cost per call.

The arithmetic

50 million subscribers, three attach rates

A worked example, not a forecast. The price is illustrative and the attach rate is the operator's to earn through bundling, default-on trials and the moment a subscriber gets their first verdict. The figures are gross add-on revenue before the operator's cost per analyzed call, which is agreed per licence and scales with call volume, not with subscriber count.

Enrolled 2,500,000 subscribers on the add-on
Monthly $4,975,000 gross add-on revenue
Yearly $59,700,000 before the per-call cost you agree with us

Your numbers. Nothing typed here leaves the page.

Add-on revenue for a 50-million-subscriber operator at $1.99 a month (illustrative).
Attach rateEnrolled subscribersMonthlyYearly
2%1,000,000$1,990,000$23,880,000
5%2,500,000$4,975,000$59,700,000
10%5,000,000$9,950,000$119,400,000

Two levers move the result more than the price. First, what share of enrolled numbers' calls the operator analyzes: every call, or a sample with the rest recorded and analyzed on demand, which the platform supports per route. Second, which model tier runs the analysis. The open-weight tier costs a fraction of a frontier model per call and returns the same verdict shape. Both are settings and need no engineering work.

Beyond the line item: fewer scam-call complaints to handle, a reason for a subscriber to stay, and a product the operator's own brand delivers rather than a third-party app.

Integration

On the network you have

Open Voice Shield is a SIP hop. In a mobile network it sits as a node the core routes enrolled numbers' calls through, on the way to and from the interconnect. An IMS core or a softswitch reaches it over SIP directly. A network still on SS7 signalling for the paths in question adds an SS7-to-SIP gateway node in front of it. The media follows the same path either way. Handsets, numbers and the core stay as they are.

Open Voice Shield as a node in a mobile operator's call path Stacked boxes. At the top, subscribers on the mobile network, with enrolled numbers marked. Below, the mobile core: IMS or a softswitch, which reaches the node over SIP, or an SS7 network that reaches it through an SS7-to-SIP gateway node. In the middle, the Open Voice Shield node: the call relayed live, and after hangup recorded, transcribed and scored, with a verdict sent by webhook to the operator's systems and the next call from a flagged number blocked. At the bottom, the interconnect and the outside world. Beside the node, the operator's app, SMS or push delivers the verdict to the subscriber. Subscribers enrolled numbers only are routed via the node Mobile core IMS or softswitch: SIP to the node directly SS7 signalling: through an SS7-to-SIP gateway node in front of it; media follows the same path handsets, numbers and the core unchanged Open Voice Shield node the call relayed live, untouched after hangup, within minutes: recorded · transcribed · scored 0 to 100 verdict by webhook to the operator's app / SMS / push next call from a flagged number blocked or diverted Interconnect other networks, and the people calling from them
One node in the path of enrolled numbers, both directions. The rest of the network and the rest of the subscribers are untouched.

Capacity is added by node, per region, and the platform already runs media relays and storage per region so a subscriber's recordings stay in-country. The operator can run the whole thing on its own hardware with an on-premises licence, with its own speech and analysis models and keys, so no call content leaves its network.

Getting it to market

Pilot in a quarter

  1. Route one cohort. A few thousand enrolled numbers through one node, verdicts into the operator's app or by SMS. Measure the attach rate the first verdict produces and the complaint volume on the cohort against a control group.
  2. Set the threshold and the price. Block above the probability the fraud team is comfortable with. Price against the churn and handling cost the pilot shows.
  3. Bundle. Default-on in a premium plan, opt-in elsewhere, a default-on trial for new activations. The moment a subscriber sees their first flagged call is the marketing.

Operator licences, node sizing and the cost per analyzed call are scoped with us. Send your subscriber count and signalling (SIP, SS7 or both) and you get a node plan and the numbers for your case back. Or read how the same hop works on a wholesale route and for a business phone line, and the three ways operators already use it on their own traffic.

Questions

Frequently asked questions

How can a mobile operator create a new revenue stream from scam calls?

Sell protection as a monthly add-on. With Open Voice Shield on the network, every call to or from an enrolled number is recorded, transcribed and scored minutes after hangup. The subscriber gets a verdict through the operator's app, SMS or push, and the next call from a high-probability scam number is blocked automatically. The operator sets the price, owns the customer relationship and pays per analyzed call, so margin is a number it controls.

What is the revenue potential for an operator with 50 million subscribers?

At an illustrative $1.99 a month, a 2% attach rate is one million subscribers and about $24 million a year; 5% is 2.5 million subscribers and about $60 million; 10% is five million and about $119 million. These are worked examples, not forecasts: the attach rate depends on the operator's bundling and marketing, and the operator's cost is the per-analyzed-call price agreed with us.

Does it work with an existing mobile network?

Yes. Calls for enrolled numbers are routed through an Open Voice Shield node over a SIP interconnect from the mobile core (IMS or a softswitch). Networks still on SS7 signalling connect through an SS7-to-SIP gateway node. Handsets, numbers and the core stay as they are; only the routing for enrolled numbers changes.

Is the verdict real time?

The call is relayed live and untouched. The verdict arrives minutes after hangup, and its effect is immediate for the next attempt: a number scored above the operator's threshold is blocked or diverted before it rings again. Most voice scams take more than one call, so the second attempt is where the protection lands.

Isn't STIR/SHAKEN enough?

STIR/SHAKEN authenticates the caller ID at signalling time. It never hears the call. A scammer on a legitimately obtained number passes it. Analyzing the conversation catches what the caller claimed to be, what they asked for and how they pressured, which is where vishing and scam calls happen. The two are complementary.

Who owns the subscriber data and the recordings?

The operator. Recordings, transcripts and verdicts stay under the operator's account and retention settings, in the region the operator chooses, or on the operator's own hardware with an on-premises licence. Subscribers enrol knowingly and can be notified that their calls are analyzed, in line with local recording and privacy rules.