TPG Telecom analysed scam calls on the Vodafone network over a one-year period and found that the vast majority originated with Symbio, a company that sells Australian phone numbers in bulk to businesses for internet-based calls.
"Every time we see this type of scam campaign we give the evidence and the data to Aussie Broadband for them to investigate and block the bad actors," Vanessa Hicks, executive at TPG Telecom, said. "We want more urgent action to stop this activity closer to the source and stop these calls reaching Australians."
Aussie Broadband CEO Brian Maher acknowledged the challenge, saying Symbio had about 500 customers who on-sell numbers, and each of those customers could resell to thousands of other users. He said that because Symbio had no direct oversight of who its customers were selling to, stopping scammers was difficult.
"Where we find a persistent bad actor, then we will disconnect them," Mr Maher said. He said the company used detection software and a team of more than 20 people to reduce scam calls, with plans to invest further.
"It is unfortunate that they've called us out publicly, but we accept that they're frustrated and we want to work with them to solve the problem," he said.
One victim, Perth-based Ian Odlum, described receiving a call from someone posing as the Australian Federal Police. The caller told him they had seized a laptop containing his personal information and asked him to travel to a police station. Mr Odlum refused and the caller hung up.
Vodafone's fraud team investigated and found police stations in Western Australia, Queensland, South Australia and the AFP had all been impersonated by calls from Symbio's network, with more than 2,400 calls in a single week in September.
The regulator, the Australian Communications and Media Authority (ACMA), said checks on that particular scam showed regulation was working, with traffic identified, notifications passed upstream and blocking occurring. The ACMA said it did not identify non-compliance by an Australian telco.
Symbio was warned by the ACMA in 2024 for failing to properly investigate scam calls and share information quickly, and was also warned in 2022 over similar issues. Ms Hicks said it was disappointing Symbio had faced no financial penalties.
TPG denied its criticism was motivated by commercial rivalry. "We are bringing this out because we're trying to protect Australians and we're trying to protect our customers," Ms Hicks said.
Independent cybercrime investigator Dan Halpin examined 8,000 scam numbers reported by the public and found Symbio was the top carrier linked to suspect numbers. Mr Halpin said Symbio's business model of selling numbers in bulk appealed to scammers, who could quickly rotate through blocks of numbers.
Optus and Telstra declined to provide specifics when asked if they had experienced high volumes of scam calls traced to Aussie Broadband. Optus said no single carrier consistently accounted for the majority of scam calls.
Australia's Scams Prevention Framework, due to be fully introduced next year, will require telcos to meet strict new obligations to prevent scam calls and could impose penalties of up to $11 million for non-compliance.