FAKE ITG TRACEBACK EMAILS: WHO IS REALLY BEHIND THE LINK?

Over the past 2–3 weeks, suspicious emails impersonating the Industry Traceback Group (ITG) have been circulating in the wholesale voice industry.

We received one at XINIX
At first glance, it looked like a traceback request — the kind of email a carrier takes seriously because legitimate traceback requests demand timely attention.
But one detail immediately stood out.

The sender’s domain was tracbackportal.com — not the official tracebacks.org domain.
ITG has publicly warned that it is aware of fraudulent emails impersonating the organisation and states that official traceback requests are sent exclusively from the tracebacks.org domain.
That distinction matters.

Traceback requests are an essential part of identifying the source of suspicious traffic and protecting the telecommunications ecosystem. Attackers can exploit that urgency by making a malicious email look like a legitimate compliance request.

Imagine an employee clicking a link simply because they don’t want to miss a traceback deadline.
That single click could expose a business to a much bigger security incident.
So, what should carriers do?

🔹 STOP. Don’t let urgency override basic security checks.
🔹 CHECK THE SENDER. A familiar-looking display name doesn’t establish authenticity. Inspect the actual email address and domain.
🔹 DON’T CLICK FIRST. Never use a suspicious email link to access a traceback portal.
🔹 VERIFY INDEPENDENTLY. Navigate to the official ITG website using a trusted bookmark or a manually verified address. Check whether the request exists in the portal.
🔹 REPORT SUSPICIOUS EMAILS. Contact ITG through independently verified official contact details, and involve your IT/security team where appropriate.
🔹 DON’T IGNORE A REAL TRACEBACK. If an email cannot be verified, investigate it safely rather than dismissing a potentially legitimate request.

At Xinix, we believe compliance and security must work together. Protecting the network means investigating suspicious traffic — but protecting the business also means investigating suspicious requests.
In wholesale voice, trust the process. Verify the sender. Never trust a link just because it looks official.

WholesaleVoice #Telecom #Cybersecurity #FraudPrevention #CarrierRelations #TelecomCompliance #VoiceCarriers #ITG #RobocallMitigation #InformationSecurity