Live Oct 27: Personal AI Like Muse Is Already Your Customer

Register now
Product Brief

A prominent rideshare and delivery giant prioritized streamlined customer acquisition through online sign-ups but inadvertently opened doors to SMS toll fraud, causing skyrocketing SMS bills that threatened millions in annual fraudulent charges.

Rideshare Giant Saves $2.5M Annually in SMS Toll Fraud Costs — Case Study


What You’ll Learn

  • How a major rideshare and delivery platform uncovered large-scale SMS toll fraud hidden inside sign-up flows

    How fraudsters manipulated OTP verification and premium-rate telecom channels to inflate SMS costs while creating fake accounts at scale.


  • Why a friction-sensitive onboarding experience made traditional defenses ineffective

    How the platform’s commitment to fast, seamless registration limited its ability to introduce strong verification measures without harming user experience.


  • How Arkose Labs delivered precise, risk-based friction to stop fraudulent SMS activity

    How Arkose Bot Manager applied targeted challenges only to high-risk sessions, allowing legitimate customers to pass through smoothly.


  • How integrating Arkose Labs with AWS WAFv2 and CloudFront strengthened protection

    How combining native AWS security with Arkose Labs' bot detection created a unified, multilayered defense that blocked malicious traffic early.


  • How security teams gained new visibility into customer acquisition traffic

    How improved insight into device intelligence, IP patterns, and page-load behavior helped the company understand and manage top-of-funnel risk more effectively.


FAQ

Why was the rideshare company losing so much money to SMS toll fraud?

Attackers used premium-rate phone numbers—often obtained through collusion or weak telecom safeguards—to trigger OTP messages repeatedly. Every fraudulent message created revenue for the attacker and large expenses for the company, turning SMS verification into a high-cost liability.

How did Arkose Labs stop SMS toll fraud without disrupting real users?

Arkose Bot Manager analyzed device, network, and behavioral signals to identify risky sessions and apply targeted challenges only when needed. This preserved the fast, frictionless onboarding experience for legitimate users, while forcing bots and fraud farms to abandon their attempts.

What role did AWS play in the solution?

By integrating with AWS WAFv2 and CloudFront, Arkose Labs provided detection and mitigation alongside AWS’s native DDoS protection, managed rulesets, and global edge delivery. This enabled early filtering of malicious traffic, strengthened OTP security, and reinforced the reliability of the signup and login flows.

What business benefits did the company gain?

The rideshare platform dramatically reduced fraudulent SMS expenditures, maintained a seamless customer onboarding experience, and improved visibility into high-risk traffic patterns. This combination strengthened security while protecting customer trust and operational efficiency.

Key Benefits

How It Works

01

02

03

What Sets It Apart

Proof of Value

The Arkose Labs Advantage

Case Study

Rideshare Giant Saves $2.5M Annually in SMS Toll Fraud Costs

A prominent rideshare and delivery giant prioritized streamlined customer acquisition through online sign-ups but inadvertently opened doors to SMS toll fraud, causing skyrocketing SMS bills that threatened millions in annual fraudulent charges.

$2.5M

annualized SMS toll fraud savings

99.5%

of low-risk traffic unchallenged

94.4%

attack abandonment rate
  • SMS Toll Fraud at Scale: Cyberattackers obtained phone numbers from premium-rate carriers through collusion or weak telecom security, then deployed bots to trigger OTPs, causing millions in fraudulent SMS charges while splitting proceeds with carriers.
  • Friction-Sensitive Customer Base: Platform's user base was extremely sensitive to online friction, requiring any verification mechanism to operate seamlessly in background without hindering legitimate signups.
  • Limited Traffic Visibility: Lacked sufficient insight into customer acquisition traffic patterns and potential threats including account takeover, promotion abuse and fare scraping.
  • Comprehensive OTP Protection: Deployed Arkose Titan platform across every touchpoint safeguarded by OTPs during registration, aggregating real-time device, network and behavioral signals to spot hidden signs of bot and human-driven attacks.
  • Targeted High-Risk Country Strategy: Focused on sessions from 5 countries with highest SMS costs, analyzing and selectively choosing unique threat signatures as basis for applying friction.
  • Adaptive Challenge Deployment: Presented Arkose MatchKey challenges to suspicious sessions, posing difficulties for bots that forced attackers to abandon attempts or pivot to human fraud farms, which were also effectively thwarted.
  • Passive Authentication for Legitimate Users: Built detection models on passive authentication techniques, enabling genuine users to pass through unchallenged and navigate smoothly with little to no interference.
”
Detection models were built on passive authentication techniques, enabling genuine users to pass through unchallenged and navigate smoothly with little to no interference.
  • $2.5M in Annualized Savings: Achieved approximately $2.5 million annual reduction in SMS toll fraud spend for select high-risk countries.
  • 99.5% Frictionless Experience: 99.5% of low-risk traffic passed through unchallenged, with the 0.5% that experienced challenges exceeding industry completion standards.
  • 94.4% Attack Abandonment Rate: 94.4% of challenged sessions immediately gave up, indicating high detection accuracy and effective bot deterrence.
  • Enhanced Traffic Visibility: Major improvements to top-of-funnel data including IP intelligence, device intelligence and fingerprinting, real-time IP aggregation and offline page load ID analysis.

Block bad traffic.
Welcome good humans and good agents.

Talk to Our Experts