SMS text spam plunges in UK as ICO fine spooks PPI pests

Have mobile spammers taken fright?

The ICO's crackdown on a firm accused of sending huge amounts of payment protection insurance (PPI) SMS spam appears to have caused a marked drop in the number of unsolicited messages being received by UK mobile users, figures from security firm Cloudmark show.

Using figures from the GSMA's 7726 Spam Reporting Service supplied by an anonymous UK operator, unsolicited text volumes dropped markedly after November 2012 with the commonest form, PPI spam, falling from a peak of 47 percent of complaints to 35 percent by December.

By early 2012, the decline had consolidated, with PPI spam accounting for only 26 percent of unsolicited messages in March as overall volumes continued to fall.

Although cause and effect is difficult to prove, Cloudmark believes the decline is most likely connected to the huge APS440,000 ($660,000) fine handed out in November by the Information Commissioner to the two owners of Manchester-based Tetrus Telecoms.

The ICO judgement said the firm had made up to APS8,000 a day sending out hundreds of thousands of text messages from unregistered pay-as-you-go SIM cards on the themes of PPI compensation and personal injury claims.

Anyone replying - in other words confirming their mobile number - would have been targeted to receive further spam with stronger leads passed to claims management firms looking for business.

It now looks as if Tetrus probably ceased its spamming but the record size of the fine could also have discouraged others using the same business model, amplifying the sudden drop.

The figures are imperfect because they only reveal how many subscribers complained to a single network, not how many received the messages in total. It could also be that PPI volumes have declined as the public issue of compensation has waned naturally. The correlation does at least appear sudden enough to rule out pure coincidence.

Earlier this week figures from Cloudmark's Q1 Global eMessenging Report connected a large drop in the amount of gift card scam texts received by US mobile users to a 7 March 2013 announcement by the Federal Trade Commission (FTC) that it was filing complaints against eight firms.

In the early months of 2013, gift card campaigns fell from around half of all SMS spam to around 10 percent in the period after the FTC's move, Cloudmark found using an analysis of the US 7726 complaint stats.

It's important to note a distinction between the messages the FTC took exception to which were rated as misleading and therefore fraudulent. In the UK, spam pushing PPI claims companies is not illegal per se even if many commentators see them as a form of constructed scam in which the user is charged money for a useless service.

Despite the declines in mobile spam, unwanted messages remain a major nuisance for UK consumers, with payday loans now the most often complained about type of message.

Encouragingly, the connection between regulatory action and a drop in SMS spam suggests that the issue of unwanted messages on mobiles does not have to turn into a re-run of what happened in the PC world a decade ago.

"Our data shows that PPI spam complaints make up a significantly lower proportion of the UK SMS spam reports than prior to the ICO action against the spammers in November," confirmed Cloudmark's senior director of security research, Chris Barton.

"This evidence, alongside the impact shown by the FTC's actions in the USA, suggests that regulators have a significant part to play in tackling spammers. We look forward to working with the regulators to continue to combat these threats," he said.

Copyright © 2013 IDG Communications, Inc.

7 hot cybersecurity trends (and 2 going cold)