How TripAdvisor hunted a robocaller that made 100 million calls to random people

TripAdvisor helps people find and rate hospitality. It also helps fight against robocalls. Source: Reuters
TripAdvisor helps people find and rate hospitality. It also helps fight against robocalls. Source: Reuters

The war on robocalls has not been going well—as you probably know. Last week, however, the good guys chalked up a win: The FCC dropped a $120 million fine on a robocall spammer from Florida, Adrian Abramovich, who had made 96 million robocalls in the three-month period the agency investigated him.

To put this into perspective, that’s 12 calls per second.

However, FCC Commissioner Mignon L. Clyburn said this is “sadly” just “a fraction of the approximately 2.6 billion robocalls” made just during the month of May.

The Commission’s coup wasn’t just their doing. The agency slammed a perfectly-tossed alley-oop by a frustrated company with little time and resources on its hands—TripAdvisor.

It all started in 2015, when TripAdvisor (TRIP) began to get calls from angry users demanding that they stop robocalling them and offering them “exclusive” deals on vacations. “We were like, ‘what are you talking about?’” said Brian Hoyt, a TripAdvisor spokesperson.

Here is an example of one of the messages, cited in the FCC’s formal complaint: “I just received an unsolicited robocall to my personal phone number that is on a do not call list. That call stated that it was on behalf of trip advisors trying to sell me something. If I ever get a call like that again, I will contact the FCC and I will open the gates of hell on TripAdvisor.”

After double-checking to make sure TripAdvisor didn’t have a telemarketing service, the company decided to investigate.

TripAdvisor has its own FBI—and it’s not afraid to use it

Unlike most companies, TripAdvisor has a robust investigation arm filled with ex-law enforcement and military experts that work to fight fraud. As a company that reviews businesses, it’s an extremely rich target for manipulation by companies that want to boost their own profiles or damage competitors, and this “content integrity” team works to make sure the reviews are honest. “We asked the content integrity team—can you take this on as a side project?” said Hoyt.

That same year, TripAdvisor’s investigators figured it out using methods they understandably did not want to disclose to Yahoo Finance, tracking through Mexican-based call centers and websites linked to former senior executives of a Mexican hotel chain, Sunset World Group. “We actually identified who this source of the calls were from a tech standpoint,” said Hoyt. “There were all these offshore clients who subscribed to a tech provider in Miami, run by this guy Adrian Abramovich. He possessed this tech to enable neighborhood spoofing.”

Robocalling—getting a computer to make a call—isn’t hard. In fact, it’s incredibly easy to automate, which is why it’s such a pervasive problem. But Abramovich’s evil genius was getting the caller ID to display a number that was similar to your own so you’d pick up. This is called “neighborhood spoofing.”