Join Us!

Cell data analysis,...
 
Notifications
Clear all

Cell data analysis, problem  

  RSS
s1lang
(@s1lang)
Member

Hi all.

We have a problem on a case.
We have received the itemised billing and call data records.

Both phones communicating (of interest) are Orange, phones = OA and OB for ease of explanation

When comparing the billing to CDR we noted two missing SMSs from the itemised billing, therefore it was thought they were not received by OB from OA and thus not charged.

But when checking the CDR there is cell id data for OB which is the receiving phone but nothing for the sending phone OA, for just these two messages. Which tells us OB received it.

We do not have any bills or CDR for OB, this information is just on OAs records. It has sender and receiver details as they are both on the Orange network.

Any thoughts as to why this is??

Thank you
Si D

Quote
Posted : 24/04/2009 8:29 pm
jmech
(@jmech)
Junior Member

Just a thought here, never actually researched this, but…

could OA have sent the message from an online service such as www.cozi.com instead of from OA's phone? I don't know if that would reflect on the CDR or not…perhaps if OA had to enter OA's cell number in their online account. I don't believe Cozi itself shows up on the senders CDR, but maybe another provider does.

Joe

ReplyQuote
Posted : 25/04/2009 12:33 am
PaulSanderson
(@paulsanderson)
Senior Member

My thoughts too - something like the SMS facility in Skype

ReplyQuote
Posted : 25/04/2009 3:07 am
trewmte
(@trewmte)
Community Legend

I think jmech suggestion is worth following, however, if you referred those two SMSs transmissions back to Orange they can tell you how those texts were sent and why they appear as a record in OA's call detail records.

ReplyQuote
Posted : 25/04/2009 3:57 pm
s1lang
(@s1lang)
Member

Thanks for the info guys,
this is an avenue of research we will steer to for this

Si

ReplyQuote
Posted : 27/04/2009 5:17 pm
danielb
(@danielb)
Junior Member

Well I haven't done any billing or CDR analysis before. But here are a few more possibilities. So these may show differently on CDR to what I may assume.
1. Could it be a missed call sms from the network (i.e one person calls another and hangs up before it goes to voicemail etc - some networks then send an SMS saying this person called but didn't leave a message and often shows the callers number).
2. Some networks allow u to send messages via an online system (i.e Vodafone Mail or whatever O2's genie service is now).
3. Could it be a delivery report?
4. Could it just be a message that for whatever reason was delayed at the SMSC.

I hope one of these is useful.

ReplyQuote
Posted : 27/04/2009 9:33 pm
MobilePhoneForensic
(@mobilephoneforensic)
Member

The messages could have been sent from a spoof messaging website. On these sites you can use any number you want as the senders number - So OA's number could have been inputted into the senders number field. Have you checked the Service Center Number on OB's handset attached to the two received messages. Google the Service Center Number to see if it belongs to Orange or another provider?

ReplyQuote
Posted : 30/04/2009 2:51 pm
MobilePhoneForensic
(@mobilephoneforensic)
Member

An example of a spoof messaging site http//www.spoofsms.co.uk/

ReplyQuote
Posted : 30/04/2009 2:54 pm
trewmte
(@trewmte)
Community Legend

The messages could have been sent from a spoof messaging website.

These are questions but they may come across as riddles

Why pay 50p to spoof someone's mobile number and then Orange enter a call record of that event when the text is not originated via the Orange network nor a roaming partner?

Moreover, wouldn't that amount to every call record in evidence involving text leading to the prosecution being unable to

(a) identify sender?
(b) origin of the parties?

ReplyQuote
Posted : 30/04/2009 5:20 pm
MobilePhoneForensic
(@mobilephoneforensic)
Member

Fair point Trewmte - I guess I was just typing without thinking and without understanding the scenario properly.

1. Could it be a missed call sms from the network (i.e one person calls another and hangs up before it goes to voicemail etc - some networks then send an SMS saying this person called but didn't leave a message and often shows the callers number).

Wouldn't OB have to activate this service on his/her account, and wouldn't the missed call message be received from OB's account and not OA's account?

Just a question?

ReplyQuote
Posted : 30/04/2009 6:13 pm
trewmte
(@trewmte)
Community Legend

MobilePhoneForensic I hope you don't think my comments to you were intended as criticism because I thought what you stated was useful and that you may made a discovery about something I was unaware.

Wouldn't OB have to activate this service on his/her account, and wouldn't the missed call message be received from OB's account and not OA's account?

Just a question?

I assume you are no longer dealing with text messages, per se, but network announcement text messages. I also assume you are not suggesting that the spoof text is spoofed to look like a missed call message.

For missed calls, some networks do send a text to indicate a missed call and displaying the calling party's number. This is not a special activated service as far as I am aware. The network sends this complementary message to get the called party to call back and spend money on a call. That is just good sales marketing I assume.

I can't say what happens in every GSM operator's network but I do not recall seeing the called party's (or calling party for that matter) call records detailing a network announcement of a missed call in the records, although if they did that might be useful evidence representing

(i) an attempt by the calling party to contact the called party
(ii) knowledge by the called party of an attempt to be contacted by the calling party

Did I understand your comments or have I missed the point?

ReplyQuote
Posted : 30/04/2009 7:13 pm
Share: