Last June, the National Cyber Security Centre (NCSC) issued a three-page advisory notice. The subject was “SMS Pumping”. It is a form of cyber-fraud where attackers exploit SMS verification features for apps and platform logins, such as one-time passwords, to trigger a high volume of messages to premium or international numbers. The attackers profit, the notice says, by receiving a share of the inflated SMS termination fees, often by colluding with rogue telecom carriers at the expense of the victim organisation. This can cause financial loss to the victim from excessive telecom bills, overloading of systems from the increased traffic,…