<div dir="ltr"><div class="gmail_default" style="font-size:small">+1 Owen's remarks.<br></div><div class="gmail_default" style="font-size:small"><br>There’s another possibility which seems entirely likely to me.<div><br></div><div>Of 146 fraud reports, 2% cover legitimate fraud. Most fraud likely goes unreported.</div><div><br></div><div>As noted by ARIN staff earlier in this conversation, the vast majority of fraud reports they receive are out of scope…</div><div><br></div><div><span style="white-space:pre-wrap"> </span>General ISP complaints</div><div><span style="white-space:pre-wrap"> </span>SPAM complaints</div><div><span style="white-space:pre-wrap"> </span>etc.</div><div><br></div><div>This
is not surprising as probably about 1% of all internet users even know
what an RIR is, let alone how to distinguish between RIR Fraud and other
issues.</div></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature">--<br>Brian</div></div>
<br><div class="gmail_quote">On Tue, Jun 23, 2015 at 10:45 PM, Owen DeLong <span dir="ltr"><<a href="mailto:owen@delong.com" target="_blank">owen@delong.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word"><br><div><span class=""><blockquote type="cite"><div>On Jun 23, 2015, at 19:34 , Martin Hannigan <<a href="mailto:hannigan@gmail.com" target="_blank">hannigan@gmail.com</a>> wrote:</div><br><div><div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jun 23, 2015 at 6:11 PM, Richard Jimmerson <span dir="ltr"><<a href="mailto:richardj@arin.net" target="_blank">richardj@arin.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div style="word-wrap:break-word;font-size:14px;font-family:Calibri,sans-serif">
<div>
<div>Hello Adam,</div>
<div><br>
</div>
<div>Thank you for submitting these questions about fraud reporting. </div>
<div><br>
</div>
<div>We have found the fraud reporting system to be very helpful over the past few years. We receive many different types of fraud reports through this system. Some of them have helped ARIN begin investigations that have resulted in both the recovery of falsely
registered resources and the denial of some IPv4 requests that might have otherwise been issued resources.</div></div></div></blockquote><div><br></div><div>According to the fraud results page, ~2% (of 146) resulted in further investigation.<br><br></div><div> That''s a problem. Either. There is no real fraud or, ARIN is powerless to deal with it. The last time ARIN updated the "Results" page appears to be September 2014 based on the last noted ticket number of ARIN-20140929-F1760.<br></div></div></div></div></div></blockquote><div><br></div></span>There’s another possibility which seems entirely likely to me.</div><div><br></div><div>Of 146 fraud reports, 2% cover legitimate fraud. Most fraud likely goes unreported.</div><div><br></div><div>As noted by ARIN staff earlier in this conversation, the vast majority of fraud reports they receive are out of scope…</div><div><br></div><div><span style="white-space:pre-wrap"> </span>General ISP complaints</div><div><span style="white-space:pre-wrap"> </span>SPAM complaints</div><div><span style="white-space:pre-wrap"> </span>etc.</div><div><br></div><div>This is not surprising as probably about 1% of all internet users even know what an RIR is, let alone how to distinguish between RIR Fraud and other issues.</div><div><span class=""><br><blockquote type="cite"><div><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><div>Some sort of additional resources like a FAQ on what might or might not be out of scope could help to reduce the amount of baseless submissions as well as additional questions on the form that if selected nack a report. If staff isn't going to keep the page updated why keep it at all?</div></div></div></div></div></blockquote><div><br></div></span>On this we agree… The form letter I suggested should contain a link to this FAQ, as should the fraud report filing page.</div><div><br></div><div>Owen</div><div><br><blockquote type="cite"><div><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><div><br></div><div>Best,<br><br></div><div>-M<<br><br></div><div><br><br></div></div></div></div><span class="">
_______________________________________________<br>PPML<br>You are receiving this message because you are subscribed to<br>the ARIN Public Policy Mailing List (<a href="mailto:ARIN-PPML@arin.net" target="_blank">ARIN-PPML@arin.net</a>).<br>Unsubscribe or manage your mailing list subscription at:<br><a href="http://lists.arin.net/mailman/listinfo/arin-ppml" target="_blank">http://lists.arin.net/mailman/listinfo/arin-ppml</a><br>Please contact <a href="mailto:info@arin.net" target="_blank">info@arin.net</a> if you experience any issues.</span></div></blockquote></div><br></div><br>_______________________________________________<br>
PPML<br>
You are receiving this message because you are subscribed to<br>
the ARIN Public Policy Mailing List (<a href="mailto:ARIN-PPML@arin.net">ARIN-PPML@arin.net</a>).<br>
Unsubscribe or manage your mailing list subscription at:<br>
<a href="http://lists.arin.net/mailman/listinfo/arin-ppml" rel="noreferrer" target="_blank">http://lists.arin.net/mailman/listinfo/arin-ppml</a><br>
Please contact <a href="mailto:info@arin.net">info@arin.net</a> if you experience any issues.<br></blockquote></div><br></div>