<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div><br></div>Looks like I managed to send this on Thursday from the wrong address. Oops. <br><div><br><div>Begin forwarded message:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; color:rgba(0, 0, 0, 1.0);"><b>From: </b></span><span style="font-family:'Helvetica';">Robert Seastrom <br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; color:rgba(0, 0, 0, 1.0);"><b>Subject: </b></span><span style="font-family:'Helvetica';"><b>Re: [arin-ppml] Fraud reporting question</b><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; color:rgba(0, 0, 0, 1.0);"><b>Date: </b></span><span style="font-family:'Helvetica';">June 24, 2015 at 1:34:20 PM EDT<br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; color:rgba(0, 0, 0, 1.0);"><b>To: </b></span><span style="font-family:'Helvetica';">Owen DeLong <<a href="mailto:owen@delong.com">owen@delong.com</a>><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; color:rgba(0, 0, 0, 1.0);"><b>Cc: </b></span><span style="font-family:'Helvetica';">Martin Hannigan <<a href="mailto:hannigan@gmail.com">hannigan@gmail.com</a>>, "<a href="mailto:ppml@arin.net">ppml@arin.net</a>" <<a href="mailto:ppml@arin.net">ppml@arin.net</a>><br></span></div><br><div><meta http-equiv="Content-Type" content="text/html charset=windows-1252"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><br><div><div>On Jun 24, 2015, at 11:51 AM, Owen DeLong <<a href="mailto:owen@delong.com">owen@delong.com</a>> wrote:</div><br><blockquote type="cite"><meta http-equiv="Content-Type" content="text/html charset=utf-8"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><blockquote type="cite" class=""><div class="">On Jun 24, 2015, at 05:53 , Martin Hannigan <<a href="mailto:hannigan@gmail.com" class="">hannigan@gmail.com</a>> wrote:</div><div class=""><br><div class="gmail_quote" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">On Tue, Jun 23, 2015 at 11:45 PM, Owen DeLong<span class="Apple-converted-space"> </span><span dir="ltr" class=""><<a href="mailto:owen@delong.com" target="_blank" class="">owen@delong.com</a>></span><span class="Apple-converted-space"> </span>wrote:<br class=""><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-color: rgb(204, 204, 204); border-left-style: solid; padding-left: 1ex; position: static; z-index: auto;"><div style="word-wrap: break-word;" class=""><br class=""><div class=""><span class=""><blockquote type="cite" class=""><div class="">On Jun 23, 2015, at 19:34 , Martin Hannigan <<a href="mailto:hannigan@gmail.com" target="_blank" class="">hannigan@gmail.com</a>> wrote:</div><br class=""><div class=""><div dir="ltr" class=""><br class=""><div class="gmail_extra"><br class=""><div class="gmail_quote">On Tue, Jun 23, 2015 at 6:11 PM, Richard Jimmerson<span class="Apple-converted-space"> </span><span dir="ltr" class=""><<a href="mailto:richardj@arin.net" target="_blank" class="">richardj@arin.net</a>></span><span class="Apple-converted-space"> </span>wrote:<br class=""><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-style: solid; border-left-color: rgb(204, 204, 204); padding-left: 1ex;"><div style="word-wrap: break-word; font-size: 14px; font-family: Calibri, sans-serif;" class=""><div class=""><div class="">Hello Adam,</div><div class=""><br class=""></div><div class="">Thank you for submitting these questions about fraud reporting. </div><div class=""><br class=""></div><div class="">We have found the fraud reporting system to be very helpful over the past few years. We receive many different types of fraud reports through this system. Some of them have helped ARIN begin investigations that have resulted in both the recovery of falsely registered resources and the denial of some IPv4 requests that might have otherwise been issued resources.</div></div></div></blockquote><div class=""><br class=""></div><div class="">According to the fraud results page, ~2% (of 146) resulted in further investigation.<br class=""><br class=""></div><div class=""> That''s a problem. Either. There is no real fraud or, ARIN is powerless to deal with it. The last time ARIN updated the "Results" page appears to be September 2014 based on the last noted ticket number of ARIN-20140929-F1760.<br class=""></div></div></div></div></div></blockquote><div class=""><br class=""></div></span>There’s another possibility which seems entirely likely to me.</div><div class=""><br class=""></div><div class="">Of 146 fraud reports, 2% cover legitimate fraud. Most fraud likely goes unreported.</div></div></blockquote><div class=""><br class=""></div><div class="">That's possible, but I think this raises a question. What exactly is fraud? Generally, my guess is the only person who has any clue as to what a fraud is or if its been committed is the person filling out the application. The numbers are generally null because it's near undetectable other than a whistle blower coming forward.<br class=""></div></div></div></blockquote><div><br class=""></div>I’ll let ARIN staff give the definitive answer, but my understanding (which may not be 100% correct but should be relatively close) is addresses obtained or held in a manner inconsistent with the policies stated in the NRPM and/or in violation of the RSA.</div></blockquote><br></div><div>I can't speak to mail received at the fraud reporting address, however I can speak to the mailing list AUP address since I've served on the AUP committee.</div><div><br></div><div>During my tenure, the vast majority of complaints received at the AUP address are from individuals who have mistaken ARIN for the Internet Police. Complaints about spam, firewall alerts, or similar such things were the order of the day. In-scope complaints about individuals' conduct on the list were the rare exception.</div><div><br></div><div>It would certainly not surprise me if the 98% of "fraud reports" contain a lot of that sort of thing. It's hard to produce meaningful statistics against such a high-noise source; allowing complaints that are out of scope to not be counted at all would be a defeat for transparency. At the same time, publishing an unexpurgated archive of all the complaints has its own set of concerns.</div><div><br></div><div>-r</div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><br></div></div></blockquote></div><br></body></html>