<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
On 17 May 2019, at 1:46 AM, Ronald F. Guilmette <<a href="mailto:rfg@tristatelogic.com" class="">rfg@tristatelogic.com</a>> wrote:<br class="">
<div>
<blockquote type="cite" class="">...<br class="Apple-interchange-newline">
<div class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">So,
since the scammers already do know how to beat ARIN's vetting system,</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">what
real harm is there in having ARIN officials explain TO THE REST OF</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">US
all of the stuff that they are *not* doing ...</span></div>
</blockquote>
</div>
<div class=""><br class="">
</div>
Ronald -
<div class=""><br class="">
<div class="">Note that this particular fraud was detected by _ARIN_, although it was indeed after the resources were originally issued and some were transferred. </div>
<div class=""><br class="">
</div>
<div class="">As you are aware, address blocks have issued under increasing degrees of scrutiny of the requester over the last three decades, and those who would perpetrate fraud rapidly adapt once they become aware of measures that they face. For example,
when ARIN started requested copy of government-issued ID’s, perpetrators quickly learned and were prepared for that request from ARIN. As we have just seen, our requirement for certain notarized documents in the most recent case was apparently well-known,
and overcome with some prior planning. For this reason, we will not engage in a public discussion of the specific measures that we undertake, but I can note that we’ve already adjusted some aspects to prevent potential recurrence. In addition, the policy
which provided a very large incentive for fraud (waiting list policy), is presently suspended and alternative policies that still provide relief for those needing a small amount of IPv4 resources are under consideration. </div>
<div class=""><br class="">
</div>
<div class="">ARIN has been quite aggressive in our anti-fraud efforts, and have received praise in that regard from law enforcement from many countries. We do have the burden of also acting on factual information rather than hearsay and inference, and that
differs from many in the anti-spam community. If you have a specific process that you’d like to see ARIN use to vet organizations, please write it up and submit it to the ARIN Consultation and Suggestion Process <<a href="https://www.arin.net/participate/community/acsp/process/" class="">https://www.arin.net/participate/community/acsp/process/</a>>
– I assure you that it will receive serious consideration.</div>
</div>
<div class=""><br class="">
</div>
<div class="">Thanks!</div>
<div class="">/John</div>
<div class=""><br class="">
</div>
<div class="">
<div class="">John Curran</div>
<div class="">President and CEO</div>
<div class="">American Registry for Internet Numbers</div>
</div>
<div class=""><br class="">
</div>
</body>
</html>