<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Jul 14, 2022, at 16:36 , John Curran <<a href="mailto:jcurran@arin.net" class="">jcurran@arin.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class="">
<div class="">
<blockquote type="cite" class="">
<div class="">On 14 Jul 2022, at 6:28 PM, Paul E McNary <<a href="mailto:pmcnary@cameron.net" class="">pmcnary@cameron.net</a>> wrote:</div>
<div class="">You keep using the word fraud.<br class="">
This is not an issue of fraud by my understanding but ARIN POLICY.<br class="">
Please correct your misuse of your language. PLEASE</div>
</blockquote>
</div>
</div>
<div class=""><br class="">
</div>
<div class="">Paul - </div>
<div class=""><br class="">
</div>
<div class="">Within the context of the ARIN community and the ARIN-PPML mailing list, the term “fraud”</div>
<div class="">refers to ARIN’s defined <b style="font-style: italic;" class="">internet Number Resource Fraud</b><span style="font-style: italic;" class=""> </span><span style="font-style: normal;" class="">process</span>, as described here – </div>
<div class=""><<a href="https://www.arin.net/reference/tools/fraud_report/" class="">https://www.arin.net/reference/tools/fraud_report/</a>> – and as such “fraud” is indeed the proper</div>
<div class="">term in the context of this discuss. (Please take note of this usage to avoid confusion in the future.). </div></div></div></blockquote><div><br class=""></div>I quote:</div><div><br class=""></div><div><blockquote type="cite" class=""><h2 id="objective" style="box-sizing: border-box; margin-top: 0px; margin-bottom: 0.5rem; font-weight: 500; line-height: 1.2; font-size: 2.025rem; color: rgb(0, 86, 107); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";" class="">Objective</h2><p style="box-sizing: border-box; margin-top: 0px; margin-bottom: 1rem; word-wrap: break-word; line-height: 1.5; caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 16px;" class="">This reporting process is to be used to notify the American Registry for Internet Numbers, Ltd. (ARIN) of <em style="box-sizing: border-box;" class="">suspected Internet number resource abuse</em> including the submission of false documentation and information for the purpose of (1) obtaining Internet number resources, (2) gaining approval to transfer Internet number resources, (3) making unauthorized changes to ARIN’s Whois, or (4) hijacking of number resources in ARIN’s database.</p><p style="box-sizing: border-box; margin-top: 0px; margin-bottom: 1rem; word-wrap: break-word; line-height: 1.5; caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 16px;" class="">Please note that this reporting process is <span style="box-sizing: border-box;" class="">NOT</span> for reporting illegal or fraudulent Internet activity like network abuse, phishing, spam, identity theft, hacking, scams, or any other activity unrelated to the scope of ARIN’s mission. Visit our <a href="https://www.arin.net/reference/materials/abuse/" style="box-sizing: border-box; color: rgb(0, 122, 153);" class="">Network Abuse page</a> for more information on these activities.</p><p style="box-sizing: border-box; margin-top: 0px; margin-bottom: 1rem; word-wrap: break-word; line-height: 1.5; caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 16px;" class="">To report suspected fraud, please use the provided <a href="https://account.arin.net/public/fraud/index.xhtml" style="box-sizing: border-box; color: rgb(0, 122, 153);" class="">web form</a>.</p></blockquote><div class=""><p style="box-sizing: border-box; margin-top: 0px; margin-bottom: 1rem; word-wrap: break-word; line-height: 1.5;" class=""><span style="caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 16px;" class="">That’s not what Ronald is describing here… Ronald is describing a situation where an organization likely submitted no documentation about the presence or absence of a sufficient tie to the region and ARIN staff likely erroneously missed this detail on their application. </span></p><p style="box-sizing: border-box; margin-top: 0px; margin-bottom: 1rem; word-wrap: break-word; line-height: 1.5;" class=""><font color="#333333" face="system-ui, -apple-system, Segoe UI, Roboto, Helvetica Neue, Arial, Noto Sans, Liberation Sans, sans-serif, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Noto Color Emoji" size="3" class="">Such an instance is NOT fraud by the definition above IMHO (and apparently in Ronald’s as well). As such, I think your continued use of the term fraud here is actually incorrect and that the fraud process is likely not the best mechanism for Ronald’s report (though it may be the closest process ARIN currently has). </font></p><p style="box-sizing: border-box; margin-top: 0px; margin-bottom: 1rem; word-wrap: break-word; line-height: 1.5;" class=""><font color="#333333" face="system-ui, -apple-system, Segoe UI, Roboto, Helvetica Neue, Arial, Noto Sans, Liberation Sans, sans-serif, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Noto Color Emoji" size="3" class="">This discussion has, however, strayed from that central point to also cover certain deficiencies in the disclosure level of the fraud reporting process which I believe should also be addressed, but should not be conflated with Ronald’s original information and concern. Perhaps expanding the fraud reporting process into a suspected policy violation reporting process could address this, or perhaps a separate process for reporting concerns over potential ARIN errors/mistakes/etc. would be best. I don’t have a dog in that particular fight at the moment, but the current mechanism certainly isn’t ideal for addressing the particular situation in question.</font></p><div class=""><br class=""></div><div class="">Owen</div><div class=""><br class=""></div></div></div></body></html>