Breadcrumb

  • Home
  • Malaysia tries to block fraud vector; Google circumvents it.

Search form

Main navigation

  • Home

HOME | ALL NEWS

Malaysia tries to block fraud vector; Google circumvents it.

Monday, 19 June, 2023 - 07:59

When Malaysia decided that fraud via links in Short Message Service, or SMS, were a nuisance that needed to be stopped, the government and all Mobile carriers found a way to simply block any message originating on or arriving at a mobile phone in the country, even foreign registered phones. Phase one of the implementation is effective. Or it was until Google found a work-around . Now all those national security monitoring tools so loved by governments don't work so well.

The SMS ban worked. We know. We tested it. Messages from foreign phones did not arrive and messages to them disappeared somewhere. And communications between local phones, ditto. There is on news as to what happens to those messages that are intercepted and blocked but no one should be in the least surprised that mobile companies keep copies of messages. It's a legal requirement almost everywhere and the use of call records and SMS data is a hackneyed feature of TV police dramas.

But the filtering of those messages is relatively rare.

But Google has found a way around it. What if your SMS wasn't sent as an SMS but as data.

That's what Google is doing with its RCS system within Android. RCS is part of Android's Messaging app. It's turned off by default but it nags users to turn it on. But it doesn't tell you what it is.

RCS stands for Rich Communication Services and it's everything you have from a myriad messaging systems (including WhatsApp and the SMS and MMS you've been used to since the 1980s) but better.

Several companies have tried to bring messaging into their ecosystem but none has managed. There is no doubt that Messaging is Google's WhatsApp (and many others) killers.

Limitations: it is an Android-specific function - so it doesn't work on iPhones or Kylin.

What does it do? If a user has data (wifi or mobile data) then the message is taken out of the SMS/MMS system and sent through the data network. It doesn't touch SMS or, importantly, the SMS provider. And it is delivered through the data system, not the SMS system.

So, to use the Malaysian example, the bar on URLS is circumvented, even though the users at both ends think they are sending an SMS. This is reinforced by the fact that it is necessary only to enter the recipient's phone number to send a message. No registration is required at either end.

Previous story: https://worldmoneylaunderingreport.com/publications/web/news/malaysia-i…

A D V E R T I S E M E N T

Footer menu

  • Weekly Digest (opens in new tab)
  • Images attribution (opens in new tab)
  • Corporate, privacy, intellectual property and access (opens in new tab)
  • Advertising and Recommendations (opens in new tab)
  • Promote your business (opens in new tab)
  • Enquiries (opens in new tab)


 

BOT AND SCRAPER ACCESS DENIED

 


 

Built with Drupal     |     Hosted by Siteground     |     Template by Alaa Haddad     

Design by Vortex Centrum Limited    |     Some services provided by Google Workspace    

Posters and other merch by ProjectLXX   |   Privacy and security services by Surfshark and Firetrust. 


Nothing in this website is intended to be or shall be taken as legal advice. 

You should always seek advice from a practitioner experienced in this area. 


Everything on this website is copyright Nigel Morris-Cotterill and/or Vortex Centrum Limited for itself or one of its business units. No downloading, printing or other means of replicating or reusing is permitted. In particular, all bot access is denied and all scraping of content will result in the legal action set forth in the terms and conditions in this site. For legal, cookies and privacy see vortexcentrum.com.

Copyright 1999- © 2026 Vortex Centrum Limited - All rights reserved. Bot access denied.