Service Providers Rethink Fraud Detection in the 5G Era

The telecommunications landscape is evolving faster than ever before, and so are the threats targeting it. As service providers expand into 5G standalone (SA), private networks, and edge environments, the fraud ecosystem is growing more complex and distributed, making it harder to detect and address attacks.

What was once a battle against well-understood issues such as roaming fraud has become a dynamic fight against AI-enabled attacks, malicious traffic patterns, and infrastructure-level exploits.

The scale of the challenge is striking. Global telecom fraud losses reached $41.82 billion in 2025, continuing an upward climb fueled by increasingly sophisticated attack methods.

The Rapidly Expanding Attack Surface

Today’s networks are anything but simple. Providers are managing a mix of LTE, 5G non-standalone (NSA), and fully virtualized 5G SA architectures, often alongside private network deployments. Each layer introduces new interfaces, protocols, and potential vulnerabilities.

At the same time, attackers are no longer just targeting revenue streams—they’re targeting the network fabric.

Survey data included in a report published by Mobile World Live shows that 54 percent of providers rely on packet core probe data across control and user planes, while 5G service-based architecture (SBA) logs and radio-access network (RAN) trace data (both at 41 percent) are quickly becoming essential inputs. The takeaway is clear: Visibility is expanding, but so is complexity

From Data Overload to Intelligent Detection

As data volumes surge, the challenge is no longer about data collection, but rather data interpretation. Disparate data sources, inconsistent formats, and siloed systems often delay insights and hinder response times.

As a result, service providers are addressing this by prioritizing:

• Privacy-preserving data controls
• Subscriber and device enrichment
• Cross-domain session correlation

These techniques are foundational to transforming raw telemetry into actionable intelligence. But even with improved data quality, manual processes alone cannot scale to meet today’s threat velocity.

Enter AI-Driven Automation

AI is now reshaping the fraud detection paradigm. Operators are turning to AI and machine learning to automatically identify anomalies across massive datasets to detect subtle deviations in signaling, user-plane traffic, and behavioral patterns before they escalate.

AI makes this possible and empowers service providers to reduce false positives, accelerate detection, and enable automated responses such as policy enforcement and traffic steering. In an environment where seconds matter, automation is no longer optional.

Integration Is a Force Multiplier

Detection is no longer a stand-alone capability but rather part of a broader, integrated security ecosystem.

• More than 40 percent of providers prioritize integration with data lakes, business intelligence platforms, and security systems to unify visibility and enable better decision-making.

AI thrives on this integration, leveraging diverse data sources to improve accuracy and context for faster insights, coordinated responses, and a more resilient network posture.

Building for What’s Next

As providers prepare for 5G SA and network slicing at scale, new challenges will emerge around observability, per-slice visibility, and enforcement.

With many service providers already exploring API-driven mitigation strategies, including Domain Name System (DNS) policies, Policy Control Function/Session Management Function (PCF/SMF) controls, and slice-level containment, fraud prevention is no longer reactive. The new approach is continuous, automated, and deeply embedded across the network.

A New Era of Security

Service providers remain focused on scale, speed, and sophistication, with AI not only enhancing fraud detection but also fortifying the network infrastructure.

Those who succeed will be the ones who unify their data, embrace automation, and build detection strategies that evolve as quickly as the threats they face. Because in today’s networks, visibility is power and intelligence is everything.

To explore detailed findings, data trends, and provider priorities shaping fraud detection strategies, read the full survey report.

For a quick, visual breakdown of the key insights and metrics driving industry transformation, download the accompanying infographic.