Diverters

by Ray Nonte

A call diverter is a piece of hardware attached to a phone line that will forward an incoming call to another phone number.  This type of call forwarding system is done externally, separate from the phone company services.

So how can a phreaker take advantage of this situation?  When you call a diverter, you will either hear a "click" and then ringing, or a ring and then a "click" followed by ringing.  The "click" is the sound of the diverter being activated.  Your call is forwarded onto the line being paid for by the business that owns the diverter.  The trick is to seize that line and dial out from it.

Capturing the line used by a local diverter will provide a clean connection since you are dialing of of its dial tone as if it were your own.  This means that you can dial any phone number you wish as long as the person/company with the diverter hasn't blocked access to any exchanges.

If you happen to call a number that traces, the trace will show the number of the diverter, not the phone you are calling from.  In this respect, diverters are usually safer than long distance extenders, but there are no guarantees.  The advantages to this kind of setup make it ideal for phreaking incognito

• Trace-free calls (can only be traced back to the diverter, not you!)
• Free long distance calls
• Free 900 calls

How to Use a Diverter

Call the number of a known diverter.  Your call will be diverted to the forwarding number.  When the party at the other end answers, politely state that you dialed the wrong number and wait for them to hang up the phone.  Do not hang up your phone.  Stay on the line and wait for the dial tone.  (Some telco central offices are programmed not to drop to a dial tone after an outgoing call to prevent just this sort of thing.)

The dial tone you hear will be of the diverter.  You have now successfully seized the diverter's phone line and can freely dial out on it.  All calls will be billed to the diverter.  Also, if an attempt is made to trace your call, the trace will point to the diverter and not you.

Diverters are not perfect - they have their share of problems too.  Some diverters will disconnect the forwarding line after a certain amount of connection time has passed, 10 to 15 minutes is typical.  This is a watchdog feature used to guard against phreaking attacks.  Other diverters will click when used, every minute or so.

Where to Find Diverters

Diverters are usually found on the phone lines of many doctors, plumbers, etc. - any person/business that requires round-the-clock accessibility.  Use your local Yellow Pages to locate a business that advertises 24-hour service.  Dial the phone number and listen carefully.  As mentioned earlier, you will either hear a "click" and then ringing, or a ring, then a "click" followed by ringing.  When the party answers the phone, get them to hang up (e.g., wrong number tactic).  Wait for the dial tone and then you're in business!

I recommend that you verify that you have seized the diverter's line by dialing an ANI or ANAC number.  If it reads back the number of the phone you are calling on, then you are not on a diverter.  If it reads back a different number, you have successfully located a diverter.  Write down the number and keep it in a safe place.

One of the most famous diverters of the past involved the phone company itself.  In fact, this method may still work in some parts.  The caller would dial the credit operator and ask for the AT&T credit operator.  When the operator answered, the caller would ask for the AT&T credit operator.  The local credit operator would put on a recording telling the caller what number to dial.  After the recording disconnected, the caller would get a dial tone belonging to their local credit office!

Conclusion

Call diverters are a wonderful tool for you to add to your phreaking arsenal.  Be careful though.  After you've located a diverter, don't abuse it or the business is sure to pull the plug leaving you to start all over again.  I've found it best to build a list of known diverters and then cycle through them as I need them.  The business is less likely to notice one or two long distance calls per month vs. a whole bunch of them!