PBX / VoIP Add-On · Voice Fraud + Social Engineering Alerts

Add live fraud alerts to
the phone system you already run.

Vicall Landlines does not replace your carrier, PBX, SIP trunk, extensions, or desk phones. It plugs in like the VoIP add-ons MSPs already deploy for call recording, QA, compliance, analytics, and SIPREC: your phone system mirrors call media to Vicall Edge, hosted by the client or MSP on-prem or in cloud. Audio stays on-prem or in the client/MSP cloud; Vicall never has access to the raw call audio.

Deploy for a Client → Start MSP Account

SIPREC · RTP mirror · PBX recording connector · Hosted VoIP stream · Analog gateway · Client/MSP hosted · $2.50/seat/mo

0
Numbers, carriers, or desk phones replaced
SIP+RTP
Connects like a normal VoIP add-on
YOU HOST
Runs where the client or MSP hosts it
$2.50
Per protected landline seat monthly
// PBX-Side Architecture

The call still goes
where it always went.

Vicall lives beside the phone system, not in front of it. Your PBX, hosted VoIP provider, SIP trunk, or analog gateway keeps routing calls to the same phones. A duplicate media stream is sent to the Vicall Edge runtime you choose: a small on-prem box, Mac mini, client VM, MSP VM, private cloud instance, or inexpensive cloud VM.

Existing
Phone System
PBX, hosted VoIP,
SIP trunk, or analog gateway
normal call path
unchanged
Still Your PBX
Desk Phones
Keep Ringing
Same number, same extensions,
same call routing
no porting / no migration
media mirror
SIPREC / RTP / media fork
Vicall Edge
Risk Runtime
VOICE RISK
PHRASE ALERT
EVENTS ONLY
The PBX keeps doing PBX work  ·  Vicall Edge is hosted by the client or MSP
01

Connect where the PBX already exposes media.

Most phone systems already support some version of this for call recording, QA, contact-center analytics, or compliance archiving: SIPREC, a call-recording target, RTP/media fork, SBC mirror, or a hosted VoIP media stream. Vicall uses that same add-on pattern.

02

Send a duplicate stream to Vicall Edge.

The live call still routes to the employee's desk phone or softphone. Vicall Edge receives a second copy of the media, analyzes it inside the client/MSP-controlled environment, and stays out of the critical call path.

03

Run voice and phrase risk in your edge environment.

Vicall Edge runs the voice-clone model and optional risk-phrase policy where the client or MSP hosts it. Use a Mac mini, small server, client VM, MSP VM, private cloud instance, or cheap VM depending on the phone system and preference.

04

Push the alert to the people on the call.

Employees get the useful part: human, suspicious voice, likely clone, or policy phrase warning while the conversation is still happening. Audio stays on-prem or in the client/MSP cloud; Vicall never has access to raw call audio or recordings.


// Integration Modes

Built for the phone stack
your client already has.

The exact connector and hosting target depend on the PBX or VoIP provider, but the deployment principle is simple: mirror media to Vicall Edge without changing how calls are answered. Think of it like adding a call recorder, QA recorder, analytics feed, IDS sensor, or SIEM collector for phone calls. The client or MSP hosts the edge runtime; Vicall gets verdict events, not the call audio data plane.

SIP
SIPREC or Recording Target
For PBX and SIP platforms that can send a call-recording stream or SIPREC session to an external target. Vicall Edge receives the duplicate media stream inside the client/MSP-hosted environment.
PBX · SIPREC · Recording
RTP
RTP Fork or SBC Mirror
For SIP trunk and session border controller environments. Fork the media at the network edge while normal call routing continues untouched.
SIP Trunk · SBC · Media Fork
Hosted VoIP Media Stream
For cloud phone systems that expose call-recording, webhooks, or media-streaming features. Vicall connects as a risk-analysis destination, not as a replacement phone app.
Hosted VoIP · Cloud PBX
PBX
Client/MSP-Hosted Edge
Run Vicall Edge on a Mac mini, small server, client VM, MSP-hosted VM, private cloud instance, or inexpensive cloud instance. You or the client host the runtime; Vicall does not host the raw call media.
Client Hosted · MSP Hosted · Cloud VM
FXO
Analog Gateway Path
For legacy analog lines, POTS replacement projects, and mixed environments. Use an approved gateway or audio interface so older lines can still feed Vicall Edge.
Analog · POTS · Gateway
MSP
Events, Not Recordings
Vicall Edge sends verdicts, policy alerts, timestamps, and seat/account metadata into the portal. Raw call audio, recordings, and transcripts stay on-prem or in the client/MSP cloud; Vicall never has access to them.
Verdicts · Alerts · No Raw Audio

// Who Needs This

Any office where
a phone call can move money.

The threat is not just “a voice clone.” It is a caller who sounds believable and pushes an employee toward a bad action: wire instructions, new routing numbers, payroll changes, credentials, verification codes, gift cards, medical records, or account changes.

⚖️
Law Firms
Closing wires, settlement instructions, client identity checks, and urgent partner requests often start with a front-desk phone call.
Wire instructions · Client impersonation
💰
Financial Advisors
Attackers ask for withdrawals, account changes, routing updates, or verification-code help while sounding like a real client.
Unauthorized transfer · Account takeover
🏠
Real Estate
A caller pretends to be a buyer, title office, lender, or agent and changes wiring instructions right before closing.
Closing fraud · Escrow diversion
🏥
Medical Practices
Insurance verification, prescription authorizations, patient-record requests, and payment questions all hit the phone desk first.
HIPAA exposure · Prescription fraud
🏗️
Construction & Contracting
Vendors and subcontractors call about deposits, change orders, invoices, and payment rerouting. The caller only needs one believable employee.
Payment fraud · Vendor impersonation
🏢
Any Business with a Front Desk
If someone can call your office and convince an employee to share, change, approve, reset, transfer, or verify something, the phone system is part of the attack surface.
Social engineering · Internal impersonation

// What You Get

A risk layer for phone calls.
Not another phone system.

Flexible Vicall Edge Runtime
Run beside the PBX on-prem, in a client-controlled VPC, or in an MSP-managed cloud. The runtime receives mirrored call media and returns risk alerts.
On-Prem · VPC · MSP Cloud
🛡️
Private AI and Policy Checks
Voice-clone detection and optional risk-phrase alerts run inside the selected edge runtime. Raw audio does not need to be uploaded to Vicall's servers.
Voice Risk · Phrase Policy · Private
🔌
Standard VoIP Add-On Pattern
Deploy with SIPREC, recording connectors, media forks, SBC mirrors, hosted VoIP streams, or analog gateways depending on the client environment.
SIPREC · RTP · Gateway
Live Alerts While the Call Is Active
The user sees a voice-risk verdict and policy phrase warnings in real time: routing number, account number, wire transfer, verification code, password, gift card, payroll change, or custom terms.
Mid-Call · Mobile Alerts · Policy
Failure-Safe by Design
Because Vicall is normally out of band, the PBX keeps routing calls even if the risk layer is offline or being serviced. Phone service does not depend on Vicall.
Out-of-Band · No Call Blocking
📊
Team Portal
Manage client sites, seats, billing, detection settings, and phrase-alert policies from the Vicall portal. MSPs can manage many companies from one account.
Multi-Site · MSP Ready · Alert Settings

// The math is simple

One fraud call covers
years of protection.

The expensive call is usually ordinary until the last minute: a new wire destination, a changed routing number, a fake vendor, a cloned executive, a request for a code. Vicall Landlines software starts at $2.50/seat/month wholesale. One avoided payment-redirection incident can cover years of protection.

Average wire fraud loss per incident $125,000
Vicall Landlines · 2 seats · 1 year $60
ROI if one fraud call prevented 2,083×
// Pricing

Two parts.
One deployment.

Vicall Landlines is MSP-deployed. Your client gets the right PBX/VoIP connector path and hosting target for their environment: on-prem hardware, Mac mini, client VM, MSP VM, private cloud, or inexpensive cloud VM. You bill your client, we bill you wholesale.

Step 1 · One-Time
Runtime + Connector
One client site or tenant · Hosting target selected by phone system
Client or MSP-hosted Vicall Edge runtime on Mac mini, small server, client VM, MSP VM, or cloud instance
PBX/VoIP connector path: SIPREC, media fork, recording target, hosted stream, SBC mirror, or analog gateway
Setup guide for the selected PBX, VoIP, gateway, and hosting pattern
Existing numbers, extensions, and desk phones stay unchanged
Start MSP Account →

Pricing provided after MSP account setup

Step 2 · Monthly
Monthly Service
$2.50
per seat / per month · billed monthly per location
Vicall software license for the edge runtime — always up to date
Private AI detection and phrase policy on mirrored calls; audio stays on-prem or in the client/MSP cloud
MSP portal — manage client sites, seats, and policy from one account
2-seat minimum · $5/month per client site to start
View MSP Wholesale Rates

Cancel anytime · No contract · Stripe billing

Vicall Landlines is deployed by MSPs and IT providers because the right connector and hosting target depend on the phone system. Not an MSP? Ask your IT provider about adding Vicall beside your PBX or VoIP system — or find a Vicall MSP partner.

// Common Questions

Quick answers.

Do we have to change our phone numbers, carrier, PBX, or desk phones? +

No. Vicall is designed as a passive PBX and VoIP add-on. Your carrier, phone numbers, PBX, call routing, extensions, and desk phones stay in place. Your phone system mirrors media to the client/MSP-hosted Vicall Edge runtime while normal calling continues.

How does Vicall plug into PBX and VoIP systems? +

Vicall uses the same patterns MSPs already use for call recording, QA, compliance, and analytics tools: SIPREC where available, a PBX call-recording connector, RTP/media fork, SBC mirror, hosted VoIP media stream, or an analog gateway for older systems. The exact connector depends on the client's phone environment.

Does Vicall sit in the call path? +

Normally, no. Vicall is out of band. Calls still route through the existing PBX, hosted VoIP provider, SIP trunk, or carrier. A duplicate media stream goes to the client/MSP-hosted Vicall Edge runtime, so a Vicall issue does not block normal phone service.

Where does Vicall Edge run? +

Vicall Edge can run on-premises or in cloud, depending on the phone system and client preference. It can be a Mac mini next to the PBX, a small server, a client-controlled VM, an MSP-hosted VM, a private cloud instance, or a low-cost cloud instance. The client or MSP hosts the runtime. Audio stays there; Vicall never has access to raw call audio.

Can we choose which words trigger alerts? +

Yes. Phrase alerts are optional and configurable. You can keep them off, use the default social-engineering list, or add terms your team should never handle casually on a call — routing number, account number, wire transfer, password, verification code, gift card, payroll change, or industry-specific phrases. The checks run inside the selected Vicall Edge runtime and do not store transcripts by default.

Does Vicall replace call recording or compliance archiving? +

No. Vicall is a real-time risk-alert layer, not the system of record for compliance recording. If a client already records calls, Vicall can usually live beside that recording system using a separate media mirror or compatible PBX-side integration.

How many Vicall Edge runtimes do I need? +

Usually one Vicall Edge runtime per phone-system site, tenant, or media boundary. That runtime can be a Mac mini, small on-prem server, client VM, MSP-hosted VM, private cloud instance, or inexpensive cloud VM. If all lines run through one PBX or hosted VoIP tenant with a single mirrored media path, one runtime can cover that environment.

I'm an MSP — can I deploy this for multiple clients? +

Yes — the MSP portal lets you manage separate phone numbers, seat pools, and invite codes for each client company from a single account. See the MSP Partner Program for details.

Add Vicall beside
the PBX.

Keep the client's carrier, PBX, numbers, and desk phones. Mirror the call media to Vicall Edge, run it on-prem or in cloud, and warn the team before a phone-based social-engineering attack turns into a payment, password, or data incident.

Start MSP Account → See Phone Attack Vectors