Customer called informing me that CenturyLink had called them to inform them that they detected International Toll Calls at 10pm from their phone lines over the weekend. CenturyLink has blocked some things but I need to do some restrictions within the system. Apparently it is coming through the AutoAttendant. Looking for specific suggestions on programming changes. I haven't dealt with this issue in over 10 years on other systems (Norstar I believe). I use a laptop and DSX system administrator.
Thank you,
Rick Swineford

Can't say for NEC, but the worst toll fraud cases I've seen all related to call forwarding on the line level. If you have a way to block those codes - do it!

Block out calling on AA

Change all mailbox passwords, disable mailboxes which are not needed and apply a toll restriction to the intramail extensions.