In short
Check whether the messages are still reaching subscribers. If enterprise traffic has genuinely stopped, subscribers stop receiving it and the enterprise confirms reduced sending. If volume disappeared from the operator's records but subscribers still receive the messages, the traffic was rerouted — and device-based route testing will show it arriving.
The decisive test
The question has a clean answer, and it does not come from network records. If an operator's A2P volume from a given enterprise falls, there are only two possibilities: the enterprise is sending less, or it is sending the same amount by another route.
Route testing settles it. Trigger the enterprise's own message flow — request a password reset, place a test order — to a trap number on the operator's network, and see whether a message arrives and what it looks like when it does.
Corroborating evidence
Alongside the test, four checks build the picture:
- Enterprise confirmation — ask the customer or aggregator directly whether sending volumes changed
- Subscriber sampling — are subscribers still receiving the enterprise's notifications and OTPs?
- Sender ID presence — does the enterprise's registered Sender ID still appear anywhere in inbound traffic, on any route?
- Cross-channel check — has verification moved to FlashCall or an in-app method rather than to another SMS route?
The genuine reasons volume falls
Not every decline is bypass, and assuming otherwise damages customer relationships. Enterprises consolidate notifications, move to push or in-app messaging, complete a migration off SMS-based verification, lose their own end users, or respond to their own cost pressure by trimming promotional sends.
Seasonal effects are real too. Retail messaging peaks and troughs, and a January decline against a December peak is not a fraud finding.
When the answer is FlashCall
A pattern worth checking explicitly: OTP volume from a specific platform falls sharply, subscribers confirm they still verify successfully, and no alternative SMS route is carrying the traffic. That combination usually means verification moved to the voice channel.
Correlating the messaging decline against short unanswered calls from the same platform, as Guardivia's FlashCall and Voice Fraud Solution does with SMS OTP observations from the firewall, converts a mystery into a quantified commercial issue.