That's my guess. They probably own some "premium numbers" and use the voip.ms account to repeatedly access them, effectively transfefring money to themselves from voip.ms in the process.