Asterisk 1.6 with call-limit sets and fraud

is someone had to deal with fraud on asterisk 1.6 ? I have sets up call-limit as 2 concurent calls but in CDR i saw 4 concurement calls, is it possible?