Have a DSX 80 with 5 analog trunk lines and 2 port VM. Customer says the phone bill has random toll charges that were made while office is closed.

I could understand if this were an IP system and settings were not correct but this is just a basic setup. Any ideas?