There is disclosed a system and method for blocking a device from a carrier network. In an embodiment, the method comprises defining an unauthorized combination filter including one or more device parameters; attaching the unauthorized combination filter to a carrier; comparing the device parameter values in the unauthorized combination filter to device parameter values stored in the device; and if the device parameter values stored in the device match the device parameter values in the unauthorized combination filter, then blocking the device from accessing the carrier network. The device parameter values stored in the device may include one or more of a device type value, a device operating system version value, and a device application version value, and the method further comprises comparing these one or more values to corresponding device parameter values defined in the unauthorized combination filter. The unauthorized combination filter may be attached to a carrier by providing a carrier identifier.