Sim Swap

Secure your customer journeys against SIM swapping fraud

Presentation

Mobile account takeover through SIM card fraud is widespread and often has serious consequences.

To achieve this, the fraudster requests a phone number migration to a new SIM card (SIM SWAP).

Once completed, fraudsters gain the ability to receive OTP codes to authenticate and perform banking transactions or purchases on behalf of the customer.

With the SIM SWAP API, the service provider is informed if the SIM card has been recently activated, allowing them to manage fraud risks related to SIM swapping using reliable mobile operator data, while fully complying with General Data Protection Regulation (GDPR) rules.

How does it work?

When queried with a mobile phone number, the SIM VERIFY API answers YES or NO to the question: "has there been a SIM card change on the mobile line during the last x hours?"

  • SIM VERIFY

      1. 1

        Service access request

        A user wants to access a sensitive service, protected by a security code sent via SMS (OTP).

      2. 2

        SIM card status verification

        The service provider wants to check whether the SIM card activation is recent or not. It queries the SFR SIM SWAP API for the phone number concerned, and SFR returns this information to the service provider.

      3. 3

        Fraud risk assessment

        The service provider uses this information to assess the risk of fraud related to a potential SIM swap and chooses the most appropriate authentication method accordingly.

SFR PAY is here to support you

Nos équipes et notre réseau de partenaires vous accompagnent dans l'étude, le choix, l'intégration et le déploiement de votre solution.