Vodafone deploying Number Verify 2.0 for Android in Germany, Netherlands and UK, after a similar launch in US by Aduna, AT&T, T-Mobile and Verizon which covers all devices
Vodafone has launch Number Verify 2.0 in Germany, the Netherlands and the UK with its other opcos to follow. The API automatically authenticates users’ phone number making passcodes via SMS obsolete.
This is something to celebrate as SMS one-time use passcodes are an infernal nuisance for users – especially when they don’t work – and only confirm that someone entered a code sent to a mobile number.
They prove that the real subscriber is present or that the authentication journey has not been compromised but businesses and consumers are still exposed to phishing, social engineering and artificially inflated traffic (AIT) – automated bots trigger large volumes of one-time password requests.
With Number Verify 2.0, the mobile network verifies a user’s phone number is associated with their SIM and device across app and web journeys, whether the user is using mobile data or Wi-Fi
Although the operator group claims, “Number Verify 2.0 addresses a fundamental gap in digital identity today”, unfortunately in this first instance, it only works with Android, not Apple devices – which surely is a fundamental gap? Aduna (see Action in US below) appears to have cracked it.
As the press release notes, “Mobile phone numbers are one of the most widely used identifiers for registration, login, account recovery and transaction confirmation”.
The user must give their consent to use this method of authentication, allowing their phone number to be shared with a service provider, like a bank or retailer.
The API behind Number Verify 2.0 is based on CAMARA international standard, which according to Vodafone ensures interoperability across operators and markets. Developers can integrate once and deploy globally as operator support expands.
Developers can find out more about Number Verify 2.0 here.
Aduna in action in the US
Last week Aduna, AT&T, T-Mobile (part of Deutsche Telekom) and Verizon, announced they are deploying a network-based solution to help protect mobile users from AI-driven identity theft, which is on the rise.
Aduna was set up by Ericsson and is a venture among some of the world’s largest operator groups. It provides is a standardised API platform and portal to simplify how software developers and businesses interact with mobile network capabilities across the world. It combines CAMARA’s work and APIs from operator participants*.
Again, it gets rid of one-time passcodes by confirming that users are who they say they are through possession-based authentication – service providers such as retailers and banks can confirm the authenticity of a mobile number with an operator carrier and its association with the SIM and device in use, in real-time.
Previous attempts fell flat if the subscriber was using Wi-Fi or not all types of device were covered. According to Aduna, “The latest breakthrough addresses these technical barriers, enabling the technology to work seamlessly across all major operating systems and network types…to provide a consistent, secure login experience for virtually every smartphone user in the United States.”
The launch comes as US consumers reported a record $15.9 billion in fraud losses last year, according to the FTC1, amid growing concern over increasingly sophisticated AI enabled scams. Aduna’s network-level approach provides:
“We are entering an era where your mobile number is one of your most secure digital passports,” said Anthony Bartolo, CEO of Aduna. “By authenticating users directly through the carrier network in real time, we can reduce customer friction while significantly reducing the risk of fraud through interception or account takeover.”
* They include AT&T, Bharti Airtel, Deutsche Telekom, KDDI, Orange, Reliance Jio, Singtel, Telefonica, Telstra, T-Mobile, Verizon and Vodafone. Aduna’s developer partner platforms include Google Cloud, Infobip, Sinch and Vonage.
