Authentication, passkeys, SIM swap, telecom identity and IAM: how people and machines prove who they are, and how attackers get around it.
The startup says its SIM-based login now works across AT&T, T-Mobile and Verizon. Here is what the company claims, what independent reporting confirms, and the questions a bank should ask before a pilot.
Revision 4 keeps SMS codes on the permitted list, with strings attached, and adds synced passkeys as a phishing-resistant alternative. The strings read like a migration plan.
Number verification, silent network authentication and SIM-based cryptography all use the mobile network instead of a text message. They are not the same thing.
Passkeys that sync across a user’s devices trade some control for usability. Here is what stays phishing-resistant, and what moves to the sync account.
How criminals take over a phone number, why it unlocks so many accounts, and what carriers, banks and customers can do about it.