# How does HLR lookup and MNP number intelligence work?

> HLR lookup and MNP (mobile number portability) intelligence is real-time number validation that queries the Home Location Register over SS7 to confirm whether a number is active, which operator currently owns it after any porting, and whether it is roaming — all before you send. It removes invalid numbers, corrects routing for ported numbers, and cuts wasted A2P spend and fraud exposure.

- Canonical URL: https://www.broadnet.me/answers/hlr-mnp-number-intelligence
- Language: en
- Last reviewed: 2026-07-22
- Publisher: BroadNet (https://www.broadnet.me)

## How an HLR lookup works

The lookup sends an SS7 MAP SendRoutingInfoForSM query to the number's home HLR, exactly as an SMSC would before delivering a message. The HLR responds with the subscriber's status, the current serving network (MCC/MNC), and the IMSI — revealing whether the number is live and reachable without ever sending an SMS. See /answers/what-is-hlr and /answers/ss7-map-explained.

## What MNP (number portability) changes

Number portability lets a subscriber keep their MSISDN when they switch operator, so the dial-code prefix no longer reliably identifies the carrier. An HLR/MNP lookup returns the operator that actually owns the number today — essential for routing A2P traffic to the correct interconnect and pricing it correctly. See /answers/what-is-mnp and /answers/what-is-msisdn.

## What the response tells you

A typical result flags the number as active, absent, or invalid; returns the current MCC/MNC (network); indicates whether the subscriber is roaming; and shows a ported flag when the number has moved networks. That's the raw material for list hygiene, least-cost routing, and pre-send validation. See /products/hlr-lookup.

## Benefits: deliverability, cost, and fraud screening

Scrubbing a list against HLR before a campaign lifts delivery rates by dropping dead numbers, routes ported numbers correctly, and reduces spend on undeliverable sends. It's also a front-line control against artificially inflated traffic (AIT/SMS pumping) — validating numbers before OTP sends stops bots draining your budget. See /answers/what-is-ait and /answers/what-is-sms-pumping.

## Limitations to be aware of

Some operators restrict or obscure HLR responses for privacy, so coverage and field completeness vary by country. On 4G/5G cores the HSS (and 5G UDM) replaces the HLR, though the lookup service abstracts that difference. And a lookup is a point-in-time snapshot — status can change between validation and send. See /answers/what-is-hss and /answers/what-is-hlr-lookup.

## HLR lookup vs a simple number-format check

A format check (E.164 validation) only confirms a number is well-formed — it can't tell you if the number is real, active, or which network owns it after porting. An HLR lookup queries the live network, so it catches disconnected numbers, corrects ported routing, and screens fraud that format validation misses. Use both: normalise to E.164, then validate against the HLR. See /answers/what-is-e164.

## Related

- [All answers](https://www.broadnet.me/answers)
- [Glossary](https://www.broadnet.me/answers)
- [What is HLR Lookup?](https://www.broadnet.me/answers/what-is-hlr-lookup)
- [What is MNP (Mobile Number Portability)?](https://www.broadnet.me/answers/what-is-mnp)
- [What is an HLR (Home Location Register)?](https://www.broadnet.me/answers/what-is-hlr)
- [What is an HSS (Home Subscriber Server)?](https://www.broadnet.me/answers/what-is-hss)
- [What is an MSISDN?](https://www.broadnet.me/answers/what-is-msisdn)
- [What is AIT (Artificially Inflated Traffic)?](https://www.broadnet.me/answers/what-is-ait)
- [HLR Lookup](https://www.broadnet.me/products/hlr-lookup)
- [SMS API](https://www.broadnet.me/products/sms-api)
- [MyOTP](https://www.broadnet.me/products/myotp)
- [Bulk SMS](https://www.broadnet.me/products/bulk-sms)