Everything worth knowing, nothing that isn't.
How it works
Instead of sending a code, the app asks a verification API to confirm the number over the mobile-data session. Because the device is already authenticated to the operator via its SIM, the network can attest that the SIM currently in the phone matches the MSISDN being checked — without any user interaction. This capability is being standardised and exposed through the GSMA Open Gateway initiative and the CAMARA Number Verification API, so developers can reach it consistently across participating operators.
- Verifies the SIM ↔ number match over the mobile-data session.
- No code is sent, typed, or displayed — it is 'silent'.
- Exposed via GSMA Open Gateway / CAMARA Number Verification.
- The operator, not the user, provides the proof.
Why it beats SMS OTP
SMS OTP asks the user to receive and re-enter a code, which creates friction and three fraud openings: phishing (a fake site harvests the code), SIM-swap (an attacker moves the number to their SIM), and SMS pumping / AIT (fraudsters trigger mass OTP sends to earn termination fees). Silent network authentication removes all three — there is no code to phish, the check is bound to the physical SIM in the device, and no billable SMS is sent — while completing in a fraction of a second.
- No code to phish or intercept.
- Bound to the physical SIM — resists SIM-swap.
- No SMS sent — eliminates SMS-pumping / AIT exposure.
- Near-instant and frictionless for the user.
Limitations and how to deploy it
SNA needs an active mobile-data connection on the device being verified — on Wi-Fi only, the operator can't see the session, so the check can't run — and it requires the subscriber's operator to participate. Because of that, the standard pattern is to use silent network authentication as the primary method and fall back to SMS OTP, flash call, or WhatsApp OTP when it isn't available. That gives you the best security and speed where possible, and universal coverage everywhere else.
- Requires mobile data on the device (not Wi-Fi-only).
- Requires operator participation in Open Gateway / CAMARA.
- Deploy as primary with SMS/flash-call/WhatsApp OTP fallback.
- Best-of-both: strong where available, universal coverage overall.
Silent network authentication vs SMS OTP
| Silent network auth | SMS OTP | |
|---|---|---|
| User action | None | Read and type a code |
| Speed | Near-instant | Seconds to minutes |
| Phishing risk | Resistant (no code) | Exposed |
| SIM-swap resistance | Bound to the SIM in the device | Vulnerable |
| SMS-pumping / AIT exposure | None (no SMS sent) | Yes |
| Requires | Mobile data + operator support | Any SMS-capable phone |