BroadNet
Protocols BroadNet answer

GT — Global Title in SS7 routing explained

Last reviewed 2 min readReviewed by BroadNet engineering
Quick answer

A Global Title (GT) is an SS7 address — usually a phone number or an E.164-style numeric — used to route SCCP messages between network elements when the sender does not know (or does not want to know) the destination's Point Code. Where Point Codes are network-internal addresses, Global Titles are application-level addresses; the STP translates GT to DPC at routing time. Every MAP query against an HLR uses GT-based routing.

Plain-language definitionVendor-neutralReviewed May 28, 2026
The long answer

Everything worth knowing, nothing that isn't.

§01

What it actually does

When an SMSC needs to do an SRI-for-SM against a foreign HLR, it doesn't know the HLR's Point Code — it only knows the recipient MSISDN. The SCCP layer puts the MSISDN (or a derived GT) into the Called Party Address as a GT, and lets the STP do Global Title Translation (GTT): the STP looks up which operator owns that number range, finds the right HLR's Point Code, and forwards the message there. GTT tables at major international STPs are massive — millions of GT-to-PC mappings, updated continuously as number ranges port and operators rebalance.

§02

Why it matters commercially and for security

GT-based routing is the reason cross-operator SS7 works at scale — without it, every SMSC would need to maintain Point Code mappings for every operator in the world. From a security standpoint, GT is also the most common vector for SS7 attacks: an attacker presenting a foreign-operator GT can persuade an STP to route an MAP-SRI-FOR-SM into a target operator's HLR, harvesting the serving MSC and enabling location tracking. SS7 firewalls (/operators/ss7-firewall) cross-check the inbound GT against the peer's IR.21-declared GT range and drop mismatches as FS.07 Category 1 or 2 violations.

§03

Operational angle

GT changes are operationally invisible to the application — your SMSC keeps doing SRI-for-SM by MSISDN, and the STP transparently re-routes when the destination operator changes its GT. The classic failure mode: an STP's GTT table goes stale, a number-range port doesn't get reflected, and your messages start dead-lettering against the wrong operator's HLR. Signalling intelligence platforms (/platforms/signaling-cdr) detect this by correlating SRI-for-SM responses against MNP databases.

§04

Privacy and compliance considerations

Because GT often is an MSISDN, every SS7 message carrying a GT is carrying personal data. GTT tables themselves (which contain ranges, not individual subscribers) are not personal data; the per-message GT in flight is. EU GDPR and KSA PDPL both reach the GT field in SS7 logs once it identifies an individual subscriber. The standard operator response is encrypted storage of signalling logs, role-based access, and aggregation before sharing externally.

BNWritten by the BroadNet engineering team·Operating carrier-grade messaging since 2003, headquartered in Dubai·Editorial standards
Build with this

Need help wiring this up?

The pages below are the products and integration guides that put this concept on the wire. If you'd rather walk through it live, our engineering team takes calls same-day during MENA working hours.

Talk to our engineering team
Feedback

Was this answer helpful?

Your vote helps us prioritise which answers to expand with examples, diagrams, and code snippets.

Was this answer helpful?
Thanks — noted. We'll keep this answer maintained.
Got it. Tell us what was missing — send a quick note.

How we write and review content

Still need help?

Talk to a real engineer about your build.

We reply within one business day, and production accounts get 24/7 support. Our solutions engineers ship code, not scripts.

$ curl -X POST https://api.broadnet.me/sms/sendSms
Response SLA
Test-access requestsReply within 1 business day
Production24 / 7 · < 15 min
Operator NOC24 / 7 · pager