France’s four leading mobile network operators, Bouygues Telecom, Free, Orange, and SFR, have collaboratively taken significant steps to combat the escalating issue of online fraud and identity theft by launching innovative network Application Programmable Interfaces (APIs). Announced on December 3, 2024, these companies will introduce two network APIs, KYC Match and SIM Swap, for the French market by the first half of 2025. This initiative is part of the Global System for Mobile Communications Association’s (GSMA) Open Gateway project, which began in 2023 to facilitate the creation of digital products that operate efficiently on all devices, regardless of the country or operator. The GSMA, a trade association with over 750 members since its founding in 1995, supports this movement with substantial participation from 67 mobile network operators and 26 channel partners globally, underlining the project’s broad appeal and ambition.
Advanced APIs for Enhanced Security
The KYC Match API allows businesses to verify customer-provided information against verified records from mobile network operators without sharing any personally identifiable information, effectively bolstering the know-your-customer (KYC) process. This offers businesses a reliable tool for confirming the legitimacy of individual customer information. Complementing this, the SIM Swap API enables businesses to determine if a phone number has recently switched SIM cards, an essential measure to prevent account takeover attacks. Such attacks are often executed using social engineering techniques and stolen data, making the SIM Swap API a critical defense mechanism.
These advanced APIs aim to significantly reduce online fraud by providing businesses with reliable tools to verify customer identities and activities. Henry Calvert, Head of Networks at the GSMA, emphasized the initiative’s benefits by highlighting the enhanced security against fraud and operational ease it affords developers. Additionally, Rui Frazao, CTO of Free owner Group Iliad, noted that this move aligns with their strategy to democratize access to advanced technologies like 5G, unlocking new opportunities across industries such as fintech, gaming, and entertainment.
Real-World Adoption and Impact
France stands out as the first country where all nationwide Mobile Network Operators (MNOs) will release the KYC Match API. Its practical effectiveness is already evident, with financial institutions like Crédit Agricole’s online subsidiary BforBank and Credit Mutuel Arkéa’s Fortuneo adopting the API to screen new customers. The implementation signifies collective acknowledgment of the API’s capability to streamline and secure the customer onboarding process.
Developed through the GSMA Open Gateway’s CAMARA standard, both APIs underwent rigorous testing before being released for commercialization. This testing phase ensured robust performance and reliability, crucial for such security-sensitive applications. Anticipating future developments, a third API, Number Verification, is planned to further enhance digital security by providing strong authentication processes to replace traditional SMS-based multifactor authentication (MFA).
Strategic Importance and Future Prospects
The unified effort by France’s top mobile network operators is a crucial step in combating the rising threat of online fraud, showing a trend toward bolstered security and innovation in digital services. This joint initiative benefits businesses and consumers by enhancing security and efficiency, while also promoting economic growth through advanced digital technologies and 5G networks. It highlights the critical importance of technological cooperation in addressing cybersecurity challenges globally.
By offering reliable, interoperable solutions through the GSMA Open Gateway initiative, France’s leading operators are setting a benchmark for other nations and industries. This initiative creates a safer digital ecosystem where businesses can thrive without the constant threat of online fraud. The anticipated release and adoption of the Number Verification API will further strengthen this foundation, ensuring that digital interactions are secure and seamless. This initiative sets the stage for future innovations across various sectors, shaping a more secure and efficient digital future.