Japanese carrier KDDI has begun commercial service of Number Verification v2 (NVv2), an API that verifies a user’s phone number from SIM and carrier records without sending an SMS code, and is offering it through Google’s Firebase app development platform.
NVv2 authenticates users with their phone number and SIM contract information in a single step, so they do not have to type in their number or receive and enter a one-time passcode. KDDI says companies can expect fewer users to abandon authentication and stronger protection against fraud.
The company said misuse of generative AI has driven an increase in phishing and fraudulent account registrations that spoof authentication codes. Because NVv2 does not send a code and instead checks the number against the carrier’s SIM record, KDDI says it removes the attack routes used to steal SMS codes, such as real-time phishing.
The service follows the specifications of the GSMA Open Gateway initiative and the Linux Foundation’s CAMARA project, which develop common network APIs for telecom operators. KDDI said it has taken part in that standardization work since 2022.
KDDI is providing NVv2 as part of Firebase Phone Number Verification, which lets app developers add carrier-based number checks. Google describes the Firebase service as the third generation of number verification after SMS and silent network authentication, with users tapping to consent rather than typing their number. Google says the check works even when a device is in airplane mode or has mobile data turned off, as long as it is connected to the internet. In September, Firebase added 10 carrier networks, including Vodafone in six European countries.
“Our collaboration with KDDI allows Firebase to guide developers to better security, better end user experience, and more use cases for phone number verification on their network,” said Micah Baker, senior product manager for Firebase.
KDDI said it expects NVv2 to be used to confirm that an operation is tied to the user’s SIM and device, including in scenarios where AI agents register for services and make payments on a user’s behalf. The company said it will expand identity verification and authentication through other platforms as well as Firebase.
–
By the ID Tech Editorial Team
