MANILA, PHILIPPINES — Smart Communications has received GSMA certification for its SIM Swap and Device Swap APIs, adding two network-based tools to its enterprise identity and fraud-management offerings.
The APIs are part of SmartSafe NetIdentity, a solution under PLDT Enterprise’s SmartSafe suite. The certification builds on Smart’s earlier GSMA certifications for its Number Verification and RoamStatus APIs.
Checking recent SIM and device changes
The SIM Swap API allows businesses to check whether a mobile number has recently undergone a SIM swap, while the Device Swap API can identify whether a SIM card has been moved to another physical device.
These signals can be used by businesses as part of their risk assessment processes. For example, a recent SIM or device change could trigger additional verification or a review before a higher-risk login or transaction is completed.
The APIs are designed to provide information from Smart’s mobile network that businesses can incorporate into existing authentication and fraud-management processes.
Potential applications across digital services
The technology can be relevant to businesses that rely on digital authentication, including banks and fintech companies, e-commerce platforms, gaming services, and digital entertainment providers.
For financial services, these signals can provide another factor when assessing access to accounts or payment-related activity. E-commerce and digital platforms can similarly use changes in SIM or device status as part of their security checks.
The APIs do not replace existing authentication methods. Instead, the information can be used as an additional signal when a business needs to determine whether an interaction requires further verification.
Part of Smart's GSMA Open Gateway work
The SIM Swap and Device Swap certifications add to Smart’s existing GSMA-certified APIs for Number Verification and RoamStatus.
The certifications are part of the broader GSMA Open Gateway initiative, which focuses on standardized ways for mobile network capabilities to be made available through APIs.
For businesses, standardized network APIs can provide access to information that may be useful for identity verification, authentication, and fraud-management applications.
GSMA Asia Pacific head Julian Gorman said the certification demonstrates Smart’s work toward standards-compliant API services for enterprises.
SmartSafe NetIdentity
SmartSafe NetIdentity is part of the wider SmartSafe suite under PLDT Enterprise.
The company launched SmartSafe in November 2025 as a telco-enabled fraud-management API suite for Philippine businesses. NetIdentity follows the earlier Number Verification and RoamStatus APIs and adds SIM and device change information to the available network-based signals.
The latest certification gives businesses another option for incorporating network information into their security systems, particularly when evaluating account access and transactions that may carry a higher risk of unauthorized activity.
Why SIM and device changes matter
A SIM swap or a change in the device associated with a mobile number does not automatically mean that an account has been compromised. Customers may legitimately replace a SIM card or move their account to a new phone.
However, those changes can become relevant when combined with other information during a security assessment.
For businesses, the APIs can therefore serve as additional risk signals rather than standalone proof of fraud.
As digital services continue to rely on mobile numbers for authentication and account access, network-level information can form part of a broader approach to identity verification and fraud prevention.
