Emerging SIM-Based Authentication Technology for Enhanced Security

Challenges with Current Security Codes

When banking online, you’re often required to enter a password and then a six-digit code sent via text. This step aims to verify your identity. Unfortunately, fraudsters have found ways to exploit these codes.

Scammers might pose as bank representatives and ask you to read the code aloud. Phishing sites can trick you into typing it in. SIM-swap attacks can give criminals control over your phone number, potentially accessing these security codes.

Rising Costs of Fraud

The Federal Trade Commission reports losses of $15.9 billion due to fraud in 2025, up from $12.5 billion in 2024. Imposter scams were the most reported, contributing to over $3.5 billion in losses.

Introducing SIM-Based Verification

A new verification method, MagicalAuth by Glide.id, could reduce reliance on texted codes. It’s a cryptographic system, now in public beta, supported by AT&T, T-Mobile, and Verizon on both iOS and Android. Banks must integrate it before widespread use.

“A texted code is a shared secret. It’s a point of vulnerability.”

How MagicalAuth Works

Instead of sending a code, MagicalAuth relies on cryptographic credentials linked to your phone’s SIM or eSIM. The system does not send codes but verifies identity through the carrier network.

This method aims to prevent interception and misuse of six-digit security codes.

Protecting Against SIM-Swap Scams

SIM-swap scams involve moving your phone number to another SIM, potentially leading to unauthorized access. Glide’s system detects recent SIM changes, temporarily halting authentication to prevent fraud.

Implementation Details and Privacy

MagicalAuth requires integration by banks. It supports a seamless experience without the need for new apps or settings changes by users. The banks conduct verification using carrier network information without sharing extensive personal data.

Steps to Secure Yourself Now

• Use passkeys for accounts where available.
• Secure your wireless account with a PIN.
• Never share verification codes.
• Stay alert for sudden loss of phone service.
• Consider identity theft protection services and freeze your credit.
• Employ strong antivirus protection.
• Minimize personal data exposure online.

Future of Bank Authentication

MagicalAuth, already available to developers, could see banks moving away from text-based authentication. However, timing depends on individual bank adoption.

While this technology enhances security, users need to remain vigilant against scams.