As cybercriminals find increasingly sophisticated ways to hijack accounts and impersonate legitimate users, Smart Communications is giving Philippine businesses another weapon against digital fraud — the mobile network itself.
Smart is strengthening its digital identity and fraud-prevention capabilities with newly GSMA-certified SIM Swap and Device Swap APIs, expanding the tools available to enterprises looking to protect customers without adding more friction to online transactions.
The two globally certified APIs power SmartSafe NetIdentity, part of PLDT Enterprise’s SmartSafe fraud-management suite. They build on Smart’s earlier GSMA certifications for Number Verification and RoamStatus and reinforce the telco’s push to bring standardized, network-powered security capabilities to Philippine enterprises.
The technology addresses a growing weakness in digital security: knowing whether the person logging in, paying, shopping or accessing an account is really the legitimate customer.
When an OTP may not be enough
For years, one-time passwords have served as an important second layer of authentication for banks, e-commerce platforms and other digital services.
But fraudsters have become better at circumventing traditional security controls through techniques that can include SIM-swap attacks, phishing, social engineering and account takeovers.
That means businesses increasingly need additional signals to determine whether an apparently legitimate transaction could actually be suspicious.
SmartSafe NetIdentity taps information available from Smart’s network to help enterprises assess that risk.
Its SIM Swap API allows businesses to determine whether a SIM associated with a mobile number has recently been replaced. The Device Swap API, meanwhile, can detect when a SIM has been transferred to another physical device.
Either event does not automatically mean fraud has occurred. But combined with other security checks, these changes can provide businesses with valuable warning signals before allowing sensitive transactions to proceed.
A bank, for example, could identify that a customer’s SIM was recently swapped before processing a high-risk transaction. An online platform could detect an unexpected device change during an account login.
Businesses can then trigger additional verification or review rather than simply relying on a password or OTP.
Turning the mobile network into a security layer
The approach could be particularly valuable as more Philippine businesses move customer interactions online.
Banks and fintech companies must protect financial accounts and payments, while e-commerce platforms need to safeguard buyers, sellers and transactions. Gaming and digital entertainment companies face similar challenges involving account takeovers and unauthorized access.
For businesses, the challenge is not simply strengthening security. It is doing so without forcing legitimate customers through increasingly complicated authentication processes.
SmartSafe NetIdentity is designed to provide additional security intelligence behind the scenes, allowing enterprises to incorporate network-based signals into their existing fraud-management systems.
“Digital trust is built in the small moments customers experience every day — when they log in, make a payment, or access a service without worry,” said Benedict Patrick V. Alcoseba of Enterprise Core Business Management & Innovation at PLDT Enterprise.
“With SmartSafe NetIdentity, we are helping businesses strengthen protection behind these everyday interactions, using globally certified network APIs that support safer authentication without adding unnecessary friction for users,” he added.
Global standards meet enterprise security
Smart’s latest certifications form part of the GSMA Open Gateway initiative, which seeks to provide developers and businesses with standardized access to network capabilities through common APIs.
Smart was the first Philippine telecommunications company to secure GSMA Open Gateway certification for a Number Verification API with Silent Authentication.
Adding GSMA-certified SIM Swap and Device Swap APIs expands the network intelligence enterprises can potentially incorporate into their authentication and fraud-detection systems.
“GSMA Open Gateway APIs help create safer, more trusted digital ecosystems by enabling enterprises to adopt secure, standards-based approaches to digital identity and customer protection,” said Julian Gorman, GSMA Head of Asia Pacific.
“SMART’s certification demonstrates its commitment to delivering trusted, standards-compliant API services for enterprises,” he added.
Digital trust becomes a business advantage
PLDT Enterprise launched SmartSafe in November 2025 as the country’s first telco-enabled fraud-management API suite, bringing network-powered and GSMA-aligned fraud-prevention capabilities to local enterprises.
SmartSafe NetIdentity expands that proposition at a time when cybersecurity is becoming inseparable from customer experience.
A security system can be highly effective but still frustrate customers if every transaction requires multiple passwords, codes and verification steps. Conversely, an effortless digital experience means little if users do not trust the platform with their accounts, money or personal information.
Network-powered identity signals offer businesses another way to balance those competing demands.
Instead of asking customers to prove who they are at every turn, enterprises can use additional network intelligence to help determine when an interaction appears normal — and when something warrants closer scrutiny.
That could make digital security increasingly invisible to legitimate customers while creating additional barriers for fraudsters.
As banking, shopping, payments, gaming and other services become increasingly digital, trust is no longer merely a cybersecurity concern. It is becoming part of the product itself.
With SmartSafe NetIdentity and its GSMA-certified SIM Swap and Device Swap APIs, Smart and PLDT Enterprise are betting that the next evolution of digital security will go beyond OTPs — using the intelligence already embedded in telecommunications networks to make every click, login and transaction harder to fake.
