No. 07Week of September 23, 2026This week’s briefing
Tradecraft

Explainer

Carrier-native authentication, explained: how a SIM can sign a login

Number verification, silent network authentication and SIM-based cryptography all use the mobile network instead of a text message. They are not the same thing.

For IAM engineers Product & payments Security engineers

The short answer

What is carrier-based authentication?

Carrier-based authentication verifies a user through their mobile operator instead of sending them a code. The simplest form checks that a request comes from the SIM tied to a phone number; stronger forms use cryptographic keys held in the SIM to sign the request.

If you read nothing else

  1. Number verification confirms a device holds a number; it doesn’t prove who is using it.
  2. Standardized APIs come from the CAMARA project and GSMA Open Gateway.
  3. US carriers began offering these checks through aggregators and vendors in 2026.

Three things people call “carrier authentication”

Tradecraft’s summary of vendor and standards documentation.
ApproachWhat it checksWhat the user does
Number verificationThe request comes from the SIM tied to a given numberNothing; it runs over mobile data
SIM swap checkWhether the number’s SIM changed recentlyNothing; it’s a risk signal
SIM-based cryptographyA key held in the SIM signs the requestUsually one tap

Where the APIs come from

The CAMARA project, hosted by the Linux Foundation, defines common network APIs such as Number Verification and SIM Swap, so developers can call the same interface across operators.[1] GSMA Open Gateway packages those APIs commercially.[2]

What happened in the US in 2026

In July 2026, Aduna, a network-API joint venture, announced number verification with AT&T, T-Mobile and Verizon.[3] In August, Glide Identity(owner interest: see disclosure) announced a beta of SIM-based cryptographic authentication across the same three carriers.[4]

What it doesn’t solve

A network check proves something about a SIM, not about the person holding the phone. It is strongest combined with a device-bound credential and weakest as the only factor for account recovery.

Sources

  1. Linux Foundation CAMARA project
  2. GSMA GSMA Open Gateway
  3. ID Tech Aduna and major U.S. carriers push network-based authentication as SMS code alternative
  4. Business Wire Glide.id beta launches carrier-native cryptographic authentication across AT&T, T-Mobile and Verizon (2026-08-03)

Changelog

  • : Published.

Cite this

Tradecraft. “Carrier-native authentication, explained: how a SIM can sign a login.” Tradecraft, September 20, 2026. https://glide-tradecraft.pages.dev/explainers/carrier-authentication-explained/