Press release:

 

One New Zealand, a leading telecommunications provider in New Zealand, today announced it has entered into a commercial agreement with Shush, a U.S.-based leader in carrier-grade network authentication, to launch a suite of powerful Network Authentication APIs.

 

This strategic partnership will enable New Zealand businesses to leverage One New Zealand’s network infrastructure to provide seamless, secure, and privacy-preserving customer authentication across a variety of digital services. The integration of Shush’s advanced authentication platform, Sherlock - boasting 47 network APIs in full compliance with GSMA Open Gateway, CAMARA, and TM Forum specifications - will allow enterprises to access capabilities such as silent, instant sign-in and transaction verification, drastically reducing reliance on vulnerable methods like one-time passwords (OTPs) and complex password flows.

 

The Network Authentication APIs are designed to deliver a superior user experience by eliminating friction during the login process, while simultaneously bolstering security against phishing, account takeover, and SIM swap fraud. By verifying a user's identity directly against their mobile number and the corresponding network session, the solution offers an exceptional level of trust and convenience.

 

"We are committed to providing New Zealand businesses with the tools they need to thrive in the digital economy, and that includes world-class security and authentication methods," said Murray Osborne, GM Infrastructure Partners, One New Zealand. "Partnering with Shush allows us to unlock the power of our network, offering a robust, privacy-centric authentication layer that we think will significantly improve both security and customer satisfaction for our enterprise clients."

 

Eddie DeCurtis, Co-Founder and CEO of Shush, stated, "The commercial launch with One New Zealand marks another major milestone for identity and authentication in the APAC/Oceania region. We believe the future of digital identity is invisible, instant, and iron-clad. By working with One New Zealand, we are bringing this future to life, empowering businesses across New Zealand to protect their users and streamline their digital journeys."

 

Key Benefits of the Network Authentication APIs:

 

    Frictionless Onboarding and Login: Enable instant, password-less sign-in for mobile users.
    Enhanced Security: Defend against account takeover, phishing attacks, and OTP interception.
    Privacy-Preserving: Verification is performed without sharing personally identifiable information beyond the mobile number verification.
    Reduced Operational Costs: Lower expenses associated with sending SMS OTPs and managing password resets.

 

The Network Authentication APIs are expected to be available to One New Zealand's commercial partners starting in the second quarter of 2026. Businesses interested in integrating the new authentication features are encouraged to contact their One New Zealand account representative or visit https://one.nz/our-networks/infrastructure-partners/solutions/#security-solutions

 

Interesting development, but I wouldn't like to tie my identity to a telco account.

What happens if some service (bank, government) uses this, and the user is overseas and using a different provider? I'd hope these services would offer other authentication options. 

Also, being locked into your telco because it's an authentication factor. Sure, emails can be a lock too, but emails won't cost as much as a phone account, usually.