Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41029

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

#324125 3-Mar-2026 10:20
Send private message quote this post

Press release:

 

 

Spark New Zealand, One NZ, and 2degrees today announced they have signed the GSMA Open Gateway Memorandum of Understanding (MOU), which will see them working together to deliver standardised network Application Programming Interfaces (APIs).

 

APIs enable different apps and services to connect and share information with each other automatically and securely, making digital experiences faster and more seamless for businesses and their customers.

 

The initial focus will see the telcos working together on scam and fraud prevention APIs such as ‘Number Verification’ and ‘SIM Swap’, helping businesses to combat fraud, reduce identity theft, and improve digital trust for customers. These capabilities are increasingly in demand across sectors such as banking and financial services, online shopping platforms, and digital payment systems.

 

For example, when a customer makes an online payment, the bank can use a secure API to confirm the phone number is still safely linked to their account and hasn’t been compromised through a SIM swap. If anything looks unusual, the transaction can be paused or blocked. This process allows the bank to verify the customer in real time behind the scenes, rather than relying on SMS one‑time passwords.

 

Through the GSMA Open Gateway, the three telcos will develop common APIs that are compatible and can be easily integrated across networks, using guidelines set by CAMARA, an open-source initiative developed by the GSMA and Linux Foundation to unify telecom APIs.

 

This collaborative approach aligns New Zealand with a growing global ecosystem of mobile operators and technology partners participating in GSMA Open Gateway, which now represents the majority of global mobile connections.

 

Mark Beder, Chief Commercial Officer at Spark, says, “This GSMA collaboration ensures that as an industry, we are innovating together to keep our customers safe, while also making it easier for businesses to consistently access our networks to provide secure and seamless digital experiences to their own customers.”

 

Kieran Byrne, Chief Technology Officer at One New Zealand, says: ““Participating in the GSMA Open Gateway initiative will allow us to work better together as an industry and use the power of telecommunication networks to solve some of NZ’s biggest challenges.”

 

Mark Callander, Chief Executive at 2degrees, says, “Keeping our customers safe requires cross-organisation and cross-industry collaboration. Working together through GSMA Open Gateway ensures a standards‑based, interoperable approach that benefits developers, enterprises, and customers alike.”

 

“The GSMA Open Gateway is transforming how developers engage with mobile networks worldwide. The collaboration of New Zealand’s mobile operators demonstrates strong momentum behind a common, global approach to network APIs,” said Henry Calvert, Head of Networks and Open Gateway at the GSMA.

 

The announcement coincides with the Mobile World Congress Barcelona 2026, where GSMA Open Gateway continues to gain global traction, with telcos across multiple markets committing to the launch of consistent commercial network API services.

 

Today, 85 operator groups, representing more than 300 mobile networks and around 80% of global mobile connections, are part of the Open Gateway community. The unified ‘Number Verification’ and ‘SIM Swap’ APIs for Spark NZ, One NZ and 2degrees are currently in development, and are expected to launch later this year.

 





Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2
Eva888
2760 posts

Uber Geek
+1 received by user: 2420

Lifetime subscriber

  #3466173 3-Mar-2026 10:27
Send private message quote this post

Trying to understand the sim swap part. Does it mean if I take out the sim from my usual phone for whatever reason and use it in another phone the bank could stop a payment going through? Eg when travelling and choosing to use another phone or tablet that’s normally used. 




freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41029

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #3466174 3-Mar-2026 10:31
Send private message quote this post

Eva888:

 

Trying to understand the sim swap part. Does it mean if I take out the sim from my usual phone for whatever reason and use it in another phone the bank could stop a payment going through? Eg when travelling and choosing to use another phone or tablet that’s normally used. 

 

 

Not at all. SIM Swap is a scam technique where someone who knows your username/password for a service that use SMS codes, transfers your number to a new SIM without you knowing. They them log into your account (a bank for example) and receive the SMS code on their phone, without you knowing.

 

In general telcos would prevent this by requiring you to visit the store and presenting an ID before changing SIM cards, but sometimes these scammers might have some insider do the transfer.

 

This new agreement will place more safeguards to prevent this happening.





Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 


freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41029

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #3466175 3-Mar-2026 10:32
Send private message quote this post




Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 




nztim
4012 posts

Uber Geek
+1 received by user: 2710

ID Verified
Trusted
TEAMnetwork
Subscriber

  #3466177 3-Mar-2026 10:35
Send private message quote this post

Then you will see all the ranting by peoples its 2026 why should I have to go to a store

 

.....This is why

 

Anyways txt MFA is insecure, so actually is TOTP.. time to move to push notifications (think MS Authenticator)





Any views expressed on these forums are my own and don't necessarily reflect those of my employer. 


richms
29097 posts

Uber Geek
+1 received by user: 10206

Trusted
Lifetime subscriber

  #3466178 3-Mar-2026 10:36
Send private message quote this post

Seems like its too little too late - anyone still using SMS for this will be too clueless to use the APIs and everyone else has moved on from it.





Richard rich.ms

ECHELON
9 posts

Wannabe Geek
+1 received by user: 7


  #3466186 3-Mar-2026 11:15
Send private message quote this post

freitasm:

 

Not at all. SIM Swap is a scam technique where someone who knows your username/password for a service that use SMS codes, transfers your number to a new SIM without you knowing. They them log into your account (a bank for example) and receive the SMS code on their phone, without you knowing.

 

In general telcos would prevent this by requiring you to visit the store and presenting an ID before changing SIM cards, but sometimes these scammers might have some insider do the transfer.

 

This new agreement will place more safeguards to prevent this happening.

 



This seems contrary to how the CAMARA project describes the Device Swap and the SIM Swap API https://camaraproject.org/device-swap/ & https://camaraproject.org/sim-swap/. A bank can have some sort of authorisation to check whether there are recent device and SIM Swap events associated with their clients phone numbers and make decisions to consider actions as no longer authorised.

 

https://camaraproject.org/device-swap/

 

Use Cases

 

  • Banks and financial services can detect device swaps to prevent unauthorized transactions, triggering additional authentication when necessary. Online services enhance identity protection by requiring re-authentication upon detecting a device change, ensuring only legitimate users access their accounts.

 

 


 
 
 
 

Shop now for Lenovo laptops and other devices (affiliate link).
freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41029

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #3466187 3-Mar-2026 11:17
Send private message quote this post

ECHELON:

 

freitasm:

 

Not at all. SIM Swap is a scam technique where someone who knows your username/password for a service that use SMS codes, transfers your number to a new SIM without you knowing. They them log into your account (a bank for example) and receive the SMS code on their phone, without you knowing.

 

In general telcos would prevent this by requiring you to visit the store and presenting an ID before changing SIM cards, but sometimes these scammers might have some insider do the transfer.

 

This new agreement will place more safeguards to prevent this happening.

 



This seems contrary to how the CAMARA project describes the Device Swap and the SIM Swap API https://camaraproject.org/device-swap/ & https://camaraproject.org/sim-swap/. A bank can have some sort of authorisation to check whether there are recent device and SIM Swap events associated with their clients phone numbers and make decisions to consider actions as no longer authorised.

 

https://camaraproject.org/device-swap/

 

Use Cases

 

  • Banks and financial services can detect device swaps to prevent unauthorized transactions, triggering additional authentication when necessary. Online services enhance identity protection by requiring re-authentication upon detecting a device change, ensuring only legitimate users access their accounts.

 

 

I described how it was done BEFORE, not after the agreement. Follow with my link to the SIM Swap article.





Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 


Eva888
2760 posts

Uber Geek
+1 received by user: 2420

Lifetime subscriber

  #3466190 3-Mar-2026 11:26
Send private message quote this post

Reading the incidents in that link where a 15 and 18 year old managed to hack into millions is sobering. 


ECHELON
9 posts

Wannabe Geek
+1 received by user: 7


  #3466240 3-Mar-2026 11:47
Send private message quote this post

freitasm:

 

I described how it was done BEFORE, not after the agreement. Follow with my link to the SIM Swap article.

 

 

Sure, I understand SIM Swapping. I may have misunderstood the first part of your response "Not at all." to Eva's comment (which I interpreted as "would this when implemented affect bank transfers if I used a different device".) as a refusal that it would be something that could affect the banks decision on the authorisation rather than how SIM swapping currently works where the bank doesn't know it has happened.


wellygary
8810 posts

Uber Geek
+1 received by user: 5287


  #3466405 3-Mar-2026 13:40
Send private message quote this post

Although,
Least you think the phone companies are doing this out of the goodness of their hearts,
This is what Spark said  last year about the use of APIs .. They will charge the mobile phone companies for this.. and see APIs as a new frontier for monetisation (presumably of their customers) 

 

"The partnership enables Spark to explore new revenue streams, with an initial focus on SIM Swap detection and Number Verification APIs to support businesses to verify identity and reduce fraud"

 

"Spark Network and Operations Director, Renee Mateparae says “Our partnership with Aduna enables us to monetise our network investment in new ways and capture value from the broad capabilities of our network. "

 

https://www.spark.co.nz/online/about/our-company/news/Spark-becomes-New-Zealands-first-partner-to-global-API-platform-Aduna?srsltid=AfmBOopNQ3KRCA-5e87r5myXJ0RNzLXzwcpwBPp38sCn9m-RPN_zj3Tf

 

 


MikeAqua
8024 posts

Uber Geek
+1 received by user: 3817


  #3466459 3-Mar-2026 14:22
Send private message quote this post

nztim:

 

Anyways txt MFA is insecure, so actually is TOTP.. time to move to push notifications (think MS Authenticator)

 

 

I agree but the admin burden for banks etc dealing with customers who have never used an authenticator app before.  Oooff!





Mike


 
 
 

Shop on-line at New World now for your groceries (affiliate link).
run2000
14 posts

Geek
+1 received by user: 1

ID Verified
Trusted

  #3466477 3-Mar-2026 15:12
Send private message quote this post

Is a SIM swap attack something like what the Veritasium people demonstrated a while back on one of their Youtube videos, for instance https://youtu.be/wVyu7NB7W6Y?si=T4HVMxdrocfl5bGC&t=539 


richms
29097 posts

Uber Geek
+1 received by user: 10206

Trusted
Lifetime subscriber

  #3466495 3-Mar-2026 16:29
Send private message quote this post

run2000:

 

Is a SIM swap attack something like what the Veritasium people demonstrated a while back on one of their Youtube videos, for instance https://youtu.be/wVyu7NB7W6Y?si=T4HVMxdrocfl5bGC&t=539 

 

 

No, that is the inherent insecurity of the phone networks. Sim swap is where you can get enough information on someone to be able to convince the telco that you are them and to replace a lost or broken sim card. Previous loophole was to just port the number to a prepaid sim on a different company, but that now needs a SMS to confirm it.





Richard rich.ms

boosacnoodle
1268 posts

Uber Geek
+1 received by user: 855


  #3466499 3-Mar-2026 16:35
Send private message quote this post

Seems a lot simpler, cheaper and quicker to just outright forbid financial institutions from using SMS for verification, or shift the liability to the banks when doing so.


wellygary
8810 posts

Uber Geek
+1 received by user: 5287


  #3466502 3-Mar-2026 16:46
Send private message quote this post

boosacnoodle:

 

Seems a lot simpler, cheaper and quicker to just outright forbid financial institutions from using SMS for verification, or shift the liability to the banks when doing so.

 

 

By the time they create and try to sell this "solution"  most if not all the banks will have included credit card and other authorisation in their banking apps, 

 

and by making such an API a "pay to play" activity, the banks will likely move away from sms even faster...


 1 | 2
View this topic in a long page with up to 500 replies per page Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.