Enterprise Ecosystems

Malaysian telcos to federate open API for number verification

Malaysian telcos to federate open API for number verification

Malaysian operators, CelcomDigi, Maxis, U Mobile, Telekom Malaysia and YTL Communications have unveiled plans to launch a new federated network service via the GSMA Open Gateway initiative to help online businesses combat fraud and digital identity theft.

The new Federated Open Gateway will be designed to provide enterprise developers at banks and online retailers with federated access to the Number Verification API, one of several completed open network APIs under GSMA Open Gateway based on the international CAMARA standard.

The Number Verification API allows businesses to verify a mobile user’s identity by matching their phone number against real-time network data, potentially making it a more secure replacement for SMS one-time passwords (OTPs).

While Malaysian telcos have already adopted the Number Verification API for their own use, developers still have to create apps using the API for each individual operator. A federated approach helps developers build a service that can work with every participating operator, while allowing each operator to keep control of its data, policy and revenue.

The software provides an interface, interoperability and cross-market coverage, so companies can easily connect their services to any mobile network in the federation.

Global and regional initiatives such as Aduna (spearheaded and announced by Ericsson in September 2024, and launched in January 2025) and the Bridge Alliance API Exchange (BAEx) launched in July 2024 aim to establish a more collective approach to open network APIs.

Maxis dipped its toes in the federation paradigm last year after signing a deal with Singtel to federate two Open Gateway APIs, Device Location and Number Verification. Thai telco AIS was also part of that federation via a separate deal with Singtel.

In July this year, Maxis signed a partnership deal with Aduna to drive adoption of standardised network APIs in Malaysia.

“Building on this foundation, we are fully committed to this industry-wide collaboration to accelerate API-driven innovation, creating a more seamless mobile experience and building a more secure digital Malaysia for everyone,” said Maxis CEO Goh Seow Eng in a joint statement.

Taking a federated approach to security based on network APIs will allow telcos to help enterprises combat fraud on a larger scale, said Julian Gorman, head of Asia Pacific at GSMA.

“Online scams and fraud are a growing concern for everyone across the ASEAN region and unless tackled properly could erode public trust in the digital economy,” he said. “By providing banks and online commerce sites with standardized, seamless access to the rich mobile functionality available in networks, we can help accelerate industry’s efforts to tackle online crime.”   

The move in Malaysia comes less than a week after Indonesian telcos Telkomsel, Indosat Ooredoo Hutchison and XLSmart formed an alliance to adopt and promote a unified network API protocol that will power six solutions focused on protecting customers against account hacking or fraud.

 



More Articles you may be Interested in...