Moment 03 · New phone or SIM
The face from sign-up decides who gets bound.
Your SIM moved to a new phone. Before you carry on, we need to check it’s you.
What a new phone or SIM checks. Against what came before.
- Checked
The face
Checked again, against the face matched at sign-up, with the same injection defence.
- Bound again
The number and SIM
The new SIM confirms the number with one text from the phone.
- Bound again
The phone
The new phone is checked for tampering and bound in place of the old one.
- Not read here
The payee
Not read here.
- Not read here
The session
Read again from the next payee or payment, on the new phone.
What DeepID reads. One call, one decision.
The decision. Step up, in the example.
Identity is uncertain
Why
The SIM moved from the bound phone and the new phone is 4 minutes old, so the face is checked against sign-up before the cool-off starts.
The customer sees
“Confirm it’s you with a quick face check.”
A good customer
One face check on the new phone, then lower limits for a few hours.
Your FRM receivesSTEP_UP · SIM moved · new device 4 min · face check
What to measure. Agreed before the pilot.
Where they start- TakeoversThose that start with a new phone.
- Re-bindsOwners through on the first try.
- LossMoney lost on these journeys.
- FrictionGood customers asked for more.
Use cases. Step by step.
Rules it supports.
India and Malaysia
SIM and device binding at onboarding and re-binding on change, with the number confirmed by the network and device integrity read every session.
The rules, market by marketSingapore, Malaysia and the Philippines
Cool-off and hold decisions after a new device, SIM or payee, or when a payment looks coerced, set per market and journey.
The rules, market by marketIndia, Singapore, the UAE, Malaysia and the Philippines
One-tap login that tries the network check, the SIM check and Aadhaar consent before any one-time code, and face checks with injection defence where identity is in doubt.
The rules, market by market
Start with sign-up, login or payments.
Pick one, test it on your own traffic before you commit, and add the others on the same SDK when you’re ready.