Skip to content

Moment 03 · New phone or SIM

The face from sign-up decides who gets bound.

What a new phone or SIM checks. Against what came before.

  • Checked

    The face

    Checked again, against the face matched at sign-up, with the same injection defence.

  • Bound again

    The number and SIM

    The new SIM confirms the number with one text from the phone.

  • Bound again

    The phone

    The new phone is checked for tampering and bound in place of the old one.

  • Not read here

    The payee

    Not read here.

  • Not read here

    The session

    Read again from the next payee or payment, on the new phone.

The decision. Step up, in the example.

Identity is uncertain

  • Why

    The SIM moved from the bound phone and the new phone is 4 minutes old, so the face is checked against sign-up before the cool-off starts.

  • The customer sees

    “Confirm it’s you with a quick face check.”

  • A good customer

    One face check on the new phone, then lower limits for a few hours.

Your FRM receivesSTEP_UP · SIM moved · new device 4 min · face check

What to measure. Agreed before the pilot.

Where they start
  • TakeoversThose that start with a new phone.
  • Re-bindsOwners through on the first try.
  • LossMoney lost on these journeys.
  • FrictionGood customers asked for more.

Rules it supports.

  • India and Malaysia

    SIM and device binding at onboarding and re-binding on change, with the number confirmed by the network and device integrity read every session.

    The rules, market by market
  • Singapore, Malaysia and the Philippines

    Cool-off and hold decisions after a new device, SIM or payee, or when a payment looks coerced, set per market and journey.

    The rules, market by market
  • India, Singapore, the UAE, Malaysia and the Philippines

    One-tap login that tries the network check, the SIM check and Aadhaar consent before any one-time code, and face checks with injection defence where identity is in doubt.

    The rules, market by market

Start with sign-up, login or payments.

Pick one, test it on your own traffic before you commit, and add the others on the same SDK when you’re ready.