> guarantees protection against SIM Swap
Not from a marketing standpoint, but from a procedural level, how is this guaranteed?
Not from a marketing standpoint, but from a procedural level, how is this guaranteed?
Are you able to go into detail about this without giving up proprietary/secret sauce? Asking as a former pbx engineer at a couple of CLECs who is intimately familiar with the LNP process.
So to answer the original question on how we can guarantee while other carriers are not. There are two common attacks to compromise your account.
Sim Swap & Port out
In Sim Swap, any employee person can replace the SIM Card without permission by changing the number on the dashboard. Every primary carrier SIM card is available online, so criminals buy 100s of them and then rent logins to change this information. These logins are available for as little as 10k from the dark web.
The port-out attack is when criminal changes your carrier, which requires your account #, Zip Code & PIN in a few cases. Other information can be fake, so it isn't required. Port out must be completed within hours, and carriers have automated the process.
So how does Efani guarantee against it? I've been a victim of SIM Swap and have dealt with hundreds of incidents. No one is perfect, but we're just better at dealing with such attacks.
We authenticate clients using multiple ways and treat every request as fraud. It isn't an automated process & even within the company, it's taken very seriously and has to be approved by multiple resources. Our authentication methods include notary public and video authentication, and clients can also request a unique authentication process. We employ US Citizens who're security cleared and don't outsource support or operations. A lot of our staff isn't public due to security reasons. They are well paid compared to regular CS staff and are well-trained against these attacks. Our SIM cards are not publicly available, eliminating the risk of anyone obtaining them. Information on the account is pseudonymized, so if a client has compromised himself, we're able to stop the impersonation. Cool-off period - In case of high risk, we put a 14-day cool-off period to any request to ensure the client isn't compromised
We follow a few other methods in addition to the above and constantly. We've been able to stop all the attacks so far and are confident in our ability to deliver on the promise; Efani Secure Mobile is also securing clients with $5M Insurance. If you ever get compromised, you'll receive an apology, so we went beyond to ensure peace of mind.
Please let me know if further clarification is required.
Have you had a user get swapped, yes or no?
Guarantee is a word that has weight to it, I'm not seeing anything substantiating a guarantee other than the claim. I'm trying to understand the spirit of its use in this context by asking this.
The real service being sold here is the idea that in exchange for a premium, a company will train employees correctly and enforce strong security policies. which would be skipped by a normal telco because they want as much profit as possible off the top of your 30$ a month.
I mean, layers could be as simple as:
1. Does last name match?
2. Does first name match?
3. Does middle name match?
4. Does name suffix match?
5. Does country match?
6. Does state match?
7. Does city match?
8. Does street match?
9. Does house number match?
10. Does apartment number match?
11. Does phone number match?