Phone & SIM Risk API
Telecom-Layer Fraud & Identity Risk Protection
Modern fraud increasingly exploits mobile identity β SIM-swaps, recycled numbers, spoofed registrations, and device takeovers. The Phone & SIM Risk API gives your platform direct risk signals from the carrier layer, combined with AI-driven risk scoring β so you can detect fraud earlier, before transactions complete.
"See attacker activity β before they ever touch your real systems."
Trusted by mobile networks and enterprise security teams globally.
Why It Matters
Most fraud controls operate after attackers reach your platform.
Telecom-layer risk signals detect upstream identity compromise β where fraud usually begins.
This API helps you:
What the API Provides
Phone Risk Intelligence Signals β privacy-respecting, anonymized, and risk-oriented.
Number Validity & Active Status
Detect whether the number is live on the network
SIM Change Risk Indicators
Identify recent SIM replacements β a top ATO precursor
Ownership / Device Continuity
Confirm whether the account holder is still the active user
Fraud-Associated Anomalies
Spot suspicious behavior patterns observed in telecom infrastructure
Network-Level Confidence
Routing stability, provisioning patterns, and carrier attributes
All signals are privacy-respecting, anonymized, and risk-oriented β never content.
AI-Driven Risk Correlation β Built In
Each request is processed through the City of Hats Risk Engine, combining multiple signal sources.
Signal Sources
Output: Real-World Risk Score
- SIM swap detected in past 48 hours
- Identity mismatch confidence: high
- Number recently provisioned
Phone Identity Risk Pipeline
From phone input to platform action β powered by AI correlation.
User Phone β Telecom Risk Signals β AI Correlation β Platform Action
Example: Privileged Account Defense
Detect when attackers probe credentials before escalation
Common Enterprise Use Cases
Banking & Fintech
- Prevent account takeover
- Reduce social-engineering losses
- Protect OTP-based authentication
Marketplaces & Platforms
- Stop fraudulent onboarding
- Detect fake account farms
- Prevent mule account creation
Identity & KYC
- Verify phone legitimacy
- Protect identity flows
- Strengthen MFA trust signals
Built for Developers
REST API β Simple & Secure
curl -X POST "https://api.cityofhats.com/api/v1/phone-risk" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer YOUR_API_KEY" \
-d '{
"phone_number": "+66812345678"
}'
{
"phone_number": "+66812345678",
"risk_score": 67,
"risk_level": "ELEVATED",
"sim_swap_risk": "elevated",
"sim_change_detected": true,
"sim_change_window": "48h",
"ownership_confidence": "low",
"network_continuity": "unstable",
"number_type": "mobile",
"carrier_region": "TH",
"risk_reasons": [
"SIM swap detected within 48 hours",
"Low ownership confidence",
"Network routing instability"
],
"recommendation": "step_up_auth"
}
Response Field Reference
risk_score
integer
0β100 risk score (higher = more risky)
risk_level
string
LOW | ELEVATED | HIGH | CRITICAL
sim_swap_risk
string
none | low | elevated | high β SIM swap likelihood
sim_change_detected
boolean
Whether SIM was recently changed
sim_change_window
string
Time since last SIM change (e.g., "48h", "7d")
ownership_confidence
string
low | medium | high β device ownership certainty
network_continuity
string
stable | unstable β routing/provisioning stability
risk_reasons
array
Human-readable risk factors
recommendation
string
allow | step_up_auth | block | review
Global Coverage
We aggregate telecom-layer risk insights via multiple intelligence sources.
Designed to Work With Your Stack
Plug Into:
Or Trigger Workflows:
Privacy & Compliance
Your customers' privacy is protected.
Why This API Is Different
"The number exists"
"Is the person behind the number still who they say they are?"
The Phone & SIM Risk API gives your platform telecom-layer fraud defense β detecting SIM-swap attacks, device takeovers, and identity fraud at the carrier level, before attackers reach your application.
Get Started
Ready to see telecom-layer fraud defense in action?