Skip to main content
Live
  • Identity
Available in
  • Germany,
  • Greece,
  • Netherlands,
  • Spain,
  • UK

Sim Swap

1.1.1

Fraudsters can use social engineering techniques to get users to give them control of a mobile number. Sim Swap fraud is also known as Unauthorised Account Takeover.

This API follows the GSMA Mobile Connect specification.

Try it out

Live
  • Identity
Available in
  • Germany,
  • Greece,
  • Netherlands,
  • Spain,
  • UK

Sim Swap

1.1.1

Fraudsters can use social engineering techniques to get users to give them control of a mobile number. Sim Swap fraud is also known as Unauthorised Account Takeover.

This API follows the GSMA Mobile Connect specification.

Try it out

Image
Lightbulb icon
It can be used for
  • Verifying your users in the background
  • Getting information of the last time the SIM was swapped
  • Securing the SMS OTP

API Information

Version v1.1.1
Protocol HTTPS
Sandbox https://api-sandbox.vf-dmp.engineering.vodafone.com
URL https://eu3.api.vodafone.com
Version history 1.1.1
Release date September 2023
Status Live
Description This API provides the Sim Swap date/timestamps and is an attribute as specified in the GSMA Mobile Connect ATP specification.

How it works

  1. A customer tried to re-activate their banking app.
  2. The website (or app) sends a SIM Swap request to Vodafone.
  3. Vodafone responds with information (a timestamp) on the last time the SIM was changed, e.g. "sim_change": "2010-05-08T13:30:04Z".
  4. The website (or app) can allow or deny the user's actions based on the timestamp information provided by the API.

Use Case Examples

Typical customer use case examples for the SIM Swap API include:

  • Initiating a password reset via mobile.
  • Installing a mobile banking app.
  • Set up a new payee.
  • Make any mobile-originated transaction where there’s a transfer of funds.

Run in Postman

To begin using the Vodafone workspace in Postman, please follow the steps below to create a set of credentials that can be used with our sandbox collections:

  • Register an account on https://developer.vodafone.com and create a sandbox app for the APIs that you are interested in.
  • Use the Client Key and Secret from your sandbox app to populate the relating variables in the "Sandbox Credentials" environment group in Postman.
  • Call the token endpoint to create a bearer token that is used in the API resource endpoint. Your client credentials will be taken from the environment variables and used in a basic OAuth flow.
  • You need to call the token end-point for each API as the API scope is held in the request body of the token call.
  • The last bearer token and trace ID will be stored in collection variables associated with the API solution that you have chosen.
  • You can use these collections as read-only or create a fork into your own personal workspace to edit the details.

You can access all of Vodafone's sandbox APIs in our Postman workspace by clicking the button below:

Run in Postman Button

What is Postman?

Postman is a popular development and testing tool that is widely used across the API developer community. It offers an easy to use interface for making HTTP requests, testing API responses and collaborating with team members. For more details, see postman.com

Vodafone Developer Portal

Discover, try, and purchase our APIs to start building your own apps