US Carriers Unite on SIM-Based Defense as AI Fraud Losses Mount

SAN FRANCISCO, CA – August 03, 2026 – In a landmark move to combat an unprecedented surge in AI-driven fraud, digital identity firm Glide.id has launched a new authentication platform backed by an alliance of the nation’s three largest mobile carriers. The public beta of its MagicalAuth technology, now live across AT&T, T-Mobile, and Verizon, replaces vulnerable SMS-based passwords with cryptographic security anchored directly to the SIM card in every phone, signaling a potential paradigm shift in how institutions secure digital transactions and customer accounts.

The launch arrives at a tipping point for digital security. The FBI's 2025 Internet Crime Report revealed that Americans lost nearly $21 billion to cyber-enabled crimes, a staggering 26% increase from the prior year. This explosion is increasingly fueled by artificial intelligence, with deepfake fraud losses alone tripling to $1.1 billion in 2025. Attack vectors like voice cloning and sophisticated social engineering have rendered traditional security measures, particularly the ubiquitous SMS one-time password (OTP), dangerously obsolete.

The Failing Fortifications of SMS

For years, the six-digit code sent via text message has been the workhorse of two-factor authentication. Yet, its vulnerabilities have been ruthlessly exploited. SIM swap attacks, where criminals deceive carriers into transferring a victim's phone number to a new SIM card, have skyrocketed. In the UK, reported incidents surged by over 1,000% in 2024. Once in control of the number, fraudsters can intercept SMS OTPs to drain bank accounts, access sensitive data, and take over digital lives.

"SMS OTPs were never designed to withstand AI — they were built for a world where the biggest threat was a forgotten password. That world is gone,” said Eran Haggiag, Founder and CEO of Glide.id, in a statement. His firm's public beta launch is a direct response to this escalating threat, aiming to build a more resilient identity infrastructure. The move reflects a broader industry consensus, with giants like Microsoft recently announcing plans to retire SMS and voice for multi-factor authentication by early 2027, pushing users toward more secure, cryptographic methods.

How SIM-Based Cryptography Changes the Game

Glide.id’s MagicalAuth platform introduces a fundamentally different approach. Instead of transmitting a code that can be intercepted, it leverages the cryptographic key that carriers already embed in every physical SIM and eSIM. When a user attempts to log in to a service using MagicalAuth, the platform issues a unique mathematical challenge. This challenge is silently passed through the network to the user's device, and only the specific cryptographic key on that user's SIM card can solve it and send back the correct response.

This "proof of possession" model, analogous to the secure chip in a payment card, verifies the user’s identity without any passwords, codes, or user interaction. The entire process occurs in the background as quickly as a standard API call. This cryptographic verification is a significant upgrade from older "silent verification" methods that simply confirmed traffic routing and often failed on Wi-Fi or VPNs. By contrast, MagicalAuth works over any internet connection and proves possession of the SIM without exposing sensitive identifiers like the phone number.

This approach not only thwarts phishing and SIM swap attacks but also complements the growing passkey ecosystem. While FIDO passkeys provide excellent passwordless security, some implementations still fall back on SMS for account recovery or step-up authentication—a persistent vulnerability. By providing a secure, SIM-anchored verification method, the technology aims to close this critical security gap.

A United Front: Carrier Alignment Signals a New Standard

Perhaps the most significant aspect of the launch is the unprecedented alignment of AT&T, T-Mobile, and Verizon. This collaboration creates a hardware-rooted cryptographic trust anchor with nationwide scale, available on both iOS and Android devices from day one. For financial institutions and other enterprises, this means a single, interoperable solution can be deployed to secure the vast majority of their US customer base.

The carriers themselves view this as a crucial evolution in their role as guardians of digital trust. “Network-level security and identity protections play a crucial role in safeguarding transactions and sensitive interactions for businesses and consumers alike,” said Shawn Hakl, SVP of Product at AT&T Business.

Dirk Mosa, SVP at T-Mobile, added, “Along with Glide.id, we’re showing that the critical layer of identity management runs through carrier networks.”

This sentiment was echoed by Scott Lawrence, Chief Product Officer at Verizon Business, who noted, "With SIM-anchored protection, enterprises can move from older authentication methods to network-embedded, carrier-authenticated protection." This unified front suggests a coordinated response to a threat that no single institution can tackle alone, potentially paving the way for a new national standard in digital identity verification.

The Institutional Imperative: Securing Finance and Commerce

The immediate impact of this technology is being felt in the financial sector, where Glide.id reports strong early demand. Account takeover (ATO) fraud now accounts for nearly one-third of all reported business fraud losses, making it a primary driver of enterprise risk. For banks, asset managers, and fintech platforms, the threat extends beyond direct financial loss to severe brand damage and customer attrition.

By implementing carrier-native cryptographic authentication, institutions can dramatically reduce their exposure to ATO vectors while simultaneously improving the customer experience. The silent, "frictionless" nature of the verification removes the hassle of waiting for and entering codes, which can increase conversion rates for new account openings and reduce cart abandonment in e-commerce.

“The fix was already built into every SIM card; we just had to turn it on," Haggiag explained. "What our early pilots showed us is that when you remove the friction and the fear at the same time, trust comes back.”

Building on integrations already live in Germany, the U.K., and Spain, Glide.id is now looking to expand into Canada and other markets in 2026. This global ambition underscores the growing recognition that in an era defined by AI, identity security cannot be an afterthought—it must be a cryptographically-secured, globally-interoperable foundation of the digital economy.