Full Report
France’s four leading mobile operators, Bouygues, Free, Orange and SFR, have taken steps to combat mobile fraud as part of the GSMA Open Gateway initiative
Analysis Summary
# Industry News: French Mobile Operators Launch Network APIs to Combat Fraud
## Summary
France's four major mobile network operators (MNOs)—Bouygues Telecom, Free, Orange, and SFR—are launching two network Application Programmable Interfaces (APIs), KYC Match and SIM Swap, in H1 2025 to fight online fraud and identity theft for businesses. This coordinated effort is part of the global GSMA Open Gateway initiative, utilizing the CAMARA standard to expose network capabilities securely to developers.
## Key Details
- Date: Announced December 3 (Launch targeted for H1 2025)
- Companies Involved: Bouygues Telecom, Free, Orange, SFR, GSMA
- Category: Industry Collaboration/Product Launch (APIs)
## The Story
Building on the GSMA Open Gateway framework, the four dominant French MNOs are establishing a unified ecosystem by deploying two specific network APIs: KYC Match and SIM Swap. KYC Match allows online businesses to verify customer identity details against MNO records without sharing Personally Identifiable Information (PII). SIM Swap enables real-time checking of whether a phone number has recently undergone a SIM card change, a critical defense against account takeover (ATO) attacks leveraging social engineering. France is the first country globally where all MNOs are simultaneously rolling out the KYC Match API. The MNOs view this as not only an anti-fraud measure but also an economic opportunity that leverages 5G capabilities for new use cases in sectors like fintech and gaming.
## Business Impact
### For the Companies Involved
- **Differentiation and Revenue:** The MNOs are unlocking new revenue streams by monetizing network capabilities securely.
- **Strengthened Ecosystem:** Participation in the GSMA Open Gateway positions them as leaders in secure digital infrastructure development in Europe.
### For Competitors
- **Setting a Precedent:** The consolidated, nationwide launch by all four major French operators sets a high bar for other national markets collaborating under the GSMA framework. Competitors in other regions may face pressure to accelerate similar consortium-based API rollouts.
### For Customers
- **Enhanced Security:** Businesses implementing these APIs will see a significant reduction in fraud losses related to identity spoofing and account takeovers.
- **Improved Trust:** End-users benefit from higher trust in digital services (e.g., financial transactions) as the underlying verification processes become more robust than traditional password or SMS security.
### For the Market
- **Standard Adoption Acceleration:** This move validates the CAMARA/GSMA Open Gateway standards and is expected to spur faster adoption globally, particularly the KYC Match function.
- **Shift in Fraud Mitigation Budget:** Businesses may shift resources from manual verification processes to integrating these MNO-backed API checks.
## Technical Implications
The core technical innovation is the standardization and controlled exposing of sensitive network core functions (subscriber data verification, SIM status) via secure, open-source standards (CAMARA). The deliberate exclusion of PII sharing in KYC Match addresses initial privacy concerns proactively. The APIs are designed for enterprise developers to integrate directly.
## Strategic Analysis
- **Market Positioning:** France is positioning itself as a vanguard for standardized, proactive digital security, leveraging the mobile network as an intrinsic trust layer.
- **Competitive Advantage:** For the MNOs, this creates an "infrastructure moat" by offering security capabilities that pure-play SaaS security vendors cannot easily replicate without telecom partnerships.
- **Challenges:** Ensuring consistent API performance and latency across competing MNOs will be critical for maintaining developer trust. Scalability and developer onboarding will also present initial hurdles.
## Industry Reactions
- **Analyst Opinions:** Analysts view this as a highly successful regulatory/industry alignment mechanism, proving the GSMA Open Gateway can translate policy commitment into tangible product releases.
- **Expert Commentary:** Experts highlight this as a necessary defense against increasingly sophisticated digital identity fraud that targets the weakest link: user credentials often tied to mobile numbers.
- **Market Response:** Positive reception from security vendors and large enterprises who benefit from standardized, high-fidelity identity signals, though consumer privacy advocates may monitor the data-sharing specifics closely.
## Future Outlook
- **Predictions and Expectations:** The success in France will likely see other major European and North American markets rush similar dual-API launches (KYC Match and SIM Swap). Watch for the planned "Number Verification" API to quickly move into commercialization, potentially displacing SMS-based MFA entirely.
- **What to watch for:** The uptake rate among French financial institutions and e-commerce platforms, and the ease of integration for developers using the CAMARA repository.
## For Security Professionals
Security teams should begin familiarizing themselves with the CAMARA specifications and expect to integrate these new network verification calls into onboarding flows and high-risk transaction checks in the near future. This represents a significant upgrade from relying solely on static or challenge-based authentication methods.