SMS Protection Registry

Orchestrating cross-stakeholder fraud prevention for Mobile Network Operators

Someone using their mobile phone

The Challenge

A trusted platform to prevent ‘Smishing’ (phishing by SMS) and Spoofing fraud

The Mobile Ecosystem Forum is a global trade association for the mobile industry. It's members are some of the largest mobile service providers and financial institutions in the world. MEF's concept was to create an industry wide, trusted, platform that helps service providers to identify and block fraudulent SMS text messages that cause so much damage to organisations and consumers.
Smishing is a text messaging scams which trick consumers into sending money or sharing their account details with fraudsters are known as ‘Smishing’ (or phishing by SMS). Criminals send bogus texts which appear to come from a trusted sender. This is a rapidly growing part of the cyber fraud industry that is estimated to costs organisations such as Financial Services Institutions, Utilities, Government Services, Messaging Aggregators and MNO's $1,800,000 per minute globally.
Our challenge was to help MEF realise their concept by building a secure online reference database of Blacklist and Whitelist SMS Short Codes that could be accessed independently and trusted by MEF stakeholders.

Someone sending an SMS

What we did

From User Journey mapping to trusted Global Platform

We started by mapping the user journey for each stakeholder from the point of uploading potentially fraudulent SMS traffic through crowdsourced authorisation and publication of an agreed blacklist that each stakeholder can reference.

With design verification from key stakeholders we then built a multi portal administration system with tiered authorisation processes and multiple regionalised instances.

MEF’s SMS SenderID Protection Registry is the world's first Anti Smishing platform, established to automate cross-stakeholder processes to reliably and quickly share information between stakeholders to facilitate and orchestrate blocking of Smishing fraud.

An illustration of a global network
A mobile telephone signal tower

Outcome

International fraud protection for more than 130 Banks and Government Agencies

There are currently more than 130 bank and Government agencies being protected by the Registry, with over 30 banks and Government agencies directly participating and 520 trusted SenderIDs registered to date. 

Over 2400 unauthorised variants are being blocked on an ever-growing blacklist, 20% of which are text scams relating to Government COVID-19 campaigns.

Work with us
Want to chat to someone from our team about a project?
Get in touch