U Mobile has teamed with Telenor Linx to launch a SIM-based number verification service for app developers and enterprise customers in Malaysia, the two companies confirmed this week.

The product confirms a user's mobile number by reading identifiers stored on the SIM rather than dispatching a one-time password over SMS. A merchant or app calls a Telenor Linx API; the operator returns a yes or no on whether the number matches the SIM in the device.

Behind the scenes, the API call returns a token that the merchant's server validates; the user typically sees little more than a permission prompt and a single tap.

Telenor Linx is the connectivity services arm of Norway-based Telenor Group. It sells roaming, IoT and identity products across Asia-Pacific. U Mobile, Malaysia's smallest of four mobile network operators by subscribers, becomes its carrier anchor in a market where banks and fintechs have grown weary of one-time-password fraud.

What does SIM-based verification actually replace?

The standard six-digit SMS code. Banks, ride-hailing platforms and e-commerce apps across Southeast Asia still lean on the OTP as the default second factor at sign-on. Carriers argue that a SIM-level check is cheaper per transaction and harder to intercept than an SMS that can be rerouted through a SIM-swap or a rogue signalling relay.

The concept is not new. The GSMA pushed a similar approach under the Mobile Connect banner back in 2014, with backing from Orange, Vodafone and Telefónica. It struggled to gain traction outside a few pilot deployments in Europe and South Africa.

The lesson then was that operators could not agree on a common API, and developers could not be bothered to integrate one-off with each carrier. The renewed push from Telenor Linx and its peers owes as much to OTP fraud as to better developer tools.

What does Telenor Linx bring to the table?

Beyond the API itself, Telenor Linx supplies the routing layer and the commercial wrapper. For a Malaysian developer, the integration reduces to a single SDK and a handful of API calls. Behind the scenes, the operator validates the SIM's IMSI or MSISDN against its subscriber database before returning a signed token to the merchant.

The whole exchange happens in well under a second on most networks. App developers write the code once and can in principle reach any operator that signs a similar agreement.

For U Mobile, the upside is incremental API revenue and a steadier foothold in an enterprise market that Maxis and CelcomDigi have chased for years. Its enterprise and fixed-line segments have lagged for most of the past decade, which makes any new line worth chasing.

Why does it matter for Malaysia?

The country's central bank tightened customer onboarding rules for digital banks and e-wallets in 2023, and the regulator has signalled tougher SIM-registration enforcement since 2022. A carrier-anchored number check slots neatly into both pushes, which is presumably why a fourth-ranked operator with something to prove found it worth signing.

U Mobile has spent the past two years pitching itself as the challenger to Maxis and CelcomDigi, with a sub-brand aimed at gamers and a 5G rollout that began in late 2023. A Telenor Linx tie-up gives it another line to put in front of enterprise buyers.

The two companies did not disclose commercial terms, API pricing or a launch date for end-user apps. Expect the first deployments to surface inside Malaysian banks and e-wallets within the next two quarters.