GCP – Partnering with leading mobile operators for API-based phone number verification

For communication service providers (CSPs), a major hurdle in monetizing their networks is engaging the developer community effectively. Historically, complex, non-standardized APIs and a lack of developer-friendly resources have limited access to valuable network capabilities, preventing CSPs from fully capitalizing on the potential of their infrastructure.

However, by using platforms like Firebase, Google’s web and mobile application development platform, and embracing initiatives like the Open Gateway Initiative (OGI), CSPs can gain access to a vast pool of developers who are eager to build innovative applications with standardized APIs.

Today, we’re announcing a new Firebase phone number verification service, providing more than three million Firebase developers with access to critical network CSP APIs such as phone number acquisition and verification. We’re also partnering with Deutsche Telekom, Orange, Telefónica, T-Mobile, Telenor, Verizon, Vodafone and others to improve developer and end-user experiences, and strengthen security by mitigating fraud — creating new revenue opportunities for CSPs and developers alike. 

This work builds on the OGI vision to enable developers to build innovative applications and services through a global, standardized API framework that exposes network services. Google Cloud is proud to be part of this transformative movement, and we’re excited for the future it enables.

The challenge of traditional authentication methods

User authentication is critical for mobile and web app developers to build secure, personalized, and functional apps that protect user data, enable monetization, and foster trust. However, traditional methods, including SMS One-Time Passwords (OTPs), often create friction for users with limitations like slow delivery, interception risks, and unreliable cellular service. This can lead to frustrated users, abandoned sign-ups, and security vulnerabilities. Furthermore, bad actors increasingly exploit the SMS channel for fraudulent activities, such as artificially inflating traffic for profit. Developers and CSPs need more reliable, secure, and user-friendly verification alternatives.

OGI: A standardized solution for secure authentication

OGI, backed by the GSMA and global CSPs, has already set the stage for a more collaborative and innovative telecom ecosystem. The initiative currently provides a standardized framework for CSPs to expose their network capabilities through APIs, enabling developers to access core network functionalities, including secure user identity verification, in a consistent and predictable manner, regardless of the user’s mobile operator. By connecting the Firebase developer ecosystem to the broader OGI, we’re helping address some long-standing challenges, like complex APIs, consent models, fragmented billing experiences, and more. 

Benefits for users, developers, and CSPs alike

Firebase’s standardized approach to authentication offers a multitude of benefits:

• Enhanced security: By directly verifying user identity with CSPs, APIs significantly reduce the risk of fraud and unauthorized access.
• Improved privacy: The operating system manages the consent experience, providing intuitive and transparent controls in line with regional requirements.
• Improved user experience: Firebase enables smooth verification experiences, minimizing the friction of traditional methods like SMS one-time passwords (OTPs).
• Increased accessibility: Firebase works across both Wi-Fi and cellular networks, providing reliable authentication even in areas with poor cellular connectivity.
• Simplified development: Developers can access a global network of CSPs through a single, standardized API framework, reducing development time and complexity.
• New revenue streams for CSPs: Firebase helps CSPs monetize their network capabilities and become key players in the digital ecosystem.
• Simplified billing: Billing is centrally managed through Google Cloud, and CSPs get paid by Google.
• Access to millions of developers: By leveraging Google’s relationship with over three million developers, CSPs can scale the business quickly.

“Digital identity APIs are the future of safe online transactions as they provide secure and reliable evidence of users’ identities in a world of ever-increasing cyber threats. The partnership with Google enables us to bring next-generation authentication services to our customers, strengthening our overall efforts to provide unparalleled cyber security now and in the future.” – Nicholas Nikrouyan, VP Voice & Mobile Services, Deutsche Telekom.” 

“Privacy and security are key for Telefónica in the development of digital services. We are thrilled to partner with Google to accelerate the launch of more secure and user-friendly phone number verification solutions through Open Gateway’s APIs, seamlessly integrated with Cloud Firebase.” – Chema Alonso, Chief Digital Officer, Telefónica.

“We at Telenor Linx believe that simplicity is the key to unlocking secure digital experiences. By providing user-friendly verification and authentication solutions built on top of our core connectivity, we ensure that mobile operators remain central to protecting customers’ identities. Partnering with global development communities to drive open standards and reduce fraud opportunities is a natural next step for our industry, and we look forward to delivering safe, seamless access to services for businesses and consumers alike together with Google.” – Stig Waagbø, CEO, Telenor Linx

“Vodafone is collaborating with Google and other mobile operators to enable frictionless and cryptographically secure authentication. We believe this is key to enabling developers and stimulating the next wave of digital services,” – Johanna Wood, Director of Network APIs, Vodafone.

Privacy at the forefront

Both Google Cloud and the Open Gateway Initiative are committed to user privacy. OGI APIs are designed with strong privacy protections, ensuring that user data is handled responsibly and securely. Users maintain control over their data and provide explicit consent for any data sharing, consistent with established privacy best practices. Firebase expands on these promises with a unified, simple and consistent user experience independent of the market the user is operating in.

If you’re a CSP wanting to offer Firebase phone number verification on your network, please register your interest here. Going to Mobile World Congress (MWC), March 3-6, 2025 in Barcelona? Visit Google Cloud at Hall 2, Booth #2H40 to see experiences in action.