Security and verification
OTP and 2FA verification for your customers
Send one-time passcodes by SMS or voice call and check numbers before you contact them. For higher-risk scenarios, we design fraud controls with you.
Benefits
Codes by SMS and voice
If the SMS does not arrive, users can get the code in a phone call.
Straight from a carrier
Hablame has been a telecom public service company in Colombia since 2009.
Fewer wasted contacts
Knowing line type and carrier helps you decide before you send.
What’s included
OTP verification and two-factor authentication (2FA)
Send one-time passcodes by SMS or voice call for sign-ups, logins and transaction approvals.
SMS OTP
Verification code by text message.
Voice OTP
Code read out in an automated call.
API integration
HTTPS API with per-message status.
WhatsApp and email
Additional channels for the same code.
Your system generates the code and sends it through our API over carrier routes. The voice call reads the code aloud, as a second channel or for landlines.
As an extension, we can add WhatsApp and email delivery to the same flow.
Delivery depends on the recipient and each network. WhatsApp OTP is subject to the platform’s policies, eligibility and availability.
Validate before sending
Before you send a message or a code, check whether the number is valid, mobile or landline, which carrier serves it today and whether it was ported. Read the details on Number Lookup.
Related
Communications fraud prevention
We design controls with you to curb misuse of your channels: codes, numbers and calls.
Rate limits
Caps per number, user and time window.
Destination rules
Block countries or ranges you do not serve.
Alerts
Alerts on abnormal traffic spikes.
Voice fraud
Controls on your trunks and PBX.
We combine number lookups, sending limits, country and carrier rules, and unusual-traffic alerts to protect your OTP flows and phone lines.
Every operation faces different risks, so we start with an assessment before proposing controls.
Custom solution: controls are assessed for each project. No measure fully eliminates fraud risk.
SIM Swap and network APIs
We are evaluating network capabilities such as SIM Swap, Number Verification, Device Swap and silent authentication to strengthen verification.
SIM Swap
Signal of a recent SIM change before approving a transaction.
Number Verification
Confirms the user is on the number they claim.
Device Swap
Signal of a device change linked to the number.
Silent authentication
Verification through the network, with no visible code.
These APIs query the mobile network, for example whether a number’s SIM changed recently or whether the user is actually connecting from that number, without asking for a code.
Their use is subject to agreements with mobile network operators and standards such as CAMARA/Open Gateway. We are evaluating their feasibility for Colombia and for each project.
Capability under evaluation, subject to agreements with mobile network operators and standards such as CAMARA/Open Gateway. Feasibility is assessed for each project.
Step by step
How it works
Review your flow
Where you verify users today: sign-up, login or transactions.
Integrate the API
Connect your system to send codes and look up numbers.
Set backup channels
SMS first with a voice call as backup, or another order you prefer.
Tune the controls
Limits and rules based on your actual traffic.
By profile
Who it’s for
Small business
Add an SMS code to sign-ups or payments without building your own infrastructure.
Enterprise
SMS and voice OTP, number lookups and fraud controls designed for your risk profile.
Developer
One API to send codes and look up numbers, with per-message status.
Carrier
If you aggregate OTP traffic, see our wholesale A2P routes too.
In practice
Use cases
Transaction approval
SMS or voice code before confirming a payment or transfer.
New user sign-up
Check that the registered mobile number is real and belongs to the person signing up.
List cleaning before campaigns
Identify landlines, mobiles and carrier to send on the right channel.
Access to online services
Two-factor authentication for citizen, patient or member portals.
Industries
Pricing
Security & Verification pricing
Pricing depends on what you need. Tell us about your case and we’ll send you a quote for your operation.
Frequently asked questions
What if the SMS with the code does not arrive?
You can offer the code by voice call as an alternative. Delivery on any channel depends on the recipient and each network.
Can I send OTP over WhatsApp?
Yes, as an extension of the service, subject to the platform’s policies, eligibility and availability.
Do you already offer SIM Swap in Colombia?
We are evaluating it. It depends on agreements with mobile operators and standards such as CAMARA/Open Gateway, so we do not commit to it today.
Can number lookup clean my contact list?
Yes. Your system looks up each number over the API and learns whether it is valid, mobile or landline, its carrier and porting status, so you can choose the channel and drop dubious records.
How do I protect my OTP from SMS pumping?
With rate limits, destination rules and prior number lookups. We design those controls with you based on your traffic.
Technical details
For your technical team.
- OTP channels
- SMS and voice call; WhatsApp and email as extensions
- Integration
- HTTPS API with webhook status callbacks
- Number lookup
- Validity, line type, carrier and porting, one number at a time over the API
- Code handling
- Your system generates and validates the code; we deliver it
- Network APIs
- Under evaluation, subject to operator agreements and CAMARA/Open Gateway
Can’t find your question?
An advisor reviews your case and gets back to you.
You may also like
SMS API and SMPP
SMS & RCS
SMS, automated call and number verification APIs
Integration & APIs
Number Lookup
Carrier, line type and porting status
Preferences and consent management
Campaigns, Orchestration & Data
Tell us what you need
An advisor reviews your case and gets back to you with a proposal built around your operation.