Banking online involves familiar steps. You typically enter a password and wait for a six-digit code via text as an extra security measure. Despite this, scammers exploit these codes. They may impersonate bank representatives, set up phishing sites, or use SIM-swap attacks to gain access.
Rising Fraud Statistics
The Federal Trade Commission reports that $15.9 billion was lost to fraud in 2025, up from $12.5 billion in 2024. Imposter scams were the leading type, costing more than $3.5 billion in reported losses.
A New Security System: MagicalAuth
To address these issues, Glide.id has introduced MagicalAuth, a cryptographic authentication system. It’s available across major U.S. carriers on both iOS and Android but requires banks to integrate it into their systems first.
This system removes the need for texted codes by using cryptographic credentials linked to the SIM or eSIM in your phone. The bank can confirm your identity through the carrier network, eliminating the need for you to handle the code.
“A texted code is a shared secret,” said Eran Haggiag, founder and CEO of Glide.id.
How MagicalAuth Works
Glide explains that each SIM card contains a unique cryptographic key. During login, the system confirms your SIM’s presence with this key, avoiding the need for an app or user setup. Verification happens quietly within seconds, making it faster and smoother.
Challenges with SIM-Swap Scams
In case of a SIM-swap attack, where a scammer gains control of your number, MagicalAuth monitors for recent SIM changes. If detected, authentication from the new SIM is temporarily paused to alert the user.
“From the carrier side, the key is that we can help verify what is happening on the network before a login is approved,” said Shawn Hakl, SVP at AT&T Business.
Potential Limitations and Future Changes
Despite its advantages, this method does not eliminate social engineering scams. Scammers may still deceive you into authorizing transactions yourself. Better login security can help prevent account takeovers but cannot entirely stop manipulative schemes.
Switching phones or SIMs will trigger another verification check, ensuring your device information matches what the carrier expects.
Currently, MagicalAuth works with selected carriers and not all plans or phones. Banks adopting this system is crucial for its success.
Improving Current Security Measures
- Use a passkey: If available, use passkeys which resist phishing attacks by eliminating the need for a code or password.
- Strengthen your wireless account: Set up a PIN or password, and use features like number lock or port-out protection to prevent unauthorized transfers.
- Guard verification codes: Never share these codes, especially with unsolicited callers.
- Report sudden loss of service: Contact your carrier if you unexpectedly lose cellular service, a sign of potential fraud.
- Consider identity theft protection: Use services that monitor misuse of your personal data and help respond to fraud.
- Install strong antivirus software: Protect against phishing links and malware with reliable antivirus solutions.
- Limit personal information online: Use data removal services to minimize exposure on information broker sites.
The Role of Carriers in Security
Wireless carriers offer network signals that can assist in verifying bank logins. This ensures a secure verification process without compromising personal privacy.
Conclusion
SIM-based verification aims to improve security by removing vulnerable texted codes. As banks start implementing this technology, you might encounter smoother, safer login experiences. Stay vigilant against scammers who may use other manipulative tactics.
If your bank adopts this method, it relieves you of some security responsibilities, putting the focus on network-level checks. Beware of scams and use preventive measures to secure your financial information.
To learn more about protecting yourself from scams and fraud, visit CyberGuy.com.