Stop fake code requests. Keep real sign-ins flowing.
MCM AI checks every verification request, slows or blocks the fake ones and lets real sign-ins straight through.
- Real users still get their codes
- Fake waves slowed, then blocked
- Under your own brand
- Maya · AustinSign-in code by SMSAllowed
- +212 6•• •• 41Code request, new rangeSlowed
- Omar · DubaiSign-in code by voiceAllowed
- +212 6•• •• 58Code request, same rangeBlocked
- Priya · PuneSign-in code by SMSAllowed
Three kinds of shady verification traffic
Each one costs you money while no real customer is signing in.
Fake code waves
Fraudsters trigger big bursts of one-time code requests toward number ranges they profit from. Nobody is signing in, but you still pay for each message. This is often called OTP or SMS pumping.
Warning sign: A burst of requests to one range, with no matching sign-ups
Toll fraud
Fraudsters push calls and voice codes toward expensive destinations so that someone earns money on every call. The bill lands on you.
Warning sign: Voice requests to destinations you never serve
Shady requests
Odd retries, strange timing and numbers that keep asking again and again. One looks harmless, but together they show a pattern.
Warning sign: The same number asking over and over
Pick a request and see what MCM AI does
Every request is judged on its pattern, its destination and its timing. These are examples.
Looks like a real person
The request matches a normal sign-in. The code goes out straight away, with no extra steps for the customer.
- PatternMatches normal sign-ins
- DestinationA place you serve
- TimingOne request, one person
The wave goes out. The bill does not.
Code requests rise and fall with real customers. A fake wave sits on top of that, and you pay for all of it unless something stops it.
- Real sign-in codes keep going out, all day.
- The fake wave is slowed, then blocked when it continues.
Illustration only, not real traffic.
Watch, score, act
Three quiet steps happen on every request, before a message is sent.
- Step 1
Watch
Every code request is checked for its pattern, its destination and its timing.
- Step 2
Score
MCM AI rates the risk. A sudden wave with no matching sign-ups scores high.
- Step 3
Act
Real users go through. Shady ranges are slowed first and blocked if the pattern continues.
AllowedSlowedBlocked
Works with the rest of Comms APIs
Use it on its own, or alongside the tools that send and check your codes.
OTP fraud protection FAQs
What is OTP fraud?expand_more
OTP fraud is when someone abuses one-time code messages for profit. The most common kind is OTP or SMS pumping, where fraudsters trigger waves of fake code requests toward number ranges they earn from. You pay for every message, and nobody is actually signing in.
How does OTP fraud protection work?expand_more
MCM AI watches the pattern, destination and timing of every verification request. A sudden wave of requests to unusual ranges, with no matching sign-ups, is scored as high risk, then slowed or blocked.
Will real customers miss their codes?expand_more
No. The aim is to stop the fake traffic and keep genuine codes flowing. When a range is slowed or blocked, smart checks still let real users in that range through.
What is toll fraud?expand_more
Toll fraud is when calls or voice codes are pushed toward expensive destinations so that someone earns money on every call. MCM AI stops shady verification requests like these before the cost reaches you.
Does it cover codes sent by voice as well as text?expand_more
Yes. Verify and OTP sends codes over text, voice, chat and email, and the fraud checks apply to the requests that go through it.
Can I tune how strict it is?expand_more
Yes. Your team can adjust the controls for number ranges, so you decide how strict the guard is for the places you serve.
Can I offer OTP fraud protection under my own brand?expand_more
Yes. Partners launch the Comms APIs under their own logo and domain, so your customers use OTP fraud protection that carries your name.
Ready to stop paying for fake codes?
Talk to our team about OTP fraud protection in MCM Comms APIs, under your own brand.
Explore more on the platform
Verify and OTP
Send codes by text, voice, chat or email.
SIM swap check
Catch fresh SIM changes before you approve anything risky.
OTP Pumping Guard
Stop fake OTP traffic across your whole network.