CelcomDigi has partnered with Google's Firebase and Telenor Linx to make network-based phone number verification available to developers through Firebase in Malaysia.
The companies are positioning the service as an alternative to SMS one-time passwords for account sign-ups and log-ins. Instead of sending a text message, it verifies a phone number through a connection between an app and the mobile network-an approach designed to reduce exposure to scams and interception attempts that target SMS.
CelcomDigi said it is the first Malaysian mobile operator to offer network-based phone number verification through Firebase. The feature is intended for consumer and business apps, including financial services, eCommerce and ride-hailing.
Shift from SMS
SMS one-time passwords remain widely used for authentication, but criminals have exploited them through phishing messages, social engineering and SIM-related attacks. Operators and app providers also face costs from sending large volumes of SMS messages.
The new approach replaces SMS delivery with an API-led verification process. In practice, an app can verify a user's phone number in the background when the user is on the operator's network, rather than prompting the user to copy and paste a code from a message.
CelcomDigi said the verification is "anchored on telco-grade network intelligence" and delivered through "secure API-as-a-Service". Firebase provides the developer platform layer, while Telenor Linx supports the telco API and connectivity elements.
Developer distribution
Firebase is widely used for authentication and app services, giving the initiative a route into consumer apps that already rely on Google's tools. For CelcomDigi, the collaboration is part of a broader push to sell network functions through APIs, rather than limiting access to capabilities within the operator's own products.
The service targets businesses that want faster sign-up and sign-in experiences while reducing reliance on SMS-based codes. It also aims to address risks linked to automated traffic and fraudulent account creation, which can drive higher verification spend and other abuse-related costs.
CelcomDigi framed the initiative as a digital trust measure for Malaysia's online economy, describing a "one-tap" experience rather than code entry for onboarding and authentication.
API strategy
Mobile operators have been building API programmes that expose network signals and verification tools to developers, often with platform partners embedded in app development workflows. The concept has gained momentum as app providers look for stronger authentication methods and operators seek enterprise revenue beyond connectivity.
CelcomDigi linked the Firebase partnership to its wider API ecosystem work, citing partnerships with Aduna, Bridge Alliance and PayNet. It said these efforts focus on interoperable telco APIs spanning onboarding, fraud mitigation and cross-border digital services.
Those partnerships reflect a broader industry shift toward standardised network APIs, allowing developers to consume telecom functions in a consistent way across markets and operator groups. Execution typically depends on aligning operator infrastructure, security controls and developer support with cloud and platform providers.
CelcomDigi has more than 20.5 million users, providing the scale for network-based verification to cover a large share of domestic mobile users. That user base also makes fraud prevention and customer authentication high-impact priorities, particularly for services with mass-market sign-up volumes.
A key test will be uptake among Malaysian app providers, which will weigh security, user experience and implementation effort. Moving away from SMS codes could also change how organisations manage customer support and onboarding, especially when users are off-network or using devices that complicate automatic verification.
CelcomDigi Chief Innovation Officer T. Kugan said: "We are applying network intelligence to improve how people experience digital services. By offering APIaaS, we enable enterprises and developers to integrate secure, network-led phone number verification into their applications, making digital onboarding simpler, safer and more reliable for end users. This reflects CelcomDigi's commitment to continue playing a key role in enabling a more secure and trusted digital economy for the nation."
Micah Baker, Phone Number Verification Product Lead at Google Firebase, said: "Developers are increasingly looking for ways to deliver seamless user experiences without compromising security. By integrating telco APIs with Google's Firebase, this collaboration helps developers build faster and more reliable authentication flows, while reducing reliance on vulnerable SMS-based methods."
"Today, CelcomDigi's subscribers are the true winners. Authentication has become an essential part of every digital journey to combat fraud and fake accounts. Yet the user experience has often been suboptimal, while fraud has grown more sophisticated. With Firebase Phone Number Verification, we reduce both friction and fraud by combining telco-grade network intelligence with elegant APIs. Telenor Linx is proud to support Google and CelcomDigi in enabling a safer, seamless, and more trusted digital future," said Stig Atle Waagbø, CEO, Telenor Linx.
The network-based phone number verification service will be available via Firebase for developers building apps for users in Malaysia.