Open Gateway

All apis

Under CAMARA project
Germany
0.1.0

Number Recycling API

The standardized Number Recycling API allows companies to verify in real time whether a mobile number has been reassigned, using network data verified by the operator.

The solution detects when a mobile number has changed hands, thanks to reliable network information. This provides businesses with accurate data, protects against unauthorized access, and minimizes fraud in sectors such as banking, logistics, and digital services. By offering instant updates, it strengthens security, regulatory compliance, and improves the customer experience.

What can it be used for?

The Number Recycling API allows companies to instantly know if a mobile number has changed ownership, using information verified directly by the operator.

Recent Activity Indicator

Detects if a number has changed ownership within a specific period (for example, the last 90 days). This helps prevent fraud and keep customer data up to date.

Real-time validation

It provides an immediate response from the mobile network, ensuring accurate and always up-to-date data.

Access to history

This feature allows you to view changes in ownership of a number within a specific period (such as 6 to 12 months), providing a more complete view of its history and usage patterns.

Intelligent Assessment

Combined with APIs such as Number Verification, SIM Swap, or Line Tenure, it creates a more robust solution for fraud prevention. This strengthens risk analysis, reduces errors, and adjusts the authentication level to the needs of each transaction.

Standardised access

The standardised Number Recycling API with CAMARA enables a single integration to work with operators worldwide, without the need for customised agreements.

Privacy by design

With an enhanced privacy model, the API provides only a binary response. It does not process personal data or compare sensitive information. It only provides reliable operator data confirming whether a number has been reassigned since the specified date.

Use cases

Financial services & insurance ICT Services

Sensitive notifications

Organizations that handle sensitive data—such as banks, healthcare providers, and insurance companies—rely on mobile numbers to communicate critical information, from transaction alerts to medical results and policy updates. When a number is recycled or reassigned, these notifications can reach the wrong person, creating privacy risks, regulatory non-compliance, and a loss of customer trust.

Integrating the Number Recycling API allows for real-time validation that a number still belongs to the legitimate recipient before sending personal or financial information. With this pre-verification, organizations can strengthen the security of their sensitive communications, prevent accidental leaks, and ensure a more reliable experience for their users.

APIs used

Sensitive notifications
Financial services & insurance Media, entertainment & XR

Secure authentication and account access

Digital platforms, financial institutions, and online service providers use mobile numbers as a primary trust factor for two-factor authentication and secure account access. However, the frequent reassignment or recycling of numbers means that sensitive codes—such as one-time passwords (OTPs), login links, or recovery keys—can be accidentally sent to a new owner, exposing users to risks of privacy breaches, fraud, and account takeover.

Integrating the Number Recycling API allows for real-time verification of whether a number has changed ownership since a specific date before sending any confidential credentials or notifications. This verification, provided directly by the telecommunications operator, ensures that only the legitimate user receives access codes. This enables organizations to strengthen the security of their authentication processes, reduce fraud attempts, and ensure GDPR compliance by using accurate, up-to-date, and privacy-friendly data.

APIs used

Secure authentication and account access
Financial services & insurance Media, entertainment & XR

Account recovery and password reset

Digital services often rely on phone numbers as the primary channel for recovering credentials or restoring account access. However, when a number has been recycled or reassigned, recovery codes or reset links can reach a new subscriber, exposing sensitive information and opening the door to account takeover.

The Number Recycling API allows for real-time validation of whether a number still belongs to the legitimate user before initiating any recovery process. This data, verified directly by the operator, ensures that only the rightful owner can reset their password or regain access. In this way, organizations can protect their account restoration workflows, prevent accidental data breaches, and strengthen user trust by ensuring that their credentials always remain under their control.

APIs used

Account recovery and password reset
Financial services & insurance ICT Services

Improve confidence in transactions and risk assessment

Digital platforms and financial institutions need to continuously assess the trust level of sessions and transactions to detect anomalous behavior and potential threats. A phone number that has been recently recycled or reassigned can become an early indicator of risk, especially when combined with other contextual signals such as device ID, IP reputation, or unusual access patterns.

With the integration of the Number Recycling API, a real-time network signal can be provided that strengthens risk assessment models and improves the accuracy of decision-making. By identifying recent changes in number ownership, organizations can detect suspicious activity, prevent unauthorized access, and maintain regulatory compliance without compromising user privacy. This proactive verification layer helps ensure transaction integrity and strengthens trust in increasingly dynamic digital ecosystems.

APIs used

Improve confidence in transactions and risk assessment
Financial services & insurance Media, entertainment & XR

Ensuring data accuracy and regulatory compliance

Organizations that use mobile channels to communicate with their customers have a legal and ethical responsibility to ensure that the information sent always reaches the correct recipient. However, when a mobile number is recycled or reassigned, there is a risk that messages containing personal or transactional data could end up in the hands of a new user, which can lead to GDPR or CCPA violations and a significant loss of trust.

The Number Recycling API integration allows for real-time verification of whether a number still belongs to the same subscriber before sending any sensitive content. This signal, validated directly by the operator, acts as a preventative mechanism that protects privacy, reduces the risk of data breaches, and minimizes exposure to regulatory penalties. Furthermore, the API is designed in accordance with GDPR principles—accuracy, minimization, and privacy by default—enabling organizations to adopt more responsible and transparent communication practices aligned with current regulatory standards.

APIs used

Ensuring data accuracy and regulatory compliance

Related APIs

Spain Brazil United Kingdom

Line Tenure API

It allows to know from when a mobile number belongs to its current user, obtaining key indicators for fraud detection, identity validation and safer decision making in real time.

Financial services & insurance Data-driven marketing Social & customer engagement Authentication and fraud prevention
Spain Germany Brazil United Kingdom

SIM Swap API

Allows to integrate SIM swap detection and management functionality based on data from the carrier's network. This facilitates the protocols and security measures of any service to be adjusted quickly and proportionately.

Financial services & insurance Social & customer engagement ICT Services Authentication and fraud prevention
Spain Germany Brazil

Number Verification API

Provides a mechanism to automatically verify whether a user is interacting via a device that has a SIM card associated with a certain phone number (MSISDN). This means that the user doesn´t have to enter any kind of credential or one-time password (OTP).

E-commerce & retail Financial services & insurance Media, entertainment & XR Authentication and fraud prevention
Spain Germany Brazil

Know Your Customer - Match API

Allows to validate a user's contact information quickly and easily, thanks to reliable mobile carrier data. This prevents identity fraud and improves de conversion rate.

E-commerce & retail Financial services & insurance Social & customer engagement Media, entertainment & XR Authentication and fraud prevention

Join our Developer Hub

Test our APIs before anyone else, develop new use cases and create new experiences to harness the power of the network. Contact our experts if you need more information on how to transform your applications and services with our APIs.

Under CAMARA project
Germany
0.1.0

Number Recycling API

Start integrating the Number Recycling API into your validation processes and identify a users age threshold in real time using mobile operator data.

How to start

Follow these steps to access the Number Recycling API:

CHOOSE A PARTNER

Select a suitable Channel Partner or aggregator that offers integration with the Open Gateway API to meet your needs. Contact an expert for more information on Channel Partner availability or to become a new Open Gateway partner.

SIGN UP

In order to use Open Gateway products, you must register on the Partner platform.

ACCESSING Number Recycling

Once registered and with your credentials, you will be able to access the Number Recycling API on registered carriers by making API calls through your chosen Channel Partner's gateway.

REVIEWING PRIVACY POLICIES

Number Recycling requires the consent of the end user to access the payment authorisation on their behalf, so you will need to register with Telefónica through the Partner's platform.

Join our Developer Hub

Test our APIs before anyone else, develop new use cases and create new experiences to harness the power of the network. Contact our experts if you need more information on how to transform your applications and services with our APIs.

Under CAMARA project
Germany
0.1.0

Number Recycling API

Start integrating the Number Recycling API into your apps and access network capabilities in real time.

As a developer, you will be able to consume this API either by using the HTTP protocol to perform requests to its standard Camara version on the API exposure platform of your provider of choice (availability will be indicated soon) or by integrating in your app the SDKs provided by those, which will make it simpler for you to authenticate, perform operations and handle results in the same programming language you are using.

If you want to preview and test how it will be like to use them, check the following developer resources:

Join our Developer Hub

Test our APIs before anyone else, develop new use cases and create new experiences to harness the power of the network. Contact our experts if you need more information on how to transform your applications and services with our APIs.

Under CAMARA project
Germany
0.1.0

Number Recycling API

Exclusive content

We offer a secure tool where you can test our Telco APIs, see how they work and validate your own use cases, through a UX interface common to any aggregator.

Don't have an account yet?

Join the Developer Hub or sign up for the Partner Program and enjoy all the exclusive Telefónica Open Gateway content for free.

Under CAMARA project
Germany
0.1.0

Number Recycling API

Do you have any other questions? Contact our experts for any questions and advice.

FAQs

It allows organizations to check whether a mobile number has been recycled or reassigned since a given date — ensuring messages, credentials, or notifications reach the rightful owner.

CAMARA, the open-source project led by the Linux Foundation in collaboration with the GSMA, aims to universalise network APIs under the same standards for all telecommunications companies.

Mobile numbers are periodically reassigned by operators. Without visibility into these changes, businesses risk sending sensitive data to new owners, violating privacy rules or causing fraud incidents.

The Number Recycling API benefits sectors where trust, identity verification, and secure communication are critical — such as banking, eCommerce, digital identity, utilities, healthcare, and public services — any sector using mobile numbers for authentication, notifications, or communication.

A phone number and a reference timestamp (RFC 3339). The API returns whether the number has changed ownership since that date.

  • specifiedDate: Specified date to check whether there has been a change in the subscriber associated with the sp

A JSON response with:

  • phoneNumberRecycled (boolean), Set to true when there has been a change in the subscriber associated with the specific phone number after "specifiedDate".

It supports the accuracy and minimization principles (Articles 5 and 25), preventing communications to unintended recipients and avoiding data leaks.

Yes. The Number Recycling API is designed to work alongside other Open Gateway identity and risk APIs for stronger validation flows. It can be combined with:

  • Number Verification, to confirm that the number currently belongs to the user interacting with a service.
  • SIM Swap, to detect if a recent SIM replacement may indicate account compromise.
  • Line Tenure, to assess how long the current user has owned the number, providing additional trust and helping distinguish between long-term active subscribers and recently reassigned ones.

Together, these APIs create a multi-signal framework that improves security, prevents data leakage, and supports compliance — all through operator-verified, privacy-by-design information.

No, the API focuses specifically on ownership change (recycling) events.

Yes. By proactively identifying recycled numbers, companies avoid incidents where messages or OTPs reach unintended users, cutting support tickets, manual corrections, and complaint handling.

The business application can automatically block or revalidate the user session, trigger a step-up authentication (e.g., document check or email validation), or mark the contact as inactive in the CRM.

It's built on authoritative network data, continuously updated as part of the operator's subscriber lifecycle. This gives it a trust and timeliness level that no external data source can match — making it ideal for financial services, healthcare, and digital identity use cases.

It's built on CAMARA/Open Gateway standards, enabling multi-MNO coverage with one integration and consistent policy controls.

Under CAMARA project
Germany
0.1.0

Number Recycling API

Access technical information, featured articles and other resources to learn more about the Number Recycling API and its benefits.

Subscribe to our Newsletter
Find out about the latest Telefónica Open Gateway product launches, events and news.
*Mandatory fields