PLDT Enterprise Expands SmartSafe With GeoCheck, NetIdentity, and RoamStatus APIs

PLDT Enterprise added three new SmartSafe authentication APIs to its network-powered fraud prevention suite at a launch event in Parañaque City on October 8, 2026. GeoCheck, NetIdentity, and RoamStatus use real-time signals from the mobile network to give businesses more context on logins, payments, and other digital interactions.

SmartSafe launched in November 2025 as the first telco-enabled digital fraud management API suite in the Philippines certified by the GSMA. GP covered the earlier NetIdentity milestone in August, when Smart secured GSMA certification for the SIM Swap and Device Swap APIs behind it. The new APIs follow the same idea: instead of asking customers to prove who they are, the network supplies the context.

What the new SmartSafe authentication APIs check

NetIdentity checks signals tied to SIM and device authenticity. Its SIM Swap and Device Swap APIs can indicate whether the SIM linked to a mobile number was recently changed, or whether that SIM was transferred to another physical device. Those are the markers of a possible account takeover, and PLDT Enterprise positions them as triggers for extra review on higher-risk logins and transactions.

GeoCheck validates a user’s general vicinity around the transaction location, adding a location signal without asking the customer to report where they are.

RoamStatus returns a plain roaming status: whether the phone is being used domestically or while abroad. PLDT Enterprise said the response does not rely on location information supplied by the user.

“Fraud continues to evolve, so protecting customers cannot depend on a single signal or a single security step,” said Nico Alcoseba, First Vice President and Head of Enterprise Product Management & Innovations at PLDT Enterprise. “The value of network intelligence is that it gives businesses more context. A change in a SIM, a different device, an unexpected location, or roaming activity can become useful information when an organization is deciding whether an interaction looks normal or deserves another layer of verification.”

Built on GSMA-certified network APIs

Smart was the first Philippine telco to earn GSMA Open Gateway API certification for Number Verification, and that certification supported SmartSafe SilentAccess, which verifies users over the Smart network without a one-time password, when it debuted in November 2025. NetIdentity later added GSMA certification for SIM Swap and Device Swap, and RoamStatus carries its own Open Gateway certification for Device Roaming Status. PLDT Enterprise said each of the three APIs introduced at the launch is first in the market.

“Digital security should make people feel safer without making every transaction harder,” said Blums Pineda, Chairman of ePLDT and Head of Enterprise Business Group at PLDT Enterprise. He described SmartSafe as another way for businesses to read the context behind a digital interaction.

What it means for businesses

The pitch lands mostly with banks, fintech platforms, e-commerce operators, and other services where identity checks carry weight. A sudden SIM swap or a device change on a high-value transaction gives a risk team a reason to ask for one more step, while an ordinary login stays quiet in the background. PLDT Enterprise has not published pricing for the new APIs, and businesses can learn more through its enterprise site.

“Trust is built in the small moments when customers log in, make a payment, access an account, or simply expect a digital service to work safely,” said Josh Montecillo, AVP and Head of Enterprise and International Wireless Product Management at PLDT Enterprise.

The launch also included a panel discussion with PLDT Enterprise’s wireless platforms, product innovation, and product development teams.