Plivo Verify includes Fraud Shield at no additional cost, helping to prevent SMS fraud such as SMS pumping and account takeovers. Using geo-permissions on the Plivo console, you can restrict the countries to which OTPs are sent. Additionally, you can set thresholds to limit the number of OTP messages sent to a specific country or number within a defined time frame, reducing the risk of fraudulent activity.
-
How does Plivo Verify help prevent fraud like SMS pumping?
-
How can I validate that OTP requests and callbacks are authentic?
Plivo sends security headers, including X-Plivo-Signature-V2, with every request to your server for callback validation. You can verify these signatures to ensure that the requests are indeed coming from Plivo. For more details, refer to our developer documentation.
For a step-by-step walkthrough, refer to the video below: