anthrogate

Journey 2 of 2 · Returning user

Authentication flow

A registered user signs in. Silent Authentication confirms the device and a SIM Swap check runs in the same step. If the carrier check can't complete, the user signs in with an SMS code. If a recent SIM change is found, sign-in pauses for email confirmation.

Consent shownSilent AuthenticationSIM SwapSMS OTPEmail OTP

Main path

Consent is shown again on the sign-in screen, before any carrier check runs.

A1Sign in and consent

US carrier consent text and links to the Privacy Policy and Terms sit directly under the Sign in button.

Consent shownNo network API
A2Carrier checks run

Vonage Silent Authentication matches the number to the device. Vonage SIM Swap checks for a recent SIM change.

Silent AuthenticationSIM Swap
A3Signed in

Both checks pass. Anthrogate returns the result and keeps nothing.

No network API

Fallback · SMS code

Used when the device is on Wi-Fi only, the carrier is unsupported, the number doesn't match, or the user taps “SMS the code instead” on A2.

AF1Enter SMS code

Vonage attempts SMS delivery first. Twilio is the planned fallback if Vonage fails to deliver the code. If it doesn't arrive, the user can switch to email (same screens as RE1 and RE2).

SMS OTP
AF2Signed in

Signed in with the SMS code.

No network API

Step-up · Recent SIM change

Used when SIM Swap reports a SIM change inside Anthrogate's risk window. SMS codes are skipped here, because a swapped SIM would receive them. The same email code screens (AS2, AS3) are used when the user taps “Email the code instead” on A2.

AS1SIM change detected

Sign-in pauses. The user is told why and given a safe way forward.

SIM Swap
AS2Enter email code

A one-time code goes to the email on file.

Email OTP
AS3Signed in

Access restored, with a security notice sent to the user's email.

No network API

Consent settings · Opt-out

Available in the Anthrogate's settings at any time. Turning it off stops all carrier checks for that user.

AP1Manage carrier verification

A clear switch, plus a plain summary of what Anthrogate does and doesn't keep.

Consent shownNo network API
AP2Opted out

Future sign-ins use SMS or email codes only.

No network API