Your agents reset accounts all day for people they can't see.
Today they verify with facts an attacker can buy: birthdate, employee ID, manager's name. When a reset goes wrong, the ticket shows a note and nothing more.
A callback to the number on file feels safer, but it trusts whoever holds that SIM right now. Nobody on the desk can see whether it moved this week.
Run the check, then call back the number on file. Proceed means the callback still reaches your employee's SIM. Step up means it may not, so the agent verifies on video or in person instead.
New phone this week? The agent sees Step up and uses your existing video or in-person check. Nobody gets locked out.
Before a password reset or MFA move, asks the carrier whether the SIM on the employee's number changed in the last 72 hours.
Built to tell you whether calls to the line are being forwarded somewhere else. Waiting on the carrier to switch it on.
Compares what a person says (name, birthdate, zip) with what their carrier holds, and returns match or no match per field. Nothing comes back but the answer.
The pilot is free. After day 30, plans are priced per protected employee, agreed with you then.
William Haynes
Founder of Mobile Security Guru (working across telecom, mobility, enterprise sales, and cybersecurity since 2006).