It looks like this is targeted towards crypto whale hopefuls who, for whatever reason, store sizeable value in a hot wallet/CEX that's controllable using a phone number/SMS 2FA. The price point of $99/mo supports this hypothesis.

Honestly, not a bad idea. These people clearly have more money than sense.

Plus it's not $99/month on top of your plan but it replaces your current phone plan + gives $5M Insurance policy too. Our other plans are even higher but the security they provide isn't required by 99.9% of the population so we don't even mention them on the site

We're a MVNO that guarantees protection against SIM Swap . We've additional protections but not able to offer it to public yet.

I don't mean to make too fine of a point from it; the combination of missing pages and slightly "off" formatting (mixed capitalization of the company name, other company logos embedded without rounding or blending) sets off my phishing alarm.

It's like We guarantee it and you get upto $5M

When I was SIM Swapped 4-times, I only got a courtesy call saying Sorry for the inconvenience caused.

I thought having $5M Insurance on top of guarantee will be better

I think this is cool, but also think it's important to be clear what's being offered.

About insurance, it's limited to Sim Swap/Port outs

Not from a marketing standpoint, but from a procedural level, how is this guaranteed?

Are you able to go into detail about this without giving up proprietary/secret sauce? Asking as a former pbx engineer at a couple of CLECs who is intimately familiar with the LNP process.

So to answer the original question on how we can guarantee while other carriers are not. There are two common attacks to compromise your account.

Sim Swap & Port out

In Sim Swap, any employee person can replace the SIM Card without permission by changing the number on the dashboard. Every primary carrier SIM card is available online, so criminals buy 100s of them and then rent logins to change this information. These logins are available for as little as 10k from the dark web.

The port-out attack is when criminal changes your carrier, which requires your account #, Zip Code & PIN in a few cases. Other information can be fake, so it isn't required. Port out must be completed within hours, and carriers have automated the process.

So how does Efani guarantee against it? I've been a victim of SIM Swap and have dealt with hundreds of incidents. No one is perfect, but we're just better at dealing with such attacks.

We authenticate clients using multiple ways and treat every request as fraud. It isn't an automated process & even within the company, it's taken very seriously and has to be approved by multiple resources. Our authentication methods include notary public and video authentication, and clients can also request a unique authentication process. We employ US Citizens who're security cleared and don't outsource support or operations. A lot of our staff isn't public due to security reasons. They are well paid compared to regular CS staff and are well-trained against these attacks. Our SIM cards are not publicly available, eliminating the risk of anyone obtaining them. Information on the account is pseudonymized, so if a client has compromised himself, we're able to stop the impersonation. Cool-off period - In case of high risk, we put a 14-day cool-off period to any request to ensure the client isn't compromised

We follow a few other methods in addition to the above and constantly. We've been able to stop all the attacks so far and are confident in our ability to deliver on the promise; Efani Secure Mobile is also securing clients with $5M Insurance. If you ever get compromised, you'll receive an apology, so we went beyond to ensure peace of mind.

Please let me know if further clarification is required.

Have you had a user get swapped, yes or no?

Guarantee is a word that has weight to it, I'm not seeing anything substantiating a guarantee other than the claim. I'm trying to understand the spirit of its use in this context by asking this.

The real service being sold here is the idea that in exchange for a premium, a company will train employees correctly and enforce strong security policies. which would be skipped by a normal telco because they want as much profit as possible off the top of your 30$ a month.

I mean, layers could be as simple as:

1. Does last name match?

2. Does first name match?

3. Does middle name match?

4. Does name suffix match?

5. Does country match?

6. Does state match?

7. Does city match?

8. Does street match?

9. Does house number match?

10. Does apartment number match?

11. Does phone number match?

Not sure if I'd be compelled to send my information to any service that is literally called "Doxx Me" either.... :)

Between that and a crypto bro founder / CEO this seems more like a pretext to harvest mobile numbers.

- Your Crypto Bro

It looks legit to me, and a good business idea.

Do you've any suggestions ?

We are a cybersecurity company and our entire leadership team has a decent online presence. You can just look any of us up.

Edit: Whoops meant to reply to the comment below

(My phone number is public, but it doesn't show up in any of these public DBs. I have no idea why.)

* Confirms that a number is a live subscriber;

* If there are N possible identities tied to the number, it strongly suggests that the most recent one is the "current" one;

* Links my phone number to a browser session, which provides further information.

Edit: It also fundamentally turns a passive source of information (a DB of phone numbers, of unknown quality) into an active one (people are actively confirming that some of these numbers are real and currently subscribed).

More details at https://www.efani.com/company