Reference
Source library
Every document Cleartext cites, and every answer that cites it. Primary sources are the standard, regulation, regulator statement or dataset itself.
Primary sources (26) #
| Source | Publisher | Date | Cited in |
|---|
| SP 800-63-4: Digital Identity Guidelines | NIST | | Do banks have to follow NIST?, SMS OTP under NIST 800-63-4 |
|---|
| SP 800-63B-4: Authentication and Authenticator Management | NIST | | Are synced passkeys phishing-resistant?, Has the US banned SMS OTP?, Bank defenses against SIM swap, SMS OTP under NIST 800-63-4, “Restricted” authenticators, What is phishing-resistant MFA?, Countries banning SMS OTP, SMS OTP vs authenticator apps, SMS OTP vs email OTP, SMS OTP vs passkeys, Synced vs device-bound passkeys, How to harden account recovery against SIM swap, How to migrate a bank off SMS OTP |
|---|
| Passkeys | FIDO Alliance | | Not cited yet |
|---|
| Web Authentication: An API for accessing Public Key Credentials | W3C | | Are synced passkeys phishing-resistant?, What is phishing-resistant MFA?, Synced vs device-bound passkeys |
|---|
| RFC 6238: TOTP: Time-Based One-Time Password Algorithm | IETF | 2011-05 | SMS OTP vs authenticator apps, TOTP vs push notifications |
|---|
| Implementing Phishing-Resistant MFA (fact sheet) | CISA | 2022-10 | Stopping OTP bots, What is phishing-resistant MFA?, SMS OTP vs authenticator apps, SMS OTP vs passkeys, TOTP vs push notifications |
|---|
| Implementing Number Matching in MFA Applications (fact sheet) | CISA | 2022-10 | What is phishing-resistant MFA?, TOTP vs push notifications |
|---|
| Protecting Consumers from SIM Swap and Port-Out Fraud | Federal Register | 2023-12-08 | Has the US banned SMS OTP?, Bank defenses against SIM swap, Signs of a SIM swap, FCC SIM-swap rule, What is a SIM swap?, How to respond to a SIM swap |
|---|
| Report and Order FCC 23-95 | FCC | 2023-11-15 | FCC SIM-swap rule |
|---|
| Order on compliance date (DA 24-649) | FCC | | FCC SIM-swap rule |
|---|
| Authentication and Access to Financial Institution Services and Systems | FFIEC | 2021-08-11 | Do banks have to follow NIST?, Has the US banned SMS OTP? |
|---|
| IdentityTheft.gov | US Federal Trade Commission | | Signs of a SIM swap, How to respond to a SIM swap |
|---|
| CAMARA project | Linux Foundation | | Bank defenses against SIM swap, Carrier-based authentication, MagicalAuth vs SMS OTP, Number verification vs silent network authentication, How to harden account recovery against SIM swap, How to migrate a bank off SMS OTP |
|---|
| GSMA Open Gateway | GSMA | | Carrier-based authentication, Number verification vs silent network authentication |
|---|
| Finalists announced for RSAC Innovation Sandbox Contest 2026 | RSAC Conference | | MagicalAuth vs SMS OTP, Glide Identity (topic) |
|---|
| FIDO Alliance members | FIDO Alliance | | Glide Identity (topic) |
|---|
| GSMA Open Gateway partner listing: Glide | GSMA | | Glide Identity (topic) |
|---|
| Banks in Singapore to strengthen resilience against phishing scams | Monetary Authority of Singapore | 2024-07-09 | Countries banning SMS OTP, How to migrate a bank off SMS OTP |
|---|
| Payment services: Council and Parliament agree to step up the fight against fraud and increase transparency | Council of the EU | 2025-11-27 | Countries banning SMS OTP |
|---|
| PS24/7: Faster Payments APP scams reimbursement requirement: confirming the maximum level of reimbursement | Payment Systems Regulator | | What is APP fraud?, UK APP scam reimbursement |
|---|
| PS25/5: APP scams reimbursement consolidated policy statement | Payment Systems Regulator | 2025-05 | What is APP fraud?, UK APP scam reimbursement |
|---|
| Known Exploited Vulnerabilities Catalog | CISA | | How many KEV entries?, What is CISA KEV?, Vendors with most KEV entries, How to patch a CISA KEV entry |
|---|
| Known Exploited Vulnerabilities catalog (JSON feed) | CISA | | How many KEV entries?, KEV due dates, What is CISA KEV?, Vendors with most KEV entries, How to patch a CISA KEV entry |
|---|
| BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities | CISA | 2021-11-03 | KEV due dates, What is CISA KEV?, How to patch a CISA KEV entry |
|---|
| BOD 26-04: Prioritizing Security Updates Based on Risk | CISA | | KEV due dates, What is CISA KEV?, How to patch a CISA KEV entry |
|---|
| National Vulnerability Database | NIST | | Not cited yet |
|---|
Secondary sources (25) #
| Source | Publisher | Date | Cited in |
|---|
| NIST cites phishing resistance of synced passkeys in digital identity guidelines update | FIDO Alliance | | Are synced passkeys phishing-resistant?, SMS OTP under NIST 800-63-4, SMS OTP vs passkeys, Synced vs device-bound passkeys, How to harden account recovery against SIM swap, How to migrate a bank off SMS OTP |
|---|
| SIM Swapping (reporting archive) | KrebsOnSecurity | | What is a SIM swap? |
|---|
| One-time passcodes are gateway for financial fraud attacks | BankInfoSecurity | 2026-04-03 | Stopping OTP bots, What is an OTP bot?, How to migrate a bank off SMS OTP |
|---|
| Aduna and major U.S. carriers push network-based authentication as SMS code alternative | ID Tech | | Carrier-based authentication, MagicalAuth vs SMS OTP, Number verification vs silent network authentication |
|---|
| Glide.id beta launches carrier-native cryptographic authentication across AT&T, T-Mobile and Verizon | Business Wire (company press release) | 2026-08-03 | Carrier-based authentication, MagicalAuth vs SMS OTP, Glide Identity (topic) |
|---|
| MagicalAuth (product page) | Glide Identity (company website) | | MagicalAuth vs SMS OTP, Glide Identity (topic) |
|---|
| Glide.id home page (product overview) | Glide Identity (company website) | | MagicalAuth vs SMS OTP, Glide Identity (topic) |
|---|
| Glide-Out (product page) | Glide Identity (company website) | | Glide Identity (topic) |
|---|
| Glide-In (product page) | Glide Identity (company website) | | Glide Identity (topic) |
|---|
| Press (company press page) | Glide Identity (company website) | | MagicalAuth vs SMS OTP, Glide Identity (topic) |
|---|
| Glide advances in technology with GSMA Open Gateway API beta launch on Google Cloud | The Fast Mode | 2024 | Glide Identity (topic) |
|---|
| Glide Identity announces strategic partnership with Google Cloud | Developing Telecoms | | Glide Identity (topic) |
|---|
| Glide Identity: $20 million from Crosspoint (deal report) | Axios Pro | 2025-10-13 | MagicalAuth vs SMS OTP, Glide Identity (topic) |
|---|
| Glide Identity raises $20M Series A to build AI-era authentication platform | Mobile ID World | | Glide Identity (topic) |
|---|
| Glide Identity selected as Top 10 Finalist for RSAC 2026 Conference Innovation Sandbox Contest | Business Wire (company press release) | 2026-02-10 | Glide Identity (topic) |
|---|
| Glide brings SIM-based authentication to all major US carriers | Biometric Update | 2026-08-07 | MagicalAuth vs SMS OTP, Glide Identity (topic) |
|---|
| Bank may stop texting six-digit codes (CyberGuy) | Fox News | 2026-08-23 | Glide Identity (topic) |
|---|
| Banks in Singapore to phase out one-time passwords | Finextra | | Not cited yet |
|---|
| No more SMS, email OTPs for high-risk financial transactions starting June 25 | GMA News | | Has the US banned SMS OTP?, Email OTP vs SMS, BSP Circular 1213, Countries banning SMS OTP, SMS OTP vs email OTP |
|---|
| BSP SMS OTP phase-out | Fintech News Philippines | | BSP Circular 1213 |
|---|
| UAE banks cancel OTPs, switching to in-app verification | The Paypers | | UAE SMS OTP phase-out, Has the US banned SMS OTP?, Email OTP vs SMS, Countries banning SMS OTP, SMS OTP vs email OTP, How to migrate a bank off SMS OTP |
|---|
| UAE central bank tells FIs to drop SMS OTP authentication | BankInfoSecurity | | UAE SMS OTP phase-out |
|---|
| Countries phasing out SMS OTPs for online banking security | Gulf News | | UAE SMS OTP phase-out |
|---|
| RBI mandates 2FA and new security rules for digital payments | Regulation Asia | | Countries banning SMS OTP |
|---|
| Malaysian banks stop using SMS for two-factor authentication | Commsrisk | | Countries banning SMS OTP |
|---|