Skip to main content

Telco & Subscriptions

The Problem

Carriers spend on KYC at activation, then that verified status expires at the edge of their network. A prepaid subscriber who passed full identity verification at your MVNO is unknown to your roaming partner. Carrier partnerships that could unlock subscriber benefits require bilateral API agreements that take months to negotiate and are rarely worth the integration cost.

What Changes With AIR Kit

  • KYC travels with the subscriber — Pass once at activation, accept everywhere in the ecosystem. Roaming partners verify the credential without calling your API or receiving subscriber data
  • Loyalty tiers become cross-carrier benefits — Issue a Silver or Gold subscriber credential. Partner MVNOs, device retailers, and service providers accept it to unlock benefits — no direct agreement required
  • Age-restricted services gated properly — Prove isOver18 at point of service without transmitting or storing a subscriber’s date of birth
  • Churn intervention without data sharing — Issue a “5-year subscriber” tenure credential. Retention partners can verify loyalty without accessing your customer database

How It Works

1

Subscriber activates and passes KYC

Your existing activation flow. Your existing identity verification. Nothing changes at this step.
2

AIR Kit issues a subscriber credential

At activation success, your backend fires one API call. A credential encoding KYC level, plan type, and age verification lands in the subscriber’s AIR Account. Invisible to the subscriber.
3

Subscriber accesses a partner service

At a roaming partner, MVNO, or retail service, the subscriber authenticates with their AIR Account — the same login they use with you.
4

Partner verifies — no PII crosses

The partner calls one SDK method. They receive COMPLIANT or NON_COMPLIANT, plus the KYC level. No MSISDN, no IMSI, no subscriber documents are transmitted.

What Crosses the Network — and What Doesn’t

What the Roaming Partner ReceivesWhat Stays Private
COMPLIANT / NON_COMPLIANTMSISDN / phone number
KYC level (basic / enhanced / full)IMSI / SIM identifiers
isOver18: trueDate of birth, full name
Plan type (prepaid / postpaid)Address, national ID
Credential expiryBilling history

What Compliance Will Ask

Does this satisfy roaming KYC obligations? The credential attests to the level of KYC completed at your platform. Roaming partners accepting it are verifying that fact — the underlying compliance obligation remains with the issuing carrier. Is subscriber PII transmitted to roaming partners? No. The ZK proof flow transmits only a boolean result and the credential attributes you choose to expose. MSISDN and subscriber identity documents never leave your systems. GDPR: where is subscriber data stored? On Moca Chain — a credential hash with no personal data. The raw subscriber PII stays in your systems and your KYC provider’s systems, exactly as today.

Integration at a Glance

What your team buildsOne API call in your activation event handler
Engineering effort1 backend engineer
Timeline to live2–4 weeks
Changes to existing activation flowNone
Roaming partner integration3 lines of SDK code to verify