Blogs›Amazon›SMS OTP Fraud Prevention with Network-Powered Identity Verification

SMS OTP Fraud Prevention with Network-Powered Identity Verification

posts

2026

This feature thread tracks the evolution of SMS OTP fraud prevention by integrating network-powered identity verification solutions. Initial focus is on leveraging real-time mobile operator data and silent authentication to enhance security and reduce friction in user authentication flows, specifically with Amazon Cognito. This post extends the thread by detailing a dual-token authentication pattern for game servers (Nakama) using Amazon Cognito. It addresses scenarios where both a managed identity provider (Cognito) and a game-specific session system are required, by implementing a Go runtime hook to validate Cognito JWTs and exchange them for Nakama session tokens. The solution also includes architectural patterns for routing HTTP and WebSocket traffic using Amazon CloudFront, AWS WAF, ALB, and NLB, with Nakama running on Amazon ECS/Fargate.

2026

Dual-token authentication for Nakama game servers with Amazon Cognito on AWS | Amazon Web Services

6/29/2026

Introduces a dual-token authentication pattern for Nakama game servers using Amazon Cognito. Implements a Go runtime hook to validate Cognito JWTs and exchange them for Nakama session tokens. Details the architecture for routing HTTP and WebSocket traffic through Amazon CloudFront, AWS WAF, ALB, and NLB, with Nakama deployed on Amazon ECS/Fargate. Covers Cognito User Pool configuration for SRP-based authentication and JWKS caching with thundering herd protection.

Reducing SMS OTP fraud with Vonage network-powered solutions and Amazon Cognito | Amazon Web Services

6/17/2026

This post introduces the integration of Vonage network-powered solutions with Amazon Cognito to combat SMS OTP fraud. It details the use of Vonage's Identity Insights (sim_swap, subscriber_match), Verify API with Silent Authentication, and Fraud Defender. The architecture leverages Amazon Cognito's CUSTOM_AUTH flow with three AWS Lambda functions to orchestrate these capabilities, aiming to reduce fraud, improve conversion rates, and decrease support costs.