Items sold on OfferUp can range in value from a couple dollars to a several thousand with people selling a wide range of items from antiques to classic cars. As such and with OfferUp expanding into mobile payment processing, holds and shipping it was critical to find a new way to register and verify their users. OfferUp had been using email verification but was starting to see account takeover become a problem. As OfferUp grew so did the target on their back, they decided to seek a partner to provide an added layer of security so they could keep their sterling reputation as the most trusted mobile-first market place.
After a thorough search, OfferUp decided to partner with Telesign on a verification solution that would leverage 2FA (two-factor authentication) with an SMS message and one time passcode (OTP). The idea behind this solution is that users now have their phone number as a trust anchor. By providing something you know(password) and something you have (mobile device) an extra layer of security was added to OfferUp’s platform. Furthermore in the event of a password reset flow, OTPs to a device are much more secure than email. By implementing this simple solution, OfferUp saw their account takeover (ATO) attacks drop dramatically. It also made certain that they were protected against future legislation such as California’s CCPA. Additionally, OfferUp leveraged a Telesign mobile identity solution that relies on carrier data and phone intelligence to give a company certain insights about their users. In this instance OfferUp chose the Phone ID Device Info API which can tell a platform which kind of device their user has. This can of course help out for user experience (UX) reasons but also security. If a user is typically on an iPhone but then makes a several thousand dollar purchase on an Android device, the Device Info API can flag for a security review. All in, OfferUp had a seamless implementation of Telesign solutions. Fraud is down, the company continues to grow and we look forward to seeing what OfferUp does when it eventually expands into new territories where all of its new users will rest easy knowing that OfferUp rests under the security blanket of Telesign.