# Instant Activation

Canonical page: https://www.axonwireless.com/solutions/instant-activation/

Provider: Axon Technologies
Category: Digital subscriber onboarding, eSIM activation, SIM registration, fraud prevention
Positioning: From first click to live on the network.
Audience: Mobile network operators and mobile money providers.

## What Instant Activation Is

Instant Activation is Axon's digital subscriber onboarding solution for mobile network
operators. It combines identity verification, risk decisioning, number allocation and
SIM/eSIM provisioning into one journey, so a customer moves from seeing an offer to being an
active subscriber without a store visit or a courier hand-off.

It is built on IDToolkit, Axon's identity verification platform, extended with the parts a
pure identity vendor does not provide: number inventory, ICCID/MSISDN binding, eSIM profile
delivery and CRM/BSS/OSS hand-off.

**No physical SIM. No store visit. No dealer hand-off.** The subscriber proves who they are,
chooses a number and a package, and the eSIM profile is delivered in the same sitting, from their
own phone or browser.

## Where Activation Leaks (the problem this solves)

- Verification and provisioning are separate steps — identity is confirmed, but number
  selection or SIM delivery is handled later, in another system or another visit.
- The digital lead is pushed back into a queue — a store, a dealer, or a manual exception, at
  the moment intent was highest.
- Every channel applies a different rule, producing a different decision and a different
  quality of record depending on which door the customer used.
- Customer, SIM, MSISDN and evidence are split across systems, making disputes and fraud
  investigations expensive later.

## The Journey

1. Entry — in-app, web link, or QR code at a dealer or retail point.
2. Identity capture — document capture and NFC chip read where supported.
3. Liveness — proven to be a real, present person, not a photo, replay or injected feed.
4. Document authenticity — OCR, MRZ, barcode and chip data extracted and cross-checked.
5. Deduplication — searched 1:N against the existing subscriber base.
6. Consent — explicit, recorded, bound to the registration record.
7. Decision — signals combined into one outcome: approve, refer or decline.
8. Number selection — live inventory, premium and reserved ranges, or port-in.
9. Provisioning — eSIM delivery or physical SIM binding, with ICCID/MSISDN allocation.
10. Active — on the network, with a complete registration record behind the activation.

## The Checks

- Capture quality
- Facial liveness (2D and 3D, presentation-attack and injection resistant)
- Document authenticity (OCR, MRZ, barcode, NFC chip, forensic checks)
- Face-to-document match
- 1:N duplicate identity search against the enrolled subscriber base
- Watchlist, device, network and market-specific risk rules

Decision output: approve, refer or decline, with a reason, a configurable threshold and
evidence for the path taken.

### Facial matching accuracy — three distinct figures, never interchanged

| Capability | Confirms | Accuracy (false accept rate) |
| --- | --- | --- |
| 3D:3D re-verification | The returning subscriber, against their own enrolled template | 1 in 125,000,000 |
| 3D:2D face-to-document match | The live person, against their ID portrait | Up to 1 in 2,000,000 |
| 1:N duplicate identity search | The same face, enrolled earlier under different details | Up to 1 in 1,000,000,000 |

Document forensics run near 97% accuracy — never as strong a signal as 3D liveness, and
weighted accordingly in the risk score.

## Provisioning — the part a pure identity vendor does not do

- **ICCID / MSISDN binding** — the verified identity bound to the SIM and the number at the
  moment of activation, so the registration record and the network record are the same
  record. Already running in production at operator scale.
- **Dynamic number allocation** — live inventory exposed to the subscriber: an available
  range, a premium or reserved number, or port-in, without an agent re-keying the request.
- **eSIM profile delivery** — secure delivery as the final step of the same journey.
- **CRM / BSS / OSS hand-off** — the verified record passed to the systems that own the
  subscriber, through provider-agnostic connectors, webhooks and status updates.
- **Exception and reconciliation** — if verification passes but provisioning fails, the
  operator sees the state, retries or refers without asking the customer to start again.

## Commercial and Environmental Effect

**Dealer commission is not paid on a self-service activation.** A registration normally carries a
dealer or agent commission — the channel cost of signing a subscriber up. A subscriber who
self-activates through this journey never touches that channel, so that commission is not paid on
that registration. Every activation that moves from dealer-assisted to self-service converts a
channel cost into a verification cost instead.

**Physical distribution cost falls.** Every eSIM activation is a SIM card never manufactured,
packaged, shipped or distributed, and a registration that does not consume printed forms or a
physical retail visit.

**Carbon footprint falls with it.** Removing SIM manufacture, packaging, freight, dealer
distribution and the customer's trip to a store reduces the plastic, logistics and carbon footprint
of the activation channel alongside its cost.

**Stores and field agents are retained, not replaced.** Self-service is applied where it is
appropriate; assisted channels remain for customers who need help, running the same verification
engine and the same thresholds.

## Enrol Once. Verify for Life.

The identity captured at activation keeps working. Once a subscriber has a trusted 3D face record,
the platform combines 3D liveness and 3D:3D face matching to re-verify them remotely before
sensitive account actions are approved. The same verification strength follows the customer well
beyond the original registration journey, with no repeated document capture.

Actions that re-verification protects:

- SIM swap and replacement
- Account recovery, PIN or PUK reset
- Change of ownership
- Contract or billing changes
- Plan upgrades and service changes
- Port-out and other high-risk actions
- High-value mobile-money transactions
- Customer-care escalation and assisted journeys

How a re-verification runs:

1. **Sensitive action requested** — a SIM swap, port-out, ownership change or high-value transaction is initiated in any channel.
2. **Live face check** — the subscriber completes a 3D liveness capture on their own phone and is matched to the enrolled record.
3. **Decision returned** — a pass, fail or refer result is returned to the originating system with a full audit record.

## Multi-Tenancy Across a Group

The platform underneath is multi-tenant. Other group operating companies, MVNOs, mobile money
subsidiaries, channel partners and resellers can each run as an isolated tenant on the same
deployment, with their own branding, journeys, thresholds and enrolled gallery, while the parent
operator keeps central oversight. Tenants share the platform, not the data — one tenant's gallery
and 1:N watchlist are never visible to, or matched against, another tenant's. Usage is metered per
tenant, channel and service. See https://www.axonwireless.com/solutions/identity-verification/

## Channels

- Self-service, in-app — the customer completes it themselves, on their own device.
- Dealer and agent assisted — agent-guided, same checks and thresholds as every other channel.
- Retail store — in-store activation on the same pipeline as a digital signup.
- Partner and embedded — banks, retailers, travel brands and fintech surfaces, through the API.

Same verification engine, same risk rules, same audit trail, regardless of channel.

## White Labelling

Full white-label branding is productised and available now, not a bespoke build. The operator
controls logo, colours, language, consent wording, thresholds, workflows, retry paths and
approval rules, configured per market and channel. Deployment is Axon-hosted, embedded through
API, private cloud, or fully on-premise.

## Evidence and Governance

- Complete registration record — every check, result and piece of evidence kept against the
  subscriber record.
- Append-only audit — records cannot be updated or deleted; each is hash-chained to the one
  before it.
- Access is an event — reading a subscriber's biometric is recorded like any other action,
  with the operator, time and stated reason.
- Retention configured per evidence type, applied automatically.
- Biometric data encrypted at rest under keys held separately from the data.
- Export and hand-off to care, fraud operations or an approved downstream system.

## Proof Points

- Up to 30% of new activations through the digital channel in Axon deployments
  (customer-reported).
- 350 million+ SIM cards registered.
- 500 million+ identities registered or verified.
- 20+ operators and authorities served.
- 15+ countries deployed.
- 20+ years registering subscribers for mobile network operators.

That is subscriber-registration scale, not generic identity-verification scale.

## Pricing

Per **attempted session**, tiered by volume, so unit cost falls as activation volume grows.
Deployment model and the scope of provisioning integration are priced separately.

A session is charged when it is attempted and processed — whatever the outcome, whether it
approves, refers or declines — not only when it succeeds. The verification work is performed either
way: the liveness check runs, the document is read and tested, the biometric search executes and the
risk decision is produced. A declined session is not a failed one; catching a fraudulent or
duplicate attempt is the control working, and it consumes the same processing as an approval.

A session is all-inclusive. One price covers whatever checks that session requires — facial
liveness, document verification and OCR, 1:1 face matching, 1:N duplicate search, watchlist
screening and the risk decision — rather than metering each check separately.

## Related Resources

- Product page: https://www.axonwireless.com/solutions/instant-activation/
- Brochure: https://www.axonwireless.com/assets/datasheets/telco-subscriber-identity-brochure-en.pdf
- IDToolkit identity verification: https://www.axonwireless.com/solutions/identity-verification/
- Facial liveness: https://www.axonwireless.com/technology/liveness/
- Face matching: https://www.axonwireless.com/technology/face-matching/
- Document and card reading: https://www.axonwireless.com/technology/document-card-reading/
- National SIM Registry: https://www.axonwireless.com/solutions/national-sim-registry/
- White paper — Remote, Instant eSIM Activation: https://www.axonwireless.com/resources/white-papers/instant-activation-remote-esim-onboarding