Skip to main content

Subscription (Landing Page)

The general-purpose flow: the subscriber enters their number, receives a PIN by SMS and types it back. It works on any connection, including Wi-Fi, which is why it is the default choice unless you specifically need the shorter header-enrichment journey.

Points the diagram is for, which prose keeps burying:

  • The script call is server-to-server. The SP's backend fetches it, never the browser, or the SP's credential is published to every visitor.
  • The same ti runs through the whole flow. A verify carrying a ti no script call registered is refused, and that refusal looks exactly like a decline unless you know to check.
  • The fraud check happens AFTER the PIN proves possession and BEFORE anything is charged.
  • DataSync is a separate arrow, not a return value. The synchronous response is authoritative; DataSync is the durable record.