Confirmed by Google, no more verification of Gmail SMS.

Forbes finds that Gmail is finally removing SMS codes as a verification tool, broadcasting Telegrafi.

“in the same way that we want to replace passwords with access keys, we also want to end the practice of sending SMS messages for verification”, said Gmail spokesman Ross Richendfer.

So began conversations with Google, which for the first time discovered that SMS verification codes will be removed for it “reduced the impact of rampant, global abuse of SMS”.

Google currently uses SMS verification mainly for two different purposes: security and control of abuse.

The first one, Ricendfer explained, is to confirm that it involves the same users as before, while the second ensures that frauds do not abuse Google services.

An example of this, according to Google, was when criminals created thousands of Gmail accounts to distribute spam and malaware.

SMS codes present a series of security challenges, according to Ricendfer and his colleague at Google, Kimberly Samra.

They can be fake, people don't always have access to the device on which the codes are sent and rely on the safety practices of the user operator.

“If a fraud can easily trick an operator to get someone's phone number, any SMS security value disappears”, Richendfer said.

“over the next few months, we will redefine how we will verify phone numbers”, says Richendfer.

“Concretically, instead of putting your number in and getting a six-way code, you'll see a code appear QR, which you must scan using your phone camera application”, he added.

The benefits the QR codes can offer for confirmation are double, according to Google.

Lowering the risk of identity theft, and the possibility that Gmail users are deceived into sharing their security codes with malicious actors.

Removing support, at least in most cases, of Google users in their mobile operator to protect themselves from abuse.

“SMS Codett is a growing source of risk for users, and we are pleased to present a new innovative approach to reduce the scope of action for attackers and protect users from malicious activity”, Richendfer concluded.