Summary - X.1456 (04/2025) - Security guidelines for digital financial services applications based on unstructured supplementary service data and subscriber identification module tool kit

Recommendation ITU-T X.1456 provides security guidelines for digital financial service (DFS) applications based on unstructured supplementary service data (USSD) and subscriber identification module tool kit (STK) that can be implemented by DFS providers and mobile network operators to mitigate security risks associated with USSD and STK for DFS applications. This Recommendation covers the following aspects:
•Security threats and vulnerabilities to DFS services based on USSD and STK.
•Identification of the areas where security measures may be implemented by providing insights into the risks and vulnerabilities associated with DFS applications.
•Security practices for mobile network operators and DFS providers.