Calling Name Presentation (CNAP)
Calling Name Presentation (CNAP) is a telephone network service that shows the called user the caller's name, supplied by the network rather than by the caller, alongside the calling number. 3GPP specifies it as a name identification supplementary service in TS 22.096.
India's Department of Telecommunications ordered all access providers to switch it on in 4G and later networks from November 1, 2026: unless the recipient has saved the number, the handset shows the name in the originating operator's subscriber record, or "International Call", and business users may present a verified registered trade mark or GST trade name instead (our coverage). That turns the caller's KYC record into a network-asserted identity signal against vishing from unknown numbers. It is a weak signal: it says who registered the SIM rather than who is speaking, the Indian mandate does not yet cover 2G, 3G or fixed lines, and calls placed through internet messaging apps do not carry it. Help desks and fraud teams should not treat a displayed name as identity verification and should keep call-back to a number on file.
See also: vishing, help-desk social engineering, SIM swap, KYC
Related on Start with Identity
- GlossaryIdentity Verification (IDV)
The process of confirming that a person is who they claim to be, typically at account opening. Common signals: government ID document scan, selfie with liveness
- GlossaryAML
Anti-Money Laundering. The set of regulations and processes used to detect and report suspicious financial activity. AML programs sit on top of KYC and include
- BlogHow to vet a national digital ID before you build KYC on it
Not every national ID is equally trustworthy or equally easy to verify. A practical seven-point checklist for evaluating a country's digital ID before you wire
- PodcastTrust Talks & Digital Dives
The Digital ID and Authentication Council of Canada's podcast on verifying information and identity, with Canadian policy viewed through a global lens.
- GlossaryABAC
Attribute-Based Access Control. Access decisions are made by evaluating attributes of the subject, resource, action, and environment against policy. Flexible bu
- BlogA CVE ID is a name. The value is knowing who the attacker becomes.
We opened a practitioner catalog of identity CVEs: what broke, why IAM teams should care, and what to do this week. Not an NVD mirror. A place to triage SAML wr