Real mobile vs VoIP numbers: what HLR lookups reveal
Apps can tell a SIM-backed mobile number from a VoIP line in milliseconds. Here's what an HLR lookup returns, how platforms use it, and why it decides whether your code is sent.
By PhoneBorn Team6 min read
If you've ever had a verification form reject your number with a vague "this phone number can't be used", the decision was almost certainly made by a number intelligence lookup — and the most famous kind is the HLR lookup. Understanding what these lookups can and cannot see explains why some numbers sail through verification while others are refused before a single SMS is sent.
What is an HLR lookup?
HLR stands for Home Location Register. In GSM and its successors, the HLR (or its modern equivalent, the HSS in 4G/5G core networks) is the database a mobile operator uses to track its subscribers: which SIM belongs to which number, whether the subscription is active, and which network the device is currently attached to.
An HLR lookup is a query — usually made through a commercial API — that asks the network, in effect, "tell me about this number". The query travels over the SS7 or Diameter signalling networks that carriers use to route calls and texts between each other. The answer comes back in well under a second.
Strictly speaking, only true mobile numbers live in an HLR. That fact alone is what makes the lookup so useful for spotting VoIP numbers: if there's no subscriber record, the number probably isn't a SIM-backed mobile line.
What a lookup typically returns
Commercial number intelligence services combine live HLR queries with numbering-plan data and their own databases. A typical response includes:
| Field | What it tells the platform |
|---|---|
| Validity | Whether the number exists in the national numbering plan |
| Line type | Mobile, fixed line, fixed VoIP, non-fixed VoIP, toll-free, premium |
| Original carrier | The operator the number range was assigned to |
| Current carrier | Where the number lives now, after any porting |
| Ported flag | Whether the number was moved between operators |
| Reachability | Whether the subscriber is currently attached / absent |
| Roaming | Whether the device is on a foreign network |
| MCC / MNC | The mobile country and network codes of the serving network |
Not every lookup returns every field; privacy rules in some countries restrict reachability and roaming data. But line type and carrier are almost always available, and they're the two fields that matter most for verification.
Fixed VoIP vs non-fixed VoIP vs mobile
These three categories get lumped together, but platforms treat them very differently.
Mobile
A number assigned to a mobile network operator and backed by a subscriber record. This includes physical SIMs, eSIMs and numbers that providers host on genuine mobile ranges. From a lookup's perspective, a mobile number looks like a normal person's phone.
Fixed VoIP
A number tied to a physical address through a VoIP service — typical for business phone systems and home internet phone lines. These numbers are regulated similarly to landlines in many countries, so they're considered moderately trustworthy, but many apps still reject them because they usually can't receive SMS reliably.
Non-fixed VoIP
A number from an internet-based provider that can be obtained online, often instantly and anonymously, and used from anywhere. This is the category most platforms block outright, because it's the cheapest way to create accounts at scale.
How platforms use the answer
Different services draw the line in different places. Roughly speaking:
- Messaging apps tend to accept mobile numbers and reject most VoIP, because a phone number is effectively the account identity.
- Financial and crypto platforms usually require mobile numbers and may additionally reject numbers that were ported very recently, a common signal in SIM-swap fraud.
- Social networks vary widely; many accept VoIP for sign-up but require a mobile number to unlock features or recover an account.
- Marketplaces and ride-hailing apps often check that the number's country matches the country of the account or payment card.
A platform may also score the number rather than make a yes/no decision. A mobile number on a major carrier with no recent porting might score as low risk; a non-fixed VoIP number from a range associated with many sign-ups scores high risk and triggers either a block or additional checks.
Why "online" isn't the same as "VoIP"
Here's the part that confuses most people. Many sites lump every number you can use through a website together as "virtual numbers". But how you access a number — through a website or API instead of a SIM in your pocket — says nothing about how it is registered in the numbering plan. VoIP describes the registration, and that's what a lookup sees.
A provider can offer real mobile numbers on an operator's range while delivering incoming SMS to you through a dashboard. To a lookup, those are mobile lines. Conversely, some apps that feel like a "real phone" hand out non-fixed VoIP numbers that fail most verification checks.
When evaluating a number provider, the useful question isn't "do I get a SIM?" but "what does the line-type lookup say about these numbers?"
Other signals beyond the lookup
HLR data is only one input. Fraud systems also consider:
- Velocity — how many accounts have used this number recently, on this platform or across a shared fraud network.
- Number age — how long the number has been with its current subscriber.
- Consistency — whether the number's country matches your IP address, language and payment method.
- Behaviour — requesting many codes quickly, or from many devices, looks automated.
This is why a dedicated number you keep for months tends to perform better over time than a number that rotates through many users every day: its history stays clean and consistent.
Can you check a number yourself?
Yes. Several commercial services offer free trial lookups, and some carriers publish ranges and portability databases. When you check, pay attention to:
- Line type — you want "mobile".
- Carrier — a recognisable mobile operator is a good sign.
- Ported status — recent porting is a mild risk flag for financial services.
Keep in mind that the same number can be scored differently by different lookup vendors, and platforms often combine several sources.
Choosing numbers that pass verification
If your goal is to receive codes reliably:
- Prefer providers that are explicit about line type and country coverage.
- Use dedicated rentals for accounts you'll need to access again, so the recovery number stays under your control.
- Match the number's country to the service's expectations where possible — a UK bank app will be happier with a UK mobile.
- Don't reuse one number across dozens of accounts on the same platform; velocity checks will catch it.
- Choose services that refund failed OTP orders automatically, so a rejected number costs you nothing.
Key takeaways
- An HLR lookup queries the mobile network's subscriber database and reveals line type, carrier, porting and reachability in milliseconds.
- Platforms use line type as a first filter: mobile is usually accepted, non-fixed VoIP is often refused.
- Accessing a number online and a number being VoIP are different things — what matters is how the number is registered.
- History and consistency matter almost as much as line type. Clean, dedicated numbers age well; heavily shared numbers don't.
Understanding this turns number selection from trial and error into a deliberate choice — and saves you from wondering why one number works everywhere while another works nowhere.