Signal code: SIG-NO-001-A
Position: All Norway
Date: 2026-05-26

Signal 01 of 08 · Authentication

ActivePushSMS

BankID and Vipps: notifications for authentication and payment

BankID (eIDAS High assurance) is used by 99% of Norwegians for online banking, public services and digital signatures. Vipps has 80%+ adoption for P2P and merchant payments. 4notify integrates notifications for authentication events, new-IP alerts and receipts with BankID-grade audit trail.

Context

A missed login alert can mean identity theft or unauthorized access to Altinn / Helseplattformen. Real-time multi-channel routing is critical for high-trust services.

Legal framework

eIDAS-forordning 910/2014

BankID notified at High level; requires strict audit trail and non-repudiation.

Lov om finansforetak § 16-1

Mandatory immediate notification of transactions and account access changes.

Personopplysningsloven 2018

GDPR implementation; consent and audit-trail requirements for financial notifications.

Steps

Webhook from BankID issuer

BankID issuer (DNB, Sparebank 1, Nordea) sends event to 4notify on authentication or signature.

Multi-channel for critical events

New IP / new device → push immediately + SMS within 5s + email as durable medium.

Vipps merchant receipt

After Vipps payment: SMS receipt to buyer + push to merchant.

Signed audit export for inspection

PDF/A-1b export for Datatilsynet or Financial Authority inspection, 5-year retention.

Code

bash
curl -X POST https://api.4notify.net/v1/dispatch \
  -H "Authorization: Bearer $API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "template": "bankid_new_device_alert",
    "channels": ["push", "sms"],
    "recipient": {
      "phone": "+4790123456",
      "push_token": "fcm:..."
    },
    "session": {
      "service": "DNB_nettbank",
      "ip": "84.234.x.x",
      "device": "Chrome / macOS",
      "timestamp": "2026-05-26T10:23:00+02:00"
    },
    "compliance": { "regulator": "finanstilsynet", "retention_years": 5 }
  }'