Signal may prove that a registration request originates from a real device by combining with the device hardware's trusted execution environment, such as iOS's Secure Enclave or Android's StrongBox.