The A2P 10DLC landscape has received a significant security upgrade. As of October 17, 2024, The Campaign Registry (TCR) introduced Authentication+, a new identity verification process designed to combat brand impersonation and fraud like smishing and spoofing.
Note: This new feature is being rolled out for publicly traded companies first, but will expand to other types of businesses in the future.

What is Authentication+

In a nutshell, Authentication+ adds an extra layer of security by verifying the identity of the brand representative registering for A2P 10DLC messaging. This is how it works:

• Email Verification: When registering a new brand or “updating” (the 2FA is sent when an existing brand is revetted following an update) a public profit (i.e., publicly traded company) brand, you must provide a brand representative’s email address. This email need to be a valid business email associated with the brand. We will not accept personal, and group email IDs.
• Two-Factor Authentication: TCR will send a 2FA email to the provided address. The brand representative must click the link in the email, and enter their name and title to complete the 2FA. to verify their identity.
• Verification Deadline: The initial email will expire in 7 days. CSPs can resend a 2FA verification up to 30 days from registration or adding a business contact email before the brand must be resubmitted.
• Verified Status: Once verified, the brand’s status in TCR changes to “VERIFIED,” allowing you to register new campaigns.

Who is impacted?

Authentication Plus is mandatory for all new and existing public for profit brands registering for A2P 10DLC. Even if your brand is already verified, you’ll need to comply with Authentication Plus to register new campaigns.

Why is this important?

This new process is crucial for several reasons:

• Enhanced Security: Authentication+ helps prevent bad actors from impersonating legitimate brands and sending fraudulent messages.
• Increased Trust: By verifying brand identities, Authentication+ builds trust in the A2P 10DLC ecosystem.
• Protection for Consumers: This measure helps protect consumers from falling victim to smishing scams and other fraudulent activities.
• Brand Reputation: Another aspect is that he brand’s reputation is more secure since we are stopping bad actors from impersonating them.

What do you need to do?

If you’re registering a new public profit brand or updating an existing one, make sure you have access to a brand representative’s email address associated with the brand’s domain. Make sure to inform your brand to complete the 2FA process within 7 days or contact the CSP if the link has expired.

Stay informed:

Stay up-to-date on the latest A2P 10DLC developments and best practices by subscribing to industry newsletters and following The Campaign Registry’s official channels.

Authentication+ is a significant step towards a more secure and trustworthy A2P 10DLC ecosystem. By complying with this new process, you’re not only protecting your brand but also contributing to a safer messaging environment for everyone.

For more information contact us