October 25, 2024

Authentication+ is Here: Enhancing A2P 10DLC Security

Authentication+

The A2P 10DLC landscape has received a significant security upgrade. As of October 17, 2024, The Campaign Registry (TCR) introduced Authentication+, a new identity verification process designed to combat brand impersonation and fraud like smishing and spoofing.
Note: This new feature is being rolled out for publicly traded companies first, but will expand to other types of businesses in the future.

What is Authentication+

In a nutshell, Authentication+ adds an extra layer of security by verifying the identity of the brand representative registering for A2P 10DLC messaging. This is how it works:

  • Email Verification: When registering a new brand or “updating” (the 2FA is sent when an existing brand is revetted following an update) a public profit (i.e., publicly traded company) brand, you must provide a brand representative’s email address. This email need to be a valid business email associated with the brand. We will not accept personal, and group email IDs.
  • Two-Factor Authentication: TCR will send a 2FA email to the provided address. The brand representative must click the link in the email, and enter their name and title to complete the 2FA. to verify their identity.
  • Verification Deadline: The initial email will expire in 7 days. CSPs can resend a 2FA verification up to 30 days from registration or adding a business contact email before the brand must be resubmitted.
  • Verified Status: Once verified, the brand’s status in TCR changes to “VERIFIED,” allowing you to register new campaigns.

Who is impacted?

Authentication+ is mandatory for all new and existing public for profit brands registering for A2P 10DLC. Even if your brand is already verified, you’ll need to comply with Authentication+ to register new campaigns.

Why is this important?

This new process is crucial for several reasons:

  • Enhanced Security: Authentication+ helps prevent bad actors from impersonating legitimate brands and sending fraudulent messages.
  • Increased Trust: By verifying brand identities, Authentication+ builds trust in the A2P 10DLC ecosystem.
  • Protection for Consumers: This measure helps protect consumers from falling victim to smishing scams and other fraudulent activities.
  • Brand Reputation: Another aspect is that he brand’s reputation is more secure since we are stopping bad actors from impersonating them.

What do you need to do?

If you’re registering a new public profit brand or updating an existing one, make sure you have access to a brand representative’s email address associated with the brand’s domain. Make sure to inform your brand to complete the 2FA process within 7 days or contact the CSP if the link has expired.

Stay informed:

Stay up-to-date on the latest A2P 10DLC developments and best practices by subscribing to industry newsletters and following The Campaign Registry’s official channels.

Authentication+ is a significant step towards a more secure and trustworthy A2P 10DLC ecosystem. By complying with this new process, you’re not only protecting your brand but also contributing to a safer messaging environment for everyone.

For more information contact us

Share this post:
Facebook
Twitter
LinkedIn
WhatsApp

Discover more articles