The A2P 10DLC landscape has received a significant security upgrade. As of October 17, 2024, The Campaign Registry (TCR) introduced Authentication+, a new identity verification process designed to combat brand impersonation and fraud like smishing and spoofing.
Note: This new feature is being rolled out for publicly traded companies first, but will expand to other types of businesses in the future.
What is Authentication+
In a nutshell, Authentication+ adds an extra layer of security by verifying the identity of the brand representative registering for A2P 10DLC messaging. This is how it works:
- Email Verification: When registering a new brand or “updating” (the 2FA is sent when an existing brand is revetted following an update) a public profit (i.e., publicly traded company) brand, you must provide a brand representative’s email address. This email need to be a valid business email associated with the brand. We will not accept personal, and group email IDs.
- Two-Factor Authentication: TCR will send a 2FA email to the provided address. The brand representative must click the link in the email, and enter their name and title to complete the 2FA. to verify their identity.
- Verification Deadline: The initial email will expire in 7 days. CSPs can resend a 2FA verification up to 30 days from registration or adding a business contact email before the brand must be resubmitted.
- Verified Status: Once verified, the brand’s status in TCR changes to “VERIFIED,” allowing you to register new campaigns.
Who is impacted?
Authentication+ is mandatory for all new and existing public for profit brands registering for A2P 10DLC. Even if your brand is already verified, you’ll need to comply with Authentication+ to register new campaigns.
Why is this important?
This new process is crucial for several reasons:
- Enhanced Security: Authentication+ helps prevent bad actors from impersonating legitimate brands and sending fraudulent messages.
- Increased Trust: By verifying brand identities, Authentication+ builds trust in the A2P 10DLC ecosystem.
- Protection for Consumers: This measure helps protect consumers from falling victim to smishing scams and other fraudulent activities.
- Brand Reputation: Another aspect is that he brand’s reputation is more secure since we are stopping bad actors from impersonating them.
What do you need to do?
If you’re registering a new public profit brand or updating an existing one, make sure you have access to a brand representative’s email address associated with the brand’s domain. Make sure to inform your brand to complete the 2FA process within 7 days or contact the CSP if the link has expired.
Stay informed:
Stay up-to-date on the latest A2P 10DLC developments and best practices by subscribing to industry newsletters and following The Campaign Registry’s official channels.
Authentication+ is a significant step towards a more secure and trustworthy A2P 10DLC ecosystem. By complying with this new process, you’re not only protecting your brand but also contributing to a safer messaging environment for everyone.
For more information contact us