Telecom Regulatory Updates

Providing businesses with essential compliance tools to earn trust with customers and prospects

Our Commitment to Combating Spam

The telecommunications industry is in the process of implementing regulatory changes which CallTrackingMetrics is committed to supporting as part of a global effort to combat fraudulent spam calls and text messages. 

The first of these regulatory changes is STIR/SHAKEN which has been put in place by the FCC to combat spoofed robocalls with caller ID authentication. The second regulation is Application-to-Person 10-Digit Long Code, (A2P 10DLC) messaging. For further clarification, 10DLC is a standard 10 digit phone number. This is the latest offering from U.S. carriers to support texting for business while protecting end-users from unwanted messages. 

These two regulatory changes require businesses to obtain a trust score by creating a business profile. This trust score provides the underlying carrier with information to verify that the communications are not spam. The business registration process to obtain your trust score is now available for most businesses through the CallTrackingMetrics Trust Center

Read on for more information on what these changes mean for your business, and how to maintain compliance.

Business Registration for STIR/SHAKEN and A2P 10DLC Is Now Available!

Visit the Trust Center

Business Profile Registration FAQ’s

What are the requirements for business registration?
  • Business Name
  • Physical Address (Street, City, State/Province/Region, Postal Code, Country)
  • Business Identity (Direct Customer or ISV/Reseller/Partner)
  • Business Type (Sole Proprietorship/Partnership/Corporation /Co
  • Operative/LLC/Non-Profit)
  • Company Status (Private/Public)
  • Stock Ticker & Exchange (if Public)
  • Business Registration Number & Type (DUNS or Business License)
  • Industry
  • Website
  • Regions of Operations
How do these changes affect me?

These regulatory changes are industry wide so businesses will need to register their phone numbers for the business profile to obtain a trust score for both STIR/SHAKEN and A2P. For A2P messaging, there are additional steps that are needed to register your Brand and campaign/use case (additional fees will apply) which the carriers will need to approve. Campaign approval can take up to a week. As soon as additional information is released from the carriers we will post updates here.

Why are the carriers making these changes?

With these industry changes, part of the process is to implement an attestation trust score so the underlying carrier can verify the calls and SMS outbound traffic from companies is not spam, robocalls, or fraudulent.

Which regions are impacted by these regulatory changes?

These changes only impact US customers for now, but we expect other regions to follow suit in the future. That being said, if you are outside the United States and have purchased a US phone number number you will need to register that number.

If I am using CallTrackingMetrics for attribution only, do these regulatory changes pertain to me?

If you are using call queues to route your inbound calls to a receiving number, you will need to register. If you are only forwarding inbound calls from a tracking number to a receiving number, you technically do not need to register that number. Please note this is subject to change in the future.

Once I register my business, how long does it take to get an Attestation Trust Score?

Normally the Attestation Trust Scores will be delivered within a week.

What dependencies reflect my Attestation Trust Score provided by the carrier?

Business attestation scoring is based on Business Type, longevity, address, Tax ID or DUNS number. Note: the longer a company is in business and once registered the score could go up according to the carriers.

Are there costs involved with registering my account to obtain an attestation score when I’m signing up for service or if I’m an existing customer?

No fee is involved for initial registration of your business profile.

Can I challenge the Assestation Trust Score?

Yes, by paying a fee to a 3rd party verification provider they can do an independent check and provide you a Trust Score. The fee normally runs anywhere from $40.00 to $55.00.

Once I’ve been provided an attestation trust score is there anything else I need to do?

Yes, You will need to register the phone number for both STIR/SHAKEN and if you are using A2P messaging you will need to add your Brand, campaign type, and a sample message which will be submitted to the carrier for approval.

What can I do to avoid rejection of my business registration?

When registering your business for STIR/SHAKEN, we recommend you use the information included on your W9. You should enter the exact information as it appears on your W9 form including the legal business name (as spelled on the W9, including capitalization and punctuation), the business address (as spelled on the W9, including capitalization, punctuation, suite number, etc.), and all other information that is on the W9 that is needed for the registration form.

 

We also have seen more successful registrations when you use your EIN (Tax ID).  Your EIN number is a 9 digit number (no letters) you can find on your tax documentation.

What do I do if there is an error with my submission?

You are now able to edit existing submissions. You can also create a new compliance using the “Add Compliance” button in the upper right hand corner of the Trust Center, and resubmit.

If I am an agency, will I need to register all of my sub accounts individually?

The new regulation for A2P and STIR/SHAKEN will require you submit this information for each business or sub-account within your CallTrackingMetrics account. CallTrackingMetrics is working to streamline this process for our agency customers and will share additional information as it becomes available.

STIR/SHAKEN FAQs

Where does the term SHAKEN come from?

SHAKEN is an acronym standing for Signature-based Handling of Asserted information using toKENs. SHAKEN is a software based verification process designed to significantly reduce robocalls as well as ensuring caller ID displays are valid protecting consumers. The FCC’s recent report states that unwanted calls are their number one consumer complaint. Caller ID spoofing leads to fraud.

Did an industry group create SHAKEN?

Yes, SHAKEN was created by the task force IP-NNI working for ATIS-SIP Forum. IP-NNI stands for “Internet Protocol – Network to Network Interface”. The Internet Engineering Task Force (IETF) formed the working group STIR (Secure Telephone Identity Revisited) to develop policies for carriers. STIR in turn created SHAKEN which is why it is typically referred to as STIR/SHAKEN.

How does SHAKEN work?

Based on a business profile created by the company there are multiple factors that drive an attestation trust score. Trust scores are derived from the longevity of the business, tax ID or DUNS number, physical address, and verified company contacts. Based on the attestation trust score, calls that are being initiated by a company and delivered to the carrier’s consumer phone, validation will be provided in the following (e.g. Spam, Scam Likely, or “valid company name” ).

When does STIR/SHAKEN go into effect?

Beginning June 30, 2021 STIR-SHAKEN initiative will be implemented by United States telecommunications providers. This will enhance consumer confidence and trust when accepting calls.

What will my caller ID look like when STIR/SHAKEN is implemented on my phone.

That will depend on your provider, and telephone manufacturer as to what caller ID display will show (e.g. Spam, Scam Likely, or “valid company name” ).

My company's outbound calls are currently being labelled "Spam Risk." Once I complete the STIR/SHAKEN registration process, will this label be removed from all calls placed from every phone number we use within CallTrackingMetrics?

Once your business registration is approved in CallTrackingMetrics, we will be able to pass a STIR/SHAKEN token to the recipient’s phone provider on every outbound call. This STIR/SHAKEN token has become the new standard that all phone providers are using to identify what is or isn’t a “spam risk”. Having the token applied SHOULD help right away. The token registration will be automatically applied to any new or existing numbers within the account. This is the recommended best practice today for all of our customers using outbound dialing.

Please note that the “Spam Risk” label is being applied by your contacts phone company. It’s hard for us to say with 100% certainty they don’t have specific numbers flagged as spam in a database of their own for some reason and won’t keep flagging them as spam even after the registration is approved.

Will STIR/SHAKEN cost me additional fees?

At this time, CallTrackingMetrics is not aware of any additional fees to consumers. However, the industry is still defining guidelines. Agencies may incur fees when challenging their attestation trust score.

I receive many calls from international companies and their representatives utilizing ten digit United States telephone numbers. Will STIR/SHAKEN benefit me?

Yes, the business attestation trust score generated from these calls will be vetted to ensure validity of the company’s identity.

What will happen to calls that receive low attestation scores? Will carriers deliver such calls?

At this time carriers are still defining rules and attestation criteria. There is no clear plan for calls with low attestation scores. However, it is possible that low attestation scored calls will not be delivered. As information becomes available we will post updates here.

How does a business maintain a high attestation score?

Once an attestation trust score is established, over time businesses will gain additional credibility and their attestation score should increase with the carriers. However, low answers rates and short call duration calls (Under 60 seconds) could contribute to lowering a company’s attestation trust score causing calls not to be delivered.

If I make a STIR/SHAKEN-signed call that potentially is a robocall will the underlying carrier deliver the call?

Yes, if you have established a high attestation trust score the call should be delivered. The higher the attestation score, the more likely the call will be delivered to the end user. Should a company’s attestation score drop, they will most likely see a decline in call delivery.

A2P FAQs

How does A2P 10DLC work?

The requirements needed for the A2P 10DLC service are as follows:

What is the timeline for registration and deadlines for A2P 10DLC registration?
  • Registration starts on April 1, 2021. In order for you to register you will need to create a Business Profile, ensure your numbers are registered for STIR/SHAKEN, and assign the 5 phone numbers you intend to use for your A2P 10DLC text messaging campaigns.
  • Starting May 1, 2021 the AT&T pass through fees charges will go into effect for each message. Unregistered campaigns may have higher associated carrier pass through fees for Short Messaging Service (SMS) and Multi Media Service (MMS).
  • June 1, 2021 is the registration deadline for AT&T. If campaigns are not registered, it is possible that AT&T will start blocking SMS and MMS for non-registered A2P 10DLC on their network.
    We encourage customers that are currently sending messages to complete the registration process for your 5 numbers so your messages are delivered to the AT&T network.
What happens if I don't register?
  • On May 1, AT&T’s pass through surcharges go into effect, AT&T will be charging a higher pass through chanrge for unregistered traffic for SMS and MMS (see the fees table below). On June 1, 2021 AT&T intends to increase their filtering for non-registered SMS and MMS, to protect their customers from unwanted messages or SPAM .
  • It is currently believed that T-Mobile & Sprint are also going to require registration under the A2P 10DLC requirements. Once CTM gets further information regarding this we will update this document accordingly.
Do peer-to-peer text fall under the use case for Conversational Messaging? If so, should this type of conversation also be pre-registered as a campaign?

Yes, you will want to register this as Conversation Messaging which is a Declared Use Case. Any text message sent from Calltrackingmetrics is considered an A2P message.

With these changes will I need to register my campaign in the The Campaign Registry?

No, registration will be available entirely through CallTrackingMetrics. CallTrackingMetrics and our partners have integrated directly with The Campaign Registry (TCR) to facilitate registration for customers.

Will I need new phone numbers to use this A2P 10DLC service?

No, if you already are using 10 digit phone numbers for sending messages there is no need to buy new numbers. However, you will need to register the existing phone numbers for each campaign type to ensure your message will be delivered.

If I would like to register for the A2P 10 DLC brand, what is needed?

In order to register you need to have your Business Profile approved, register your phone numbers for STIR/SHAKEN and assign the 5 phone numbers you intend to use. For more information on Business Registration please refer to the following: https://www.calltrackingmetrics.com/support/numbers/number-management/buy-numbers/business-registration-stir-shaken-a2p-10dlc-text-message-campaign-registration/

What about MMS messaging are they affected by A2P 10DLC change?

Yes, it is recommended that if you are using high-volume MMS campaigns, then leveraging a short code is still the best option.

Are dedicated Short codes or Toll Free Numbers affected by these A2P 10DLC changes?

These changes do not directly affect dedicated short codes along with Toll-Free numbers.

 

Effective June 1, 2021 Shared Short codes will be prohibited for use for high-volume messages

I have sub-accounts for different departments and virtual teams within my internal organization. Can these sub-accounts be registered under one company name?

Yes, they can be under one company name under Declared Use Case. Please note, any text message sent from CallTrackingMetrics is considered an A2P message

Telephone Consumer Protection Act (TCPA) FAQs

What is TCPA?

TCPA, or the Telephone Consumer Protection Act are rules and regulations put in place by the The Federal Communications Commission that went into effect in 1992.

How does STIR/SHAKEN tie into TCPA?

STIR/SHAKEN is an expansion of TCPA, and is being put in place to instill calling confidence with customers. This set of industry standards is designed to reduce spam robocalls, prevent the “spoofing” of Caller ID data and help businesses improve voice security

What is considered a robocall?

Robocalls are prerecorded or autodialed calls made to your landline or cell phone, usually when you have not given permission for the caller to contact you. They are often made by telemarketers, who are callers contacting you to sell a product or service, usually unsolicited. Robocalls can also come from other entities besides telemarketers, such as debt collectors.

What are the specific TCPA rules for telemarketing?
  • Telemarketing calls can only be made between the hours of 8 a.m. and 9 p.m. (local time at the called party’s location)
  • All telemarketers must comply with limits on “abandoned calls” and employ other consumer-friendly practices when using automated telephone-dialing equipment
  • A telemarketer must abandon no more than 3 percent of calls answered by a person and must deliver a prerecorded identification message when abandoning a call
  • Telemarketers must not disconnect an unanswered telemarketing call prior to at least 15 seconds or four rings
  • All pre-recorded messages, whether delivered by automated dialing equipment or not, must identify the name of the entity responsible for initiating the call, along with the telephone number of that entity that can be used during normal business hours to ask not to be called again
  • All telemarketers must transmit caller ID information, when available, and must refrain from blocking any such transmission(s) to the consumer
  • All businesses that use auto dialers to sell services must maintain records documenting compliance with call abandonment rules
  • Make sure to provide an opt-out function to put the phone number on the DNC registry
  • The (Do Not Call Registry) DNC list needs to be specific to your organization and on file for 5 years
  • Avoid calling numbers where the recipient is paying for the call (healthcare offices, mobile numbers, and even medical facilities)
Where can I find the National Do Not Call registry?

This is the page the FCC maintains regarding how businesses can sign up to get subscriptions for the FCC’s do not call lists. Businesses can purchase subscriptions for specific area codes or for all area codes. (See Subscribing To Area Codes section)

Shortcode Pricing

Shortcode Type - United States

One-Time Fee

Annual Fee

Random
$1,000
$14,500
Vanity
$1,000
$21,500
Customer Self Leased
$1,000
$7,700

Shortcode Type - Canada

One-Time Fee

Annual Fee

Vanity
$4,500
$14,500
Customer Self Leased
$4,500
$10,500

Performance Plan

Growth Pan

Connect Plan

SMS Inbound & Outbound
$0.01
$0.01
$0.01
MMS Inbound & Outbound
$0.07
$0.06
$0.05

AT&T Surcharge Passthrough Fees

Campaign Type

AT&T long code SMS carrier fee (per segment)

AT&T long code MMS carrier fee

Use cases within campaign type

Mixed / Marketing Use Case
$0.003 per segment
$0.0035 per message
Marketing use case or combination of use cases under one campaign.
Basic / Unregistered
$0.004 per segment
$0.005 per message
High risk provider or unregistered traffic

T-Mobile Surcharge Passthrough Fees

The below fees will apply to both registered and unregistered traffic toward users on T-Mobile (including Sprint). Starting October 1, 2021, T-Mobile will increase carrier fees for unregistered traffic to $0.004 per SMS segment (rather than $0.003 for registered) and $0.013 per MMS message (rather than $0.01 for registered).

Campaign Type

T-Mobile long code SMS carrier fee (per segment)

T-Mobile long code MMS carrier fee

Unregistered traffic  
$0.004 per outbound/inbound SMS message segment
$0.013 per outbound/inbound MMS message
Registered Brand Traffic
$0.003 per outbound/inbound SMS message segment
$0.01 per outbound/inbound MMS message

Fees

  1. Carrier Surcharge Fees (CSF): T-Mobile had proposed an increased CSF for unregistered traffic from October 1. We'll communicate the new date once it is announced.
  2. Campaign Activation Fees: A $50 fee will be levied on any campaign activated on or after October 1. 'Activation' is merely the provisioning of at least one long code with a campaign through a process described by T-Mobile.

T-Mobile Fines

U.S. telecommunications providers may assess fees for non-compliant A2P traffic, and CallTrackingMetrics will pass these fees onto you. To date, T-Mobile is the first U.S. telecommunications provider to announce non-compliance fees for violations of T-Mobile’s Code of Conduct. Twilio will update these guidelines accordingly if/when additional U.S. telecommunications providers announce non-compliance fees.   T-Mobile non-compliance fees are as follows:
  • 10DLC Long Code Messaging Program Evasion: A $1,000 pass-through fee if a program/campaign is found to be using techniques such as snowshoeing, or unauthorized number replacement/recycling.
  • Content Violation: After prior warning, a $10,000 pass-through fee may be imposed for each unique instance of content violating the T-Mobile Code of Conduct involving the same sender/content provider. This includes SHAFT (Sex, Hate, Alcohol, Firearms, Tobacco) violations, spam, phishing, and messaging that meets the Severity 0 violation as defined in the CTIA Short Code Monitoring Handbook.

T-Mobile Non-compliance Fees

U.S. telecommunications providers may assess fees for non-compliant A2P traffic, and CallTrackingMetrics will pass these fees onto you. To date, T-Mobile is the first U.S. telecommunications provider to announce non-compliance fees for violations of T-Mobile’s Code of Conduct. Twilio will update these guidelines accordingly if/when additional U.S. telecommunications providers announce non-compliance fees.

T-Mobile non-compliance fees are as follows:

  • 10DLC Long Code Messaging Program Evasion: A $1,000 pass-through fee if a program/campaign is found to be using techniques such as snowshoeing, or unauthorized number replacement/recycling.
  • Content Violation: After prior warning, a $10,000 pass-through fee may be imposed for each unique instance of content violating the T-Mobile Code of Conduct involving the same sender/content provider. This includes SHAFT (Sex, Hate, Alcohol, Firearms, Tobacco) violations, spam, phishing, and messaging that meets the Severity 0 violation as defined in the CTIA Short Code Monitoring Handbook.

Non Compliance Message Types

Description

Toll Free

Long Code

Short Code

Use case restrictions
High-Risk Financial Services, Payday Loans, Short Term- High Interest Loans, Auto Loans, Mortgage Loans, Student Loans, Debt Collection, Gambling/Sweepstakes, Stock Alerts, Cryptocurrency, Get Rich Quick Schemes, Deceptive Work from Home Programs, Risk Investment Opportunities, Multi-Level Marketing, 3rd Party, Debt Collection or Consolidation, Debt Reduction, Credit Repair Programs, Lead Generation, Controlled Substances, Tobacco, Vape, Federally Illegal Drugs, Pornography, Profanity, Hate Speech, Phishing, Fraud, Scams, Deceptive Marketing, Snowshoeing, Filter Evasion. For additional insight into these uses cases, including limitations, and exceptions, visit: Forbidden message categories for SMS and MMS in the US and Canada
Loan Advertisements - Third Party Lenders, “Get rich quick” schemes, Work from Home Programs, Secret Shopper, Third Party Job Alerts, Risk Investment Opportunities, Illegal substances, Lead Generation, Hate Speech, Dynamic Routing, Snowshoeing, Filter Evasion, Shared Phone Numbers, URL Cycling, URL Redirects, Number Cycling, Spam, Fraud or Deceptive Messaging, Inapproriate Content, Profanity, High Risk Financial, Payday Loans, Short Term-High Interest Loans, Third Party Mortgage Loan, Student Loans, Third Party Auto Loans, Debt Forgiveness or Debt Collection, Debt Consolidation, Debt Reduction, Third Party Debt Collection, Credit Repair, Phishing, Gambling, Vape. For additional insight into these uses cases, including limitations, and exceptions, visit: Forbidden message categories for SMS and MMS in the US and Canada
Loan Advertisements - Third Party Lenders, “Get rich quick” schemes, Work from Home Programs, Secret Shopper, Third Party Job Alerts, Risk Investment Opportunities, Illegal substances, Lead Generation, Hate Speech, Dynamic Routing, Snowshoeing, Filter Evasion, Shared Short Codes, URL Cycling, URL Redirects, Number Cycling, Spam, Fraud or Deceptive Messaging, Inapproriate Content, Profanity, High Risk Financial, Payday Loans, Short Term-High Interest Loans, Third Party Mortgage Loan, Student Loans, Third Party Auto Loans, Debt Forgiveness or Debt Collection, Debt Consolidation, Debt Reduction, Third Party Debt Collection, Credit Repair, Phishing, Gambling, Vape
Best practices
Note: The euro symbol (€) is not supported; avoid using this character in message
——
——

US Cellular Toll Free Pass Through Charges

Message Type

Fees

SMS inbound
New Carrier Fee: $0.0025
SMS outbound
New Carrier Fee: $0.0025
MMS inbound
New Carrier Fee: $0.0050
MMS outbound
New Carrier Fee: $0.0050

Canadian Carrier Fees

UPDATE Dec 1, 2021 Due to changes in the Canadian carrier ecosystem, the carrier pass through fees have been updated for some Canadian carriers, effective December 1, 2021. These carrier fees are charged as a per message segment.  The updated fees are as follows:


Carrier

CAD (Per Message)

FIDO
  • $0.0075
Bell & Virgin - SMS
  • Current: $0.0085
  • As of December 1, 2021: $0.0087
 
Bell & Virgin - MMS
  • Current: $0.016
  • As of December 1, 2021: $0.0323
 
Rogers - SMS
  • Current: $0.006
  • As of December 1, 2021: $0.0071
Rogers - MMS
  • $0.01180
Telus - SMS
  • Current: $0.0038
  • As of December 1, 2021: $0.0039
Telus - MMS
  • Current: $0.0076
  • As of December 1, 2021: $0.0039
Freedom - SMS
  • Current: $0.0045
  • As of December 1, 2021: $0.0047
Freedom - MMS
  • Current: $0.0091
  • As of December 1, 2021: $0.0095
Videotron
  • $0.007
SaskTel
  • $0.008
Other
  • $0.0064

Use Cases

Use Case

Campaign Type

Add'l carrier vetting required?

Description

2FA
Declared
No
Any authentication or account verification such as OTP
Account Notifications
Declared
No
Notifications about the status of an account or related to being a part of an account
Customer Care
Declared
No
Support, account management, and other avenues of customer interaction
Delivery Notifications
Declared
No
Information about the status of a delivery
Fraud Alert Messaging
Declared
No
Messaging about potential fraudulent activity such as spending alerts
Higher Education
Declared
No
Message campaigns from colleges, universities, and other education institutions
Low Volume Mixed
Mixed/Marketing
No
A campaign that covers multiple use cases such as marketing promotions and delivery notifications. Primarily for small businesses. Note - mixed campaigns are likely to have lower throughput and a higher cost per message.
Marketing
Mixed/Marketing
No
Promotional content such as sales and limited time offers
Mixed
Mixed/Marketing
No
A campaign that covers multiple use cases such as Customer Care and Delivery Notifications. Note - mixed campaigns are likely to have lower throughput and a higher cost per message.
Polling and voting
Declared
No
Notifications about polling and voting
Public Service Announcement
Declared
No
PSAs to raise audience awareness about a given topic
Security Alert
Declared
No
Notification of a compromised system (software or hardware related)
Carrier Exemptions
Special
Yes
Carrier-exempted campaigns
Charity
Special
Yes
Messages from a registered charity such as 501c3 charities. Note - religious organizations are not included
Conversational Messaging
Declared
Yes
In-app peer-to-peer (P2P) conversations using proxied or pooled numbers or personalized services for enterprise or A2P communications to protect privacy of personal numbers
Emergency
Special
Yes
Notifications about/supporting public safety during emergency situations
Sweepstakes
Special
Yes
Sweepstakes related communications
Political
Declared
Yes
Messages from a verified campaign to influence decision making
Social
Declared
Yes
Non-commercial communication within or between closed communities

Contact Support

I have some additional questions. Who do I contact?

There are several ways to contact our support team. If you are inside the CallTrackingMetrics platform, you may select the “Chat with Support” option. Additionally, you may reach our team by phone at (443) 432-2896 or create a support ticket by sending an email to info@calltrackingmetrics.com.

To help keep customers informed, we are sending regular emails related to these regulatory changes and proactively keeping this web page up-to-date. We recommend reviewing these resources often, as information is subject to change.

X