Telecom Regulatory Updates

• Business Name
• Physical Address (Street, City, State/Province/Region, Postal Code, Country)
• Business Identity (Direct Customer or ISV/Reseller/Partner)
• Business Type (Sole Proprietorship/Partnership/Corporation /Co
• Operative/LLC/Non-Profit)
• Company Status (Private/Public)
• Stock Ticker & Exchange (if Public)
• Business Registration Number & Type (DUNS or Business License)
• Industry
• Website
• Regions of Operations

These regulatory changes are industry wide so businesses will need to register their phone numbers for the business profile to obtain a trust score for both STIR/SHAKEN and A2P. For A2P messaging, there are additional steps that are needed to register your Brand and campaign/use case (additional fees will apply) which the carriers will need to approve. Campaign approval can take up to a week. As soon as additional information is released from the carriers we will post updates here.

With these industry changes, part of the process is to implement an attestation trust score so the underlying carrier can verify the calls and SMS outbound traffic from companies is not spam, robocalls, or fraudulent.

These changes only impact US customers for now, but we expect other regions to follow suit in the future. That being said, if you are outside the United States and have purchased a US phone number number you will need to register that number.

If you are using call queues to route your inbound calls to a receiving number, you will need to register. If you are only forwarding inbound calls from a tracking number to a receiving number, you technically do not need to register that number. Please note this is subject to change in the future.

Normally the Attestation Trust Scores will be delivered within a week.

Business attestation scoring is based on Business Type, longevity, address, Tax ID or DUNS number. Note: the longer a company is in business and once registered the score could go up according to the carriers.

No fee is involved for initial registration of your business profile.

Yes, by paying a fee to a 3rd party verification provider they can do an independent check and provide you a Trust Score. The fee normally runs anywhere from $40.00 to $55.00.

Yes, You will need to register the phone number for both STIR/SHAKEN and if you are using A2P messaging you will need to add your Brand, campaign type, and a sample message which will be submitted to the carrier for approval.

When registering your business for STIR/SHAKEN, we recommend you use the information included on your W9. You should enter the exact information as it appears on your W9 form including the legal business name (as spelled on the W9, including capitalization and punctuation), the business address (as spelled on the W9, including capitalization, punctuation, suite number, etc.), and all other information that is on the W9 that is needed for the registration form.

We also have seen more successful registrations when you use your EIN (Tax ID).  A tool to use for EIN verification can be found here:  https://www.hipaaspace.com/ein/ein_verification/

You are now able to edit existing submissions. You can also create a new compliance using the “Add Compliance” button in the upper right hand corner of the Trust Center, and resubmit.

The new regulation for A2P and STIR/SHAKEN will require you submit this information for each business or sub-account within your CallTrackingMetrics account. CallTrackingMetrics is working to streamline this process for our agency customers and will share additional information as it becomes available.

Yes, they can be under one company name under Declared Use Case. Please note, any text message sent from CallTrackingMetrics is considered an A2P message

SHAKEN is an acronym standing for Signature-based Handling of Asserted information using toKENs. SHAKEN is a software based verification process designed to significantly reduce robocalls as well as ensuring caller ID displays are valid protecting consumers. The FCC’s recent report states that unwanted calls are their number one consumer complaint. Caller ID spoofing leads to fraud.

Yes, SHAKEN was created by the task force IP-NNI working for ATIS-SIP Forum. IP-NNI stands for “Internet Protocol – Network to Network Interface”. The Internet Engineering Task Force (IETF) formed the working group STIR (Secure Telephone Identity Revisited) to develop policies for carriers. STIR in turn created SHAKEN which is why it is typically referred to as STIR/SHAKEN.

Based on a business profile created by the company there are multiple factors that drive an attestation trust score. Trust scores are derived from the longevity of the business, tax ID or DUNS number, physical address, and verified company contacts. Based on the attestation trust score, calls that are being initiated by a company and delivered to the carrier’s consumer phone, validation will be provided in the following (e.g. Spam, Scam Likely, or “valid company name” ).

Beginning June 30, 2021 STIR-SHAKEN initiative will be implemented by United States telecommunications providers. This will enhance consumer confidence and trust when accepting calls.

That will depend on your provider, and telephone manufacturer as to what caller ID display will show (e.g. Spam, Scam Likely, or “valid company name” ).

At this time, CallTrackingMetrics is not aware of any additional fees to consumers. However, the industry is still defining guidelines. Agencies may incur fees when challenging their attestation trust score.

Yes, the business attestation trust score generated from these calls will be vetted to ensure validity of the company’s identity.

At this time carriers are still defining rules and attestation criteria. There is no clear plan for calls with low attestation scores. However, it is possible that low attestation scored calls will not be delivered. As information becomes available we will post updates here.

Once an attestation trust score is established, over time businesses will gain additional credibility and their attestation score should increase with the carriers. However, low answers rates and short call duration calls (Under 60 seconds) could contribute to lowering a company’s attestation trust score causing calls not to be delivered.

Yes, if you have established a high attestation trust score the call should be delivered. The higher the attestation score, the more likely the call will be delivered to the end user. Should a company’s attestation score drop, they will most likely see a decline in call delivery.

The requirements needed for the A2P 10DLC service are as follows:

• Business profile creation/registration is the first step needed to identify who they are in order to send messages to the carrier networks.
• Businesses will then need to register their Band and the campaign type and provide a sample message (or two) that they are sending to their customers e.g. campaign types, marketing messages, account notifications, delivery notifications, etc.
• Registration will need to be completed using the CTM A2P 10DLC registration page for all types of messages being sent.

At this time, no information has been confirmed by the carriers regarding an official timeline. We will share additional information and deadlines as they become available.

We encourage customers that are currently sending messages to complete the registration process so your messages are delivered. Carriers will begin assessing pass through surcharges for unregistered traffic for SMS and MMS (see the fees table below). Carriers also intend to increase their filtering for non-registered SMS and MMS, to protect their customers from unwanted messages or SPAM.

Once CTM gets further information regarding this we will update this document accordingly.

After you complete your A2P 10DLC Profile and register your campaigns Brand and a sample message (or Two) you will be provided a Trust Score of: High, Medium, or Low trust. Based on these Trust scores will determine the message throughput rate that the carrier provides you. So the higher the trust score the more messages you can send over the carriers network.

Once you complete the registration process of your Business Profile and register your Brand for A2P 10DLC campaign messaging the information it will be sent to a 3rd party at the center of this new registration system, also known as The Campaign Registry (TRC). TCR will use a reputation algorithm to review specific information about your company, and will assign a “Trust Score” that will determine your messaging throughput rate.

Since Trust Scores have three different levels (Low, Medium, to High) the score will be used along with your Campaign type to determine the total throughput rate for the Campaign type you wish to send.

A series of use cases make up a campaign type. Each use case represents the type of notification you would like to provide. So for example, if you would like to run a marketing campaign for coupon advertisements, that would fall under a marketing use case, or you wanted to send out appointment reminders to your customer, that would fall under the category of Reminders, A list of detail use cases are provided below. One note: each campaign (or Use Case) type needs to be registered.

Yes, the use case determines the type of message being sent and determines the carrier passthrough fee that will be charged for each message on AT&T network.

Use cases vary from reminders, 2 factor authentication, marketing messages, customer notifications, to public service announcements, and many more. A list is provided below for the Use Cases.

Yes, you will want to register this as Conversation Messaging which is a Declared Use Case. Any text message sent from Calltrackingmetrics is considered an A2P message.

No, registration will be available entirely through CallTrackingMetrics. CallTrackingMetrics and our partners have integrated directly with The Campaign Registry (TCR) to facilitate registration for customers.

No, if you already are using 10 digit phone numbers for sending messages there is no need to buy new numbers. However, you will need to register the existing phone numbers for each campaign type to ensure your message will be delivered.

In order to register your business profile, brands, and campaigns, you will need to have information about each business and brand. The required information may include the business name, physical address, business type, Industry type, Tax ID or DUNS number, and provide 1 company contact under your business profile.

Once your Brand(s) and Campaign(s) are approved, you will need to link each of your A2P Campaigns to the phone numbers you would like to use for that campaign. Any numbers that you add to that campaign will be automatically associated with the Campaign that you assigned to that messaging service.

Yes, it is recommended that if you are using high-volume MMS campaigns, then leveraging a short code is still the best option.

These changes do not directly affect dedicated short codes along with Toll-Free numbers.

There are fees for both sending A2P 10DLC messages along with campaign registration.

Brand registration fee: $4 one-time registration fee, per Brand.

TCPA, or the Telephone Consumer Protection Act are rules and regulations put in place by the The Federal Communications Commission that went into effect in 1992.

STIR/SHAKEN is an expansion of TCPA, and is being put in place to instill calling confidence with customers. This set of industry standards is designed to reduce spam robocalls, prevent the “spoofing” of Caller ID data and help businesses improve voice security

Robocalls are prerecorded or autodialed calls made to your landline or cell phone, usually when you have not given permission for the caller to contact you. They are often made by telemarketers, who are callers contacting you to sell a product or service, usually unsolicited. Robocalls can also come from other entities besides telemarketers, such as debt collectors.

• Telemarketing calls can only be made between the hours of 8 a.m. and 9 p.m. (local time at the called party’s location)
• All telemarketers must comply with limits on “abandoned calls” and employ other consumer-friendly practices when using automated telephone-dialing equipment
• A telemarketer must abandon no more than 3 percent of calls answered by a person and must deliver a prerecorded identification message when abandoning a call
• Telemarketers must not disconnect an unanswered telemarketing call prior to at least 15 seconds or four rings
• All pre-recorded messages, whether delivered by automated dialing equipment or not, must identify the name of the entity responsible for initiating the call, along with the telephone number of that entity that can be used during normal business hours to ask not to be called again
• All telemarketers must transmit caller ID information, when available, and must refrain from blocking any such transmission(s) to the consumer
• All businesses that use auto dialers to sell services must maintain records documenting compliance with call abandonment rules
• Make sure to provide an opt-out function to put the phone number on the DNC registry
• The (Do Not Call Registry) DNC list needs to be specific to your organization and on file for 5 years
• Avoid calling numbers where the recipient is paying for the call (healthcare offices, mobile numbers, and even medical facilities)

This is the page the FCC maintains regarding how businesses can sign up to get subscriptions for the FCC’s do not call lists. Businesses can purchase subscriptions for specific area codes or for all area codes. (See Subscribing To Area Codes section)

There are several ways to contact our support team. If you are inside the CallTrackingMetrics platform, you may select the “Chat with Support” option. Additionally, you may reach our team by phone at (443) 432-2896 or create a support ticket by sending an email to info@calltrackingmetrics.com.

To help keep customers informed, we are sending regular emails related to these regulatory changes and proactively keeping this web page up-to-date. We recommend reviewing these resources often, as information is subject to change.