Summary

  • Australia checks both who registered a branded SMS sender name and whether the message travelled through an approved international partner.
  • ACMA’s 23 October report counts registrations before launch; the rules require quarterly operational data that can show whether the route controls work.

An SMS arrives on a phone wearing a familiar name: the bank, the parcel company, the electricity retailer. It looks like a small piece of interface design. Australia has turned that name into a supply-chain question.

The Sender ID Register records a sender name and the entity allowed to use it. That is one check. The path is another. Under ACMA’s rules, an overseas provider must use a written arrangement with an approved Australian telco. The written agreement requires the international partner to check the organisation’s identity and valid reason for each sender ID. If the message reaches a participating Australian transit or terminating provider directly from overseas, without the required partner path, the provider must replace the sender name with “Unverified”. The same treatment applies when a certified telco receives an ID from a provider that is not its approved partner.

So a company can have its paperwork in order and still lose the name on the way in. The register answers “who may use this label?” The route answers “which provider is prepared to vouch for this delivery?” A badge printed at the origin cannot make the border checks disappear.

Sender spoofing crosses two controls: the registered name and the route that delivers it. A recipient sees the displayed sender, while the control is distributed across the registrant, originating provider, international partner, and Australian carrier that stamps the message. The Industry Standard assigns duties along that chain, including registration and authority checks at origin and route checks in transit and termination. The ACMA sender guidance spells out the unverified label for direct international arrivals and non-partner traffic.

The reporting design matters as much as the label. Providers must report each quarter on registered messages sent, unregistered messages disrupted, complaints, interruptions involving international providers, and certain failed applications. Those are different failure modes. A rise in Unverified traffic could point to missing partner coverage, a provider routing around its agreement, or senders whose IDs are not registered. A single “messages blocked” total would hide the distinction.

ACMA’s report published on 23 October records readiness through 30 June: 27,361 entities had registered 39,562 sender IDs and 400 telcos had been approved. The register began on 1 July. The report itself makes the time boundary clear.

The register is the name desk; the partner chain is the border desk. Participating providers must send their quarterly returns to ACMA within 20 business days of quarter-end. Separate counts let the regulator see whether trouble sits with a name, a partner or the route between them.

Sources