Part 5—Reporting requirements

21 Traceback reporting

Where a participating telecommunications provider becomes aware that a sender identification message is a scam message:

if the provider is the originating telecommunications provider of the scam message – it must report to the ACMA in accordance with subsection (3); or
if the provider is not the originating telecommunications provider of the scam message – it must:

notify the telecommunications provider which sent the provider the scam message, that it is a part of the chain through which a scam message has been sent; and
report to the ACMA in accordance with subsection (3).

Where a participating telecommunications provider is notified by another participating telecommunications provider that it is part of the chain through which a scam message has been sent:

if the provider is the originating telecommunications provider of the scam message – it must report to the ACMA in accordance with subsection (3); or
if the provider is not the originating telecommunications provider of the scam message – it must comply with the obligation in paragraph (1)(b).

A report to the ACMA which is required under this section:

1. must be in writing; and

2. must contain the following information:

   the sender identification for the scam message; and the total number of recipients to whom the scam message was sent; and information about the content of the scam message; and if the provider preparing the report (the provider) is the originating telecommunications provider of the scam message:

   that the provider is the originating telecommunications provider of the scam message; and
   the identity of the entity which registered the sender identification, or on whose behalf the sender identification was registered, as relevant; or
   

   if the provider is not the originating telecommunications provider of the scam message:

(A) the identity of the telecommunications provider who sent the provider the scam message; and

(B) if relevant, the identity of the international partner or EMSP partner on whose behalf the message was sent; and

1. must be given to the ACMA as soon as practicable and in any event no later than 2 business days from the date on which the provider became aware of the scam message.

22 Quarterly reporting

Within 20 business days after the end of each quarter, a participating telecommunications provider referred to in an item of column 1 of the following table must:

prepare a written report for the relevant quarter containing the information mentioned in column 2 of the item; and give the report to the ACMA.