Telecommunications (SMS Sender ID Register Industry Standard) Direction 2025

This Direction instructs the Australian Communications and Media Authority (the ACMA) to draft and determine an industry standard under subsection 125AA(1) of the Telecommunications Act 1997, in connection with the SMS Sender ID Register (s 5(1)). The Direction specifies the scope of whom the standard must apply to (carriers and carriage service providers, and electronic messaging service providers if ACMA considers it necessary), the objectives the standard must give effect to, mandatory matters the standard must deal with, optional matters it may deal with, and a firm timetable for determination and commencement (s 5(1)-(2), s 6, s 7, s 8, s 9).

Mechanically, the Direction requires ACMA to:

• determine the industry standard no later than 7 October 2025, and ensure full commencement at the earliest practical opportunity and in any event no later than 1 July 2026 (s 5(2));
• draft the standard to deliver the objectives enumerated in s 7 (disrupt unregistered sender IDs, protect end users from spoofing, promote confidence in registered IDs, and promote consistency and accountability in industry responses) (s 7);
• include specified mandatory content about roles and responsibilities and how communications using registered and unregistered sender identifications will be handled (s 8(1)-(2)); and
• consider a non‑exhaustive list of additional matters, including record keeping, performance metrics, complaints handling, privacy, information sharing with the ACCC, and conferral of functions on the Telecommunications Industry Ombudsman where consented (s 9).

The Direction allows ACMA discretion to vary the standard over time so long as the varied standard complies with the Direction (s 5(3)). It also permits ACMA to tailor the standard to different sections or classes within the telecommunications industry, to exempt classes from particular provisions, and to differentiate requirements by end‑user type, message type (SMS, MMS and services specified under s 484C of the Act), and entities (s 6(2)-(5)). The Direction is made under s 125AA(4) of the Telecommunications Act 1997 (s 3).

The Direction does not itself prescribe technical measures, penalties, or procedural rules beyond the high‑level matters ACMA must or may address. The specific obligations, operational mechanisms, timelines for compliance by industry participants, and enforcement arrangements will be set out in the industry standard ACMA determines pursuant to this Direction (s 5(1), s 8, s 9).

The Direction builds on a small set of interlinked concepts defined in the Telecommunications Act and referenced in this instrument.

• SMS Sender ID Register: The Register is central to the Direction. The instrument repeatedly requires the standard to operate "in connection with the operation and administration of the SMS Sender ID Register" and to treat communications using sender identifications that are registered or not registered on that Register differently (s 5(1)(b)-(d); s 8(1)-(2); s 9(1)). The instrument presumes the Register exists and will be used for verification and operational decisions.

• Sender identification and spoofing sender identification: The Direction targets communications identified by sender identification, and specifically identifies spoofing sender identification as a harm to be guarded against (s 7(b)). The instrument notes that "sender identification" is defined in section 484C of the Act, and that the definition does not include a message header consisting only of numbers (s 7 note; s 4 note 1). That distinction has consequences for which messages fall within the regime.

• Carriers, carriage service providers, and electronic messaging service providers (EMSPs): The standard must apply to carriers and carriage service providers as a base (s 6(1)(a)-(b)). ACMA has discretion to apply the standard to EMSPs where it considers it necessary (s 6(1)(c)). The instrument also allows ACMA to treat different sections or classes of these industry participants differently and to exempt particular classes from specific provisions (s 6(2)-(4)).

• Roles and responsibilities in operation and administration of the Register: The standard must set out roles and responsibilities of carriers, carriage service providers and EMSPs in relation to their telecommunications activities connected with operation and administration of the Register (s 8(1)(a)). The instrument contemplates both technical and administrative arrangements for verifying sender identifications and for preventing or disrupting carriage or distribution of communications using unregistered sender IDs (s 8(2)(a)-(e)).

• Consumer protection and confidence: The Direction’s objectives include protecting end users against spoofing sender identifications and promoting public confidence in sender identifications registered on the Register (s 7(b)-(c)). It also requires consistency and accountability of industry actions regarding registered and unregistered sender IDs (s 7(d)).

The Direction explicitly names the primary classes of regulated parties and identifies secondary parties who will be implicated by the standard ACMA is to determine.

Primary regulated parties

• Carriers and carriage service providers. The Direction requires the standard to apply to carriers and carriage service providers (s 6(1)(a)-(b)). The instrument notes that "carriage service provider" is defined in sections 7 and 87 of the Act and includes carriage service providers who are intermediaries (s 6 note). These entities will have primary operational obligations in relation to the carriage of communications and technical measures to prevent or disrupt carriage of messages using unregistered sender identifications (s 8(2)(a)).

• Electronic messaging service providers (EMSPs). EMSPs are not automatically captured; the standard is to apply to EMSPs only if ACMA considers it necessary (s 6(1)(c)). If ACMA applies the standard to EMSPs, the instrument contemplates obligations on them to prevent or disrupt distribution through carriage services of communications using unregistered sender identifications and to have administrative arrangements for access to the Register to verify sender identifications (s 8(2)(c), s 8(2)(e)).

Other affected parties

• Entities registered on the SMS Sender ID Register. The Direction contemplates complaints handling procedures in response to complaints about the Register from entities registered on it, and measures to promote public confidence in registered sender identifications (s 7(c), s 9(1)(c)). Registered entities will therefore have an interest in how the standard treats registered IDs and in dispute and complaint channels.

• End users. The Direction identifies end users as beneficiaries of protection against spoofing (s 7(b)) and contemplates requirements to flag sender identifications that are not registered so end users can identify the sender (s 8(2)(b)). The standard may therefore place visibility and informational obligations that directly affect consumer experience.

• Telecommunications Industry Ombudsman (TIO). The instrument contemplates conferral of functions and powers on the TIO for complaints handling relating to the Register, subject to the TIO’s consent (s 9(1)(d); note referencing s 114 of the Act). That would involve the TIO in industry dispute resolution where consented.

• Australian Competition and Consumer Commission (ACCC). The instrument contemplates information sharing by carriers, carriage service providers and EMSPs for the purposes of the functions and powers of the ACCC (s 9(1)(f)), signalling a possible oversight or investigatory role for the ACCC in relation to the Register or compliance.

The Direction does not itself contain prescriptive operational duties; it mandates the content ACMA must include in the industry standard. The following are the key duties and rights that the standard must or may create, as derived from the Direction.

Mandatory duties to be included in the standard

• Roles and responsibilities: The standard must set out the roles and responsibilities of carriers, carriage service providers and EMSPs in relation to their telecommunications activities connected to operation and administration of the SMS Sender ID Register (s 8(1)(a)). This is a mandatory drafting requirement, so parties can expect the standard to specify who does what in verification, disruption, flagging, access, reporting and complaint handling.

• Handling communications by registered and unregistered sender identifications: The standard must deal with how communications using sender identifications registered and not registered on the SMS Sender ID Register will be handled by carriers, carriage service providers and EMSPs (s 8(1)(b)). This creates an obligation on ACMA to establish rules governing treatment of both categories of messages.

Examples of duties the standard may impose

• Preventing or disrupting carriage and distribution: The standard may require carriers and carriage service providers to prevent or disrupt the carriage on telecommunications networks of communications using sender identifications not registered on the Register, and may require EMSPs to prevent or disrupt distribution through carriage services of such communications (s 8(2)(a), s 8(2)(c)). If included, these duties create technical and operational obligations on network operators and messaging platforms.

• Flagging for end users: The standard may impose requirements on carriers and carriage service providers to flag sender identifications so end users can identify that the sender is not registered on the Register (s 8(2)(b)). This imposes user‑interface and labelling duties affecting customer experience.

• Administrative arrangements for access: The standard may require administrative arrangements for access to the Register by carriers, carriage service providers and EMSPs to verify sender identifications (s 8(2)(d)-(e)). This suggests duties around authentication workflows, credentialing and operational access controls.

Optional duties and reporting obligations

The Direction itself does not prescribe penalties or specify enforcement mechanisms. It is a ministerial direction to ACMA to make an industry standard under the Telecommunications Act 1997, and the Direction confines itself to specifying what the standard must and may contain (s 5(1), s 8, s 9). Any specific civil or administrative penalties, compliance notices, enforceable undertakings, or other enforcement tools will therefore depend on the content of the industry standard ACMA determines and on the enforcement powers in the Telecommunications Act that apply to such standards.

What the Direction does make available as enforcement and oversight levers

• Preventing or disrupting carriage and distribution. The Direction contemplates requirements that may oblige carriers, carriage service providers and EMSPs to implement technical measures to prevent or disrupt carriage of communications using unregistered sender identifications and to flag unregistered sender IDs to end users (s 8(2)(a)-(c)). These are operational enforcement mechanisms industry participants themselves would perform; the Direction leaves the technical design and any sanctions for non‑performance to the industry standard and any relevant provisions of the Act.

• Reporting and metrics. The standard may require record keeping and performance reporting on disrupted unregistered communications and delivered registered communications, and on the speed and effectiveness of measures taken under the standard (s 9(1)(a)-(b)). Such reporting creates visibility that regulators (and possibly the ACCC) can use to assess compliance and effectiveness.

• Complaint handling and TIO involvement. The standard may require industry complaint mechanisms and may confer functions to the Telecommunications Industry Ombudsman in relation to complaints about the Register, subject to the Ombudsman’s consent (s 9(1)(c)-(d)). Conferral of functions to the TIO would incorporate TIO dispute‑resolution processes into the enforcement landscape for matters the TIO accepts jurisdiction over.

• Information sharing for ACCC functions. The standard may require industry participants to share information for the purposes of the ACCC’s functions and powers (s 9(1)(f)). That creates an investigatory and oversight channel for the ACCC; any enforcement action by the ACCC would be under that agency’s existing powers, as exercised using information obtained under the standard.

Limits and open questions in the Direction

The Direction is made under subsection 125AA(4) of the Telecommunications Act 1997 and expressly references multiple provisions and actors within that Act. Its interactions with other laws and regulatory actors are framed by those references and by the subject matter it covers.

Interaction with the Telecommunications Act 1997

• Legal basis and standard‑making: The Direction directs ACMA to exercise its standard‑making power under s 125AA(1) of the Telecommunications Act 1997 (s 5(1)). The Direction itself is made under s 125AA(4) (s 3). Therefore the industry standard ACMA will determine must be consistent with both this Direction and the Act’s provisions governing standards.

• Definitions in the Act: The Direction relies on definitions found in the Act. Note 1 to s 4 of the Direction lists a number of expressions defined in s 7 of the Act, including ACCC, ACMA, carriage service, carriage service provider, carrier, sender identification, SMS Sender ID Register, spoofing sender identification, Telecommunications Industry Ombudsman, and telecommunications network (s 4 note 1). Note 2 references Part 6 definitions, including electronic messaging service provider, section of the telecommunications industry, telecommunications activity, and telecommunications industry (s 4 note 2). Those definitions determine the scope and reach of the standard when applied.

Interaction with the Telecommunications Industry Ombudsman

• Conferral of functions and consent: The Direction permits ACMA to confer functions and powers on the Telecommunications Industry Ombudsman for complaints handling related to the SMS Sender ID Register (s 9(1)(d)). The Direction notes that the Ombudsman’s consent is required to confer functions and powers on it, citing s 114 of the Act (s 9 note). This links the standard to the TIO’s statutory framework and requires procedural consent before TIO involvement.

Interaction with ACCC functions and powers

• Information sharing: The Direction allows the standard to include requirements for information sharing by carriers, carriage service providers and EMSPs for the purposes of the functions and powers of the ACCC (s 9(1)(f)). This contemplates operational interfaces between industry data flows and the ACCC’s oversight, enforcement or competition functions as exercised within the ACCC’s statutory mandate.

Interaction with privacy regimes and data handling

The Direction text supplied contains no recorded amendments to this instrument. It is presented as the Telecommunications (SMS Sender ID Register Industry Standard) Direction 2025 and identifies the statutory authority under which it is made: subsection 125AA(4) of the Telecommunications Act 1997 (s 3). There are three procedural features in the Direction relevant to future change and amendment.

ACMA’s variation power

• After ACMA determines the industry standard, the Direction expressly permits ACMA to vary the standard as it considers necessary from time to time, provided that any variation complies with the Direction (s 5(3)). That clause authorises iterative changes to the content of the standard while anchoring those changes to the requirements and objectives set out in the Direction.

Direction’s fixed procedural timetable

• The Direction fixes an initial determination deadline and a commencement deadline for the standard (s 5(2)). ACMA must determine the standard no later than 7 October 2025 and ensure the standard commences in full at the earliest practical opportunity and in any event no later than 1 July 2026 (s 5(2)). Those dates function like temporal constraints on the initial version of the standard.

Flexibility within the standard

• The Direction authorises ACMA to apply the standard differently across sections and classes of the telecommunications industry and to exempt classes of carriers, carriage service providers and EMSPs from particular provisions (s 6(2)-(4)). The standard itself, once determined, may therefore contain internal variations, carve‑outs and staged compliance timetables that are operational rather than legislative amendments.

What the Direction does not provide about amendments

• The Direction does not set out a process for amendment of the Direction itself. Nor does it list prior versions or legislative history. The only amendment mechanism mentioned is ACMA’s power to vary the industry standard it determines (s 5(3)). Any formal amendment to the Direction would follow the statutory processes for instrument amendment under the Act and relevant legislative instruments processes; the Direction text provided contains no record of that.

Practical consequence for readers

• Entities preparing for compliance should expect a first version of the industry standard by 7 October 2025, with full commencement by 1 July 2026, and expect that ACMA may update the standard over time. Preparations should therefore consider versioning and change management, because ACMA is explicitly empowered to vary the standard (s 5(2)-(3)) and the standard may include different obligations for different classes and services (s 6(2)-(5)).

The Direction text supplied contains no reference to any litigation, judicial decisions, or dispute outcomes. It does not cite any cases, nor does it record prior legal challenges to the SMS Sender ID Register regime or to the use of industry standards under section 125AA of the Telecommunications Act 1997. The instrument is a ministerial direction setting policy parameters for ACMA and does not itself establish a court‑reviewable right or penalty within its text.

Where litigation or disputes could arise, given the Direction’s content

• Allocation of roles and responsibilities: Because the Direction requires the standard to set out roles and responsibilities of carriers, carriage service providers and EMSPs in relation to operation and administration of the SMS Sender ID Register (s 8(1)(a)), disputes may arise over the division of operational responsibilities, access rights to the Register, or the reasonableness and technical feasibility of measures required by the standard. The Direction itself does not define dispute resolution mechanisms beyond the potential for TIO involvement (s 9(1)(c)-(d)).

• Application to EMSPs and exemptions: The Direction gives ACMA discretion to apply the standard to EMSPs only if necessary and to exempt classes of providers from particular provisions (s 6(1)(c), s 6(4)). Litigation risk could arise if affected parties challenge ACMA’s application decisions, especially where classification or exemption determinations materially alter compliance obligations. The instrument does not set out review pathways for those classification decisions.

• Complaints handling and TIO conferral: The Direction contemplates complaints handling and the potential conferral of functions on the Telecommunications Industry Ombudsman where the Ombudsman consents (s 9(1)(c)-(d)). If the TIO is conferred functions, disputes about jurisdiction or the scope of TIO decisions could follow the TIO’s statutory dispute resolution pathways; the Direction itself does not create those remedies.

• Interaction with ACCC information sharing: The Direction allows the standard to include information sharing for ACCC functions (s 9(1)(f)). That could give rise to regulatory investigations by the ACCC, and any enforcement action by the ACCC would proceed under its own statutory powers and judicial review frameworks rather than under this Direction.

Absence of precedent in the Direction

• Because the Direction contains no litigation history, readers should not infer precedent from the instrument. Any case law interpreting the standard, the Register, or the relevant provisions of the Telecommunications Act will arise only after ACMA determines the standard and after parties act under it. The Direction provides policy constraints and expectations but does not supply adjudicative or litigated outcomes.

The Direction sets mandates and discretionary parameters that introduce several practical pitfalls or unexpected consequences for regulated parties and other stakeholders. These are not findings beyond the Direction’s text; they are operational points that follow directly from its structure and requirements.

Hard timetable for determination and commencement

• ACMA must determine the standard by 7 October 2025 and ensure full commencement by no later than 1 July 2026 (s 5(2)). That compressed timetable creates a risk that standards will be specified quickly and that industry participants will have limited lead time to implement technical, administrative and contractual changes required by the standard. The Direction permits staged or differentiated requirements, but the overall commencement deadline could still create implementation pressure.

Broad discretion about application to EMSPs

• The standard applies automatically to carriers and carriage service providers and only to EMSPs if ACMA considers it necessary (s 6(1)). This discretion can produce uncertainty for EMSPs as to whether and when they will be regulated, particularly for international or novel messaging platforms. Entities that straddle definitions (for example, messaging intermediaries versus EMSPs) may face uncertainty about classification and consequent obligations.

Exclusion of numeric‑only headers from "sender identification"

• The Direction notes that the definition of sender identification in the Act does not include a message header consisting only of numbers (s 7 note). That exclusion could create a significant carve‑out for certain classes of short codes, automated numeric sender headers, or legacy SMS uses, and may have implementation consequences if the standard treats numeric headers differently. Parties relying on numeric headers should not assume they fall within the Register regime absent ACMA’s standard specifying otherwise.

Potential for divergent obligations across classes and services

• ACMA may deal with matters differently for different sections and classes of the telecommunications industry and may exempt certain classes from particular provisions (s 6(2)-(4)). While this allows tailored regulation, it also raises compliance complexity for companies operating across multiple classes or services that may face different requirements in different business lines. Careful attention will be needed to determine which obligations apply to which parts of a vertically integrated company.

Compliance preparation should be structured around the mandatory subjects the Direction requires ACMA to include in the industry standard and the likely optional measures the standard may impose. The Direction itself does not set operational rules, but it identifies the domains ACMA must address. The following checklist maps those domains to preparatory steps and practical actions industry participants should consider now.

1. Confirm regulatory classification and scope

• Review statutory definitions in the Telecommunications Act to determine whether your organisation is a carrier, a carriage service provider, an intermediary carriage service provider (noting the Direction’s cross‑reference to sections 7 and 87 of the Act) or an electronic messaging service provider (EMSP) (s 6 note; s 4 notes). Because ACMA has discretion to apply the standard to EMSPs only where necessary (s 6(1)(c)), engage with ACMA consultations and be ready to present operational evidence if you seek exclusion or tailored treatment.

2. Map systems to the SMS Sender ID Register and verification flows

• The Direction anticipates administrative arrangements for access to the Register to verify sender identifications by carriers, carriage service providers and EMSPs (s 8(2)(d)-(e)). Map current message routing, sender ID handling and any available API or credential systems to the functions a Register verification system will need. Identify gaps in authentication, logging and access control.

3. Assess technical capability for disruption and flagging

• The standard may require prevention or disruption of carriage/distribution of messages using unregistered sender IDs and may require flagging at the user interface (s 8(2)(a)-(c)). Evaluate capacity to implement message filtering, rate limiting, message blocking, quarantine and user‑facing labelling. Where end‑user flagging is required, assess how to deliver consistent flagging across apps, platforms and devices.

4. Prepare data retention, record keeping and reporting systems

• The standard may require record keeping and reporting on disrupted unregistered communications and delivered registered messages, together with performance metrics on speed and effectiveness (s 9(1)(a)-(b)). Design data retention policies, secure logs, and reporting pipelines that can produce the required aggregate and operational metrics while complying with privacy obligations.