Has TRAI Initiated Pre-Tagging of SMS Variables to Combat Fraud?
Synopsis
Key Takeaways
- TRAI has mandated pre-tagging for SMS variable components.
- Variables must be registered upfront by principal entities.
- Compliance must be achieved within 60 days.
- Non-compliance will lead to message rejection.
- The directive aims to combat fraud and enhance consumer protection.
New Delhi, Nov 18 (NationPress) The Telecom Regulatory Authority of India (TRAI) has instructed all access providers to enforce the pre-tagging of all variable elements in SMS content templates utilized for commercial messaging, as announced by the government on Tuesday.
Components that vary, such as URLs, application download links, and callback numbers that may change based on the recipient or over time, must now be clearly tagged, according to an official statement.
According to the new stipulation, senders are required to label each variable field during the template registration process, specifying the intended use of the variable, the statement elaborated.
For instance, marking a variable as #url# indicates that the variable contains a URL. Without pre-tagging these variable fields, access providers cannot effectively identify or scrub them to verify whether the inserted values originate from whitelisted domains, numbers, or links, the Ministry of Communications stated.
Pre-tagging facilitates the automatic identification and cleansing of variable fields.
With the implementation of this mandatory pre-tagging, these variable components will now need to be categorized and registered upfront by the principal entities (PE), enhancing their traceability and accountability.
Access Providers and Principal Entities must complete the update of existing templates within a 60-day timeframe.
Messages sent using non-compliant templates will be rejected and undelivered once this compliance period has expired.
Evidence from various investigations into Unsolicited Commercial Communications (UCC) has demonstrated that the lack of predefined tagging has been consistently exploited for fraudulent and phishing schemes.
The absence of predefined tagging allowed unregistered or malicious URLs, app links, and callback numbers to be inserted into authorized templates undetected.
This directive from the Ministry aims to bolster the anti-spam and anti-fraud framework by ensuring complete visibility of variable fields in SMS and enabling Access Providers to enforce rigorous content scrubbing.