The CNMC prompts necessary SMS registration to stop scams | Economy | EUROtoday

The National Markets and Competition Commission (CNMC) has accredited the round that regulates the creation and operation of the Alias ​​Registry for textual content messages (SMS), a measure designed to mitigate id theft fraud referred to as smishing. According to the technical regulation, telecommunications operators and messaging suppliers should essentially block any communication whose alphanumeric sender isn’t duly registered and verified within the official database as of June 7.

The new rules set up that the registry will accumulate all alphanumeric identifiers used as senders in SMS, MMS and wealthy communication companies (RCS) messages directed to Spanish numbers. The goal of the CNMC is to ensure that the identify or model that seems on the person’s terminal successfully corresponds to the entity that sends the message. As of the complete entry into drive of the measure, solely messages whose aliases are beforehand related to professional entities can be delivered.

To register an alias, firms and public administrations should doc their reference to the model, commerce identify or web area they intend to make use of. The CNMC has specified that the registry is not going to solely retailer the names, however will hyperlink them to a accountable proprietor and to the digital communications service suppliers that handle the site visitors.

The implementation schedule outlined by the regulator features a interval of technical adaptation. After the publication of the round within the Official State Gazette (BOE), messaging suppliers can have a interval of 1 month to hold out mass uploads of the aliases which are already in use by their present shoppers. Subsequently, a interval of technical exams can be opened within the operators’ filtering techniques that may final till June 6, 2026.

The blocking obligation may even have an effect on messages originating from international firms that function within the nationwide market. If a world entity needs to ship industrial or informative communications below an alias to customers in Spain, it should register within the Spanish registry or course of its registration by means of a certified supplier. The solely exception contemplated within the rules is message site visitors for customers who’re roaming or roaming.

Security Impact

As a part of the transparency measures, the regulatory physique will allow a public session portal on its web site. Through this instrument, any citizen will be capable of confirm the possession of an alias acquired on their cell phone. The database will make it attainable to establish which firm or administration is the professional proprietor of the alphanumeric identifier, facilitating the detection of fraud makes an attempt in actual time.

This initiative is the most recent improvement of the rules accredited in February 2025 by the Ministry for Digital Transformation and Public Service. This order is a part of the nationwide Anti-Scam Plan, which seeks to scale back the quantity of fraudulent communications that impersonate public organizations such because the General Directorate of Traffic (DGT), Post Office or banking entities.

The CNMC will supervise compliance with these obligations by operators. Failure to adjust to the registration, verification and blocking duties of SMS aliases as of June 2026 could lead to administrative sanctions in accordance with the General Telecommunications Law.

According to knowledge from Digital Transformation, the federal government plan has resulted within the blocking of 169.5 million calls and 10.4 million SMS with fraudulent intentions since its launch in March 2025. These interventions are carried out on numbers that don’t correspond to any lively person or that current anomalous conduct patterns detected by community intelligence techniques.

Complementary measures

The CNMC Alias ​​Registry is a part of a package deal of technical measures that may alter the functioning of economic communications in Spain in the course of the 12 months 2026. One of probably the most related provisions is the designation of the 400 prefix as necessary for all requires industrial functions. The use of the 400 prefix is ​​scheduled to return into impact on the finish of summer time 2026. Once this numbering is operational, operators can be instructed to dam any industrial or customer support calls created from numbers apart from these licensed. This features a full ban on making industrial calls from standard nine-digit cellular numbers.

The regulator has indicated that this measure seeks to eradicate person uncertainty when receiving calls from unknown cellular numbers, a way incessantly utilized by scammers to extend the response price. As of the established date, industrial communications could solely use geographic numbering linked to a bodily location; particular numbering for industrial communications (prefix 400); and accumulate or data strains (800 and 900 numbers).

The 2025 rules have additionally modified using 800 and 900 numbers, which have been historically restricted to receiving calls, now permitting firms to difficulty communications from these strains in order that the person can clearly establish the origin of the entity.

Another motion entrance of the Anti-Scam Plan is the management of ‘spoofing’ or numbering masking. The rules prohibit customers residing in Spain from receiving calls or SMS that, having a world origin, simulate having been generated from a nationwide quantity.

Spanish operators now have the duty to confirm the technical origin of the decision. If the system detects a discrepancy between the sender’s precise geographic location and the prefix (+34) displayed, the communication is robotically intercepted. This observe was, based on the ministry’s technical experiences, one of the crucial widespread ways to offer an look of legitimacy to phone scams organized from name facilities positioned outdoors the European Union.