The short version
Australia’s SMS Sender ID Register commenced on 1 July 2026. From that date, any business or organisation that sends texts branded with its name — ‘ATO’, ‘AusPost’, ‘myGov’, your bank, your clinic, your courier — must have that name registered with the regulator. If it is not registered, the telco carrying the message is required to strip the brand name and replace it with the word ‘Unverified’, and those messages are grouped together in a single thread on your phone.
Three details do most of the work in understanding what you are now seeing:
- Labelled, not blocked. The ACMA was explicit that while the register grows, unregistered messages are being labelled rather than blocked, so legitimate senders who have not registered still get through — wearing the warning.
- There is no registration deadline. ACMA Chair Nerida O’Loughlin said on 1 July that there is no cut-off date for registration, and organisations relying on branded SMS that have not registered should contact their messaging provider as soon as possible.
- The enforcement lands on telcos, not senders. Telcos face court-ordered penalties of up to $250,000 for each contravention of the register rules. Your dentist does not get fined for failing to register; they just get labelled.
By the time we captured this on 14 August 2026, the ACMA’s own site banner had shifted from future to present tense: SMS sent using unregistered sender IDs are now being labelled as ‘Unverified’.
What a sender ID is, and what changed on your handset
A sender ID is the alphanumeric name at the top of a message thread instead of a phone number. It has always been trivially forgeable: the sending system simply declares the name it wants, which is why brand impersonation became the dominant text scam. The register replaces that honour system with an identity check.
Nothing changed on your phone in a technical sense — there is no setting, no app, no update. The change happens in the network. Three outcomes now exist:
| Registered sender ID | Arrives exactly as before, with the organisation’s name at the top. The name has been checked against a business register and tied to an entity with a demonstrated valid use case for it. |
|---|---|
| Unregistered sender ID | The name is replaced with ‘Unverified’. All such messages, from all senders, are collected into one thread — so a genuine appointment reminder can sit directly beneath a scam. |
| Sent through a telco that did not join the register | Blocked outright. Under the industry rules, providers that do not participate are not permitted to carry SMS or MMS using sender IDs at all, and their messages are blocked rather than labelled. |
That third row is the part of the scheme with real teeth, and it is easy to miss because it is invisible to consumers. The label is the consumer-facing signal; the participation requirement is the structural one.
What the register does not cover
The ACMA is unusually direct about the gaps, and they matter more than the headline:
- Messages from phone numbers. The rules do not apply to texts sent from a number rather than a branded name. A scammer who abandons brand names for a mobile number is outside the scheme entirely.
- Messaging apps. WhatsApp, iMessage and Facebook Messenger are not covered. A familiar-looking sender name in an app proves nothing.
- The content of the message. Registration verifies who owns the name, not that any particular message is honest or wanted.
Reasoning beyond the sources for a moment: those three exclusions describe the obvious adaptation. The cheapest response available to a scam operation is to stop using brand names and send from numbers, which Australians already receive in volume and already have to judge on instinct. That does not make the register pointless — impersonating ‘myGov’ is far more effective than texting from an unknown number, and the register takes that specific weapon away — but anyone expecting scam texts to stop arriving will be disappointed. The register raises the cost of one high-yield tactic. It does not close the channel.
The scale it is aimed at
The regulator’s own numbers set the context. Australians lost more than $13.8 million to text message scams in the first nine months of 2025. In the October to December 2025 quarter alone, telcos blocked 41.1 million scam SMS and 109.9 million scam calls, taking the total blocked since the scam rules commenced past 3.8 billion — including more than 1.0 billion scam SMS since July 2022. In the same quarter, telcos paid over $3.3 million for scam rule breaches that allowed fraudsters to steal money from consumers.
So the blocking regime was already operating at industrial scale before the register existed. What blocking could not do was tell you anything about the messages that got through. That is the specific hole the label fills.
The rules behind it
Two instruments matter. The Telecommunications (SMS Sender ID Register) Industry Standard 2025 sets the obligations on carriers, carriage service providers and electronic messaging service providers, with different duties depending on whether a telco is originating, transiting, terminating or certified. The SMS Sender ID Register (Application, Access and Administration) Determination 2025 governs what may be registered.
The ACMA finalised the rules in October 2025, began onboarding telcos in mid-October 2025 and opened applications to organisations at the end of November 2025 — roughly seven months of runway before the label switched on. A voluntary pilot register, which had been protecting the sender IDs of the most-impersonated organisations, was decommissioned as the full register went live. The whole thing sits inside the federal government’s Fighting Scams initiative.
One of the more interesting design decisions is the restricted words list. A sender ID consisting only of restricted words cannot be registered. The list runs: account, alert, anti-fraud, assist, assistance, bank, banking, bill, billing, delivery, help, important, info, information, message, notice, notify, package, password, sale, secure, security, service, support, tax, urgent, verify, verified. They may only be used in combination with characters that identify the organisation — the ACMA’s own example is that it cannot register ‘Alert’ but can register ‘ACMA Alert’. The reasoning is that these are the words scammers use to manufacture urgency and authority, and the ACMA says it will review and extend the list as tactics change.
The honest weakness: what ‘Unverified’ actually tells you
Read the regulator’s consumer guidance closely and it does not claim the label identifies scams. It says an ‘Unverified’ message may be from a legitimate business that has not registered yet, or it may be a scam impersonating a trusted brand — and that either way the advice is the same: stop and think before clicking a link or handing over information.
That is the correct and careful position, and it is also the scheme’s central design tension. A warning that mixes genuine senders with fraudsters teaches people that the warning is often wrong. Small operators — clinics, schools, community groups, tradespeople, single-location retailers — are precisely the senders least likely to have worked through a registration process they may never have heard of, and their appointment reminders are now sharing a thread with fake toll notices. With no registration deadline, that mixed population persists indefinitely by design.
The inverse is worth stating too, because it is the failure mode we would expect people to fall into: a verified brand name proves the sender’s identity was checked, not that the message deserves your trust. Registration is an anti-impersonation control. It is not a quality bar, and it does not mean a link in the message is safe to tap.
Both of those are our reading rather than the regulator’s, and there is one thing we could not establish. As of 14 August 2026 we could not find any published figure from the ACMA for how many sender IDs have actually been registered, or what share of branded traffic is now arriving labelled. Until that is published, nobody outside the industry can say whether ‘Unverified’ is a rare red flag or a daily annoyance. If you have seen a number, tell us.
What to do about it
| Treat ‘Unverified’ as “verify it yourself”, not “scam” | The label means the brand name was not registered. That is a prompt to check, not a verdict. Do not reply, do not click links, do not give personal details or money on the strength of the message alone. |
|---|---|
| Go around the message, every time | Find the organisation’s contact details independently — from a bill, a card, or by typing the website address yourself — and confirm from there. This works identically whether the message is verified, unverified or from a number. |
| Do not relax because a name appears | A registered sender ID has passed an identity check. It has not passed a judgement about the message. Links in branded messages still deserve the same suspicion. |
| Remember the number and app gaps | Texts from plain phone numbers and messages in WhatsApp, iMessage or Messenger are outside the scheme. A trusted-looking sender name in an app is not evidence of anything. |
| Tell a legitimate sender they are labelled | The ACMA suggests exactly this: if a message you believe is genuine arrives as ‘Unverified’, let the organisation know so it can register. It is the fastest way to shrink the mixed population that undermines the label. |
| If something has gone wrong | Report scam messages to Scamwatch. If money or personal information has been taken, contact your bank and phone company immediately, and IDCARE on 1800 595 160 for stolen identity details. |
If you send branded texts
This is where a lot of Australian small businesses have been caught flat-footed, because the obligation arrives through a provider rather than a regulator letter. The process, per the ACMA:
| Register through each provider you send with | You cannot register once centrally and be done. You must contact every telco or messaging provider you use, and that provider registers the sender ID on your behalf — which is also how you authorise them to send under it. The ACMA is blunt that if you self-register, you still need to register through your provider as well. |
|---|---|
| Check your provider is actually in the scheme | Providers are either participating or certified telcos, and the ACMA publishes the approved list. A provider outside the scheme cannot carry sender ID messages at all. |
| Fix your ABR details first | Registration checks the Australian Business Register, so your authorised contact or service-of-notice email in the ABR must be current. The ACMA states it does not check Relationship Authorisation Manager for these arrangements, and out-of-date ABR details delay applications. Identity is verified through myID. |
| Expect to justify the name | You need a valid use case: the sender ID must match your identity and be clearly linked to your organisation. Generic names built only from restricted words will be refused. |
| Late is not fatal | There is no cut-off date. Until you register, your messages carry the ‘Unverified’ label — a deliverability and trust problem rather than a legal one, since the penalties in the standard fall on telcos. |
The bottom line
The SMS Sender ID Register does one narrow thing well. Impersonating a trusted Australian brand in a text message used to be free; now it requires either compromising a registered sender or accepting a label that tells the recipient to be careful. Given how much of the $13.8 million lost to text scams in nine months rode on borrowed brand names, that is a real change, and the participation requirement on telcos gives it structure rather than relying on goodwill.
What it is not is a filter that sorts good messages from bad. The regulator does not claim that, and the design guarantees a long tail of genuine senders wearing the warning label while scam traffic migrates to plain numbers, which the scheme does not reach. The useful habit is unchanged and now slightly easier to apply: verify important messages through a channel you chose yourself, and treat every inbound link as unearned. The register gives you one more signal. It does not give you permission to stop thinking.
Sources
Facts, figures and dates above are drawn from these primary and reputable sources, captured 14 August 2026:
- ACMA — SMS Sender ID Register goes live to help protect Australians from scams (1 July 2026, MR 21/2026): commencement, the labelling requirement and single grouped thread, Nerida O’Loughlin’s quotes including “there is no cut-off date for registration”, labelling rather than blocking while the register grows, telco responsibilities, and penalties of up to $250,000 for each contravention.
- ACMA — About the register: what a sender ID is, the requirement to register before 1 July 2026, unregistered sender IDs being replaced with ‘Unverified’ and grouped in one thread, and the figure of more than $13.8 million lost to text message scams in the first nine months of 2025.
- ACMA — Getting text messages from businesses and organisations (updated 16 June 2026): consumer guidance, the “may be legitimate or may be a scam” framing, the exclusion of messages from phone numbers and of messaging apps such as WhatsApp, iMessage and Facebook Messenger, the suggestion to tell a legitimate sender it is unregistered, and the Scamwatch and IDCARE (1800 595 160) referrals.
- ACMA — Industry rules: SMS Sender ID Register: the requirement for telcos to apply to participate, that non-participating providers may not carry sender ID messages and their messages will be blocked, and the originating, transiting, terminating and certified telco categories.
- ACMA — Restricted terms for sender IDs (updated 28 November 2025): the full restricted words list, the requirement to combine them with identifying characters, the ‘Alert’ versus ‘ACMA Alert’ example, the reasoning about urgency and authority, and the naming of the SMS Sender ID Register (Application, Access and Administration) Determination 2025 and the Telecommunications (SMS Sender ID Register) Industry Standard 2025.
- ACMA — Register a sender ID if you have an ABN (updated 20 July 2026): registering through each provider, the valid use case requirement, myID identity verification, the ABR authorised contact and service-of-notice email requirement, the note that RAM is not checked, the participating and certified telco distinction, and the warning that self-registration still requires registration through your provider.
- ACMA — Action on scams, spam and telemarketing: October to December 2025: 41.1 million scam SMS and 109.9 million scam calls blocked in the quarter, more than 3.8 billion scams blocked since the rules commenced, more than 1.0 billion scam SMS since July 2022, over $3.3 million paid by telcos for scam rule breaches, the rules being finalised in October 2025, telco onboarding from mid-October 2025 and organisations from late November 2025, decommissioning of the voluntary pilot register, and the Fighting Scams initiative.
- ACMA — SMS Sender ID Register: Compliance (updated 29 June 2026): the compliance checklists by telco role under the Industry Standard 2025.
- Vodafone Australia — SMS sender ID is changing from 1 July 2026: a carrier’s customer-facing description confirming messages are labelled and grouped rather than blocked, and its Scamwatch referral.
- ACMA — SMS Sender ID Register (index): the site-wide notice, current as at 14 August 2026, that SMS sent using unregistered sender IDs are now being labelled as ‘Unverified’.