Oggetto: obbligo di registrazione per gli SMS di phishing a partire dal 1° ottobre

Austria has taken a major step against phishing scams by implementing a legal requirement for the registration of alphanumeric SMS sender identifiers since October 1. This move aims to prevent fraudulent messages that mimic legitimate organizations such as banks or delivery services. According to the Austrian regulatory authority RTR, more than 9,000 complaints about scam SMS were registered this year alone, highlighting the severity of the issue. The new regulation mandates that only registered alphanumeric sender identifiers can be used to send SMS to Austrian end users. These identifiers, which replace traditional phone numbers, are typically composed of letters and sometimes numbers, such as "FinanzOnline" or "PostAT." The RTR has established a public directory containing all valid alphanumeric sender identifiers in Austria. Any SMS with an unregistered identifier will not be delivered, ensuring recipients can trust the authenticity of messages received from recognized entities. As of now, over 8,500 valid identifiers have been entered into the directory. The process involves rigorous checks to ensure each identifier is correctly associated with its rightful owner. For instance, only the actual bank would be allowed to use the identifier "Hausbank." RTR Chief Klaus Steinmaurer emphasized the importance of these measures, stating that they provide a long-term solution to the threat posed by phishing SMS. The implementation of this measure involves the responsibility of Austrian mobile network operators. They play a crucial role in verifying the authenticity of alphanumeric sender identifiers before delivering SMS messages. Mobile providers are tasked with filling the RTR directory with company identifiers upon request and ensuring compliance with regulations. They also bear liability for any violations, reinforcing their commitment to maintaining secure communication channels. This initiative effectively blocks foreign alphanumeric SMS from being sent to Austrian customers, thereby eliminating another potential source of phishing attacks. Despite these efforts, challenges remain, particularly concerning encrypted messaging platforms like WhatsApp and Telegram, where data transmission occurs through the internet rather than standard SMS protocols. Additionally, messages originating from unknown private numbers continue to pose risks, requiring continued vigilance from users.