What is Australia's SMS Sender ID Register and does your business need to comply?

From 1 July 2026, every alphanumeric Sender ID that hasn't been registered through Australia's new SMS Sender ID Register will display as "Unverified" on the mobile screens of your customers — and may be blocked entirely or grouped into a scam thread alongside fraudulent messages.

That's not a hypothetical outcome. It's the designed intent of the Telecommunications (SMS Sender ID Register) Industry Standard 2025, and it applies to every business using a branded SMS name, regardless of what type of message you're sending.

What is the SMS Sender ID Register?

The SMS Sender ID Register is a national database maintained under the oversight of the Australian Communications and Media Authority (ACMA). It records which businesses have legitimate claim to specific alphanumeric Sender IDs — the customised names (like "MyBank" or "AusHealthCo") that appear instead of a phone number when you send SMS messages to customers.

The Register was established to combat the surge in SMS scams impersonating trusted brands. Scammers have long exploited the fact that anyone could send a message appearing to come from "CommBank" or "Medicare" without any verification. The Register closes that gap: only businesses that have formally registered a Sender ID will be able to send under that name with full deliverability.

Registration opened on 30 November 2025. The mandatory deadline — after which unregistered Sender IDs will be treated as suspect — is 1 July 2026. The window to act is shrinking, and many Australian businesses are already well into their registration process.

Who needs to comply?

If your business sends SMS messages that arrive with a branded name rather than a phone number, this requirement applies to you. This includes:

• Marketing messages — promotional campaigns, offers, loyalty communications
• Transactional messages — order confirmations, appointment reminders, delivery notifications
• Two-factor authentication (2FA) — security codes sent to verify customer identity
• Service notifications — account alerts, billing reminders, system updates

The requirement is content-agnostic. Whether the message is a promotional offer or a critical security code, if it carries an alphanumeric Sender ID, it must be registered.

Importantly, this requirement does not apply to standard numeric phone numbers. If your business sends SMS from a regular mobile number, you are not affected by this specific obligation. But for any business using a branded name in the sender field — and that includes the majority of organisations conducting any meaningful volume of customer SMS communication — registration is not optional.

What about businesses using multiple messaging providers?

This is one of the more common complications. Many businesses send SMS through more than one platform — a CRM integration here, a transactional messaging service there, possibly a third party for 2FA. Each channel may carry the same Sender ID. The registration obligation covers all of those channels. If your team hasn't mapped every SMS flow and confirmed which provider originates each message, that gap is worth addressing before the deadline.

What happens if you don't register?

This is where the business consequences become concrete.

From 1 July 2026, any SMS arriving with an unregistered alphanumeric Sender ID will be labelled "Unverified" on the recipient's device. In practice, that means:

• Customers see a warning flag next to messages they've trusted for years
• Messages will be labelled "Unverified" and may be automatically blocked before they reach the recipient
• Messages may be grouped into a scam thread alongside fraudulent communications
• Customer trust — built over years of consistent branded communication — is damaged in a single notification

For businesses where SMS is a primary customer communication channel, the operational impact of "Unverified" or blocked transactional messages or 2FA codes is significant. If a customer ignores a security code because it was labelled "Unverified" or it doesn't arrive because it was blocked, the downstream consequences extend well beyond a branding inconvenience.

The reputational dimension is equally real. Being visually grouped with scam content on a customer's phone — even temporarily, even unintentionally — is not a position any business wants to recover from.

The registration process — and why it's more achievable than it sounds

Registration is handled through your originating telco or messaging provider, not directly with ACMA. Your telco must be approved as a participating or certified provider under the Standard. Most major Australian messaging providers are already engaged with this process, and many are actively reaching out to clients.

The practical steps for your business are:

1. Audit your SMS activity — identify all Sender IDs currently in use across every platform
2. Gather evidence of legitimate use — documentation that ties your business to each Sender ID
3. Engage your messaging provider(s) — confirm they are a registered originating telco, and initiate the registration process
4. Confirm registration completion — receive confirmation that your Sender IDs are live in the Register before the deadline

The process is straightforward for businesses that have their SMS estate well documented. The challenge is typically not the registration itself, but the preparatory work: organisations that haven't inventoried their messaging setup often discover more complexity than expected.

The registration deadline is 15 May 2026 — not 1 July. Businesses need their Sender IDs registered by 15 May to ensure they're active and reflected in the system before the July cutoff. That timeline is closer than it appears.

What "Unverified" actually means for your customers

It helps to think about this from the customer's perspective. Your customers receive dozens of SMS messages daily, and the major telcos in Australia have done significant work to educate the public about SMS scams. Telcos blocked approximately 336 million scam SMS messages in just the first year of the existing scam code. The public awareness of SMS-based fraud is at an all time high.

When a customer sees "Unverified" next to what should be a routine appointment reminder from their GP, or a delivery notification from a retailer they trust, the response is not neutral. Uncertainty leads to inaction — they don't open the link, they don't provide the verification code, they don't engage with the message. And in some cases, they form a lasting association between that brand and untrustworthiness.

The brands that have already registered their Sender IDs will benefit from a visible trust signal — a clear indication that the message is from a legitimate, verified sender. The brands that haven't registered lose that trust signal at precisely the moment the broader public is most attuned to SMS fraud.

Compliance is the default — non-compliance is the outlier

The question for Australian businesses sending branded SMS isn't whether registration is worth the effort. It's whether your team has the internal clarity, provider relationships, and process ownership to complete registration before 15 May 2026.

Forward-thinking organisations have already started this work. Many are finding that the registration process surfaces useful insights about their broader SMS estate — undocumented flows, redundant providers, Sender IDs that predate current branding.

If your business hasn't yet confirmed which Sender IDs you use, who your originating provider is, and whether they're a registered participating telco, that groundwork is worth starting now. TritonArk's Sender ID Readiness service is designed to help businesses move through exactly that process — from audit through to confirmed registration — without the compliance burden falling solely on internal teams who may not have visibility across all SMS channels. If you're also working through broader regulatory obligations in this space, our SPF Readiness advisory covers the related Scams Prevention Framework obligations that sit alongside the Sender ID Register.

The ACMA's official guidance on registering Sender IDs is a good starting reference for the process itself. The deadline is real, the consequences are tangible, and the path to compliance is well-defined. What's left is execution.