FCC Proposes Mandating Identity Verification for All New Phone Line Subscribers

WASHINGTON — The Federal Communications Commission has proposed a new rule that would require telecommunications providers to collect and verify identifying information from any individual or business seeking a new phone number. The proposal, introduced in a Notice of Proposed Rulemaking late last year, aims to combat the proliferation of illegal robocalls and spam texts by making it more difficult for malicious actors to obtain phone numbers anonymously.

Under the proposed framework, carriers would be mandated to implement “Know Your Customer” (KYC) protocols, similar to those used in the financial industry. This would involve collecting verifiable information such as a full name, address, and a unique identifier like a driver’s license number for individuals, or a business name, address, and Employer Identification Number (EIN) for corporate clients. The FCC’s goal is to create a more reliable record of who controls each phone number, thereby enhancing the ability of law enforcement and regulatory bodies to trace fraudulent communications back to their source.

While curbing spam is a laudable goal, this proposal introduces a significant new layer of administrative burden and data privacy risk, particularly for small and mid-sized businesses. For entrepreneurs and new companies, this represents another compliance hurdle during the critical and often chaotic launch phase. The process of gathering and submitting verification documents for every required phone line could slow down operations and add complexity at a time when agility is paramount. Furthermore, it forces businesses to entrust yet another third party with sensitive identifying information, expanding the potential attack surface for data breaches.

In our experience, regulations like this underscore the absolute necessity of proper business formation from the very beginning. Having all corporate documentation, federal tax IDs, and legal registrations in order not only satisfies foundational requirements for banking and financing but also makes navigating new compliance demands like these much simpler. A well-structured entity can produce the required verification documents efficiently, whereas a disorganized one may face delays and complications. We help clients establish their legal and financial footing so they can handle new compliance demands without derailing their launch. To ensure your new venture is structured correctly from day one, contact C&S Finance Group LLC at csfinancegroup.com.

The FCC’s proposal argues that current practices are insufficient. Scammers frequently exploit the ease of acquiring phone numbers using fake or stolen information, often obtaining Voice over Internet Protocol (VoIP) numbers in bulk to power their illegal robocalling campaigns. By mandating identity verification at the point of sale, the commission hopes to disrupt this supply chain. In its announcement, the FCC stated the rule would “help to ensure that law enforcement has the tools it needs to track down and prosecute those who are bombarding consumers with these unwanted and illegal calls and texts.”

However, the proposal has drawn sharp criticism from privacy advocates and civil liberties organizations. The Electronic Frontier Foundation (EFF) characterized the plan as a “vast data collection scheme” that would endanger vulnerable populations while failing to stop determined criminals. The organization argues that forcing carriers to collect and store sensitive personal information on every phone subscriber in the country would create a massive, centralized target for hackers and government surveillance.

According to the EFF, the rule would disproportionately harm individuals who rely on anonymous communication for their safety, such as survivors of domestic violence, investigative journalists, and political activists. The group also contends that sophisticated scammers would easily circumvent the requirements by using stolen identities, synthetic identities, or by acquiring phone numbers through foreign providers not subject to FCC jurisdiction. This would leave legitimate American businesses and citizens to bear the full compliance burden without a significant reduction in spam.

For small and mid-sized companies, the operational implications could be substantial. Beyond the initial setup, businesses that require multiple phone lines for different departments, remote employees, or temporary projects would have to undergo the verification process for each number. This could introduce delays in onboarding new staff or launching new initiatives. The costs associated with implementing and maintaining these verification systems by telecom providers would also likely be passed on to customers, potentially increasing telecommunication expenses for businesses that rely heavily on phone-based sales and support.

This is not the first time KYC-style regulations have been implemented to combat fraud. The banking industry has operated under similar mandates for decades as part of anti-money laundering (AML) efforts. While those rules have become standard practice, they also impose significant compliance costs and have not entirely eliminated financial crime. Critics of the FCC’s plan suggest that less intrusive alternatives should be prioritized, such as enhancing traceback capabilities to identify the origin of spam calls without mass data collection, or focusing enforcement on the small number of gateway providers that facilitate the majority of illegal international robocalls.

The FCC’s proposal is now in a public comment period, during which the commission will gather feedback from telecommunications companies, industry groups, consumer advocates, and the general public. After reviewing these comments, the FCC will decide whether to move forward with a final rule, modify the proposal, or abandon it. The outcome of this process will be a critical regulatory development for businesses to monitor, as it could reshape the process of acquiring essential communication services.