IMDA proposes mandatory registration for organisations that use SMS sender IDs

SINGAPORE: Merchants and organisations that use SMS sender IDs may soon be required to join the SMS Sender ID Registry (SSIR) under a new proposal by the Infocomm Media Development Authority (IMDA).

The proposal is part of ongoing efforts by the authorities to fight scams and “further safeguard SMS as a communications channel”, IMDA said in a news release on Monday (Aug 15).

IMDA has been working with the Singapore Police Force, Government agencies and private sector partners on this front.

Under the proposal, registration would be required from the end of this year, following a transition period that starts in October.

“To build stronger scam prevention capabilities, we intend to make SSIR registration a requirement for organisations that use sender IDs,” IMDA said.

“Therefore, only registered sender IDs will be allowed. All other non-registered sender IDs will be blocked as a default. This further safeguards SMS as a communication channel.”

The registry was first piloted in August 2021, and IMDA set up the SSIR in March this year in response to a surge in SMS-related scams.

Since then, SMSes that spoof or make use of IDs registered in the SSIR have been blocked upfront.

“Since its launch, over 120 public and private sector organisations have joined the SSIR,” IMDA said.

“Compared to the three months before, the number of SMS scam cases reported has since declined threefold since the SSIR’s launch.”

Registration is currently voluntary, which means that the public may still receive spoofed text messages from sender IDs that are not logged in the registry.

If the proposal goes ahead, merchants and organisations that use SMS sender IDs will be required to register with the SSIR using their Unique Identity Numbers (UENs).

Aggregators who intend to handle text messages with sender IDs must also participate in the SSIR and verify merchant and organisation sign-ups through their UENs, IMDA said.