New rules require telcos to protect customers from scams

New rules to protect consumers from scams that target customer interactions with telcos came into force today (30 June 2022).

The rules introduced by the Australian Communications and Media Authority (ACMA) in April 2022 are designed to prevent unauthorised access by scammers to people’s telco services and personal information. These types of scams cost victims in Australia an average of around $28,000.

The obligations apply when telcos undertake high-risk transactions such as SIM-swap requests, changes to accounts or disclosure of personal information.

The Telecommunications Service Provider (Customer Identity Authentication) Determination 2022 requires telcos to protect their customers by:

  • using multi-factor identity authentication to confirm that a person is the customer or their authorised representative
  • having systems in place to identify customers at risk of fraud and providing them with additional protections
  • publishing customer awareness information on their website.

Multi-factor authentication can include a customer confirming their personal information and responding with a one-time code consistent with how other essential services like banking operate.

Combating SMS and identity theft phone scams is an ACMA compliance priority, The ACMA has a range of enforcement actions available for telcos found to have breached the new rules, including commencing court proceedings.

This is the latest action taken by the ACMA to combat phone scams in Australia. It complements rules introduced in April 2020 requiring telcos to conduct stronger ID checks to stop mobile porting fraud.

Source: ACMA

FINTECH22 presented at Sydney Masonic Centre, Sydney 30 November – 1 December 2022, showcasing Australia’s leading FinTech products, services and firms.

Join the Two-day FINTECH22 Exhibitor Showcase – Free online visitor registration

Attend FINTECH22 Forum to hear from industry experts – Delegate registration



Read more

Leave a Reply

Your email address will not be published.