Australia's SMS Sender ID Register

The Australian Communications and Media Authority (ACMA) is introducing a national SMS Sender ID Register that changes how businesses, government agencies, and not-for-profits send branded text messages. From 1 July 2026, any organisation that wants its name to appear at the top of a text message — the sender ID — must register that name with its telco or messaging provider. The reform is designed to stop one of the most common SMS scams in circulation: a fraudster sending messages that appear to come from a bank, courier, government agency, or retailer, simply by typing the same name into a cheap messaging platform. Once the register is live, unregistered sender IDs will be displayed as 'Unverified', separating registered, authenticated senders from everyone else.

For consumers, the practical change is simple but important. A text that claims to be from 'ATO', 'myGov', 'AusPost', 'CommBank', or 'Afterpay' will now either be verified against the register or marked as 'Unverified'. An 'Unverified' label does not mean the message is definitely a scam — small businesses may take time to register, and some overseas senders may not participate — but it is a clear warning that the sender has not been authenticated. The strongest defensive habit is unchanged: never click links, call numbers, or reply to sensitive requests from any unexpected text, even if the sender ID looks familiar. Scammers can still buy short-term SIMs, compromise real accounts, or move victims to other channels such as phone calls and fake apps.

For businesses and organisations, the deadline is firm. Any entity that uses a branded sender ID must contact its originating telco, carriage service provider, or messaging platform to register each ID before 1 July 2026. Failure to register means messages may be grouped under 'Unverified', damaging trust, reducing open rates, and potentially training customers to ignore legitimate communications. Registration is handled through the provider rather than directly with ACMA, and organisations should audit every sender ID currently in use across marketing, customer service, appointments, logistics, and two-factor authentication. International organisations sending to Australian numbers may also need to register, depending on their provider's participation in the scheme.

The SMS Sender ID Register is a useful structural defence, but it does not verify the content of a message, the legitimacy of a linked website, or the trustworthiness of a company asking for payment. A scammer can still build a fake site that perfectly matches a real brand and send an 'Unverified' text to drive traffic there. That is why the register works best as one layer in a broader verification routine. Scam AI adds the next layer: paste any suspicious URL, company name, or phone number into scamai.org and it will cross-reference regulator warnings, business registries, domain intelligence, and fraud reports in seconds. If a message pressures you to act quickly, pay upfront, or confirm personal details, verify first — regardless of what the sender ID says.