What is Authentication+?
In October 2024, The Campaign Registry (TCR) rolled out Authentication+, a new identity verification process designed to combat brand impersonation and fraud like smishing and spoofing. It adds an extra layer of security by verifying the identity of the brand representative registering for A2P 10DLC messaging. Right now, this feature is only available to Public Profit type brands, but in the future, TCR plans to roll this out to all customers. This applies to customers who register both via TCR and via Bandwidth.
What does this mean for me?
If your brand is a public profit brand, you'll be subject to new requirements for Authentication+:
For new brands, you'll now complete the Business Contact Email field in the UI, or the businessContactEmail field for the API, when creating your brand.
For existing brands, you can enter your Business Contact Email when editing your brand. If it's been over 30 days since your brand was created, you'll need to input the Business Contact Email into the Brand details, and then order an AUTHPLUS Aegis Mobile vetting. There will be no cost for ordering this vetting if you have not yet been contracted for it.
After the Business Contact Email has been added, you'll receive an email from TCR with the subject "Action Required: Verify Your Email Address to Enable 10DLC SMS Messaging" that will look like this:
Follow the steps in this email to complete your Authentication+ verification. Each email is only valid for 7 days. If the email expires, please click the Authentication+/2FA button to resend it.
Once Authentication+ is successfully set up, this button will disappear, and you will be permitted to make new campaigns. Please open a ticket with the Bandwidth Support Team if you need further help with Authentication+.