Anatel implements new rules to combat SMS fraud in Brazil

The Brazilian National Telecommunications Agency (Anatel) has published new regulations in the Official Gazette to enhance mobile user security and prevent scams conducted via text messages (SMS). The measures specifically target Application-to-Person (A2P) SMS, which are automated messages sent by companies using short codes rather than traditional phone numbers.

Under the new rules, mobile operators are required to block messages originating from unregistered short codes. Each short code must be exclusively linked to a single legal entity, prohibiting the sharing of codes between different companies. To increase transparency, Anatel has mandated the creation of a centralized, public directory of short codes, allowing users to identify the specific companies responsible for sending automated messages.

Telecommunications providers have up to 90 days to implement these security measures, including the establishment of internal monitoring systems to detect suspicious traffic and sender spoofing. These actions follow data from the Center for Regional Studies for Information Society Development (Cetic.br), which indicated that SMS is a primary medium for fraudulent attempts.