Key takeaways
- SMS spoofing means sending messages that appear to come from a trusted sender name.
- Alphanumeric sender names are not verified the way phone numbers are.
- SenderID Protection registers your sender name so it can be reserved for you where operators or registries support it.
- It needs a signed LOA and carries a separate monthly fee. It does not stop every kind of fraud.
What is SMS spoofing?
SMS spoofing means sending text messages that appear to come from someone else, typically by using a trusted brand name as the sender. Criminals use it for phishing, sometimes called smishing, for example a fake delivery notice or bank alert with a link.
Why sender names are easy to fake
An alphanumeric sender name is free text of up to 11 characters. In many places nothing proves that the sender owns the name, and messages from different providers can even appear in the same conversation thread as genuine ones. Some countries have introduced registries to change this.
How SenderID Protection works
SenderID Protection registers your sender name with the operators or registries that support it, so the name can be reserved for you and use by unauthorised senders can be restricted. Support, rules and enforcement differ by country and operator.
What it takes with ZafeConnect
- A signed Letter of Authorization (LOA), so that we can register on your behalf
- The sender name or names and the countries to protect
- A separate monthly fee, in addition to message fees
- We confirm availability for your countries first
What protection does not do
- It does not cover countries or operators without a registry or protection programme
- It does not stop fraud through other channels such as email or messaging apps
- It does not replace clear, consistent messages and customer awareness
Who should consider it
Any brand that customers trust enough to be worth imitating:
- Banks, insurers and payment companies
- Retailers and e-commerce brands
- Delivery and logistics companies
- Public bodies and utilities
Good habits alongside protection
- Use one consistent sender name
- Never ask for passwords or full card numbers by SMS
- Tell customers which sender name and numbers you use
- Monitor for misuse and report it