North America Industry compliance

US 10DLC Brand Verification Gets Phased Deadlines

For international brands, CPaaS providers and agencies using US local long-code messaging, contact verification needs to become an explicit onboarding dependency. TCR’s October 15, 2026 document sets different Authentication+ deadlines by entity type: private companies and nonprofits can participate voluntarily from January 21, 2027, with mandatory verification starting April 29. Government brands face the earlier January requirement. Teams should therefore map each brand’s registered entity type before changing launch schedules, rather than treating January as a universal enforcement date or assuming a completed business identity check finishes the process. ([campaignregistry.com](https://www.campaignregistry.com/Assets/Authentication%2B%202.0-Feature%20Overview.pdf))

Published:10/26/2026 Updated:10/26/2026

1. Regulatory focus

This is a TCR industry onboarding requirement for 10DLC, not a newly enacted federal texting statute, and the October 15 document separates basic business identity checks from Authentication+ contact verification. Government entities become subject to mandatory verification on January 21, 2027; private companies and nonprofits can participate from that date but become subject to the requirement on April 29. For covered brands, creating a new campaign requires both an identity status of VERIFIED or VETTED_VERIFIED and an Authentication+ status of ACTIVE. Operationally, onboarding teams should treat those as two separate approval gates rather than one generic registration result. ([campaignregistry.com](https://www.campaignregistry.com/Assets/Authentication%2B%202.0-Feature%20Overview.pdf))

2. Business impact

The entityType field is an operational dependency, not a cosmetic business label: TCR applies specific classification rules to foreign government organizations, nonprofits and sole proprietors. Its developer documentation directs government organizations outside the United States to register as PRIVATE_PROFIT, limits SOLE_PROPRIETOR registrations to the United States and Canada, and provides separate eligibility conditions for nonprofit registration. These distinctions mean a company’s everyday legal description does not necessarily establish its TCR category. For overseas onboarding teams, the practical consequence is to confirm the category actually filed by the provider before scheduling a new OTP or order-notification campaign around a particular verification deadline. ([developer.campaignregistry.com](https://developer.campaignregistry.com/cadp/register-a-brand))

3. Operating recommendations

Create a brand onboarding register covering Brand ID, filed entity type, corporate-domain email, named contact and the mandatory date confirmed by the provider, with separate completion fields for business identity and contact verification. Existing provider instructions give the verification email a seven-day validity period and provide a resend mechanism, which makes mailbox ownership a concrete delivery dependency rather than an administrative detail. ([bandwidth.com](https://www.bandwidth.com/support/en/articles/12823088-brand-registration-authentication?utm_source=openai)) As an internal operating practice, assign a reminder on day three and escalation on day six, retain the provider’s written deadline confirmation, and require agencies to obtain a named client-side recipient before submitting the verification request.

Frequently Asked Questions

Our provider says every business must verify in January. Should we change our launch date?
Ask which entity type, document version and provider-specific cutoff the notice covers. Some September provider notices described January 21, 2027 as the broad expansion date, whereas TCR’s October 15 document makes April 29 the mandatory date for private companies and nonprofits. If your provider implements an earlier platform cutoff, obtain its scope in writing and schedule against that confirmed operational requirement. ([calltrackingmetrics.zendesk.com](https://calltrackingmetrics.zendesk.com/hc/en-us/articles/49282706299405-Telecom-Regulatory-Updates-October-2026?utm_source=openai))
Our brand contact uses Gmail. Can we upload an ID and complete verification now?
Do not collect identity documents preemptively. A September provider notice mentioned possible government-ID verification for personal or free email addresses, but TCR’s October 15 document says a separate free-email validation path will be disclosed later. Prepare a brand-owned corporate mailbox where possible, and ask your actual provider to confirm the supported workflow, document recipient and retention terms before requesting personal identification from a customer. ([calltrackingmetrics.zendesk.com](https://calltrackingmetrics.zendesk.com/hc/en-us/articles/49282706299405-Telecom-Regulatory-Updates-October-2026?utm_source=openai))
How should an agency prevent verification emails from delaying multiple client launches?
Confirm each client’s recipient, mailbox accessibility and expected completion date before initiating requests. Provider instructions give verification emails seven days of validity and allow resending, so avoid launching every client request before owners are ready. ([bandwidth.com](https://www.bandwidth.com/support/en/articles/12823088-brand-registration-authentication?utm_source=openai)) As an internal control, submit in readiness-based batches and track sent, awaiting customer action, resent and completed states, with one owner responsible for overdue requests and escalation.
This article is for informational purposes only and does not constitute legal advice.

Related products

Need compliance guidance?

Contact us for guidance on target markets, message scenarios, and sending routes.

Get in Touch
Privacy Policy