Authentication+

What is Authentication+?

In October 2024, TCR (The Campaign Registry) rolled out Authentication+, a new identity verification process designed to combat brand impersonation and fraud like smishing and spoofing. It adds an extra layer of security by verifying the identity of the brand representative registering for A2P 10DLC messaging. Right now, this feature is only available to Public Profit type brands, but in the future, TCR plans to roll this out to all customers.

What does this mean for me?

If your brand is a public profit brand, you'll be subject to new requirements for Authentication+:

• For new brands, you'll now complete the Business Contact Email field in the UI, or the businessContactEmail field for the API, when creating your brand.
• For existing brands, you can enter your Business Contact Email when editing your brand. If it's been over 30 days since your brand was created, you'll need to resubmit it to TCR. Please open a ticket with the Bandwidth Support Team to resubmit the brand on your behalf (we're adding the ability to self-service this soon).

After the Business Contact Email has been added, you'll receive an email from TCR with the subject "Action Required: Verify Your Email Address to Enable 10DLC SMS Messaging" that will look like this:

Follow the steps in this email to complete your Authentication+ verification. Each email is only valid for 7 days. If the email expires, please click the Authentication+/2FA button to resend it. 

Once Authentication+ is successfully set up, this button will grey out and your Identity Status will switch to Verified. Please open a ticket with the Bandwidth Support Team if you require further help with Authentication+.