On the First of July, Every Text Message in Australia Was Asked to Show Its Papers

Q: Does a registered name mean the text is safe?

It means the name is genuine. It doesn't vet the request. No urgent links, no codes read aloud, no payment changes on the strength of a text alone.

Q: Is it worth setting up a branded sender ID if I don't have one?

Often, yes. A recognisable name builds familiarity in a way a bare number can't, and under the register that name now arrives verified on every text. Talk to your SMS or booking provider about setting one up and registering it in the same conversation.

Q: How do I register my sender ID?

Through your telco or messaging provider, not through the ACMA directly. They verify you have a genuine claim to the name, usually by matching your registered business name or trademark. ABN holders need current contact details on the Australian Business Register first.

By The Most Secure Man Alive | WISECLICK Ambassador

On the first of July, every text message in Australia was asked to show its papers.

There were no sirens. No breathless segment on the evening news. Just a small grey word — Unverified — quietly appearing at the top of certain text messages around the country, and a great many people wondering whether their phone had developed an opinion.

A physiotherapist I know noticed it the practical way: a client asked why the practice's reminder texts suddenly looked suspicious. She hadn't changed a thing. The country had.

Have a scroll through your own messages this week — there's a fair chance the label has already visited you, and you filed it under "odd" and moved on.

What changed

Some texts arrive from a phone number. Others arrive wearing a name — your bank, your energy company, the practice reminding you about Thursday at ten. That name is called a branded sender ID, and until this month, anyone could wear anyone's. A scam text dressed as a bank would land in the bank's real thread, wearing the bank's real name. The costume was the entire con.

On 1 July, the Australian Communications and Media Authority switched on the SMS Sender ID Register. Organisations that send texts under a brand name now register that name, and the telcos check every message against the list. A registered name keeps appearing as itself. An unregistered one gets stamped Unverified — and filed into a single shared thread with all the other unverified traffic, away from the brands it might be imitating.

The scammers spent years borrowing other people's names. This month, the country asked everyone for ID.

For once, the infrastructure moved before the criminals did. I raised an eyebrow. Approvingly.

How to read the label

One pass, and I'll keep it honest, because the label is useful only if you read it precisely.

Unverified means exactly one thing: the name isn't registered. That might be a scammer in a costume. It might be an honest salon that hasn't done the paperwork. So you don't panic at the label — you look at what the message is asking. A link to tap urgently, a payment to fix, a code to read back: that's the tell, same as it ever was.

A registered name means the sender proved a genuine claim to it. It says nothing about their intentions. The register checks the name on the door, not the person knocking.

The label changed. The habit that keeps you protected didn't.

The half of the story nobody is telling small business

Back to the physio — because plenty of businesses send branded texts without ever thinking of themselves that way. Appointment reminders through practice software. Booking confirmations through an SMS platform. "Your quote is ready" from the job-management app. If those go out under your business name rather than a number, that name now belongs on the register — or your messages travel in the same thread as every scam text your clients have ever received.

The honest physio and the scammer now share a waiting room. Only one of them has somewhere better to be.

The fix is smaller than it sounds, and it isn't done through the ACMA directly. Registration runs through your telco or messaging provider — the company your texts actually travel through — and they confirm you have a genuine claim to the name, such as it matching your business name or trademark. One piece of housekeeping: if you have an ABN, your authorised contact details on the Australian Business Register need to be current before the registration can go through.

And if you text clients from your own mobile number — no brand name at the top — none of this touches you. Carry on.

Though here's the quiet upside, while we're on the subject. A branded name at the top of a text was always good for business — clients recognise you before they've read a word, and a reminder from Smith Physio carries more weight than one from an anonymous number. The register just made that name worth more. It now arrives verified — checked by the telco on every single message before your client ever sees it. For years, the case for branded SMS was "it looks professional." As of this month, it also ships with the country's checking service attached.

A verified name, on every message, at no extra cost. There are worse deals going.

As for the physio — one email to her booking software, the name registered within the week, and her reminders went back to being boring. Which is exactly what a reminder should be.

Three things worth doing this week — none of them cost a dollar

1. Learn the calm read. Unverified means unregistered, nothing more. Judge any message by the request it carries, not the label it wears.

2. If you send branded texts, ask your provider one question. "Is my sender ID registered with the ACMA?" Not sure who your provider is? Start with the software that sends the texts — your booking system, job-management app, or SMS platform. If the answer is yes, you're done. If no, ask them to register it — that's their job under the new rules, and the big end of town has already been through the queue.

3. Spend five minutes on the ABR. Confirm your authorised contact details are current, so the registration has nothing to trip over. The least glamorous five minutes of your week, and the most useful.

Why I like this register more than I expected to

Look at how it actually works. The business registers its name once. The telcos check every message, forever, in the background. The person holding the phone keeps one small habit. Nobody had to become an expert. Nobody got homework. The protection happens because somebody trustworthy is doing the checking for you — quietly, on every single message.

That arrangement is the whole reason WISECLICK exists. Not a product you buy and shelve — a membership. You run the business; we watch the doors. The register handles one door out of many, and the others — your email, your logins, your backups, the way money gets approved — deserve the same treatment: someone in your corner, checking quietly, all the time.

Protection, I've found, isn't something you take on. It's something you finally get to put down.

See where you stand. 30 minutes. Plain English. $149.

Take the Ransomware Readiness Check →

Your texts are one door. The Check walks all eight.

Somewhere in Australia tonight, a scammer is discovering that his best costume no longer fits. I find no urgency in any of this — only a quiet satisfaction, and two small jobs for anyone who sends texts under their own good name.

Stay protected, my friends.
— The Most Secure Man Alive

Frequently asked questions

What does "Unverified" on a text message actually mean?

The sender used a brand name that isn't on the ACMA's SMS Sender ID Register, so the telco stamped the message instead of showing the name. It says nothing about the content of the message.

So is an Unverified text a scam?

Not automatically. It might be an impersonation, or a legitimate organisation that hasn't registered yet. Either way: don't tap its links. If it claims to be from a company you deal with, go to them directly through their app or website.

Does a registered name mean the text is safe?

It means the name is genuine. It doesn't vet the request. The old habits stand — no urgent links, no codes read aloud, no payment changes on the strength of a text alone.

My business sends appointment reminders by text — does this apply to me?

If the reminders show your business name at the top instead of a phone number, yes. Ask your SMS or booking provider to register your sender ID; unregistered names are now labelled and grouped with the rest of the unverified traffic.

I text clients from my normal mobile number. Do I need to register?

No. The register applies to branded (alphanumeric) sender IDs only. Ordinary phone numbers aren't affected.

Is it worth setting up a branded sender ID if I don't have one?

Often, yes. A recognisable name at the top of a message builds familiarity in a way a bare number can't — and under the register, that name now arrives verified on every text. Talk to your SMS or booking provider about setting one up and registering it in the same conversation.

How do I register my sender ID?

Through your telco or messaging provider — not through the ACMA directly. They verify you have a genuine claim to the name, usually by matching your registered business name or trademark. ABN holders: your Australian Business Register contact details need to be current first.

Why are all my Unverified texts in one thread?

Deliberate design. Grouping unregistered traffic keeps it out of the threads of the real brands it might be imitating — and gives you one place to be appropriately sceptical.

Will Unverified messages eventually be blocked?

For now the system labels rather than blocks while the register grows. A registered name is the only way your messages keep appearing as you — reason enough for legitimate senders to sort it early.