FCC Proposed KYC Rules for Voice Service Providers

The FCC is proposing mandatory identity verification for all phone users

The Federal Communications Commission (FCC) is considering the implementation of "Know Your Customer" (KYC) rules that would require voice service providers to collect and verify the identity of customers before granting or renewing phone service. While framed as a measure to combat the proliferation of illegal robocalls and scam calls, the proposal would effectively end the ability of users to obtain anonymous or pseudonymous phone service in the United States.

On April 30, 2026, the FCC adopted a Further Notice of Proposed Rulemaking to explore stronger KYC requirements. The proposed measures include requiring providers to verify names, physical addresses, government-issued IDs, and alternate phone numbers. This rulemaking was approved by Chairman Brendan Carr and Commissioners Gomez and Trusty.

Critical risks to privacy and security

Implementing KYC for telecommunications creates significant vulnerabilities for both individual users and the broader communication infrastructure.

Elimination of burner phones and anonymous access

Prepaid "burner" phones serve as essential tools for vulnerable populations. The FCC proposal specifically questions whether KYC requirements should apply to prepaid services purchased through third-party vendors. Removing anonymous access to phone service could harm:

  • Domestic violence survivors seeking safe communication.
  • Whistleblowers and journalists protecting confidential sources.
  • Political organizers and protesters avoiding retaliation.
  • Low-income individuals who may lack the necessary documentation for strict verification.

Increased vulnerability to SIM swapping and identity theft

Requiring providers to store sensitive personally identifiable information (PII) creates "honeypots" for cybercriminals. Tying a phone account directly to a government ID increases the risk of SIM swapping (or SIM jacking), where an attacker uses stolen PII to impersonate a user and take over their phone number. Because many financial and email accounts use phone numbers for two-factor authentication, this can lead to a total compromise of a user's digital identity.

Surveillance and mission creep

The FCC proposal suggests that these rules could be used for purposes beyond stopping robocalls. The agency has asked whether providers should consult law-enforcement watchlists of "criminal persons" or terrorists before granting service. Furthermore, the FCC is considering requiring providers to retain KYC records for up to four years after a customer relationship ends, extending the window for data breaches, subpoenas, and government surveillance.

Analysis of the KYC efficacy and alternatives

Critics argue that KYC is "security theater" that fails to stop determined criminals while burdening lawful users.

Failure of KYC in financial systems

Evidence from the banking sector suggests that KYC does not reliably stop money laundering or organized crime, as criminals frequently use stolen identities or purchase fraudulent documents to bypass verification checks.

Proposed technical alternatives

Rather than identity verification, technical and regulatory alternatives could target the source of the problem without compromising user privacy:

  • Stricter Caller ID enforcement: Preventing caller ID spoofing at the carrier level.
  • Enhanced Attestation: Using protocols like STIR/SHAKEN to ensure calls are dropped by default if they lack high-level attestation (A-level).
  • Targeted Enforcement: Focusing on high-volume commercial origination, SIM-box abuse, and providers that knowingly enable illegal traffic.
  • "Know Your Company" models that provide recipients with intelligence about the originating organization rather than the individual user.

Public comment period and action

This is a proposed rule, not a final mandate. The public can submit comments to the FCC to oppose these measures.

  • Comment Deadline: June 25, 2026
  • Reply Comment Deadline: July 27, 2026
  • Docket Number: 17-59

"I oppose any FCC rule that would require ordinary phone users, including prepaid users, to provide government-issued identification numbers, identity documents, physical addresses, alternate phone numbers, or similar personal information as a condition of obtaining or renewing phone service."

Users submitting comments should be aware that FCC filings are public and any personal information included in the text of the submission will be viewable online.

Sources