CNMC imposes mandatory registration deadline for commercial SMS aliases to prevent fraud
Executive summary: The CNMC announced that companies, public administrations, and other organizations must register their commercial aliases in the official database by Tuesday, September 15, to avoid message blocking. The measure is designed to enhance security and prevent identity theft/scams in mobile messaging, but poses an immediate operational risk for unregistered businesses.
Who is involved: CNMC (regulator), telecommunications companies (enforcers), commercial enterprises, public administrations.
Likely next: Telecommunications operators will begin blocking non-compliant commercial SMS/RCS senders starting September 16.
Spain's National Commission for Markets and Competition (CNMC) has established a firm September 15 deadline for businesses to register their commercial SMS sender aliases in a centralized database, a measure designed to curb the rising tide of smishing attacks that exploit unverified sender identities. The regulator's decision to mandate blocking of unregistered aliases by telecommunications operators marks a significant escalation in consumer protection efforts, shifting the burden of verification onto the messaging ecosystem itself. With only 13,565 companies registered as of mid-August — a fraction of the total businesses using commercial messaging — the compliance gap suggests widespread operational disruption is imminent if adoption does not accelerate rapidly. The requirement affects SMS, MMS, and RCS channels critical for banking alerts, logistics notifications, and marketing campaigns. Non-compliance risks not only message delivery failures but also reputational damage as customers grow wary of unverified communications. Telecommunications operators face implementation costs and potential liability for enforcement gaps, while enterprises must audit their messaging workflows and coordinate with providers to ensure alias registration before the cutoff. In the near term, a surge in last-minute registrations is likely, potentially overwhelming the CNMC's processing capacity and creating a bottleneck. The regulator may face pressure to extend the deadline or implement a phased enforcement, though its public stance indicates strict adherence. Market participants should prioritize immediate registration and validate delivery routes to avoid service interruptions starting mid-September.
What's next — scenarios
Base: Widespread compliance by large firms; SME disruption (60%)
Large corporations maintain communication channels; small businesses face temporary loss of mobile marketing reach.
- Registration numbers remain below 20,000 by Sept 15
Upside: Rapid SME adoption via automated tools (25%)
Minimal impact on business continuity as technical tools facilitate rapid registration.
- Significant spike in registrations in the final 48 hours
Downside: Massive blocking of legitimate commercial traffic (15%)
Widespread disruption of customer service and marketing communications across the Spanish economy.
- Large volume of error reports from registered but unrecognized senders
What to watch
- Registration volume reported by CNMC post-Sept 15 deadline
- Reports of service disruption from SMEs and public administrations
- Official guidance from major telecom operators regarding blocking implementation
Timeline
- — La CNMC bloqueará los SMS comerciales con alias no registrados en su base de datos (Expansión)
- — Solo 13.565 empresas han registrado su alias para frenar las estafas por SMS (El País — Economía)
- — La CNMC urge a las empresas a registrar sus alias a 15 días del bloqueo de SMS comerciales (El País — Economía)
- — Bloß keine Daten übermitteln: Steuerverwaltung warnt vor betrügerischen E-Mails und SMS (Handelsblatt)
Analysis — what this means
Likely next events
- Deadline for alias registration: September 15, 2026
- Implementation of message blocking: post-September 15, 2026
Sectors affected
- Telecommunications
- Digital Marketing
- Retail/E-commerce
- Public Administration
Regulatory implications
- Mandatory identity verification for mobile messaging under CNMC oversight
- Enforcement of sender authenticity to curb fraudulent SMS/RCS content
Historical parallels
- CNMC regulation of Cellnex TDT business (2026)
- CNMC sanctions against Movistar Plus for accessibility breaches (2026)
Key entities
Sources
- La CNMC bloqueará los SMS comerciales con alias no registrados en su base de datos — Expansión
- Solo 13.565 empresas han registrado su alias para frenar las estafas por SMS — El País — Economía
- La CNMC urge a las empresas a registrar sus alias a 15 días del bloqueo de SMS comerciales — El País — Economía
- Bloß keine Daten übermitteln: Steuerverwaltung warnt vor betrügerischen E-Mails und SMS — Handelsblatt
Related cases
- CNMC launches review of Cellnex's total dominance over Spain's TDT market
- CNMC orders Adif to free up goods‑terminal siding capacity within three months
- Spain’s CNMC moves to free Cellnex from TV‑broadcast regulation, completing sector liberalization
- CNMC fines Movistar Plus €209,250 for 18-month failure to provide subtitles and sign language on football channel
- Spain’s electricity regulator is scrutinising ~20 power retailers for possible illegal phone‑based contracts, testing the enforceability of a February telemarketing ban
- Spain's competition authority signals heightened scrutiny of banks' mortgage practices