Key Facts
- The KYC FNPRM is a proposal, not a final rule: The FCC is evaluating potential customer-verification requirements through the rulemaking process.
- Customer identity is the focus: The proposal centers on verifying the identities of entities receiving communications services.
- The FCC is emphasizing accountability: Providers may be expected to better understand who is using their services and why.
- Fraud prevention is a primary objective: The proposal is intended to help reduce illegal robocalls, spoofing, and other forms of communications abuse.
- Documentation and due diligence are recurring themes: The FCC is exploring more structured approaches to customer verification and recordkeeping.
- The proposal builds on existing industry practices: Many providers already perform some level of KYC, but standards vary significantly.
- The FNPRM reflects a broader trust movement: Identity verification is increasingly being treated as core telecom infrastructure rather than a compliance exercise.
- Numeracle's KYCaaS Solution addresses the needs proposed in the FNPRM for ongoing rigorous identity vetting
TL;DR
A Proposed Expansion of Customer Identity Verification
The Know Your Customer (KYC) FNPRM is a Further Notice of Proposed Rulemaking issued by the FCC to gather feedback on whether voice service providers should adopt more formal customer-verification and identity-management practices.
The proposal stems from a growing recognition that many fraud-prevention efforts begin long before a call enters the network. If providers do not know who their customers are, it becomes more difficult to prevent bad actors from acquiring phone numbers, voice services, and communications resources that may later be used for fraud, spoofing, or illegal robocalling.
Rather than focusing on individual calls, the KYC FNPRM focuses on the identities behind those calls.
Building on Existing Industry Practices
Most providers already perform some level of customer verification. The challenge is that those processes vary significantly from provider to provider. Some organizations conduct extensive vetting and documentation reviews, while others rely on lighter-touch onboarding processes. The FCC is evaluating whether stronger and more consistent identity-verification expectations would help improve accountability throughout the communications ecosystem.
Identity Is Becoming a Core Trust Signal
The communications industry has historically focused on network connectivity, routing, and service delivery. Today, regulators and industry participants are increasingly focused on trust. The FCC's proposal reflects a broader belief that caller authentication, traceback, reputation management, and anti-fraud initiatives all become more effective when providers can confidently identify the entities using their services. Verified identity is increasingly viewed as foundational infrastructure rather than simply a compliance obligation.
Part of a Larger Identity Strategy
The KYC FNPRM is one piece of a broader movement toward greater identity accountability throughout communications.
Related initiatives include:
- Caller authentication and STIR/SHAKEN
- Know Your Upstream Provider (KYUP)
- Caller identity proposals
- Robocall mitigation requirements
- Traceback and enforcement initiatives
Together, these efforts reflect an industry-wide push toward greater transparency and accountability.
How It Works
How It Works
The FCC Is Seeking Public Input
An FNPRM is not an enforceable regulation. IInstead, it is part of the FCC's rulemaking process that allows stakeholders to provide information, recommendations, and feedback before any final requirements are adopted. Providers, enterprises, industry organizations, and consumer advocates all have opportunities to participate in that process.
Customer Verification Requirements Are Being Evaluated
The FCC is exploring whether providers should be expected to:
- Gather more customer information
- Verify business identities more rigorously
- Maintain consistent documentation
- Assess customer risk
- Support ongoing due diligence
The exact scope of any future obligations remains under review.
Identity Management Extends Beyond Onboarding
A recurring theme throughout industry KYC discussions is that identity verification should not stop once an account is activated. Businesses evolve. Ownership structures change. Communications programs expand. Risk profiles shift.
As a result, many industry participants are moving toward ongoing identity management models that continuously validate customer information throughout the customer lifecycle.
Why This Matters
Why It Matters
Fraud Prevention Starts With Verified Identity
Many forms of communications fraud begin with weak or nonexistent identity controls. When providers cannot confidently verify who is receiving telecom services, it becomes easier for bad actors to acquire communications resources that can later be used for fraud, scams, spoofing, and other harmful activities. The KYC FNPRM reflects the FCC's view that stronger identity controls may help reduce those risks before they ever reach consumers.
Providers May Face New Operational Expectations
If adopted, future KYC requirements could affect:
- Customer onboarding
- Compliance programs
- Documentation policies
- Risk management procedures
- Audit preparedness
- Customer monitoring practices
Organizations that already maintain structured identity-verification programs may be better positioned to adapt to future regulatory changes.
Preparing for a More Identity-Driven Future
The KYC FNPRM reflects a broader shift toward verified identity, documented accountability, and continuous due diligence. Whether or not the FCC adopts every aspect of the proposal, the industry direction is becoming increasingly clear: providers are expected to know who they are doing business with and maintain evidence supporting those decisions.
This is one reason many providers are moving beyond one-time onboarding reviews and adopting continuous identity-management programs. Numeracle's KYCaaS (Know Your Customer as a Service) solution helps providers verify business identities, assess risk, maintain documentation, support reverification efforts, and operationalize KYC at scale. By turning identity verification into an ongoing process rather than a one-time event, providers can reduce manual compliance burdens while strengthening fraud prevention, accountability, and regulatory readiness.
Common Questions
Is the KYC FNPRM a law?
No. The KYC FNPRM is a proposed rulemaking, not a final regulation. The FCC is gathering industry feedback before determining whether additional KYC requirements should be adopted. Any future obligations would require further action before becoming enforceable rules.
How is the KYC FNPRM different from the KYUP FNPRM?
The KYC FNPRM focuses on verifying direct customers who receive telecom services. The KYUP FNPRM focuses on providers and partners that introduce traffic into a provider's network. Together, they address different layers of identity accountability within the communications ecosystem.
Why is the FCC focused on customer identity?
The FCC increasingly views identity verification as a necessary complement to caller authentication and robocall mitigation efforts. Understanding who is receiving telecom services helps reduce opportunities for fraud and provides greater accountability throughout the voice ecosystem.
What should providers do while the rulemaking is ongoing?
Providers can review existing customer-verification processes, identify gaps in documentation or monitoring, evaluate risk-management procedures, and consider whether current KYC programs can support stronger future requirements. Many organizations are already implementing more structured approaches through solutions such as KYCaaS to prepare for evolving expectations around identity accountability and compliance.
Our platform empowers organizations to manage branded calling, improve caller id reputation, and stay compliant with evolving regulatory and industry standards. FAQs like this are designed to provide clear, actionable guidance backed by our expertise in verified identity, call labeling mitigation, and spam prevention.
To explore how Numeracle supports trusted and effective outbound communications, visit www.numeracle.com.
