The Federal Communications Commission (FCC) is exploring new "know your customer" rules that could significantly alter how Americans obtain phone service, potentially making it more difficult to acquire phones without direct ties to personal identification. The proposed regulations aim to curb the proliferation of scam calls and robocallers by requiring voice providers to collect and retain more extensive customer information.
Under consideration is a mandate for phone companies to obtain and keep records such as a customer's name, physical address, government-issued identification number, and an alternate phone number before granting or renewing service. The FCC is also examining the scope of these requirements, including whether they should apply to new accounts, customers switching plans, or those renewing existing services. For high-volume users, including some businesses and international customers, the agency is considering requiring information on the intended use of the service and the IP address used for calls.
Rationale Behind the Proposal
The FCC's stated goal is to impede scammers and criminals who exploit phone networks to defraud individuals. The agency believes that enhanced identity verification could make it harder for malicious actors to access phone services and provide investigators with better data to track down those responsible for fraudulent activities. Beyond scam calls, the FCC also suggests that stronger record-keeping could aid law enforcement in investigating a broader range of crimes, including national security threats and abuses within text messaging networks.
Potential Impact on Prepaid and Private Phone Use
While the proposal does not explicitly ban "burner phones"—prepaid or lightly-identified phone lines—its practical implications could be substantial. Such phones are often used by individuals seeking privacy or safety, including domestic abuse survivors needing untraceable communication, journalists protecting sources, or whistleblowers. If phone companies are required to collect government ID and physical addresses, obtaining anonymous or less-identified prepaid service could become considerably more challenging. Privacy advocates suggest this could represent a fundamental shift in how individuals access basic phone service.
The FCC is specifically questioning whether prepaid and postpaid customers should face different identity verification standards, acknowledging that prepaid service has historically offered an easier entry point for obtaining a working phone without extensive signup processes. A strict rule could transform the acquisition of prepaid service into a process akin to opening a bank account, which may present significant hurdles for those prioritizing privacy or facing logistical challenges with traditional identification.
Privacy and Cybersecurity Concerns
Beyond the practical challenges for users, the proposed rules raise significant privacy and cybersecurity concerns. Collecting more sensitive data, such as government ID numbers and physical addresses, would make telecom databases more attractive targets for hackers. A data breach could expose customers to phishing, identity theft, SIM-swap attacks, and stalking. While the FCC is considering data protection and retention periods, critics argue that collecting such sensitive information inherently creates a liability.
Furthermore, the definition of a "physical address" is under scrutiny. The FCC is asking whether P.O. boxes, shared office locations, or mail service addresses would suffice. This detail could disproportionately affect individuals without traditional home addresses or those who use alternative mailing solutions for safety or business reasons, potentially limiting their access to essential communication services.
Next Steps
The FCC is currently accepting public comments on the proposal until June 25, 2026, with reply comments due July 27, 2026. Following this period, the agency will review feedback from various stakeholders, including phone companies, law enforcement, privacy groups, and consumer advocates. The final rule could be modified, potentially including narrowed requirements, additional privacy safeguards, or specific exceptions, before it is implemented.