Week ending July 31, 2026

The KYC reply record closed Monday, and everyone who matters showed up on the deadline. What came in wasn’t a chorus — it was a three-cornered fight. The big carriers and their trade groups told the Commission to keep Know-Your-Customer flexible and risk-based and to drop the punitive add-ons; the consumer bar and fifty attorneys general told it to add teeth, including per-call penalties; and a wall of privacy and civil-liberties groups told it that gating phone access on identity documents is itself the harm. Sitting in the middle, unusually, was Numeracle — the one identity vendor willing to argue that both the “burden” camp and the “surveillance” camp are describing a system nobody should build. Meanwhile the all-IP cluster kept its momentum, with Inteliquent and Furchtgott-Roth both back in the interconnection dockets and both keeping 17-97 stapled to the transition.

The KYC reply round splits three ways, and the vendors are the interesting seam

The reply window on the April KYC FNPRM (FCC 26-27) closed July 27, and the trade-association filings read like a coordinated brief for restraint. USTelecom framed its reply as “strong support for the Commission’s efforts to combat illegal and unwanted robocalls while asking the agency to avoid adopting prescriptive, one-size-fits-all Know Your Customer (‘KYC’) rules,” and then itemized what it wants left out: “burdensome information collection mandates, reverification requirements, and a per-call base forfeiture for KYC rule violations.” In exchange it offered the Commission a trade — a “regulatory safe harbor from enforcement for providers that implement” agreed guidelines. NCTA sang the same note, arguing the record shows “substantial support for retention of a flexible and risk-based approach,” and — more usefully for anyone tracking who the flexible camp is aiming at — named names. It cast Numeracle as calling for “radical and burdensome expansions,” singling out the argument “that a consumer’s request to subscribe to phone service should trigger the same sort of vetting process as … obtaining a driver’s license, or acquiring a weapon,” and put the American Bankers Association in the same bucket. WISPA supplied the small-provider version of the case — “event-triggered and red-flag-driven re-verification achieves the Commission’s objectives without imposing blanket administrative burdens” — and the Cloud Communications Alliance worked the reseller-chain plumbing, arguing that where a non-facilities-based reseller serves the business customer, “it should perform the KYC,” not the wholesale carrier upstream of it.

On the other side, the consumer coalition led by the National Consumer Law Center — with Consumer Action, Consumer Reports, the National Association of Consumer Advocates, and the National Consumers League — asked for exactly the teeth the carriers want removed. Their reply argues “per-call penalties are necessary” and that “a regulatory safe harbor will undercut the effectiveness of a KYC Requirement,” the precise mechanism USTelecom offered as its olive branch. They anchored the urgency in enforcement reality, walking through state actions against foreign-origin robocall gateways — Indiana v. Startel, Ohio ex rel. Yost v. Jones (a Panamanian operation alleged to have placed “billions of illegal robocalls”), Vermont v. Access — to make the point that the fraud entering the U.S. network is coming through providers who never seriously vetted anyone. Fifty state attorneys general filed their own reply through NAAG on the same day, led by Connecticut’s William Tong, and it’s the cleanest statement of the origination-point theory in the record: because “the problem with illegal and fraudulent calls begins with the origination of the call,” originating providers are “the Principal Gatekeepers of the U.S. Voice Communications Network” and must “actually engage in meaningful KYC practices” as “the first line of defense.” The AGs want the Commission to strengthen — not soften — the mandate that providers “verify, retain, and re-verify customer information,” the exact reverification requirement USTelecom asked to drop. The community banks filed too, with the Georgia Bankers Association and a cohort of small institutions lining up behind stronger origination-point identity as a fraud-and-impersonation defense.

Then the third corner, which is the one this beat should watch most closely. A broad sign-on letter — the Center for Democracy & Technology, EPIC, the ACLU, EFF, Access Now, the Leadership Conference, and a dozen more — reframed the whole exercise as a privacy problem, warning that “conditioning phone access on providing identity documentation would impose severe privacy harms on all phone subscribers, and cut off vulnerable populations that lack these documents from an essential service.” The National Coalition on Black Civic Participation and the Black Women’s Roundtable filed a parallel warning about access effects on their communities. This is the fault line the Commission’s final order has to cross: the fraud-fighting case for identity at origination runs directly into the civil-liberties case against a documentary mandate, and there is no drafting trick that makes both sides fully happy.

Which is what makes Numeracle’s reply the most interesting filing of the week, because it tried to argue past the impasse rather than pick a corner. Keith Buell’s brief takes the civil-liberties objection head-on, quoting it — “A GOVERNMENT-ID MANDATE BUILDS A BREACH-READY DATABASE OF EVERY AMERICAN” — and then answering that “this objection targets a design that nobody should build,” insisting that “modern verification confirms an identity” without hoarding a national repository of documents. Its affirmative case is the one that matters for anyone working in signaling: the reason the name on the screen can’t be trusted, Numeracle argues, is that today’s network leans on “self-reported CNAM, unverified business names, name displays subject to spoofing, inconsistent onboarding, and attestation that attempts to prove number authorization with STIR/SHAKEN rather than entity identity.” That distinction — number authorization versus entity identity — is the whole argument. Numeracle’s point is that STIR/SHAKEN was never built to answer “who is this,” only “is this number authorized,” and that the branded-calling products the carriers already sell are a tacit admission that the market wants the former. And it folds the small-provider “burden without benefit” complaint back into the other half of the proceeding: “the half that is right points directly at the other half of this proceeding as the argument for Know Your Upstream Provider (KYUP), not against KYC.” KYC establishes identity at origination; KYUP requires each provider to “know the provider from which it accepts traffic,” so that “when traffic enters the United States, the gateway should know its upstream provider.” That’s the connective-tissue argument the RMD notice was reaching for last week, restated by a vendor with product in the fight.

The coalition dynamic from last week held into this one. On July 29 the American Bankers Association, NCLC, and ACA International — the same creditor-and-consumer-advocate joint front — took their TCPA revocation argument to Danielle Thumann in the Chairman’s office, tying the Ninth FNPRM in 17-59, the Seventh FNPRM in 17-97, and the moot-petitions housekeeping in 25-307 into one presentation. Banks and consumer advocates keep converging on mechanics even as they split on penalties.

The IP-transition cluster keeps its own clock, and 17-97 rides along again

The interconnection dockets didn’t slow down. Inteliquent, through Tamar Finn, refiled a corrected copy of its July 24 ex parte across WC 25-208, 25-304, and the newly visible WC 25-209 (“Reducing Barriers to Network Improvements and Service Changes”) — the correction was procedural, adding Marcus Maher from Commissioner Trusty’s office to the meeting exhibit, but the filing keeps Inteliquent’s IP-interconnection model in front of staff on a weekly cadence. Furchtgott-Roth’s economic team was back too, with an ex parte reporting a July 23 staff meeting across WC 25-208, 25-304, 25-311 — and, once again, Call Authentication Trust Anchor, WC 17-97. That last docket’s recurring presence on transition filings is the tell worth repeating: the people arguing about when TDM sunsets and what the default IP-interconnection framework should be keep pulling authentication into the same conversation, because STIR/SHAKEN has to survive the handoff to internet-model peering intact. Who signs, who attests, and how provenance carries across an agreement-less exchange is the identity question the transition can’t be separated from — the same seam the KYC and RMD dockets are working from the other end.

Honorable mentions

The Wireline Competition Bureau kept the high-cost machinery turning with a July 31 public notice (DA-26-810) and an accompanying data release in WC 10-90 — routine USF business under the legacy-service-retirement umbrella, alongside the usual run of small-carrier certification letters. On the FTC side, the in-window items sat just off this beat: a National Consumers League–led petition asking the Commission to prohibit unconsented marketing push notifications for wagering apps, and a joint FTC-and-states action against Hims & Hers for “deceptive and unlawful privacy practices” — the latter worth a bookmark for the digital-ID and health-data privacy thread even though it isn’t a voice or robocall matter.

Looking ahead

The KYC reply record is now fully closed, and the Commission is holding an Open Meeting on August 6 — worth watching whether a KYC order or anything from the robocall cluster surfaces on the agenda, and whether the final rule lands closer to USTelecom’s flexible/risk-based ask or the NCLC/AG demand for per-call penalties and no safe harbor. The privacy coalition’s documentary-mandate objection is now on the record in force, so watch how the drafters thread it. In the IP cluster, Furchtgott-Roth’s grading of the competing interconnection proposals is still waiting for anyone to answer it on the merits, and Inteliquent’s weekly ex parte cadence suggests the interconnection-model fight is heating up rather than settling. And keep an eye on whether Numeracle’s entity-identity-versus-attestation framing draws a direct reply from the carriers who’d rather keep KYC and branded calling in separate lanes.