The FCC's plan to end phone anonymity, on 404 Media

On the 404 Media podcast, Joseph Cox walks through the FCC’s proposal to require voice providers to collect, verify, and store every new and renewing customer’s full name, physical address, and government-issued ID number. The Commission pitches it as a robocall measure, but — as Cox notes — it has also said the data would be useful for other purposes. Critics, the EFF among them, read that as a de facto national phone registry.

This is the know-your-customer question that has lived on the carrier-onboarding and numbering side now landing on the consumer phone plan itself. The downstream effects are the interesting part: it reshapes prepaid and burner economics, and a verified-identity store at every provider is also a far richer SIM-swap target than what exists today. The EFF’s objection is the familiar one — anyone seriously running scams “will have no trouble creating fake documentation or identities,” so the people most reliably identified are ordinary subscribers, including the privacy-conscious and domestic-abuse survivors the proposal sweeps in.

It’s a clean illustration of the recurring KYC tension: identity mandates bind the compliant and route around the adversary, and privacy is genuinely tricky to get right. But the proposal also underscores a distinction worth being precise about — a consumer’s relationship to a phone number is categorically different from a business’s, and so is the privacy interest attached to it. A blanket mandate that treats every subscriber as a single registry row is at once over-broad for people and under-specified for enterprises. Discriminating those cases — tying attestation to the right kind of identity for the right kind of caller — is exactly the problem we’re working to make legible in the STIR trust framework and VESPER.

Watch the Regulatory Watch dispatches as comments land in the docket.