# BRD-099 — The address is checked against spam and scam complaint data

> The registration address must not appear in known spam or scam complaint data.

- **Rule ID:** BRD-099
- **Layer:** Brand (`BRAND`)
- **Checks:** `brand.street`
- **Severity:** BLOCKING — Breaking this rule gets the submission rejected outright.
- **When it bites:** Gates approval — get this wrong and registration is refused
- **How it is detected:** External record we cannot query — reported as a warning to verify
- **Fix type:** Wait on an external system or a required interval
- **Required by:** Sinch
- **Applies:** Applies to every 10DLC registration.
- **Canonical URL:** https://ekas.io/rules/10dlc/brand/brd-099/

## Why this rule exists

Fraudulent registrations cluster at a small number of addresses — virtual offices, mail forwarders, addresses reused across dozens of shell brands — so the address itself is screened against complaint intelligence. A legitimate business at a shared or virtual office can inherit that history without ever knowing about it, and the rejection gives no reason a business could act on.

## How to fix it

Where a rejection points at the address, move the registration to the physical premises the business actually occupies rather than to a registered-agent or virtual-office address. Where the business genuinely has no other address, expect to appeal with evidence of occupancy — a lease or a utility bill.

## Provider rejection codes

| Provider | Code | Resubmission allowed |
| --- | --- | --- |
| Sinch | `CR2023` | no |

## Check this yourself

**Is this the physical premises the business occupies, rather than a virtual office, mail forwarder or registered-agent address?**

1. Establish what kind of address this is. Fraudulent registrations cluster at addresses shared across dozens of unrelated shell brands, and the screening is against that history rather than against you.
2. Where the business genuinely has no other address, have evidence of occupancy ready for an appeal — a lease or a utility bill.

*What wrong looks like:* A legitimate business at a shared virtual office inherits a complaint history it never knew about, and the rejection gives no reason it could act on.

## Notes

Threat-intelligence data we do not hold. The user cannot check this in advance; what they can do is avoid the pattern that triggers it, which is registering at a mail-forwarding or virtual-office address shared with unrelated brands.