The 2FA PIN must be completed inside the vet's window

The requirementstatement

The business contact must complete the Authentication+ 2FA PIN within 30 days of the vet being submitted, or the vet must be re-submitted.

Severityseverity: BlockingBLOCKINGBreaking this rule gets the submission rejected. There is no partial credit.
When it bitesphase: Gates approvalapprovalGet this wrong and the brand or campaign is refused at registration.
What is checkedobject: the Authentication+ 2FA state
Where it liveslayer: BrandBRAND
How Ekas settles itdetectability: Post-submissionUNDETECTABLE_PRE_SUBMISSION; The subject does not exist yet at submission time: a reply window, an expiring PIN, a queue position. Reported with its deadline.
What the fix involvesfailureClass: Wait on someone elseTERMINAL_EXTERNAL; Needs an external system or a waiting period, such as IRS propagation, a vetting result, or a carrier queue.
Who requires itauthorities: TCRTwilio
When it appliesapplicabilityText: Applies when the brand is a public company.

Why this rule existsrationale

The window belongs to the vet rather than to the email, and it runs whether or not anyone saw the message — so a vet ordered before a quiet period expires quietly, and the fee goes with it. Public companies, whose contact is usually a senior person with a filtered mailbox, are the ones this catches.

How to fix itremediation

Tell the named contact the mail is coming, before it is sent, and get their confirmation that they have completed the PIN. Track the 30-day deadline from the order date rather than from the mail date. Done when the brand reports Authentication+ active.

Provider rejection codescodes

The code you get back when this rule is what failed, and whether that provider lets you resubmit.

Provider	Code	Resubmit
TCR	565	Yes
Twilio	21737	Yes

Check this yourselfattestation

No tool can settle this one for you. Here is the check, and what wrong looks like.

Has the named contact confirmed to you, in words, that they completed the PIN?

1Brief the contact before the vet is ordered, not after the mail is sent.
2Track the 30-day deadline from the order date, not from the mail date, and chase inside the first week rather than the fourth.
3Done when the brand itself reports Authentication+ active.

What wrong looks like: A vet ordered before a quiet period expires quietly, taking the fee with it. The contact is usually a senior person with a filtered mailbox who never saw the message.

Notesnotes

The window is 30 days for the vet and 7 for the emailed link inside it (BRD-227); both are live and neither is visible to us. What the user has to do is own the deadline themselves — brief the contact before ordering, and chase inside the first week rather than the fourth.

Rules you will hit next

Other brand rules at the same severity. A registration is judged as a whole, not rule by rule.

BRD-001A legal company name is required for every entity but a sole proprietorBlockingBLOCKING BRD-002Legal name must match the IRS record for the EINBlockingBLOCKING BRD-003Legal name must carry its exact entity suffix as filedBlockingBLOCKING BRD-008Legal name must not carry an appended personal name or roleBlockingBLOCKING BRD-009The legal name field takes the legal name, not the trading nameBlockingBLOCKING BRD-011A legal business name may back only one brand across the whole registryBlockingBLOCKING

All brand rules

BRD-226 is one of 196 brand rules in the 915-rule 10DLC registry. Free to cite under CC BY 4.0.