{
  "id": "OPS-152",
  "slug": "ops-152",
  "title": "One recognisable number per programme",
  "statement": "A business or programme should send from one primary, recognisable source number.",
  "rationale": "Recognition is the consumer's only defence against smishing: somebody who knows the number their pharmacy texts from can tell a fake from a real one. A programme that sends from a rotating set trains its own customers to accept messages from unfamiliar numbers, which is precisely the habit the industry is trying to break.",
  "layer": "OPERATIONAL",
  "layerSlug": "operational",
  "object": "programme to source number mapping",
  "severity": "MEDIUM",
  "detectability": [
    "EXTERNAL_DATA"
  ],
  "failureClass": "TERMINAL_EXTERNAL",
  "authorities": [
    "T-Mobile"
  ],
  "applicabilityText": "Applies to every 10DLC registration.",
  "universal": true,
  "remediation": "Send each programme from one number and publish it, so customers can recognise and save it. Done when a customer could tell you which number your texts come from.",
  "notes": "Sending configuration. What the user has to reconcile is this against any pool they operate — a pool is legitimate for capacity and still argues for one primary number per programme rather than a rotating presentation.",
  "phase": "post",
  "automated": false,
  "attestation": {
    "question": "Could a customer tell you which number your texts come from?",
    "howToCheck": [
      "Send each programme from one primary number and publish it so customers can recognise and save it.",
      "Reconcile this against any pool you operate: a pool is legitimate for capacity and still argues for one primary number per programme rather than a rotating presentation."
    ],
    "failureLooksLike": "A programme sending from a rotating set trains its own customers to accept messages from unfamiliar numbers — precisely the habit that makes smishing work."
  },
  "url": "https://ekas.io/rules/10dlc/operational/ops-152/",
  "markdown": "https://ekas.io/rules/10dlc/operational/ops-152.md",
  "registry": "https://ekas.io/rules/10dlc/",
  "updated": "2026-07-25",
  "licence": "CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/"
}