{
  "id": "OPS-154",
  "slug": "ops-154",
  "title": "Where the numbers came from matters",
  "statement": "Volume must not originate from SIM boxes, SIM farms, or disposable, rental or temporary telephone numbers.",
  "rationale": "These are the origination methods that exist to be untraceable, so their presence is treated as evidence about the sender rather than about the traffic. The industry watches for ten or more activations by one party in a short window and a single location, which means a legitimate business scaling quickly through the wrong supplier can trip a fraud signal it never knew existed.",
  "layer": "OPERATIONAL",
  "layerSlug": "operational",
  "object": "originating number provenance",
  "severity": "BLOCKING",
  "detectability": [
    "EXTERNAL_DATA"
  ],
  "failureClass": "HARD_STOP",
  "authorities": [
    "CTIA"
  ],
  "applicabilityText": "Applies to every 10DLC registration.",
  "universal": true,
  "remediation": "Provision numbers through a licensed carrier or CPaaS in the brand's own name, and keep the assignment records. Refuse any supplier that cannot say who the numbers are registered to.",
  "notes": "Provenance held by whoever assigned the numbers. What the user has to establish is exactly that — who the numbers are registered to and how they were obtained — before volume makes the question urgent. OPS-021 is the ownership-documentation half.",
  "phase": "post",
  "automated": false,
  "attestation": {
    "question": "Who are your sending numbers registered to, and how were they obtained?",
    "howToCheck": [
      "Get the assignment records from whoever provisioned them.",
      "Refuse any supplier that cannot say who the numbers are registered to — that answer is the whole check.",
      "Provision through a licensed carrier or CPaaS in the brand's own name."
    ],
    "failureLooksLike": "Ten or more activations by one party in a short window from a single location is the industry's fraud signature. A legitimate business scaling quickly through the wrong supplier trips it without ever knowing it existed."
  },
  "url": "https://ekas.io/rules/10dlc/operational/ops-154/",
  "markdown": "https://ekas.io/rules/10dlc/operational/ops-154.md",
  "registry": "https://ekas.io/rules/10dlc/",
  "updated": "2026-07-25",
  "licence": "CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/"
}