No site impersonating another service to collect credentials

JSONMarkdown

The requirementstatement

The brand website must not host or promote impersonation of a legitimate service in order to capture credentials, identity numbers or other sensitive data.

Severityseverity
BlockingBLOCKINGBreaking this rule gets the submission rejected. There is no partial credit.
When it bitesphase
Gates approvalapprovalGet this wrong and the brand or campaign is refused at registration.
What is checkedobject
crawled website content
Where it liveslayer
WebsiteWEBSITE
How Ekas settles itdetectability
AI · crawlCRAWL
Needs your live site or policy page fetched and read. Ekas crawls it the way a reviewer would.
What the fix involvesfailureClass
Hard stopHARD_STOP
Not remediable. Resubmitting will not help, and anyone offering to fix it is selling you a rejection.
Who requires itauthorities
TwilioCTIA
When it appliesapplicabilityText
Applies to every 10DLC registration.

Why this rule existsrationale

This is the phishing pattern the whole landing-page review exists to catch: a page that looks like a bank, a carrier or a delivery service, reached from a text message, collecting whatever the real one would ask for. It is judged from design and form fields together, because the copy alone is by construction indistinguishable from the genuine article.

How to fix itremediation

This cannot be registered. Where the brand is an authorised partner using another company's marks legitimately, state the relationship in visible page content and expect the registration to be reviewed by a person.

Provider rejection codescodes

The code you get back when this rule is what failed, and whether that provider lets you resubmit.

ProviderCodeResubmit
Twiliogen230960No

Notesnotes

CTIA A65-03 extends the same prohibition to brand impersonation on any message landing page or download, and A65-04 to promotion of illegal activity. Both are discharged here.

Rules you will hit next

6 other rules read crawled website content. Fixing one field to satisfy a single rule is how a resubmission trades one rejection for another, so read these before you change anything.

WEB-122No adult content on the site or any page it links toBlockingBLOCKINGWEB-123No hate-group brandBlockingBLOCKINGWEB-126No firearms, ammunition or explosives sales on the siteBlockingBLOCKINGWEB-127No tobacco or vape product content on the siteBlockingBLOCKINGWEB-128No cannabis, CBD, hemp or kratom content anywhere on the siteBlockingBLOCKINGWEB-129No gambling content on the siteBlockingBLOCKING

All website rules

WEB-135 is one of 93 website rules in the 915-rule 10DLC registry. Free to cite under CC BY 4.0.

Reading the rules is the easy part.

Ekas runs every rule that gates approval, 823 of these 915, against your registration before it reaches the carrier. It reads your site, your policy pages and your opt-in the way a reviewer would, and hands you the fix, not just the verdict.

Talk to UsHow 10DLC works