10DLC – Brand Authentication+ 2.0 (Aug 2025) 10DLC – Brand Authentication+ 2.0 (Aug 2025)

10DLC – Brand Authentication+ 2.0 (Aug 2025)

Ezra Lizama

Applies to Public-Profit brands only
Private-Profit, Non-Profit and Government brands follow the usual identity / vetting flow.

Quick Access:

 

1. Preamble (what’s changing and why)

With the introduction of Authentication+ (also referred to as Auth+) released in October 2024, TCR added an additional Two-Factor Authentication (2FA) mechanism to verify Public-Profit brands. Learn more.

On August 7, 2025, The Campaign Registry (TCR) is launching Authentication+ 2.0 (Auth+).

With Auth+ 2.0, TCR has refined this process so that Auth+ verifications are unbundled from the basic identity check and it is mandatory for every Public-Profit brand, both new and legacy.

The goal is to prevent brand impersonation and downstream fraud such as smishing, spoofing, and disinformation by requiring a real employee at the brand to attest, via a one-time PIN email, that the brand is genuine.

Auth+ is mandatory for every Public-Profit brand—New or Legacy Brands:

  • New brands: Any brand you register through Vonage on or after 7 Aug 2025 must pass Auth+ before it can create campaigns.
  • Legacy cut-off: Every Public-Profit brand registered through Vonage before 17 Oct 2024 and has at least one campaign associated must complete Auth+ no later than 30 Oct 2025. After that date, you will not be able to create new brands or campaigns, and your 10DLC traffic may be suspended. 

 

2. Before vs. After (high-level flow)

Original Auth+ Process Flow 

The original Auth+ process flow combined the basic identity check with an Auth+ verification mechanism for Public-Profit brands.

New Auth+ 2.0 Process Flow

With Auth+ 2.0, the basic identity check is unbundled from Auth+ verification. The basic identity check runs automatically as soon as you submit a Public-Profit brand. Once the brand reaches "Verified" (or "Vetted Verified"), Vonage automatically sends an Auth+ vetting request for you. TCR then performs the extra Auth+ checks—confirming that the business-contact email domain matches the brand’s website and sending a one-time PIN email to complete the two-factor step.

 

3. How the new process works

  1. Brand submitted → TCR runs the basic identity check
  2. When the identity status is Verified and the entity type is Public-Profit → Vonage automatically requests Auth+ vetting on your behalf
  3. TCR sends a one-time PIN email to the verification email you entered
  4. When the employee clicks the link and enters the PIN, Auth+ status changes to Active
  5. Only then can you create campaigns (initially limited to Low-Volume Mixed until you request Standard or Enhanced vetting)


 

4. What you need to do

New Public-Profit brands (after 7 Aug 2025)

  • Enter a verification email that matches the brand’s website domain (e.g., acme.com → jane.doe@acme.com). Generic addresses such as info@, sales@, or free emails (Gmail, Outlook) will be rejected.
  • Tell the employee to watch for the TCR email and complete the one-time PIN within 7 days.

     

Legacy Public-Profit brands (created before 17 Oct 2024)

  • Add a valid verification email if the field is blank or generic in your brand registration details.
  • Complete the one-time PIN email before 30 Oct 2025. Until Auth+ status shows Active, you will be blocked from creating new campaigns, and your 10DLC traffic may be suspended. 

 

5. Fees 

Beginning August 1, 2025, TCR will be adding a new price for Auth + requests and appeals. Learn more. 

 

6. Reseller advice

If you register brands on behalf of customers:

  • Use a verification e-mail address that belongs to an employee at the customer’s company.
  • Warn the contact that they will receive a TCR e-mail and must act within 7 days, or the brand cannot be used.
  • Forward this article to your customer so they understand the steps.

     

 

7. Frequently asked questions

Q 1. Does Auth+ raise my messaging throughput?
A. No. Auth+ only confirms the brand is genuine. To unlock higher throughput or use cases other than Low-Volume Mixed, request Standard or Enhanced vetting after Auth+ is Active.

Q 2. What happens if I miss the 30 Oct 2025 deadline?
A. Your 10DLC traffic may be suspended if you are one of the legacy brands who hasn’t completed Auth+. A legacy brand is defined as a brand who registered before October 17, 2024 and has an active campaign. 

Q 3. The TCR email never arrived -- what can I do?
A. Check spam/junk; if still missing, please raise a request with support to initiate a resend of verification email.

Q 4. Can I appeal if my Auth+ request fails?
A. You need to raise a request with support to request an Auth+ vetting appeal. The price per appeal is US $11.

Q 5. How is Auth+ different from Standard / Enhanced vetting?
A. Auth+ is a fraud-prevention check (domain + email verification). Standard/Enhanced vetting is a credit-style risk score that determines your throughput tier.

Q 6. With the release of Authentication+ 2.0, can  I still create campaigns while Auth+ is Pending?
A. No. Campaign creation is enabled only when brand identity is verified and Auth+ compliant status = Active i.e Auth+ verification is complete.

Q 7. Does Auth+ apply to Private-Profit or Non-Profit brands?
A. No. Only Public-Profit entities require Auth+.

Q 8. What if I fail to click the verification e-mail within 7 days?
Please raise a ticket with Vonage support. Vonage can resend the email up to 30 days from the initial request. 

Q 9. What happens if the 30-day verification window expires with no action?
Auth + status changes to Failed. This now requires a new Auth+ verification request which Vonage will automatically submit in the background, and a new verification email will be sent to the verification email address.

Q 10. I updated the verification email after my brand passed Auth +. What happens now?
TCR automatically sets your Auth + status to Expired. Vonage will submit a fresh Auth+ request in the background  ($12.50 fee applies), and a new verification email will be sent to the updated address.

Q. I completed the Auth+ 2.0 process. But I still cannot create campaigns. What should I do?

If, after completing the entire Auth+ 2.0 process (identity verification and email verification), you are unable to create campaigns, please raise a support ticket with Vonage. Our team will evaluate your case and, if needed, ask for additional evidence before submitting an appeal on your behalf. The appeal fee is $11 and  applies at the time of submission, regardless of the appeal outcome.

Q 12. Where can I see that I’m Auth+ compliant?
Dashboard users
A visual Auth + badge is coming later this year. For now, the quickest way is to click Register new campaign:

  • If the button works, your brand’s Auth + status is Active.
  • If the button is blocked, follow the on-screen instructions to finish Auth + or contact Vonage Support.

API users
Use the GET /brands/{brandId} endpoint. Look at the field verification_email_completion_date.

  • If this field is populated and the brand’s identity_status is VERIFIED or VETTED_VERIFIED, Auth + is Active and you may create campaigns with the campaign APIs.
  • If the field is null, Auth + is still pending (or failed/expired) and any attempt to create a campaign will return an error until the verification email is completed.

Q 13. Does Auth + replace Standard or Enhanced vetting?
No. Auth + confirms the brand’s identity; it does not increase messaging throughput. You still need Standard or Enhanced vetting to unlock use cases beyond “Low Volume Mixed.”

Articles in this section