A Call to Action: Stop the FCC's KYC Regime

322 points · 218 comments on HN · read original →

Points and comments are a snapshot, not live.

FCC's proposed Know Your Customer rules for phone service would require identity verification, creating surveillance risks without reliably stopping robocalls.

The FCC adopted a Further Notice of Proposed Rulemaking on April 30, 2026, seeking stronger KYC rules for voice providers. Proposed measures include verifying customer identities with government ID, name, address, and alternate phone numbers before enabling service. The article argues this dragnet approach harms ordinary users, including domestic violence survivors, journalists, and those avoiding retaliation, while criminals easily circumvent KYC via stolen identity markets. The proposal extends to prepaid service and contemplates consulting law-enforcement watchlists, multi-year retention of customer data, and per-call forfeitures up to $2,500. The author contends KYC weakens security by creating PII honeypots and enables SIM-jacking attacks. The comment deadline is June 25, 2026, with a template provided for public opposition.

What commenters are saying

The thread splits between those questioning KYC's effectiveness and those skeptical of the article's framing. Commenters cite Italy's mandatory mobile KYC since the early 2000s as evidence spam calls remain common, directly contradicting claims that KYC reduces illegal calls. Others note SHAKEN/STIR authentication was supposed to address caller ID spoofing but has stalled due to legacy system exceptions. One commenter proposes allowing callers to block unverified numbers by default without full KYC implementation. A practical note: Google Voice now requires identity verification for new numbers, already narrowing anonymous options.