Urgent Update: Strengthen Your DLT Security Protocols as Per TRAI Directives
At SMSGatewayCenter, we prioritize the security and compliance of our clients’ messaging operations. In light of recent directives from the Telecom Regulatory Authority of India (TRAI), we’re sharing an important update to enhance the safety of your Distributed Ledger Technology (DLT) platform accounts and data. This action is critical following a recent security incident and aims to ensure a secure messaging ecosystem for all Principal Entities (PEs) and Telemarketers (TMs).
Critical Security Incident and TRAI’s Response
A recent breach involving a rogue Telemarketer (TM) in Jammu & Kashmir highlighted vulnerabilities in the system. The TM misused a Principal Entity’s (PE) account to send unauthorized and objectionable messages to subscribers. To prevent such incidents and strengthen DLT operations, TRAI has issued immediate directives that all PEs and TMs must follow. Below, we outline the necessary actions to secure your accounts and ensure compliance.
Immediate Actions Required for All PEs and TMs
To safeguard your DLT platform access and prevent unauthorized usage, we urge all clients to take the following steps without delay:
Update Your DLT Platform Passwords
To enhance account security, all PEs and TMs must update their DLT access passwords immediately. This must be completed within 48 hours—by May 15, 2025. Here’s what you need to know about the new password policy:
- Password Complexity: Your new password must be at least 8 characters long and include a mix of uppercase letters, lowercase letters, numbers, and special characters.
- Password Expiry: Passwords will now expire every 90 days after being set, requiring regular updates to maintain security.
- Account Lockout: If you fail to update your password by May 15, 2025, your account will be temporarily blocked, and you’ll be prompted to reset your password.
- Multi-Factor Authentication (MFA): MFA will now be mandatory for all accounts. You’ll need to enable MFA, adding an extra layer of protection during login.
- Password History: You cannot reuse any of your previous 5 passwords. This rule prevents the recycling of old passwords that could be compromised.
Daily Monitoring of SMS Traffic
To ensure your Telemarketers aren’t misusing your headers or templates, you must monitor and reconcile your daily SMS traffic volumes with your TMs. This step helps detect any unauthorized activity, such as a TM sending messages without your approval. Additionally, never share your login credentials with others, as this could lead to misuse of your DLT account and potential regulatory issues.
Suspend Inactive Headers and Templates
All Headers and Content Templates (CTs) that have been inactive for over 90 days will be suspended immediately. This ensures that unused resources aren’t exploited. To maintain active Headers/CTs, use them regularly or at least periodically. If any of your Headers/CTs are suspended and you wish to reactivate them, please contact us at contact[at]smsgatewaycenter[dot]com.
Review Active Headers, Templates, and Call-To-Actions
We strongly recommend conducting a thorough audit of all your active Headers, Content Templates, and Call-To-Actions. This review will help identify and address any potential vulnerabilities that could be exploited for misuse, ensuring your messaging aligns with TRAI’s standards.
Why Compliance Matters
Adhering to these TRAI directives is essential for maintaining the integrity of your messaging operations on the SMSGatewayCenter Unify platform. Failure to comply may result in penalties, suspension of services, or even legal consequences. By taking these steps, you contribute to a safer and more reliable messaging ecosystem, protecting both your business and your customers.
How SMSGatewayCenter Supports You
We’re here to help you navigate these changes. If you have questions or need assistance with updating passwords, enabling MFA, or reviewing your Headers and Templates, reach out to our support team at contact[at]smsgatewaycenter[dot]com or call us at +912228657726. Our platform is designed to ensure seamless compliance with TRAI regulations, allowing you to focus on your messaging goals.
Stay Proactive: Next Steps
To avoid disruptions, take action now:
- Change your DLT password by May 15, 2025, following the new policy guidelines.
- Set up MFA for your account to add an extra layer of security.
- Start monitoring your daily SMS traffic and reconcile it with your Telemarketers.
- Review and deactivate any unused Headers or Templates to prevent suspension.
Thank you for your prompt attention to this matter. Your cooperation helps us maintain a secure and compliant messaging environment for all our clients. We’re committed to providing you with the best services and support as we navigate these regulatory updates together.
Read More Articles:
TRAI’s New SMS Header Suffix Rule: No Action Needed for Indian Clients and Resellers
Announcing Contact Form Integration: Automate SMS & WhatsApp Alerts with SMSGatewayCenter
