The FCC is proposing rules that would require US telecoms to collect and store government-issued ID numbers and physical addresses for all phone customers, effectively eliminating anonymous prepaid ‘burner’ phones. The stated aim is to combat scammers and fraud, but privacy advocates warn this mirrors identity-linked mobile registration practices seen in authoritarian regimes. The knock-on effects for cybersecurity operations, whistleblowing, and personal privacy could be significant.

Security Architect’s Take: Cloud security architects and red teams that rely on anonymous SIM cards for out-of-band communication, operational security, or incident response tooling should review their mobile device policies now — consider whether VOIP alternatives or non-US SIM procurement could serve as contingency options if these rules are enacted.

Original advisory: The FCC Wants to Eliminate Burner Phones