ACMA fines Telstra $277,000 over SIM-swap identity-check failures
iTnews (3 September 2026) reports the Australian Communications and Media Authority fined Telstra $277,000 for not applying required identity-authentication processes to prevent SIM-swapping fraud. ACMA said the fraud caused at least $39,500 in losses to 15 customers between January and October 2025, with 13 further attempts where agents failed to add fraud protections or to act on risk signals; ACMA member Samantha Yorke said frontline staff did not follow Telstra's own processes. SIM swaps let attackers move a victim's number onto their own SIM and intercept MFA codes and other mobile traffic. ACMA accepted court-enforceable undertakings for stronger fraud prevention and staff training. Context in the same report: a larger $1.551 million Telstra penalty in July 2024 for related ID-authentication failures, and more than $5 million in ACMA telco fines to date on mobile-number fraud. Watchlist relevance: Telstra.
- Product
- Telstra mobile identity / SIM-change processes
- Exploited in Australia?
- yes
- Patch to
- Telstra: enforceable undertakings on fraud prevention and training; customers: PIN/port-out locks and non-SMS MFA where available
Primary: iTnews (3 Sep 2026) ยท Vendor: ACMA (regulator; primary notice page was 403 from this pass egress)