FCC Compliance & Call Authentication

Know Your Customer:
Our Commitment to FCC Compliance

eTollFree is fully compliant with the FCC’s Know Your Customer requirements, the TRACED Act, and STIR/SHAKEN caller ID authentication standards — protecting your business and the public from illegal robocalls and phone fraud.

FCC Robocall Mitigation Database Registered
STIR/SHAKEN Certified
TRACED Act Compliant
100%
STIR/SHAKEN Implemented
RMD
FCC Robocall Mitigation Database Filed
A/B/C
All Attestation Levels Supported
24 hr
Traceback Response Compliance
2021
Compliant Since TRACED Act Mandate

What the FCC Requires of Voice Carriers

The FCC mandates that all telecommunications carriers implement Know Your Customer practices as part of their legally required Robocall Mitigation Programs. Here is what that means for us — and for you.

Identity Verification

We are required to verify the identity of every customer before providing voice services. This includes confirming business registration, authorized contacts, and legitimate intended use cases for telephone services.

Fraud & Abuse Prevention

KYC rules require carriers to take affirmative steps to prevent their networks from being used for illegal robocalling, caller ID spoofing, telemarketing violations, and other fraudulent activities prohibited by federal law.

Traceback Cooperation

Under the TRACED Act, carriers must respond to FCC-authorized traceback requests within 24 hours, providing call origin records to help investigators identify the source of illegal robocall campaigns.

Robocall Mitigation Program

Every voice carrier must file a formal Robocall Mitigation Program with the FCC detailing how they implement STIR/SHAKEN and what additional steps they take to prevent illegal calls originating from their network.

Blocking Non-Compliant Traffic

FCC rules allow — and in some cases require — downstream carriers to block calls from providers not registered in the Robocall Mitigation Database. KYC compliance protects your calls from being blocked.

Recordkeeping & Reporting

Carriers must maintain detailed records of customer onboarding, identity verification, and any violations detected. These records are subject to FCC audit and must be retained for a minimum of two years.

STIR/SHAKEN: How We Authenticate Every Call

STIR/SHAKEN (Secure Telephone Identity Revisited / Signature-Based Handling of Asserted Information Using toKENs) is the FCC-mandated framework for digitally signing outbound calls and verifying inbound caller ID.

When a call leaves our network, we attach a cryptographic digital signature that downstream carriers can verify. This signature tells the receiving carrier — and ultimately the call recipient — how confident we are that the displayed caller ID is authentic.

eTollFree holds a valid STI (Secure Telephone Identity) certificate issued by an FCC-approved Certificate Authority, and we are registered in the publicly accessible FCC Robocall Mitigation Database.

View FCC Robocall Mitigation Database
STIR/SHAKEN Attestation Levels
A

Full Attestation

We have verified the customer’s identity and confirmed they are authorized to use the originating telephone number. Highest trust level. Most calls from verified eTollFree customers carry A-level attestation.

B

Partial Attestation

We have authenticated the call originator on our network but cannot fully verify the customer’s right to use the specific number presented. Typically applies during number porting transitions or indirect routing scenarios.

C

Gateway Attestation

The call entered our network from an upstream provider and we are acting as a gateway. We can authenticate the point of entry but cannot verify the original caller. We flag these calls appropriately and report suspicious patterns.

Our Know Your Customer Process

Every eTollFree customer goes through a structured verification process before full service activation. Here is how we fulfill our FCC obligations while keeping onboarding fast and friction-free.

1

Identity Verification

We collect and verify the legal name, business registration, and authorized contact information for every account. Business accounts require EIN verification or equivalent documentation.

2

Use-Case Review

We review your intended use of telephone services to confirm it is lawful and consistent with FCC regulations. Outbound calling campaigns, auto-dialers, and IVR systems receive additional review.

3

Number Authorization

We verify that each telephone number assigned to your account is properly authorized for your use case. This is what allows us to grant the highest STIR/SHAKEN attestation (A-level) on your outbound calls.

4

Ongoing Monitoring

We continuously monitor traffic patterns for unusual call volumes, spoofing indicators, and TCPA violation patterns. Anomalies trigger immediate account review and, if needed, service suspension pending investigation.

eTollFree is Registered in the FCC Robocall Mitigation Database

Our Robocall Mitigation Program has been filed with the Federal Communications Commission and is publicly accessible in the FCC Robocall Mitigation Database. This registration is required for all voice service providers under the TRACED Act and confirms our commitment to full STIR/SHAKEN implementation and ongoing call authentication. Downstream carriers are required to check this database before accepting traffic from any provider.

Know Your Customer Registration

Complete the form below to submit your KYC registration. This information helps us verify your identity, assign proper STIR/SHAKEN attestation to your calls, and fulfill our FCC compliance obligations.

KYC Registration Form

All fields marked with * are required. Your information is stored securely and used solely for compliance verification purposes.

This registration is required under the FCC’s Know Your Customer rules (TRACED Act, 47 CFR Part 64). Information collected is used for identity verification, STIR/SHAKEN attestation assignment, and FCC-mandated compliance recordkeeping. See our Privacy Policy for details on how your data is handled.
Business Information
Providing your EIN speeds up verification and enables A-level STIR/SHAKEN attestation.
Authorized Contact
Business Address
Intended Use of Service
Certification & Agreement

KYC & STIR/SHAKEN — Common Questions

Answers to the most common questions about FCC Know Your Customer requirements, STIR/SHAKEN call authentication, and how eTollFree maintains compliance.

The FCC's Know Your Customer (KYC) rules require telecommunications providers to verify the identity, business legitimacy, and intended use of service before providing voice services. These rules were strengthened by the TRACED Act (2019) and subsequent FCC orders, requiring carriers to take affirmative steps to prevent fraud, illegal robocalls, and spoofing on their networks.
STIR/SHAKEN (Secure Telephone Identity Revisited / Signature-Based Handling of Asserted Information Using toKENs) is a framework of technical standards mandated by the FCC for caller ID authentication. It allows carriers to digitally sign outbound calls and verify inbound caller ID, making it much harder for bad actors to spoof phone numbers. When you see "Verified" or a checkmark on your phone for an incoming call, STIR/SHAKEN is working.
Yes. eTollFree, LLC is registered in the FCC's Robocall Mitigation Database (RMD), which is publicly searchable at fcc.gov/robocall-mitigation-database. Our registration confirms that we have filed our Robocall Mitigation Program with the FCC and are in compliance with our STIR/SHAKEN implementation obligations.
There are three attestation levels: "A" (Full Attestation) means we fully verify the caller is authorized to use the number they are presenting; "B" (Partial Attestation) means we authenticated the call origin but cannot fully verify the caller's right to use the specific number; "C" (Gateway Attestation) means the call entered our network from an upstream provider and we cannot verify the originator. We assign the highest attestation level we can honestly support for each call.
The FCC requires all voice service providers to implement reasonable Know Your Customer procedures as part of their Robocall Mitigation Programs. Collecting and verifying customer information allows us to: (1) confirm legitimate business use, (2) assign appropriate STIR/SHAKEN attestation, (3) fulfill our legal obligations under the TRACED Act, and (4) protect our network and the public from misuse.
Your registration information is stored securely in our compliance database and reviewed by our compliance team. We use this information solely for compliance verification, fraud prevention, and FCC-mandated recordkeeping. We do not sell or share your KYC information with third parties except as required by law or in response to legal process.
The Telephone Robocall Abuse Criminal Enforcement and Deterrence (TRACED) Act was signed into law in December 2019. It requires voice service providers to implement STIR/SHAKEN caller ID authentication, file Robocall Mitigation Programs with the FCC, and respond to traceback requests within 24 hours. Under this law, carriers who do not comply risk being blocked at the network level by other providers.
Under FCC rules, downstream providers may block calls from carriers whose customers have not completed KYC verification, especially when those calls cannot receive Full (A-level) STIR/SHAKEN attestation. Completing KYC registration helps ensure your calls are properly authenticated and reduces the likelihood of call blocking or labeling by downstream networks.

Questions About Our Compliance Program?

Our compliance team is available to answer questions about FCC requirements, STIR/SHAKEN implementation, or your KYC registration status.