Brands that aren’t verified through Authentication+ by January 30, 2026, won’t be able to register new messaging campaigns and campaigns associated with unverified brands will be suspended and their traffic will be stopped.
Authentication+ is an added layer of security that confirms your brand contact email is legitimate and tied to your organization. It helps prevent impersonation and protects customers from fraud like smishing and spoofing and it’s only required for brands registered as public companies.
The Campaign Registry (TCR) charges a $12.50 fee each time a brand completes the new Authentication Plus step — part of their brand verification process. This applies only to brands classified as public, for-profit (company type = public) that haven’t yet completed the step. Historic public, for-profit Brands will have until January 30th, 2026, to complete this step.
Affected brands now require brand personnel attestation via Two Factor Authentication (2FA) to be carried out as part of the initial brand registration flow.
A brand contact email must be provided where a 2FA email will be sent for the brand contact to verify. The brand contact email must not be associated with free or personal domains or distribution lists.
The email recipient will have 7 days to complete the 2FA by clicking on a link in the email. Once the 2FA is complete, the brand will transition to a VERIFIED state and will be allowed to register campaigns for the brand.
Existing brands in the VERIFIED or VETTED_VERIFIED state must comply with Authentication+ to register new campaigns. On January 30th, 2026 , active campaigns linked to Public Profit entity-type brands will be suspended if Authentication+ has not been completed, resulting in traffic disruption. To resolve any suspensions, contact Twilio Support.
After October 30, 2025, TCR’s Authentication+ failure appeal fee will be charged for each appeal that is submitted.
New Brand Registrations
- In Console, during A2P Registration please add Brand Contact Email under the customer profile.
- If using Twilio’s APIs, add brand_contact_email as part of the us_a2p_messaging_profile_information.
Existing Brand Registration
- In Console, during A2P Registration add Brand Contact Email to the applicable registration. Complete 2FA and proceed to create new campaigns.
- If using Twilio’s APIs, add brand_contact_email as part of the us_a2p_messaging_profile_information (see code below for updating existing brands).
Twilio Console Flow
New Brand Registrations
Existing Brand Registrations
Retrigger Email
If the brand contact fails to complete the 2FA process within the 7-day window, you will need to re-trigger the email verification:
- In the Twilio Console, you can resend the verification email.
- 2FA Email can be retriggered through the 2FA Verification resource starting August 7th, 2025.
Failures Associated with 2FA Verification
The following error codes are associated with 2FA verification failures:
Error Code |
Message |
Description |
Resolution |
| Domain Ownership Could Not Be Verified | The domain used in the brand contact email could not be independently verified. | Use an email domain clearly tied to your brand (e.g., listed on your official website, with matching WHOIS records or DNS TXT record). Contact Twilio Support if you believe your domain should qualify. | |
| 2FA Verification Expired | The 2FA verification link or token expired before being used. | Submit a new 2FA request via Console or API and have the contact complete it within the allowed time window. | |
| 2FA Email Undeliverable | The verification email could not be delivered to the brand contact. | Ensure the email address is correct, active, and can receive external messages. Update the contact email if needed. | |
| 2FA Verification Failed or Timed Out | The verification process was not completed. | Re-initiate the 2FA request and confirm that the contact completes the verification promptly. | |
| Invalid Brand Contact Email Domain | The domain used for the brand contact email is not acceptable for Authentication+ (e.g., gmail.com). | Use a business or organizational email domain associated with your brand. Avoid free or generic email providers. | |
| 2FA Code Expired | The verification code was not entered in time. | Re-initiate the 2FA process and ensure timely completion. |
Example Email sent for Verification
When a brand contact receives the verification email, it will come from noreply@auth.campaignregistry.com. The email will contain the following elements:
- Complete Verification Button: Clicking this will prefill the verification PIN and direct the contact to a web page to finalize the 2FA.
- Manual Link: If the contact prefers, they can copy and paste the provided URL into their browser. In this case, they will need to manually enter the verification PIN to complete the process.
Updating Existing Brands
For existing brands, you’ll need to add or update the Brand Contact Email through either the Twilio Console or the API. Refer to Twilio’s API Docs for the process to update the email on existing brands.
Once the email is updated, the 2FA verification process will follow, as outlined above.