In April 2026, Colombia’s MinTIC issued Decreto 394 de 2026, an enhanced regulation targeting cross-border telecom fraud, which entered into force on 14 April. The CRC supporting technical implementing rule Resolución CRC 7811 de 2025 took effect on 1 January 2026, imposing mandatory restrictions on foreign A2P service providers accessing Colombia’s mobile networks.
The decree stipulates: foreign pure SMS service providers without local legal entity status in Colombia are prohibited from establishing direct SMPP connections with local operators Claro, Tigo, Movistar and WOM. All inbound cross-border SMS and voice traffic must transit via locally registered Integradores Tecnológicos (Technical Integrators) enrolled in SIUST. All traffic cooperation agreements signed between upstream foreign providers and local integrators must be filed with MinTIC’s system within the statutory timeframe after execution.
In terms of liability allocation, locally registered Integradores Tecnológicos bear primary screening responsibility and must conduct risk control filtering on inbound traffic from overseas upstream partners. Operators have the authority to immediately block foreign IP traffic that accesses the network directly without completing mandatory filings. The regulation aims to curb cross-border smishing fraud and strengthen full-chain traceability of cross-border A2P traffic.
Practical guidance for outbound businesses: International SMS platforms cannot connect directly with Colombian operators and must work with Tier‑1 local integrators duly registered under SIUST. All upstream and downstream cooperation contracts must be reported to MinTIC. Agreements should include clauses covering fraud traffic disposal, log retention and cooperation with regulatory investigations; failure to comply may result in channel suspension.
