On 12 February 2025, Spain issued the high‑level decree Orden TDF/149/2025. Based on this text, CNMC rolled out real‑number identity controls for commercial calls, focusing on CLI caller‑ID tampering and number‑spoofing fraud within A2P automated marketing outbound calls and voice‑OTP services. The new rules explicitly forbid forging or altering caller‑ID; every outbound call must support full‑chain traceability.
For calling‑behaviour rules: commercial marketing outbound calls are prohibited from 21:00 to 08:00 next day; transactional voice‑OTP calls are exempt from this time restriction. Operators shall be technically capable of directly blocking calls with fake CLI at network level. The 400 number block is designated as Spain’s exclusive number range for commercial outbound calls. Starting October 2026, marketing‑oriented outbound calls shall in principle use this number range.
Secondary number‑sub‑allocation rules have also been tightened: allocated numbers cannot be used to place calls over other operators’ networks. To apply for additional number blocks, enterprises must maintain ≥75 % real‑usage rate on existing resources. Company registered address and tax‑ID will be verified, to counter “number‑farm” operations that rotate large batches of caller‑IDs for nuisance outbound calling.
Enterprises committing CLI tampering or nuisance‑call violations may face administrative fines up to EUR 2 million under the General Telecommunications Act. Combined with the Alias SMS registration scheme, this set of rules builds Spain’s regulatory framework against phone‑and‑SMS fraud, representing mandatory compliance requirements for cross‑border A2P voice service providers.
