During the public consultation on the Colombian Communications Regulation Commission (CRC)'s draft A2P anti-fraud regulation, the National Association of Colombian Entrepreneurs (ANDI) submitted feedback opposing the inclusion of OTP and two-factor authentication (2FA) verification code messages in the same regulatory process as ordinary commercial SMS.
The draft originally required OTP/2FA messages to undergo the same template pre-approval process and exposed them to the risk of system blocking. ANDI stated that verification codes are security tools actively requested by users. If templates fail to be updated in a timely manner or centralized verification systems experience outages, blocked verification messages could prevent users from logging into their accounts or completing transactions. Rather than reducing telecom fraud, this would create new security risks.
The association called on regulators to adopt differentiated regulation and establish special rules for financial security-related OTP and 2FA verification messages, shielding security messages from interference by template pre-approval and automatic blocking mechanisms.
