SIM Registration Enforcement Tightens Across Mobile Operators

SIM registration in Cambodia has been a subject of regulatory attention for more than a decade. In 2024 the authorities significantly intensified enforcement of the SIM registration rules, following continuing concerns about the use of unregistered or improperly registered SIMs for fraud, scam calls, unlawful marketing and other forms of abuse. The renewed enforcement focus applies to operators, their distribution partners and, indirectly, to subscribers whose SIMs are found to be improperly registered.

The 2024 actions built on earlier requirements that mandate registration of all SIMs against verified identity documents, imposition of limits on the number of SIMs that may be held by a single individual and the ability to suspend or terminate service for improperly registered SIMs.

Operators are required to register each subscriber against a verified identity document, to capture the required information accurately and to retain it in a form that can be produced to the authorities on request. The identity of the actual holder of the SIM must correspond to the identity registered, and the operator's systems must reflect the current status of each subscription.

Where a subscriber changes SIM, replaces a lost device or migrates between prepaid and postpaid, the registration information should be maintained and updated as appropriate. Where a subscription is terminated, the associated registration record should be retained for the period required by the framework and then handled in accordance with data protection principles.

The 2024 enforcement focus targets particularly harmful practices, including the mass registration of SIMs against third-party identities without the knowledge of those individuals, the acquisition of SIMs by intermediaries for onward supply outside official channels and the use of registration systems to circumvent identity requirements. Enforcement also addresses shortcomings in operational implementation, such as failure to verify documents properly, incomplete records and failure to detect obvious patterns of abuse.

Investigations may involve inspections of retail outlets, sampling of registration records, cooperation with law enforcement in cases of criminal activity and audits of the operational processes used by operators and their distributors.

Operators found to have systemic weaknesses in SIM registration may face regulatory action, ranging from warnings and required corrective plans to more serious sanctions where the deficiencies are significant. Distributors and retail agents that engage in unlawful practices may have their authorisations suspended or withdrawn and may be subject to referral for further action.

The authorities are increasingly interested in the governance and control frameworks used by operators, not only in the raw compliance rate on individual transactions. Evidence of a mature, risk-based programme with clear responsibilities, effective training, robust monitoring and prompt response to indicators of abuse is likely to be viewed more favourably in the event of an investigation.

Subscribers whose SIMs are found to be improperly registered may face suspension of their service. Reactivation typically requires the subscriber to attend a service point in person, present identification documents and complete a corrected registration process. Where a subscription is associated with financial services, additional considerations may apply.

Subscribers are entitled to expect clear communication from their operator, to be informed of the reason for any suspension and to be supported in resolving the issue promptly. Operators are expected to design their processes so that legitimate subscribers are not disproportionately inconvenienced while non-compliant subscriptions are addressed.

SIM registration is only one component of a broader effort to reduce fraud, scam calls, phishing and other forms of abuse that rely on mobile channels. It sits alongside anti-fraud analytics, cooperation with financial institutions, awareness campaigns and international coordination. Effective enforcement of SIM registration supports these other efforts by making it more difficult to use anonymous or falsely registered SIMs to facilitate abuse.

Operators are encouraged to integrate SIM registration data with fraud detection and cooperation with financial institutions in a manner that respects data protection principles and preserves the trust of legitimate subscribers.

Registration involves the collection and retention of sensitive personal data. Operators are expected to handle this data in accordance with applicable data protection rules, to limit access to authorised personnel, to secure it against unauthorised access and to use it only for the purposes for which it was collected. Sharing of registration data with third parties should be based on a clear legal basis and should be subject to appropriate safeguards.

Data minimisation, retention limits and appropriate deletion procedures are important elements of a compliant registration programme, particularly as the volume of registration data continues to grow.

For operators, the 2024 enforcement environment calls for renewed attention to the governance and operational implementation of SIM registration. Internal audits, refreshed training, revised distributor agreements and improved monitoring tools should be deployed as necessary to bring practice into line with expectations. Boards and senior management should have visibility of registration performance, including key indicators of risk and progress against remediation plans.

For distributors and retail agents, participation in the operator's distribution channel is subject to strict compliance expectations. Retailers that invest in staff training, in disciplined processes and in cooperation with operator monitoring are better positioned to remain in the channel and to expand their role over time.

For subscribers and enterprise customers, the environment underlines the importance of maintaining accurate registration information, of promptly updating operator records where circumstances change and of engaging constructively with operators in the event of queries about registration status.

Lex Civora advises operators, distributors and enterprise customers on the design, implementation and audit of SIM registration programmes, on the interaction between registration and other regulatory obligations and on responses to enforcement action or investigations initiated by the authorities.