Three Things That Were Decided
Australian telco regulation spent most of the last decade in a consultation posture: reviews, discussion papers, industry codes, strongly worded findings. That posture ended somewhere around the middle of this year. Three developments in the past few weeks are all enforcement, and read together they describe a regulator that has run out of patience.
The practical translation for a business buying phone services: provider claims about reliability and emergency calling are becoming legally consequential. Which makes them worth putting in writing before you sign, because for the first time somebody else is checking.
Why any of this is your problem
The Lawsuit: $251 Million and 1,005 Alleged Breaches
The ACMA has commenced Federal Court proceedings against Optus Mobile over the Triple Zero outage of 18 September 2025, alleging 1,005 contraventions of the Telecommunications (Emergency Call Service) Determination 2019.
1,005
Alleged contraventions
$250k
Maximum penalty sought per contravention
~$251m
Theoretical maximum exposure
$12m+
Already paid by Optus entities over the 2023 emergency call outage
The substance of the allegations is that end users were not given access to the emergency call service and that emergency calls were not carried through to the relevant termination point. ACMA chair Nerida O’Loughlin has called the recurrence of a major Triple Zero failure so soon after a comparable 2023 incident a significant concern — and that 2023 matter is where the $12 million figure above comes from.
Court cases take time and imposed penalties usually land well under the theoretical ceiling. The signal is what matters: emergency calling has moved from a compliance topic to an enforcement priority with a nine-figure number attached.
The question this should prompt about your own system
Your cloud phone system also carries Triple Zero obligations, and almost nobody has checked how theirs behaves. Three things worth knowing: what address a 000 call from your system presents, what happens if your internet connection is down when someone dials it, and whether staff working from home or from a vehicle are covered differently. The rules for cloud phone systems and Triple Zero set out what to ask. Ask it in writing.
The Outage: Two Days, and a Report Due This Month
From around 4:30am on Wednesday 8 July 2026, Telstra suffered a national outage whose effects persisted across two days — mobile services, EFTPOS terminals and regional transport systems disrupted, and some Triple Zero calls affected.
The stated cause was a software defect affecting time synchronisation in network nodes in Sydney and Melbourne data centres. Telstra’s chief financial officer Michael Ackland said time synchronisation in those nodes was not working as it should. Reporting has indicated the affected server had been subject to vendor warnings dating back to 2022.
Communications Minister Anika Wells confirmed some customers could not reach emergency services, describing it as a Telstra retail outage rather than a system-wide Triple Zero failure. Telstra carried out 333 welfare checks on customers whose emergency calls failed or dropped — more than anticipated. The ACMA opened a full investigation and expects Telstra’s response and investigation report in August.
EFTPOS is the detail business owners should sit with
A voice outage is disruptive. A payments outage stops trade. If your card terminal, your internet, your mobiles and your phone system all ride on the same carrier, one fault at that carrier closes your business for the day. Small Business Minister Anne Aly urged affected businesses to document their financial losses and Telstra opened a compensation hotline — but the only businesses able to substantiate a loss were the ones that recorded it as it happened. If it happens to you, take screenshots and note the times before you do anything else.
The Regulator Asking for More
Following the July outage, the ACMA publicly argued for substantiation notice powers — the ability to compel a provider to demonstrate compliance with telecommunications law, rather than requesting information piece by piece and assembling a picture from what comes back. ASIC and the ACCC already have equivalent powers. The regulator’s position, in O’Loughlin’s words, is that it would be faster and more effective.
The ACMA has also indicated it will consider all available enforcement options including Federal Court action once current investigations conclude, which — given the Optus proceedings — is not a rhetorical flourish.
Two Things That Changed Under Your Feet
The enforcement stories make headlines. These two are the ones that already affect how your business operates, and both took effect without most people noticing.
Coverage Maps Now Mean the Same Thing
Since 30 June 2026, every Australian mobile provider must present coverage using four standardised categories — good, moderate, basic, no coverage — update maps quarterly, and remove areas assessed as no coverage rather than shading them optimistically. The same reforms require providers to publish an online outage register recording outage start time, affected locations, service types, cause and restoration.
| Category | Broadly means | What to plan around it |
|---|---|---|
| Good | Reliable outdoors and generally indoors | Safe to build a workflow on |
| Moderate | Generally fine outdoors, patchier inside | Fine for a vehicle, unreliable for a site office |
| Basic | Marginal — may need to move or step outside | Do not depend on it. Plan a fixed service or a fallback |
| No coverage | None, and it must now be shown as none | Satellite or a fixed connection at the site |
The rules were contested during development — Telstra and TPG disagreed over the technical definitions, with Telstra arguing some of its serviceable coverage fell below the new no-coverage threshold — which is a decent indication that the categories carry real content rather than being a labelling exercise.
What to do with the maps
Lay three providers side by side for the four or five locations that matter to your business. For the first time it is a like-for-like comparison. Half an hour, once a year.
What to do with the registers
Check one before you sign a contract. A provider’s outage history in your area is now a published record rather than a claim you have to take on trust.
And after an incident
A dated public entry confirming an outage at your location is exactly the evidence you need to document a loss or lodge a complaint.
And for patterns
One outage is bad luck. Four in a year at the same exchange is a procurement decision you can finally make with evidence.
More on both in the coverage categories guide and how to use public outage registers.
Your SMS May Now Say “Unverified”
From 1 July 2026, an SMS sent using a branded alphanumeric sender ID that is not on the ACMA’s SMS Sender ID Register arrives with the sender name replaced by “Unverified”, grouped into a single thread with every other unverified message on the recipient’s phone.
The purpose is to stop scammers impersonating known brands, which is worth doing. The consequence for a legitimate business that never registered is unambiguous: your appointment reminders now sit in the scam thread, under a label built to signal distrust.
A ten-minute check and fix
Send yourself one of your own messages and look at the sender name. If it says Unverified, get your sender ID registered through your telco or messaging provider — registration has been open since November 2025. For an Australian entity with an ABN, the sender ID must align with a registered business name, company name, trade mark or domain name; entities without an ABN can register only through certified telcos. The detail is in the Sender ID Register guide.
The Number That Should Worry You
The Telecommunications Industry Ombudsman received 14,002 complaints in the January to March 2026 quarter. Mobile was the pressure point.
| Measure | Quarter to March 2026 | Direction |
|---|---|---|
| Total complaints | 14,002 | — |
| Mobile service complaints | 6,739 | ▲ 5.7% |
| Delays setting up a mobile service | 418 | ▲ 31% |
| No working mobile service | 540 | ▲ 25% |
| Poor mobile coverage | 781 | ▲ |
| Seeking compensation for financial loss | — | ▲ 32.7% in one quarter |
The last row is the one to notice. Complaint volumes moving a few percent is noise. A third more people asking to be compensated for money they lost is a different signal: outages have stopped being an inconvenience and started being a cost.
Context in both directions. Small businesses accounted for 11% of the 57,592 complaints the TIO received across 2024–25. And the long arc is genuinely good — annual complaints exceeded 167,000 at the peak of the NBN migration in 2018, so the sector has improved enormously. But the recent direction is wrong, and the compensation figure says where it is being felt.
Worth remembering
The TIO is free, it handles small business complaints, and providers take it seriously because every complaint costs them to process regardless of outcome. If you have been going in circles with a provider for weeks, escalating is the designed path rather than a last resort.
The Lesson Every One of These Points At
Six stories, one underlying structure. A single software defect in two data centres took out mobiles, card payments and some emergency calls across an entire country for two days. Not because the carrier is bad at its job, but because concentration is the risk.
Most Australian small businesses have their mobiles, their internet, their phone system and their EFTPOS terminal all riding on one carrier, because buying it that way was simpler. Simpler to buy is not the same as simpler to run on the morning it breaks.
The question that matters
Not “which carrier is the most reliable?” — every major carrier has now had a bad year. The question is: which of my critical functions share a single point of failure, and which of those could I move?
The cheapest mitigation
A cloud phone system with apps on mobile devices means that if the fixed connection fails, calls follow people onto mobile data — and if the mobile network fails, they come back to the fixed line. Different failure domains, no extra hardware.
The one people forget
EFTPOS. Ask your payments provider what happens when your primary connection drops, and whether the terminal can fail over to mobile. Most can. Most are not configured to.
The longer version of this argument is in redundancy and single-network risk.
Four Actions, No Budget Required
Everything above, reduced to work you could finish before lunch.
- Send yourself an SMS. If your business sends branded messages and the sender name reads Unverified, get the sender ID registered through your provider this week. Ten minutes, and it stops your reminders sitting in the scam thread.
- Map your single points of failure on one page. Phones, internet, mobiles, EFTPOS. Write the carrier beside each. Any carrier appearing on every line is precisely the exposure that closed businesses on 8 July. Twenty minutes.
- Verify your Triple Zero path in writing. Ask your provider what address a 000 call from your system presents, what happens if your internet is down, and how remote staff are handled. Not a phone call — an email, so you have the answer.
- Compare coverage now that it is comparable. Three providers, four locations, standardised categories. Half an hour, once a year, and it is finally a fair fight.
For the other half of the month, the August technology briefing covers AI legislation, data centre rules and the privacy deadline arriving in December.
Frequently Asked Questions
What is the ACMA's case against Optus about?
The ACMA has commenced Federal Court proceedings against Optus Mobile over the Triple Zero outage of 18 September 2025, alleging 1,005 contraventions of the Telecommunications (Emergency Call Service) Determination 2019. The substance is that end users were not given access to the emergency call service and that emergency calls were not carried through to the relevant termination point. The regulator is seeking pecuniary penalties of up to $250,000 per contravention, putting theoretical maximum exposure at roughly $251 million and making it one of the largest enforcement actions in Australian telecommunications history. ACMA chair Nerida O'Loughlin has described the recurrence of a major Triple Zero failure so soon after a comparable incident in 2023 as a significant concern, and Optus entities already paid more than $12 million in penalties over that earlier emergency call outage. Court proceedings take time and imposed penalties typically land well below the theoretical ceiling, but the signal is clear: emergency calling has moved from a compliance topic to an enforcement priority with a nine-figure number attached to it.
What happened in the Telstra outage on 8 July 2026?
From around 4:30am on Wednesday 8 July 2026, Telstra suffered a national outage whose effects persisted across two days, disrupting mobile services, EFTPOS terminals and regional transport systems, and affecting some Triple Zero calls. The stated cause was a software defect affecting time synchronisation in network nodes located in Telstra's Sydney and Melbourne data centres; chief financial officer Michael Ackland said time synchronisation in those nodes was not working as it should, and reporting has indicated the affected server had been the subject of vendor warnings dating back to 2022. Communications Minister Anika Wells confirmed some customers were unable to reach emergency services while describing it as a Telstra retail outage rather than a system-wide Triple Zero failure, and Telstra carried out 333 welfare checks on customers whose emergency calls failed or dropped, more than had been anticipated. The ACMA opened a full investigation and expects Telstra's response and investigation report in August 2026. Small Business Minister Anne Aly urged affected businesses to document their financial losses.
What do the new Australian mobile coverage categories mean?
Since 30 June 2026, every Australian mobile provider must present coverage using the same four categories - good, moderate, basic and no coverage - rather than each measuring and presenting it in its own way. Maps must be updated quarterly and areas assessed as no coverage must be removed from coverage maps rather than shaded optimistically. Broadly, good means reliable service outdoors and generally indoors, moderate means it generally works outdoors but is patchier inside, basic means marginal service where you may need to move or step outside, and no coverage means none. The rules were contested during development, with Telstra and TPG disagreeing over the technical definitions and Telstra arguing some of its serviceable coverage fell below the new no-coverage threshold, which suggests the categories carry real content rather than being a labelling exercise. The practical benefit is that for the first time you can lay three providers' maps side by side for the specific sites, depots and routes your business depends on and get a genuinely like-for-like answer.
Why is my business SMS arriving as Unverified?
Because the sender ID it was sent from is not registered on the ACMA's SMS Sender ID Register. From 1 July 2026, an SMS sent using a branded alphanumeric sender ID that is not registered arrives with the sender name replaced by the word Unverified, and those messages are grouped into a single thread with every other unverified message on the recipient's phone. The scheme exists to stop scammers impersonating known brands, which is a worthwhile aim, but for a legitimate business that never registered the consequence is that appointment reminders, delivery notifications and confirmations now appear in the same thread as the scams, under a label designed to signal distrust. Registration has been open through telcos and messaging providers since November 2025. For an Australian entity with an ABN, the sender ID must align with a registered business name, company name, trade mark or domain name; entities without an ABN can register only through certified telcos. Send yourself one of your own messages to find out where you stand - it takes a minute.
What is a telco outage register and why should a business care?
It is a public online record that Australian telecommunications providers have been required to maintain since 30 June 2026, listing when an outage started, which locations were affected, which service types were hit, what caused it and when service was restored. There are four practical uses. Diagnosis: when something stops working you can check whether the problem is theirs before spending an hour on hold discovering that it is. Procurement: you can look at a provider's outage history for your specific area before signing, which converts a reliability claim into something checkable against a published record. Evidence: a dated public entry confirming an outage at your location is exactly what you need when documenting a financial loss or lodging a Telecommunications Industry Ombudsman complaint. And pattern-spotting: one outage is bad luck, but four in a year at the same exchange is a procurement decision you can now make with evidence rather than a feeling. It is one of the quietly more useful reforms in years.
Are telco complaints in Australia getting worse?
In the short term yes, in the long term substantially better. The Telecommunications Industry Ombudsman received 14,002 complaints in the January to March 2026 quarter, with mobile the pressure point at 6,739 complaints, up 5.7% on the previous quarter. Within that, delays setting up a mobile service rose 31% to 418, complaints from people with no working mobile service rose 25% to 540, and poor coverage complaints reached 781. The figure that matters most is not a volume at all: complaints seeking compensation for financial loss rose 32.7% in a single quarter, which says outages have stopped being an inconvenience and started being a cost. Small businesses made up 11% of the 57,592 complaints received across the 2024-25 financial year. For context in the other direction, annual complaints exceeded 167,000 at the peak of the NBN migration in 2018, so the sector has improved enormously over six years. The TIO is free, handles small business complaints, and is the designed escalation path rather than a last resort.
What should my business actually do about all this?
Four things, none of which need a budget or an external consultant. First, if your business sends branded SMS, send one to your own phone and read the sender name - if it says Unverified, get the sender ID registered through your provider this week, which takes about ten minutes and stops your reminders sitting in the scam thread. Second, spend twenty minutes mapping your single points of failure on one page: phones, internet, mobiles and EFTPOS, with the carrier written beside each, because any carrier appearing on every line is precisely the exposure that closed businesses on 8 July. Third, verify your Triple Zero path in writing rather than by phone - ask what address a 000 call from your system presents, what happens if your internet connection is down, and how staff working remotely or from vehicles are handled. Fourth, now that coverage categories are standardised, compare three providers across the four or five locations that genuinely matter to you. All of it looks unnecessary until the morning it is not.
