Helping financial institutions to improve visibility and control over business messaging
SMS has long been a quiet workhorse of enterprise communication. It is fast, familiar, and deeply embedded in how organisations interact - internally and with clients. But as regulatory expectations rise, particularly in highly regulated industries like financial services, that familiarity is being challenged.
Today, it’s no longer enough for businesses to simply send and receive messages. Increasingly, they must also prove what was sent, by whom, and when and do so in a way that could withstand audit, dispute, and regulatory scrutiny.
Regulators around the world have sharpened their focus on unmonitored business communications, with SMS squarely in scope. In Australia, ASIC formally requires financial services institutions to record communications related to transactions in some situations, which may include, for instance, SMS sent between clients and trading teams.
The challenge is that SMS was never designed as a compliance tool.
Messages sit outside traditional enterprise systems, often live only on devices, and can bypass governance controls entirely. This creates gaps - not just for compliance, but for organisational confidence. When businesses can’t reliably reconstruct communication records, they may expose themselves to enforcement action, operational risk, and erosion of trust.
Historically, organisations have tried to solve this problem at the application or device layer by deploying recording software, manual capture tools, or bolt‑on compliance solutions. While these approaches can work, they can also introduce friction:
Most critically, they still leave a blind spot: the network itself - where SMS messages are actually transported.
As communication patterns evolve and scrutiny increases, these limitations are becoming clearer.
A more resilient approach is emerging: capturing SMS within the mobile network itself.
By recording SMS communications at the network level, organisations gain a more complete, authoritative view of SMS/MMS message activity that is independent of devices, apps, or user behaviour. This model can reduce dependency on manual processes and user behaviour whilst creating a clean audit trail sourced from the telcoms network itself.
It also reflects a broader shift in enterprise technology: using programmable network capabilities, exposed securely through APIs, to address business challenges that can’t be solved at the surface.
Network‑based SMS capture doesn’t replace existing compliance platforms but can strengthen them.
Through secure, consent‑based models, with timely consent notifications, network data can be provided to specialist compliance SaaS providers, who may be able to handle archiving, analytics, and regulatory reporting. This can allow enterprises to meet record‑keeping obligations while preserving existing workflows and minimising disruption to employees and customers.
The result is a layered model:
It’s a practical example of how collaboration between connectivity providers and software platforms can raise the standard of trust.
Telstra is extending this thinking with its SMS Capture API, designed to help regulated organisations meet record keeping obligations by enabling SMS communications to be captured directly from Telstra's mobile network.
Rather than relying solely on devices or applications, SMS Capture API provides authorised access to specified SMS network data, allowing approved compliance platforms to record messages consistently and at scale, with appropriate controls, transparency and consent in place.
By exposing this capability through a secure API, Telstra is helping organisations strengthen messaging governance while preserving familiar workflows for employees.
For technology, risk and compliance teams, SMS Capture API offers a scalable way to help address regulatory expectations - particularly in highly regulated sectors such as financial services, without introducing unnecessary friction into day‑to‑day communication.
Compliance is no longer a back office function. It is a visible signal of organisational integrity.
As regulators continue to expand oversight of digital communications, enterprises that rely on SMS have an opportunity to rethink how they govern it - not reactively, after incidents arise, but proactively, by design.
Capturing SMS at the network level is about more than meeting today’s rules. It’s about building confidence that, when questions are asked by regulators, auditors, or customers, the answers can be clear, complete, and defensible.
In a world where every message can matter, trust begins with visibility.
Telstra’s SMS Capture API may initially be available via an authorised SaaS partner, with broader availability planned. Contact your aligned Client Partner for further information.
