Australia ACMA and the Spam Act for AI Voice Campaigns in 2026

Australia's communications regulator has named scams and unwanted telemarketing as an enduring priority for 2025-26. The Telecommunications (Telemarketing and Research Calls) Industry Standard 2017 already governs how AI voice agents must behave on Australian numbers; from July 1, 2026, unverified SMS Sender IDs will be labeled "unverified" on every Australian phone.

What the rule says

flowchart TD
  Out[Outbound campaign] --> Twilio[Twilio Voice API]
  Twilio --> STIR[STIR/SHAKEN attestation]
  STIR --> Carrier[Originating carrier]
  Carrier --> Term[Terminating carrier]
  Term --> Recipient[Recipient phone]
  Recipient --> Webhook[/voice webhook/]
  Webhook --> Agent[AI sales agent]

Australia's regulatory stack covers three pieces relevant to AI voice. The Spam Act 2003 (Cth) governs commercial electronic messaging (email, SMS, IM) and requires consent (express or inferred) plus identification and unsubscribe. The Do Not Call Register Act 2006 (Cth) prohibits unsolicited telemarketing calls to numbers on the Do Not Call Register, with limited exemptions (charities, registered political parties, educational institutions, where express consent exists). The Telecommunications (Telemarketing and Research Calls) Industry Standard 2017 sets enforceable rules: calling hours (9am-8pm weekdays, 9am-5pm weekends, no public holidays), CLI presentation, identification of caller and beneficiary, opt-out within 30 days. ACMA also enforces the Reducing Scam Calls and Scam SMs Industry Code (C661:2022). Penalties under the Spam Act can reach AUD $2.6M+ per day for repeat corporate offenders.

What it means for AI voice agent operators

ACMA has made compliance with the call hours and identification rules its enduring priority. AI agents do not get a pass on the basics:

Calling hours are inflexible. Outbound dial windows must respect Australian Eastern Time, Central Time, and Western Time of the called party (Australia spans three primary time zones). A 9pm AEST campaign hitting a Western Australia mobile at 6pm AWST is fine; the reverse is not.

CLI must be presented and dialable. ACMA's stance is that hidden, withheld, or non-functional CLIs on outbound telemarketing breach the Industry Standard.

Caller identification at the start of the call must include the calling entity, the entity on whose behalf the call is made (if different), and a contact name and number. Adding "this is an automated assistant" is not formally required but is best practice and increasingly expected.

Do Not Call Register scrubbing is monthly. Subscribe via ACMA's DNCR portal, scrub before each campaign, and retain proof.

From July 1, 2026, the SMS Sender ID Register goes live: an unregistered alphanumeric Sender ID will be labeled "unverified" by carriers. AI voice products that send transactional SMS need to register sender IDs.

How CallSphere stays compliant

CallSphere provisions Australian DIDs through Twilio with verified business profiles and signs CLIs in compliance with the Industry Standard. Sales Calling AI for Australian customers uses Australia-aware curfew logic that reads the called party's state code and enforces local time gates. Outbound opens with the calling entity, beneficiary, AI disclosure, and a callback number ("Hi, this is the automated assistant for {brand}; you can reach us back on {number}"). For SMS, CallSphere is preparing alphanumeric Sender ID registrations ahead of the July 1, 2026 deadline. Healthcare AI in Australian deployments aligns with the Australian Privacy Principles (APPs) under the Privacy Act 1988 in addition to the call rules. The 14-day trial includes Australian DNCR scrubbing presets across the Salon AI, Real Estate AI, and After-Hours AI verticals.

Compliance checklist

1. Register a Twilio (or equivalent) Australian Customer Profile for CLI verification.
2. Subscribe to the Do Not Call Register and scrub at least every 30 days.
3. Honor calling hours: 9am-8pm weekdays, 9am-5pm Saturday, no calls Sundays/public holidays.
4. Identify the caller, the beneficiary, and a callback number at call start.
5. Disclose AI use clearly in the opening; "this is an automated assistant".
6. Honor opt-outs within 30 days under the Industry Standard; same-day is best practice.
7. Capture express consent for marketing campaigns; treat inferred consent narrowly.
8. Scrub against state-specific lists where applicable (Victoria has additional protections).
9. Register alphanumeric SMS Sender IDs before July 1, 2026.
10. Retain consent and call records for at least 3 years.
11. Map data flows under the APPs and document cross-border transfers (APP 8).

FAQ

Are charity calls exempt from the DNCR? Yes, registered charities and political parties have exemptions, but the Industry Standard's calling-hours and identification rules still apply.

Is voice AI considered a "voice broadcast"? ACMA distinguishes voice broadcasts (one-to-many recorded) from telemarketing calls. Conversational AI is closer to telemarketing in regulatory effect, but a one-way AI-spoken broadcast can fall under stricter rules.

Does the Spam Act apply to voice? The Spam Act primarily covers electronic messaging (SMS, email). Voice is governed by the Industry Standard and DNCR Act. SMS sent by your AI is in scope.

What does "unverified" labeling actually do? From July 1, 2026, carriers will display an "unverified" label on SMS from unregistered alphanumeric Sender IDs. Open rates drop materially.

How often does ACMA actually enforce? ACMA publishes quarterly enforcement reports; in late 2025 the regulator escalated enforcement against persistent offenders with $1M+ infringement notices.

Sources

• ACMA: Telemarketing and Spam Compliance
• Do Not Call Register (Australia)
• ACMA: Action on Scams, Spam and Telemarketing (Q4 2025)

Start a 14-day trial, browse pricing, or contact us for AU rollout help.