Amaysim, owned by Optus, has paid a A$138,600 infringement notice and entered an enforceable undertaking after the Australian Communications and Media Authority found it ported 13 mobile numbers without the additional identity verification required to stop number hijacking. ACMA found 13 contraventions of the Telecommunications (Mobile Number Pre-Porting Additional Identity Verification) Industry Standard 2020 between 9 May and 29 October 2025: eight ports went through Amaysim's online channel with no additional verification, and five were initiated through its customer service channel without checks. The requirement exists because a hijacked number lets criminals intercept one-time authentication codes sent by banks and other services. ACMA's findings drew partly on cybercrime reports to law enforcement through ReportCyber and the Australian Financial Crimes Exchange about alleged unauthorised ports to Amaysim. The infringement notice was issued in May and covers seven of the 13 contraventions at $19,800 each; paying it is not an admission of liability, though the undertaking states Amaysim acknowledges the findings. Over a 12-month undertaking Amaysim must appoint a regulator-approved independent consultant to review its porting governance and audit every port-in, reversal and cancellation quarterly, filing board-approved reports at seven and 12 months.

• Source article