Ofcom July 2026 Update: New Scam-Text Rules, Fibre Altnet Investigations and a Mobile Spectrum Boost

The week in one line: Ofcom has confirmed binding new rules forcing mobile networks to block scam texts, opened investigations into five fibre altnets over their emergency funds, and moved a mobile spectrum auction forward, and here is what each means for your broadband, mobile and money.

Quick answer: in a busy week, Ofcom finalised a package of rules making mobile providers block, limit and disrupt scam texts (in force through 2027), strengthened its defences against scam calls that spoof UK mobile numbers, opened investigations into whether five altnets hold the funds the law requires, and advanced the auction of new mobile spectrum. It also published its latest report on age checks. Below we explain each development and, more importantly, what it means for you.

Jump to a section

• 1. Cracking down on scams: texts, calls and caller ID
• 2. Five fibre altnets under investigation: what it really means
• 3. Mobile spectrum: the 1.4 GHz auction and better coverage
• 4. Online safety: age checks, the TikTok investigation and VPNs
• 5. What it all means for you

1. Cracking down on scams: texts, calls and caller ID

The headline consumer decision of the week is Ofcom's statement Combatting mobile messaging scams, which turns proposals consulted on in 2025 into binding obligations on mobile providers and the intermediaries that carry business texts (Ofcom, 2026a).

The scale of the problem is stark. Fraud accounted for an estimated 45% of all reported crime incidents in England and Wales, and £1.28 billion was lost to criminals in 2025 (Ofcom, 2026a, citing UK Finance, 2026). Ofcom's own February 2026 research found that 40% of UK mobile users had received at least one suspicious message in the previous three months. The industry already blocks scam texts at scale, with operators' scam-detection tools stopping an average of around 50 million messages a month in early 2025, yet Ofcom concluded the protections were patchy and that criminals simply exploit the gaps.

The new rules divide in two. For person-to-person (P2P) texts, the SIM-to-SIM messages a scammer sends from a handful of pay-as-you-go SIMs, providers must:

• Set volume limits on pay-as-you-go SIMs, so a scammer cannot fire out messages by the thousand.
• Gather intelligence on scam numbers and malicious weblinks, and block the numbers scammers use.
• Detect and block scam messages in transit, by spotting malicious sender IDs, weblinks and phone numbers.

For application-to-person (A2P) texts, the mass business messages from banks, couriers and government, providers and aggregators must:

• Run Know Your Customer (KYC) checks when taking on a business sender, and ongoing Know Your Traffic (KYT) checks on the messages flowing through.
• Corroborate alphanumeric "Sender IDs", the words such as a bank's name that appear as the sender, against what they know about the business, so that a firm claiming to be a hairdresser is not sending parcel-delivery texts.
• Maintain a policy on protected and generic Sender IDs, apply incident-management processes to root out abuse, and block scam messages in transit.

These obligations are delivered through a new General Condition C9 and a matching Non-Provider Condition 3 (Ofcom, 2026a). The timeline is staggered: the P2P rules take effect on 18 January 2027, and the A2P rules on 15 July 2027 (Ofcom, 2026a; ISPreview UK, 2026a).

Two honest caveats matter. First, the rules apply to number-based texts (SMS and MMS), not to over-the-top apps such as WhatsApp and iMessage, and Ofcom has said it is for operators to determine whether their current RCS implementation falls under the Communications Act, so some fraud will simply shift channel. Second, Ofcom considered, but decided against, a mandatory centralised Sender ID registry, judging it too burdensome and costly for businesses, so it has balanced effectiveness against the risk of blocking legitimate messages.

Scam calls from abroad

Alongside the text rules, Ofcom strengthened its Calling Line Identification (CLI) Guidance to tackle scam calls from overseas that spoof UK mobile (+447) numbers. This closes a known gap. Ofcom had already pushed providers to block foreign calls spoofing UK landline numbers, a measure that came into effect in January 2025, but mobile numbers were trickier, because a genuine UK customer roaming abroad legitimately rings home showing their own +447 number (BBC News, 2025).

The fix: providers should now withhold the caller ID on calls that appear to come from a UK mobile roaming abroad, unless the call can be verified as genuine. Unverifiable calls will show as "withheld" rather than as a trusted-looking UK mobile. It works on human behaviour: people are far more likely to answer an unrecognised UK mobile than an unfamiliar international number, so stripping scammers of a convincing UK caller ID makes the calls less effective.

What it means for you: you should gradually see fewer fake-courier and fake-bank texts as verification and blocking tighten through 2027, and more overseas scam calls arriving as "withheld". Until the network protections are fully live, your own vigilance still does the heavy lifting. Keep forwarding suspicious texts to 7726 free of charge, never tap a link in an unexpected message, never read out a one-time passcode, and if a call seems off, hang up and call back on a number you trust.

2. Five fibre altnets under investigation: what it really means

The most consequential story of the week for the shape of the UK broadband market is Ofcom's decision to open investigations into five alternative networks (altnets), alongside a wider enforcement programme, over whether they hold the funds the law requires (Ofcom, 2026b; ISPreview UK, 2026b). It is worth understanding properly, because the headline can read more alarmingly than the facts warrant.

What "funds for liabilities" actually is

Operators that hold "Code powers" under the Electronic Communications Code enjoy valuable rights: they can install and maintain apparatus in streets and on public land, dig up roads, and use Openreach's ducts and poles, without a separate licence for every job. Those powers are exactly what let altnets build quickly and cheaply.

In exchange, Regulation 16 of the Electronic Communications Code (Conditions and Restrictions) Regulations 2003 requires a Code operator to ensure sufficient funds are available to meet certain "specified liabilities", chiefly the cost of removing apparatus and making good damage to streets, for example filling trenches and reinstating pavements, if the operator stops trading. The operator must certify this cover to Ofcom at least two weeks before first using its Code powers, and then annually on 1 April (Ofcom, 2026b).

The purpose is sensible. It is an insurance mechanism, so that if a network builder collapses mid-dig, there is money to make streets safe and remove abandoned kit, rather than leaving councils, the public purse or Openreach to pay. As Ofcom put it, this "helps ensure that the public is not left having to pay for such works" (ISPreview UK, 2026b).

The enforcement programme, in Ofcom's own words

Ofcom has done two things at once. It opened individual investigations into five named operators after finding "reasonable grounds to believe" they may not be meeting their duty to demonstrate they hold the required funds, and it launched a wider enforcement programme across the industry. Ofcom was explicit about why now: "Given how quickly the market is changing, ensuring that Code Operators are securing the right funds is more important than ever before" (ISPreview UK, 2026b). It added that it would engage with other operators of concern, that the programme is expected to run for several months, and that more investigations may follow.

Two points deserve emphasis. First, by ISPreview's account, Ofcom has not previously run investigations of exactly this kind, so there is no direct precedent. Second, and most importantly, opening an investigation is not a finding of wrongdoing. These cases concern whether operators have demonstrated the required financial cover and filed the right certificates, not the quality, speed or safety of the live broadband they provide. Nothing here should be read as suggesting any of these companies has done anything wrong, and we do not predict any outcome.

The five operators

Here is a verified, neutral profile of each operator named. Company details are from Companies House; network details from each operator's own material or reputable reporting.

Internetty has pushed back publicly. In a statement, it said it "has, and continues to have, the required financial arrangements and liability cover in place", that it "provided Ofcom with the relevant information and supporting documentation during the previous reporting period", and that it has "responded to the regulator to raise our concerns regarding the basis of the investigation and the wording of the notification, as we believe it does not accurately reflect our compliance position" (ISPreview UK, 2026b). It added it "remains confident" it has the appropriate funds and certificates in place. That response is a useful reminder that an Ofcom notification is the start of a process, not a verdict.

Optical Fibre Infrastructure Limited is the most low-profile of the five. Companies House records it as company number 11524508, incorporated on 20 August 2018, registered in Tring, Hertfordshire, and formerly named Optifi Ltd until March 2020, with a listed business of wired telecommunications activities (Companies House, 2026). Beyond that, there is limited verifiable public information about its network, and we will not speculate.

Pine Media is Sheffield's home-grown full fibre operator. It has been operating for well over a decade, having started out delivering fixed wireless broadband to rural communities before building its own full fibre network across Sheffield and South Yorkshire, now covering more than 37,000 premises, with symmetric speeds and no mid-contract price rises (Pine Media, 2026; ThinkBroadband, 2026).

The consolidation context

None of this is happening in a vacuum. The UK is deep into what the industry calls the "Great Consolidation" of fibre, as rising build costs, higher interest rates and fierce competition force mergers and cost-cutting. The strain is visible in the same news cycle: in mid-July 2026, CityFibre, the UK's largest altnet, notified around 200 staff of possible future redundancy (ISPreview UK, 2026c). Against that backdrop, Ofcom tightening the screw on financial-resilience certificates is less a surprise than a sign the regulator is doing its job of protecting consumers and the public before, not after, any operator runs into trouble. For the full picture, see our altnet consolidation tracker and our Great Consolidation report.

What it means for you: the measured takeaway. A full fibre connection from a smaller altnet can be excellent, and being named in Ofcom's programme is about financial-cover paperwork, not the broadband arriving today. Even if a small network is acquired or restructured, your service usually continues under a new owner, and One Touch Switching lets you move if you wish. That said, it is sensible to weigh resilience when you choose. Before signing with a smaller altnet, check the contract length and whether the price is fixed for the term, confirm the network is "ready for service" at your exact address rather than merely planned, remember most altnets are broadband-only so you will need a digital voice service if you rely on a home phone, and check whether a fallback network exists at your postcode.

3. Mobile spectrum: the 1.4 GHz auction and better coverage

Ofcom moved its plan to release new mobile spectrum a step closer. Having decided on 11 June 2026 to auction the upper block of the 1.4 GHz band, it published its consultation on the auction regulations on 25 June 2026, with the auction expected in the first half of 2027 (Ofcom, 2026c).

What is the band for? The upper 25 MHz block (1492 to 1517 MHz) is supplemental downlink (SDL) spectrum, extra one-way capacity that boosts the download performance of 4G and 5G networks. The lower 40 MHz of the band is already used by VodafoneThree and Virgin Media O2, and Ofcom expects this additional slice to improve mobile performance where it is weakest, particularly indoors and in rural areas (Ofcom, 2026c; ISPreview UK, 2026d). The sale is designed as a single-lot, sealed-bid, second-price auction with a £5 million reserve, and Ofcom decided against a spectrum cap. To protect satellite receivers used for maritime and aviation safety in the neighbouring 1.5 GHz band, coexistence measures and coordination zones apply.

What it means for you: this is a slow-burn improvement. If you have battled poor indoor mobile signal or sluggish rural data, extra download capacity like this is part of how networks will chip away at the problem, though the benefits will not land until after the 2027 auction and deployment. In the meantime, if home mobile signal is your issue, a 4G or 5G home broadband deal can sometimes help. Ofcom also published a call for input on making its spectrum framework more supportive of innovation, and a consultation on spectrum to help sites such as prisons and airports detect hostile drones, both open for responses.

4. Online safety: age checks, the TikTok investigation and VPNs

This section touches on child protection. We keep it factual and high level, and signpost support rather than dwell on detail.

Ofcom published its statutory Use of Age Assurance Report 2026, assessing how online services used age checks in the first six months of the child-protection duties, and the picture is one of rapid scaling. More than 69 million age checks were completed across a sample of 32 services between July and December 2025, a 23-fold increase on the previous six months, and 64 of the top 100 pornography services in the UK had deployed age assurance by June 2026, with a further 10 geo-blocking UK users (Ofcom, 2026d). Ofcom says that where implemented properly, highly effective age checks work, though it stressed the "job is not done", noting for example that over one in ten 15 to 17 year-olds were still visiting some of the most-used dating apps in December 2025. The report also feeds into a bigger debate: in June 2026 the Government announced its intention to require highly effective age assurance to prevent under-16s from accessing social media, and Ofcom is due to report to Parliament by the end of October on how such checks could work, ahead of potential restrictions in 2027 (Ofcom, 2026d).

Ofcom also raised concerns about "age inference", where a platform guesses a user's age from their behaviour rather than checking it. On 16 July 2026 it opened an investigation into whether TikTok's UK entity has complied with child-protection duties under section 12 of the Online Safety Act 2023, focused on whether its age-inference method is highly effective at correctly identifying child users, and it expects to update in October 2026 (Ofcom, 2026e). We stress that no breach has been established, that opening an investigation is not a conclusion, and that TikTok has said it complies with the law and uses expert-informed technology to detect users' ages.

On VPNs, Ofcom's research found that the use of VPN apps, which can change a user's apparent location and so be used to sidestep age checks, rose after the age-check duties came in. A VPN is a legitimate privacy and security tool with many everyday uses, so its presence on a home network is not automatically a red flag, but parents should be aware that older children may use one to bypass age checks. Our VPN explainer covers how they work.

What it means for you: age checks are now a routine part of the UK internet, so expect to meet more identity or facial-age-estimation checks on adult and some social platforms. For parents, the most useful steps are practical: use built-in parental controls, keep conversations open, and lean on trusted resources. Our free tool at ParentalControl.uk checks your home network in about 30 seconds, and our online safety hub has step-by-step guides, including our first smartphone checklist and our guide to Snapchat My AI and AI companions.

5. What it all means for you

Step back, and a clear pattern runs through the week. Ofcom is shifting responsibility onto the companies best placed to act, networks, messaging intermediaries and platforms, and onto financial-resilience safeguards, rather than leaning on consumers to defend themselves after the fact.

Here is what to actually do. On scams, keep reporting suspicious texts to 7726 and stay sceptical of any message or call demanding urgent payment or a passcode, because the network-level protections do not fully take effect until 2027. On broadband, do not be put off genuine full fibre from a smaller altnet, but check "ready for service" status, contract length and price certainty, and whether a fallback network exists at your postcode. If you rely on a home phone, plan for a digital voice service and consider battery backup for power cuts. And if you are a parent, treat VPN use as normal rather than alarming, use built-in family settings, and talk to older children about why age checks exist.

The single most useful thing you can do after this week is find out exactly what is available where you live, and what it will really cost over the whole contract.

Frequently asked questions

What are Ofcom's new scam text rules?

Ofcom has confirmed binding rules requiring mobile providers and messaging intermediaries to block, limit and disrupt scam texts. For person-to-person messages, providers must set volume limits on pay-as-you-go SIMs, gather intelligence on scam numbers and links, and block scam messages in transit. For business messages, they must run Know Your Customer and Know Your Traffic checks, verify business Sender IDs, and block scams in transit. The rules take effect on 18 January 2027 (person-to-person) and 15 July 2027 (business messaging).

When do the new scam text rules start?

The rules covering person-to-person messaging come into effect on 18 January 2027, and those covering business messaging on 15 July 2027, as set out in Ofcom's July 2026 statement.

Why is Ofcom investigating fibre broadband companies?

Ofcom has opened investigations into five altnets over whether they can demonstrate they hold the funds required under Regulation 16 of the Electronic Communications Code. Those funds are an insurance mechanism so that, if a network builder ceases trading, there is money to make streets safe and remove abandoned equipment. The investigations concern financial-cover certificates, not the quality of the broadband those companies provide, and opening an investigation is not a finding of wrongdoing.

Does the Ofcom fibre investigation affect my broadband service?

No. The investigations are about whether operators have demonstrated the required financial cover and filed the correct certificates, not about the speed, reliability or safety of the broadband arriving down your line today. If a smaller network is ever acquired or restructured, service usually continues under a new owner, and One Touch Switching lets you move if you wish.

What is the 1.4 GHz spectrum auction?

Ofcom is auctioning the upper 25 MHz block of the 1.4 GHz band (1492 to 1517 MHz) for 4G and 5G mobile use. It is supplemental downlink spectrum, extra one-way capacity that boosts download performance, and Ofcom expects it to improve mobile coverage and speeds where signal is weak, especially indoors and in rural areas. The auction is expected in the first half of 2027.

Are age checks working in the UK?

Ofcom's Use of Age Assurance Report 2026 found age checks scaling rapidly, with more than 69 million checks completed across a sample of 32 services in the second half of 2025, and 64 of the top 100 pornography services in the UK deploying age assurance by June 2026. Ofcom says the checks work where properly implemented, but that the "job is not done".

Is Ofcom investigating TikTok?

Yes. On 16 July 2026 Ofcom opened an investigation into whether TikTok's UK entity has complied with child-protection duties under section 12 of the Online Safety Act 2023, focused on whether its age-inference method is highly effective at identifying child users. Ofcom expects to update in October 2026. No breach has been established, and TikTok says it complies with the law.

References

• BBC News. (2025). Crackdown on scam calls imitating UK phone numbers. https://www.bbc.co.uk/news/articles/c29dwl5e5zjo
• Companies House. (2026). Optical Fibre Infrastructure Limited (company no. 11524508): Company overview. GOV.UK. https://find-and-update.company-information.service.gov.uk/company/11524508
• ISPreview UK. (2026a). Ofcom introduce new UK rules to tackle mobile messaging scams. https://www.ispreview.co.uk/index.php/2026/07/ofcom-introduce-new-uk-rules-to-tackle-mobile-messaging-scams.html
• ISPreview UK. (2026b). Ofcom investigates multiple UK broadband networks over liability funds (UPDATE). https://www.ispreview.co.uk/index.php/2026/07/ofcom-investigates-multiple-uk-broadband-networks-over-liability-funds.html
• ISPreview UK. (2026c). Broadband altnet CityFibre notifies 200 UK staff of possible future redundancy. https://www.ispreview.co.uk/index.php/2026/07/broadband-altnet-cityfibre-notifies-200-uk-staff-of-possible-future-redundancy.html
• ISPreview UK. (2026d). Ofcom set to auction upper 1.4GHz band for UK 4G and 5G mobile in 2027. https://www.ispreview.co.uk/index.php/2026/06/ofcom-set-to-auction-upper-1-4ghz-band-for-uk-4g-and-5g-mobile-in-2027.html
• Ofcom. (2026a). New rules to thwart text message scammers and protect consumers and businesses. Office of Communications. https://www.ofcom.org.uk/phones-and-broadband/scam-calls-and-messages/new-rules-to-thwart-text-message-scammers-and-protect-consumers-and-businesses
• Ofcom. (2026b). Electronic Communications Code: Funds for Liabilities. Office of Communications. https://www.ofcom.org.uk/phones-and-broadband/telecoms-infrastructure/funds-for-liabilities
• Ofcom. (2026c). 1.4 GHz spectrum auction. Office of Communications. https://www.ofcom.org.uk/spectrum/innovative-use-of-spectrum/1.4-ghz-band-available-for-mobile
• Ofcom. (2026d). Use of Age Assurance Report 2026, and Age checks helping make online experiences safer for UK children, but 'job not done'. Office of Communications. https://www.ofcom.org.uk/online-safety/protecting-children/use-of-age-assurance-report-2026
• Ofcom. (2026e). Investigation into TikTok's compliance with duties to protect children from encountering harmful content under section 12. Office of Communications. https://www.ofcom.org.uk/online-safety/protecting-children/investigation-into-tiktoks-compliance-with-duties-to-protect-children-from-encountering-harmful-content-under-section-12
• Pine Media. (2026). About Pine Media, Sheffield's full fibre broadband provider. Pine Media Ltd. https://pinemedia.net/about-us
• ThinkBroadband. (2026). Pine Media broadband, full fibre and reviews UK. https://www.thinkbroadband.com/isps/pinemedia
• UK Finance. (2026). Annual Fraud Report 2026. https://www.ukfinance.org.uk/

Written by Adrian James, Broadband Editor at BroadbandSwitch.uk (LinkedIn). Reviewed by Dr Alex J. Martin-Smith (LinkedIn). Published 17 July 2026. This article is information, not advice, and reflects Ofcom publications available on 17 July 2026; open cases may develop.