Ofcom bans mobile network loopholes that let criminals spoof identities

Ban on Global Title leasing targets criminals who exploit telecom infrastructure for fraud and data theft

Ofcom confirmed on Tuesday that it has shut down a “technical loophole” in the UK’s mobile networks that allowed hackers to spy on users by banning the lease of Global Titles.

The move targets the misuse of Global Titles — special identifiers that work in the background to ensure calls and texts are routed to the intended recipients. Whilst some businesses lease Global Titles for legitimate services, Ofcom said the system has also been exploited by criminals to intercept security codes sent by banks, reroute calls, and track the location of individuals in real time.

In response, Ofcom's new rules now forbid UK firms from leasing or reselling access to these identifiers unless they have a direct, legitimate operational purpose. Ofcom said the change takes effect immediately and any existing lease arrangements must be wound down by 22nd April 2026.

Efforts to self-regulate the issue, including technical filters and voluntary codes, have failed to stop widespread misuse.

The ban follows growing concern that the UK’s mobile infrastructure has been left wide open to exploitation by sophisticated fraud syndicates. One such concern was contained in CIFAS’ recent warning to the public about a sophisticated mobile scam that tricks customers into divulging their banking details.

Last February, the telecom watchdog launched an “enforcement programme” to investigate how telecom providers handle phone and text scam prevention. The programme is designed to identify weaknesses in compliance and could lead to formal action where companies are found to fall short.

More recently, on 14 April, the regulator opened a separate investigation into communications provider Primo Dialler. It is examining whether the company misused sub-allocated phone numbers, which could have enabled further scam activity.

Ofcom’s Director for Networks and Communications Natalie Black said: “Leased global titles are one of the most significant and persistent sources of malicious signalling. Our ban will help prevent them from falling into the wrong hands, protecting mobile users and our critical telecoms infrastructure in the process.”

The regulator’s crackdown has been welcomed by cybersecurity experts, including the

Chief technical officer at the NCSC, Ollie Whitehouse, who hailed it as “…an important step in the support of our mission to make the UK the safest place to live and work online.”