What happened
The FCC, in a Notice of Proposed Rulemaking published May 26 under CG Docket Nos. 17-59 and 02-278, is asking whether originating voice service providers should be required to collect and retain a specific bundle of customer data before activating service. The bundle, per the docket text cited by CryptoSlate, covers customer names, physical addresses, government-issued identification numbers, alternate telephone numbers, and supporting verification records.
The agency proposes a four-year retention window that starts running only after the customer relationship ends. The stated purpose is to harden the call-origination layer against illegal robocalls by making it harder for bad actors to obtain anonymous phone service. The proposal is open for comment before any final rule is adopted, and the FCC has not committed to the four-year figure as final.
Why it matters
Crypto theft on the retail side runs through phone numbers more often than through private keys. SIM-swap crews don't break encryption. They social-engineer a carrier rep, port a victim's number to a SIM they control, intercept the SMS one-time code, and reset the password on a Coinbase, Kraken, or Gemini account.
The bottleneck for that attack has always been the same: the crew needs identifying detail on the victim that matches what the carrier has on file. Today that detail is scattered across data brokers, prior breaches, and OSINT. A federal rule that consolidates name, address, government ID number, and alternate phone into a mandatory carrier-held dataset, retained for four years after a customer leaves, is the definition of a honeypot.
