PROCLAMATION · Maltese regulatory framework

MCA in practice: CLI verification, Sender ID and the Do Not Originate list for A2P SMS into Malta

The Malta Communications Authority (MCA) regulates the +356 numbering plan and the alphanumeric Sender ID under the Electronic Communications (Regulation) Act (Cap. 399). Three operators cover the islands: GO plc, Melita and Epic Communications Limited. 4notify routes via direct tier-1 termination on all three operators, registers the alphanumeric Sender ID and verifies the Do Not Originate list at the API edge — no grey-route, full traceability, EUR pricing throughout.

The three Maltese mobile network operators

GO plc

Share: ~46% · P50: 2.5 s

Incumbent operator (formerly Maltacom); largest mobile and fixed network on the islands; tier-1 termination preferred by regulated sectors.

Melita

Share: ~32% · P50: 2.8 s

Cable, broadband and mobile MNO; strong household penetration; solid alphanumeric Sender ID acceptance.

Epic

Share: ~22% · P50: 3.1 s

Former Vodafone Malta, acquired by Monaco Telecom; urban coverage and redundant international routes.

MCA numbering plan

+356 79xx / 77xx / 99xx / 98xx / 96xx — MobileThree MNOs plus a small MVNO segment; MCA requires CLI verification chain for A2P.
+356 21xx / 22xx / 25xx / 27xx — Fixed / VoIPGeographical and VoIP enterprise lines, including business hubs in Sliema, Birkirkara and Mosta.
Short code (4-5 digit)Two-way SMS; trademark registration with each operator; dedicated or shared allocation.
Alphanumeric Sender ID (≤11 chars)Registered with all three operators; requires demonstrable trademark or Malta Business Registry company.

MCA compliance chain in five steps

  1. 01

    MCA notification + operator contracts

    4notify is notified with the MCA as an electronic communications service provider and holds Sender ID contracts with GO, Melita and Epic.

  2. 02

    Alphanumeric Sender ID registration

    Brands register their Sender ID with each operator. Requirements: registered trademark or MBR company, sample message, declaration of use. Activation: 5–10 working days.

  3. 03

    Do Not Originate list verification

    Banks, government and emergency services may never be spoofed as the Sender ID. 4notify mirrors the DNO list at the API edge and refreshes it every 5 minutes.

  4. 04

    GDPR lawful-basis enforcement

    For commercial messages, the Cap. 586 / S.L. 586.01 lawful basis is verified at envelope level; deliveries without a valid permission are blocked at the API edge.

  5. 05

    Opt-out keyword handling

    On every commercial message the keywords STOP and UNSUBSCRIBE are processed within 3 days and propagated into the suppression list.

Frequently asked questions

Do I need a Maltese company to send SMS into Malta?

4notify manages the tier-1 termination from European infrastructure, but Sender ID registration requires a demonstrable trademark or Malta Business Registry company. We walk you through the filing with GO, Melita and Epic.

What is the sanction for spoofing a reserved Sender ID?

Spoofing a Sender ID on the Do Not Originate list (banks, government, emergency services) can carry MCA sanctions under Cap. 399 and civil liability for fraud. That is why 4notify verifies the list before every send.

How long does Sender ID activation take?

Typically 5 to 10 working days. GO is usually the fastest; Melita and Epic can take 1-2 days longer, especially for first-time brand registrations.

Start free

Full MCA compliance, Sender ID in 5–10 working days, English-speaking support across CET hours, EUR pricing.