Spain has rolled out a sweeping new set of telecom rules aimed at curbing spam, fraud and opaque calling practices – and the changes will reshape how businesses communicate with consumers. From June 2025, companies will no longer be able to place marketing or customer-service calls from mobile numbers, and operators must begin blocking spoofed or unauthorised caller IDs.
New transparency obligations also require clearer identification and stricter consent controls for outbound contact.
The package marks one of Europe’s toughest crackdowns on misleading phone communications, carrying major implications for consumers, telcos and value-added service providers alike.
The key regulatory instrument is Order TDF/149/2025 (12 February 2025) issued by the Spanish Government via the Secretariat of State for Telecommunications and Digital Infrastructures, together with provisions in Law 11/2022 (General Telecommunications Law) and associated privacy-/telemarketing-rules. According to analysts at Bird and Bird, the main elements are:
- Ban on outbound commercial/customer-service calls from mobile numbers
- From 7 June 2025 (in many cases) businesses may no longer use mobile numbers (numbering ranges starting with 6 or 7) to make customer-service or marketing/outbound commercial calls says megacall.uk+2Direct Telecom+2
- The regulation also prohibits use of mobile numbers as the calling line identification (CLI) for such calls, according to Bird & Bird+1
- For example, one summary states: “Since June 7, 2025 … prohibits making commercial calls from mobile numbers.” finds megacall.uk
- Requirement for use of authorised number ranges (landline, toll-free)
- Outbound calls (customer service / marketing) must be done via numbers properly assigned and regulated under the national numbering plan (geographic landlines, or “800/900” toll-free numbers) rather than arbitrary mobile or unregistered numbers, adds Bird & Bird+1
- Use of unassigned numbers, “spoofed” numbers, fake CLI or empty CLI is prohibited and will be subject to blocking, according to Direct Telecom+1
- Blocking of international traffic and spoofing / fake numbering
- Operators must identify and block calls (voice) and messages (SMS/MMS/RCS) that use Spanish number ranges but originate abroad or use spoofed/faked Spanish CLI identifiers, says Bird & Bird+1
- There will be a mandatory registry for alphanumeric sender IDs (for messages) and restrictions on message-sender identification, adds Bird & Bird
- Transparency and consent / telemarketing protections remain strong
- Under the LGT and the data-protection framework (General Data Protection Regulation + LOPDGDD), outbound calls for advertising require express prior consent (opt-in) unless a narrow legitimate interest basis applies (e.g., existing customer relationship) and exclusion lists (e.g., the “Robinson List”) must be checked, according to Hogan Lovells.
- Calls must identify the calling entity, purpose of call, and offer a right to object/refuse, says TALK-Q
- Staged implementation
- While the Order came into force 7 March 2025 for many provisions, certain blocking obligations (especially for international calls/messages and message sender alias tracking) take effect later (e.g., June 2025, June 2026) as per the regulation, adds Bird & Bird.
What it means – stakeholder implications
For Consumers
The positives for consumers include better protection from unwanted and fraudulent calls and messages: fewer spoofed numbers, more traceability. There will also be clearer identification of who is calling, because businesses must use legitimate, appropriately assigned numbers (and cannot hide behind mobile numbers), recipients can more easily recognise genuine calls.
It also reinforces rights and gives ability to object to future contact, clearer transparency at the start of calls.
There are some potential downsides and adjustments, however. Consumers may notice fewer “mobile” numbers calling you for sales/marketing; instead calls will often originate from landline or toll-free numbers — might feel less “personal” but more professional/trusted.
If a consumer relies on a business contacting them via a mobile number they’re used to, they might be asked to update their contact preferences or the business may change the number they call from.
For telco operators
For telcos there are of course increased obligations, with the need to identify and block traffic that uses spoofed or improper numbering; ensure CLIs are valid and authorised; report blocked communications to the regulator (CNMC / Secretariat), according to Bird & Bird+1
Numbering management must also ensure that businesses use correctly-assigned numbers (geographic or 800/900) for outbound CRM or marketing; must prevent use of mobile numbers for such uses. Operators may have to implement blocking filters, CLI-verification processes.
There are also some potential revenue shifts. Some business customers may move away from using mobile numbers for outbound calls and instead adopt toll-free or landline numbers; operators will need to manage this transition and support virtual/VoIP solutions accordingly.
Another impact may stem from non-compliance attracting sanctions. Operators must coordinate with the regulatory ecosystem (Comisión Nacional de los Mercados y la Competencia – CNMC, AEPD).
For outbound services
For anyone operating outbound mVAS, marketing or cold calling their are major operational impacts. If your business uses mobile numbers to place outbound sales or customer-service calls to Spanish consumers, you must stop doing so from mobile numbers (unless very specific, permitted consent cases) and transition to proper number ranges.
You will also need to ensure you use valid CLI, check exclusion lists (Robinson), record consents, present correct identity, avoid spoofing. Failure to do so may lead to call blocking or regulatory enforcement.
The change reduces the anonymity/“personal mobile” feel of calls; companies may need to adopt branded-call solutions (number + display of company name/logo) to maintain answer rates and trust. One article notes that companies can no longer rely on using mobile numbers to boost answer rates in Spain, says Hiya.
If you are calling into Spain from abroad (or using international platforms) you must ensure number‐ownership, CLI authenticity, compliance with Spanish numbering rules — you cannot circumvent by using a Spanish CLI if traffic originates abroad and isn’t authorised, according to TALK-Q+1
If you provide SMS/MMS/RCS or “sender ID” services, you will also face new rules about sender-alias registration, blocking of inappropriate sender IDs, etc.
Strategic considerations and next steps
- For businesses making outbound calls: Audit your current number usage. If you or your agent/call centre are using mobile numbers for outbound marketing or customer service calls in Spain — you need to switch to landline or 800/900 number ranges and implement/upgrade your CLI management, consent tracking, exclusion list checking.
- For telcos/operators: Review your network filtering, CLI verification, number-assignment systems, reporting mechanisms. Engage clients (business customers) early about the changes so they comply.
- For consumers: Be aware that you should not get commercial calls from mobile numbers you don’t recognise; you have the right to request identification of who is calling, the reason, and to object to further calls.
- For messaging/supplementary service providers: Ensure that your services comply with the sender ID registration requirements, and that you are not inadvertently facilitating unauthorised/untraceable messaging.
Why this matters
Spain has faced high levels of unwanted calls, spoofing, mobile-marketing abuse and phone-fraud. The regulations aim to restore trust in voice and messaging channels, according to Hiya.
For the telecom ecosystem, this is part of a broader global trend (and EU regulation) of improving caller ID authenticity, increasing transparency, and protecting consumers in digital communications.
For businesses involved in outbound customer engagement, there’s a risk: if you don’t adapt, your calls may be blocked, your deliverability may drop, you may face regulatory fines — but there’s also an opportunity to build more trusted, branded communication channels.
