On 12 October 2026, Italy's communications regulator AGCOM announced that it had fined two companies, Retelit Digital Services (€700,000) and Tekmind (€122,500), a combined €822,500 for failing to control how telephone numbers assigned to them were used in telemarketing, including numbers generated through caller-ID spoofing. The decisions, delibere 229/26/CONS and 230/26/CONS, were adopted on 23 September 2026 after proceedings opened in November 2025. This is telecom enforcement, not a Digital Services Act decision, and that distinction is the interesting part: it shows what targeted, technical regulation looks like when it works.
The case for tough enforcement
The strongest argument for the fines is simple. Spoofing is not a nuisance in the abstract; it is the delivery mechanism for fraud, and it works because recipients trust an Italian number. A rule that binds only the criminals who ignore rules is no rule at all, so regulators have to reach the legitimate intermediaries whose numbering resources the fraudsters borrow. AGCOM's press release says the breach was a failure to implement the measures the Authority had set: verifying the correctness of numbers used by call centres, including spoofed ones, and managing assigned numbers with due diligence. Holding number holders accountable is a defensible reading of that duty.
Why the fines are the smaller story
The sums are not large. Retelit, per Il Sole 24 Ore, called the decision "unexpected" and said it does not run telemarketing through call centres, describing its lapse as a failure of due diligence. Whether that defence holds is for the courts to test. What is already clear is that €822,500 across two firms is not what has changed Italian phones.
The real mechanism is the filter introduced by delibera 106/25/CONS in May 2025, with its technical annex published by AGCOM. It works at the carrier level: international calls arriving with an Italian fixed or mobile number as caller ID are checked and blocked. For mobile numbers, networks verify validity, operator assignment and whether the SIM is actually roaming abroad, because a genuine Italian customer travelling overseas must still be able to call home. Euronews reported in November 2025 that the checks cover number validity, operator assignment, current SIM location and technical routing consistency.
AGCOM's own figures are striking. In the first eight months of 2026 the filters blocked roughly 191 million calls, about 790,000 a day. That breaks down into 148 million calls with an Italian mobile number, 38 million with an Italian fixed number and 4.6 million with non-compliant numbering. Comparing with 1 to 18 November 2025, before the block reached mobile numbers, calls from abroad to Italian mobiles fell 95 percent, from 26.8 million to 1.2 million a day.
What proportionate regulation looks like
From a pro-innovation, pro-speech standpoint, this design has real virtues.
- It targets a verifiable falsehood. A caller ID claiming to be an Italian mobile number while originating abroad is a technical inconsistency, not an opinion. Nobody has to judge content, and no lawful speaker is silenced.
- It is narrow by construction. Genuine roaming calls and legitimate call-centre operations are meant to pass, and the roaming check is exactly the safeguard that makes the rule proportionate.
- It places the duty where the capability sits. Carriers see routing data; consumers and small businesses do not.
- It is measurable. AGCOM publishes block counts and traffic changes, which lets outsiders judge effectiveness rather than take it on faith.
Compare this with broad content-moderation mandates, where the regulated act (is this post harmful?) is contestable and over-removal is the rational response to fines. Here the unlawful act is objectively checkable, so enforcement risk does not push firms to suppress legal activity.
The limits regulators should acknowledge
Three cautions apply. First, displacement: the same press material shows total international traffic falling from 34 to 11 million calls a day, and Euronews noted that real foreign numbers that do not disguise themselves are hard to block without wider international cooperation. Fraud migrates to whatever the filter cannot see. Second, due-process risk in the penalty track: obligations phrased as "due diligence" over customers' use of numbers can drift toward open-ended liability. If regulators judge firms after the fact against standards not spelled out in advance, carriers will over-block or refuse smaller resellers as customers, which hurts competition and legitimate telemarketing alike. AGCOM should publish concrete verification benchmarks so that compliance is knowable. Third, I could not confirm from AGCOM's materials the reported welcome from consumer groups, businesses and unions; the regulator's own release is the evidence base here, and readers should weigh it as a self-report.
The takeaway for platform rules
Italy's experience offers a template for the wider debate over platform accountability, including under the DSA. Rules that attach to objectively verifiable conduct, publish their metrics, build in exceptions for legitimate use and bind the party with technical control tend to deliver results without collateral damage to speech. Rules that require intermediaries to adjudicate lawfulness of expression at scale tend not to. The fines will make headlines; the filter deserves the scrutiny, and the imitation. The test for AGCOM now is whether it keeps the standard clear and the burden proportionate as fraudsters adapt.