Safety

Icasa wants a 5-number cap per network. Comments close 9 December

Icasa's draft Numbering Plan Fifth Amendment would cap people at five mobile numbers per network and require biometric checks for activation and number swaps. Comments are due within 30 working days of 28 October 2026.

By Reported Team

Three smartphones laid on a light blue desk, showing multiple mobile devices
Photo via Unsplash (free licence)

Icasa proposes a cap of five mobile numbers per subscriber on each network, plus real-time biometric checks when you activate a number or request a number swap.

The draft sits in Government Notice 4217, Gazette 55631 of 28 October 2026. It is still a proposal. Written comments are due within 30 working days of publication, which MyBroadband calculates as 9 December 2026.

What is the five-number limit?

Draft sub-regulation 6A(12A) says a licensee must limit assignment of mobile numbers to a maximum of five mobile numbers per subscriber (Gazette 55631).

Icasa's explanatory note says the limit is per licensee, not across every network. In practice a person could still hold more than 20 numbers by using different operators (Gazette 55631; MyBroadband).

Today's operator caps differ widely, according to MyBroadband:

NetworkCurrent max numbers per ID (MyBroadband)
VodacomUp to 100
TelkomUp to 20
MTNUp to 10
Cell CNo stated limit

Source: MyBroadband.

Icasa cites about 117.3 million active mobile subscriptions against a population of about 63 million, or roughly 2.79 subscriptions per person, and argues five numbers per person per licensee balances access with efficient use of numbering resources (Gazette 55631).

Biometric checks for activation and number swaps

Draft sub-regulation 6A(5) requires a licensee, on activation or re-activation of a mobile number, to verify the subscriber's identity through biometric verification against Department of Home Affairs records. Biometric data is defined as physical characteristics such as facial images or fingerprints (Gazette 55631).

For a South African citizen, the licensee must keep a record of the full name, ID number, and the place, date and time of the check. Permanent residents need those details plus a certified copy of the residence permit. Foreign visitors need passport details, a local address while in South Africa, and visa details where a visa is required. Numbers for foreign visitors may stay active only for the visa period or 90 calendar days (Gazette 55631).

If you request a number swap, the licensee must run the same biometric check and must refuse the request if your identity does not match the records for that number (Gazette 55631; MyBroadband).

Biometric data and the verification records may only be used for identity verification. After a number is deactivated, records must generally not be kept longer than 30 days unless the law, a contract or your consent requires longer retention (Gazette 55631).

When would this start?

Nothing changes until Icasa finalises the draft.

Under the draft short-title clause, sub-regulations 6A(5) to 6A(12C) and regulation 24A would take effect 12 months after final publication.

Licensees would then have two years from commencement to biometrically verify existing subscribers (Gazette 55631).

Companies and the draft

Numbers assigned to juristic persons are exempt from the biometric rules in 6A(5) and from regulation 24A. Icasa says company relationships are governed by contract and registration documents (Gazette 55631).

The five-number cap is worded as applying per subscriber. Icasa's note speaks of per person per licensee. MyBroadband says companies fall outside that cap. The draft text of 12C only names the biometric and transitional rules, so fleet managers should watch the final wording.

Draft penalties

BreachDraft fine
Core identity-verification duties (including 6A(5), (6), (7), (8), (9), (12), (12B))R2 million to R4 million per contravention
Five-number limit (6A(12A)) and some related dutiesR1 million per contravention
Lower-tier procedural breachesR50 000 per contravention

Source: Gazette 55631.

How to comment

  1. Deadline: 30 working days from 28 October 2026 (MyBroadband puts that at 9 December 2026).
  2. Email: [email protected]
  3. Enquiries: Elias Letlape, (012) 568 3323, [email protected]
  4. You may request confidentiality under section 4D of the Icasa Act, and ask to speak at hearings if Icasa holds them.

Sources: Gazette 55631; MyBroadband on the five-number proposal; MyBroadband on biometric activation and swaps.

Icasa says this scheme is separate from RICA registration. It is still a draft: nothing is final until after comments and a final notice.

FAQ

Is the five-number limit law yet?

No. It is a draft in Gazette 55631 of 28 October 2026. Nothing changes until Icasa finalises the regulations after the comment period.

Is the cap five numbers in total, or five per network?

Per licensee (network). Icasa says you could still hold more than 20 numbers by using different operators.

When would biometric checks start?

Under the draft, the biometric activation, swap and five-number rules would take effect 12 months after final publication. Operators would then have two years to verify existing subscribers.

How do I comment?

Email written representations within 30 working days of 28 October 2026 to [email protected]. MyBroadband calculates the deadline as 9 December 2026.

What fines does the draft set?

Core identity-verification breaches: R2 million to R4 million per contravention. Breach of the five-number limit: R1 million per contravention. Some lesser breaches: R50 000.

Sources