Risk Management Policy

BlackSMS ("we," "our," or "us"), available at https://blacksms.in, maintains a comprehensive risk management framework. This Risk Management Policy details our protocols for screening accounts, monitoring traffic, detecting payment fraud, and mitigating operational risks associated with A2P SMS transmission.

1. Onboarding Risk Assessment

To prevent platform misuse, every new sign-up undergoes a multi-layer risk assessment before receiving active API keys:

• KYC Validation: Cross-referencing business registrations (GST/PAN) with Government databases to verify company authenticity.
• DLT Alignment: Verifying that the customer's DLT Principal Entity (PE) ID registration matches the registered business profile.
• Industry Category Assessment: Assessing customer business models against our Prohibited Businesses list. High-risk categories (e.g., micro-lending, gaming) are subject to deeper manual review.

2. Real-Time Traffic & Heuristic Monitoring

Our platform operates automated, real-time traffic analysis algorithms to detect anomalies:

• Volume Spikes: Sudden, unexplained increases in SMS traffic volume (burst campaigns) trigger automated account rate-limiting and administrative review.
• Keyword Filters: Automated screening for prohibited terms associated with phishing, adult services, loan scams, and crypto fraud.
• Error Rate Monitoring: Monitoring the delivery status codes returned by carriers. A high proportion of invalid mobile numbers (suggesting list scraping) triggers automated account flagging.

3. Payment & Billing Risk Controls

To prevent chargebacks, credit card fraud, and money laundering:

• Cardholder Validation: Ensuring the billing details used for payment gateway transactions (via Stripe, Razorpay, or Cashfree) match the KYC verified identity on our portal.
• Prepaid Safeguards: High-risk accounts are restricted to a prepaid-only billing model, preventing postpaid credit exposure.
• Velocity Checks: Automated velocity filters restrict the frequency and maximum amount of recharge transactions per account within 24 hours.

4. Regulatory Audits and System Reviews

Our compliance team conducts monthly internal audits of randomly selected accounts. These audits review template matching logs, DND scrubbing success rates, and customer consent databases. Any identified compliance deviations lead to immediate warning notices, with failure to remediate resulting in account suspension.