Verified institutional messaging

Prove it was you.

When a council, a bank or a hospital writes to someone, that person should be able to check it really came from them — and the sender should be able to prove it arrived, was read, and was answered. ADORASEC does both, on one channel.

SMS inbox9:41
City CouncilNot verified here

Your council tax bill for 2026/27 is ready. Please confirm you have received this.

ADORASEC9:41
City Council✓ Verified sender

Your council tax bill for 2026/27 is ready. Please confirm you have received this.

Confirm receipt

The same words, in two places. Only one of them can prove who sent it. Illustrative example

Part 1 — the problem

Sent is not received.

Sixty-five seconds on what happens today, when a message looks official and nobody can check.

What the film shows

“It looked official. That was all it needed to do.”

  • Two messages, same bank, same icon. Nothing in either one lets the recipient tell which is genuine. Email, SMS and one-to-one calls sit outside the Online Safety Act 2023 — Schedule 1, Part 1 exempts them.
  • The sender cannot see the outcome either. Across our own Freedom of Information responses, around one follow-up is generated for every five communications sent.
  • Moving home breaks the chain. 1.8 million UK households move every year and fewer than half redirect their post.

The gap

We do not detect the fake.
We prove the real.

Blocking scam messages is being dealt with. From 15 July 2027 Ofcom requires providers to know their business customers, register Sender IDs and block what does not match.

That work protects the network. It does not help the person holding the phone, and Ofcom says so in its own words.

“…intended to prevent scammers from gaining access to A2P messaging services, rather than provide specific information or verifiability to recipients.”

Ofcom, Combatting mobile messaging scams, 15 July 2026
Verified sender

What is left unowned

Know-your-customer proves the sender to the operator. It proves nothing to the citizen.

By July 2027 every public body sending text messages will have been verified by its provider — Ofcom confirmed to us in writing that councils, the NHS and central government departments fall within the definition of a “business sender”.

And the person receiving the message still will not be able to tell. That is the gap we fill.

How it works

Identity is established once, in person.
Everything after that is provable.

1

Verified at the counter

The resident is already there for something else. One question, one tap on a tablet, and a receipt appears on their phone. No sign-up campaign, no app store hunt — the consent event happens where the person already is.

2

The message arrives on a separate, named channel

Not in the SMS inbox next to the impersonation. In a list of institutions the person has themselves activated, each marked verified sender.

3

The reply is structured, and the record is two-sided

Read, confirmed, answered — or not. The institution sees the outcome per person, with a reference it can look up. No reply is data too: the rest become one list.

Evidence, not assertion

We went and measured it.

Between July and September 2026 we sent Freedom of Information requests to 90 English councils. Every figure below is from a council’s own written response or a published regulator source.

68.8%

of the councils that answered could not produce a comparable unit cost for writing to their own residents.

ADORASEC FOI dataset, 44 of n=64
69×

difference between the cheapest and dearest price councils pay for a single text message — 0.30p to 20.72p.

ADORASEC FOI dataset, n=14
89.6%

median share of annual canvass responses arriving online, against 3.7% on paper.

ADORASEC FOI dataset, median of n=9 councils
£222m

lost to authorised push payment fraud in a year that was never reimbursed to the victim.

UK Finance, Annual Fraud Report 2026

Part 2 — the solution

Looking official is no longer enough.

Two minutes on what changes when the sender can be checked and the outcome can be counted.

What the film shows

“No reply is data too. The rest become one list.”

  • Senders are verified before they can send. The message sits in a named channel the person activated themselves — not in an inbox anyone can write to.
  • Paper goes out; answers come back online. The institution keeps its statutory paper route and gains a measurable digital one alongside it.
  • Not how many opened it — who opened it, and when. A per-person record with a reference, exportable as evidence.

Two ways in

One channel. Two sides of the same problem.

For institutions

You need to prove you wrote, and show what came back.

Councils, banks, insurers, property managers, schools and health providers. Statutory notices, billing, appointments, consultations — anywhere “sent” is currently doing the work that “received” should be doing.

For people

You need to know the message is really from them.

A short list of institutions you have activated yourself, and nothing else in it. Alongside it, a small personal safety circle: an SOS, up to three guardians, and one short daily message to someone who matters.