What is RCS?
RCS (Rich Communication Services), also known as "enhanced SMS," is the natural successor to traditional SMS. Developed by the GSMA and massively deployed by Google on Android since 2020, RCS transforms mobile messaging by adding modern features:
- 📱 Rich messages: high-resolution images, videos, GIFs, stickers
- ✅ Read receipts and typing indicators (like WhatsApp)
- 🔒 End-to-end encryption (progressively deployed)
- 💬 Improved group messaging
- 🏢 RCS Business Messaging (RBM): rich interactions with brands
In 2026, RCS is now active by default on all recent Android smartphones in France. Apple announced RCS support on iOS 18+ (fall 2024), marking a major turning point.
RCS vs SMS: technical differences
| Criterion | SMS | RCS |
|---|---|---|
| Message size | 160 characters | Up to 8000 characters |
| Multimedia | MMS (limited, extra cost) | Native images, HD videos, audio |
| Encryption | ❌ No | ✅ Yes (E2EE deployment) |
| Read receipts | ❌ No | ✅ Yes |
| Sender verification | ❌ Weak (easy spoofing) | ✅ Strong (business certification) |
| Anti-spam | Almost non-existent | Built-in (reputation score) |
Can RCS really reduce spam?
1. Professional sender verification
RCS's main anti-spam innovation is based on RCS Business Messaging (RBM). Companies wishing to send RCS messages must:
- ✅ Register with a certified aggregator (Twilio, Sinch, Vonage, etc.)
- ✅ Verify their legal identity (business registration, KYC)
- ✅ Obtain Google certification for their RCS "agent"
- ✅ Display their verified logo and name in conversations
Result: impossible for spammers to impersonate Orange, CAF, or your bank. The verification badge guarantees authenticity.
2. Integrated reputation system
Google assigns each professional RCS sender a reputation score based on:
- 📊 Block rate by users
- 📈 Engagement rate (opens, clicks, replies)
- ⚠️ Spam reports
- 📉 Unsubscribe rate
If the score drops, Google automatically limits sending or suspends the RCS agent. A mechanism similar to email reputation.
3. Mandatory opt-in (since 2026)
Since February 2026, the Business Messaging Charter requires:
- ✅ Explicit consent (opt-in) before any RCS marketing message
- ✅ Mandatory unsubscribe link in every message
- ✅ GDPR compliance and ePrivacy Directive
These rules align RCS with email marketing standards, making professional spam illegal and technically detectable.
RCS limitations against spam
1. SMS remains the backdoor
RCS is only active if:
- 📱 Both parties have a compatible smartphone
- 📶 Mobile Internet connection (4G/5G) or Wi-Fi
- ⚙️ RCS option enabled in settings
If any of these conditions are missing, the message automatically falls back to classic SMS — losing all RCS anti-spam protections.
Problem: spammers will continue targeting SMS for non-RCS users (seniors, basic phones, areas without 4G).
2. Smishing evolves
Smishing (phishing via SMS) represents 60% of mobile scam attempts in 2026. Even with RCS:
- ❌ P2P scams (between individuals) are not filtered
- ❌ Users can still click malicious links
- ❌ Disposable numbers (foreign MVNOs) bypass verification
3. Slow adoption outside Android
Apple delayed RCS adoption (iOS 18 in 2024), creating fragmentation:
- 📱 Android ↔ Android: protected RCS
- 📱 Android ↔ iOS: classic SMS (until iOS 18)
- 📱 iOS ↔ iOS: iMessage (closed ecosystem)
In France, with ~30% iOS users, RCS won't immediately cover the entire market.
RCS Business Messaging: opportunity or new spam channel?
Legitimate uses in 2026
RBM allows companies to create rich conversational experiences:
- 🎫 Order confirmations with real-time tracking
- ✈️ Flight notifications with integrated boarding pass
- 🏦 Banking alerts with action buttons (block card, contact advisor)
- 📦 Deliveries with driver geolocation
Risks of abuse
Like email or phone, RCS can become an aggressive prospecting channel if poorly regulated:
- ⚠️ Purchasing dubious opt-in databases (like for SMS)
- ⚠️ Broad interpretation of consent ("by purchasing, you accept...")
- ⚠️ Excessive frequency even with opt-in
The difference: Google can disable an RCS agent within hours if reports spike. Responsiveness impossible with classic SMS.
What do regulators say?
In France
ARCEP and CNIL are monitoring RCS deployment but haven't published specific guidance yet. The 2026 Business Messaging Charter is the de facto standard.
In Europe
The Digital Markets Act (DMA) requires messaging interoperability. Apple had to integrate RCS to comply, marking a victory for European regulation.
RCS and STIR/SHAKEN: the winning combination?
RCS for messages + STIR/SHAKEN for calls = dual authentication of mobile communications.
Problem: STIR/SHAKEN deployment is delayed in Europe (unlike the United States). France has no official timeline in 2026.
How to enable RCS on your smartphone?
On Android
- Open Google Messages (default app)
- Menu ⋮ → Settings
- Chat features → Enable
- Check status: "Connected" = RCS active
On iOS 18+
RCS is automatically managed by Apple if the carrier supports it (Orange, SFR, Bouygues, Free have offered it since late 2024).
What to do while waiting for mass adoption?
- ✅ Enable RCS on your compatible devices
- ✅ Verify senders: certified badge = legitimate
- ✅ Report spam even in RCS (dedicated button in Google Messages)
- ✅ Never click links from unverified senders
- ✅ Use verification solutions for your business numbers
