diff --git a/site/public/order/fcc-carrier-registration/index.html b/site/public/order/fcc-carrier-registration/index.html
index 4e5017d..43b2fe6 100644
--- a/site/public/order/fcc-carrier-registration/index.html
+++ b/site/public/order/fcc-carrier-registration/index.html
@@ -119,7 +119,12 @@ select:focus,input:focus{outline:none;border-color:#1e3a5f;box-shadow:0 0 0 2px
       <label class="svc-row"><input type="checkbox" data-infra="lcr"> <span class="svc-name">Least-cost routing (LCR)</span> <span class="svc-inc">Route across multiple wholesale providers</span></label>
       <label class="svc-row"><input type="checkbox" data-infra="own_dids"> <span class="svc-name">Your own phone numbers (DID blocks)</span> <span class="svc-inc">From number providers like Bandwidth, Inteliquent</span></label>
       <label class="svc-row"><input type="checkbox" data-infra="interconnect"> <span class="svc-name">Direct carrier interconnection</span> <span class="svc-inc">SIP trunking you sell to other carriers</span></label>
-      <label class="svc-row"><input type="checkbox" data-infra="stir_sign"> <span class="svc-name">Sign outbound calls with your own identity</span> <span class="svc-inc">STIR/SHAKEN certificate for call authentication</span></label>
+      <label class="svc-row"><input type="checkbox" data-infra="stir_sign"> <span class="svc-name">Sign outbound calls with your own identity</span> <span class="svc-inc">STIR/SHAKEN certificate — required if you originate calls</span></label>
+      <div id="stir-explain" class="info-box hidden">
+        <strong>Do you need a STIR/SHAKEN certificate?</strong><br>
+        Only if you <strong>originate</strong> calls (place them onto the network). As of June 2025, originating providers must sign all calls with their own certificate — they can no longer rely on upstream providers to sign on their behalf.<br><br>
+        If you only <strong>receive and terminate</strong> pre-signed calls from other carriers, you don't need a signing certificate. You'll verify incoming signatures (a software configuration, not a certificate purchase) and file your RMD as "partial implementation."
+      </div>
       <div id="ocn-explain" class="info-box hidden">
         <strong>Why do wholesale voice vendors require an OCN?</strong><br>
         An Operating Company Number identifies your company in the telecom numbering system. Major voice providers like Bandwidth, Telnyx, Lumen, and Peerless require it to open a wholesale account, port numbers, and assign DID blocks. Without an OCN, you're limited to reseller-tier access.
@@ -469,6 +474,8 @@ select:focus,input:focus{outline:none;border-color:#1e3a5f;box-shadow:0 0 0 2px
       var needsOcn = wizard.infraNeeds.indexOf('lcr') >= 0 || wizard.infraNeeds.indexOf('own_dids') >= 0 ||
                      wizard.infraNeeds.indexOf('interconnect') >= 0 || wizard.infraNeeds.indexOf('stir_sign') >= 0;
       document.getElementById('ocn-explain').classList.toggle('hidden', !needsOcn);
+      // Show STIR/SHAKEN info when any infra option is checked (helps decide if they need signing)
+      document.getElementById('stir-explain').classList.toggle('hidden', wizard.infraNeeds.length === 0);
     });
   });