A method in a wireless communication device including receiving contact information with a signature from a source (310) not on a trusted contact list, validating (362) the signature by comparing the signature to an reference signature stored on the method in a wireless communication device, and updating (368) the trusted contact list regarding the contact information received if the signature is valid. In some applications, the contact information and signature is associated with a wireless communication device provisioning session request message.