What type of consent is required for 2FA or OTP message programs on TFN?

Meredith_W — Wed, 08 Apr 2026 09:43:55 GMT

2-factor authentication (2FA) or one-time passcodes (OTP) are common use cases for toll-free messaging.

Although the type of consent may vary, all business messaging use cases – including 2FA/OTP messaging – requires consent from the end user to send messages. For 2FA/OTP messages, you must have express consent to send a 2FA or OTP text message. Typically, express consent for a 2FA/OTP text message is obtained by informing the user they will receive a 2FA/OTP notification at the phone number they provide, or informing them when they update their phone number in an online profile.

To get your toll-free number verified for a 2FA/OTP use case, you must provide proof of consent. A screenshot or live URL is ideal. If you don't have a screenshot or URL available, then you must provide a thorough, detailed description of how you collect the end user's express consent. 2FA/OTP use cases do not exclude the need to provide proof of consent, and language in T&Cs or Privacy Policy is not sufficient for express consent.

If you need more info on messaging best practices when it comes to consent, please refer to the

CTIA Messaging Principles and Best Practices.

Learn more about Toll-Free Numbers from Sinch.

article What type of consent is required for 2FA or OTP message programs on TFN? in Toll-Free Numbers (TFN)

What type of consent is required for 2FA or OTP message programs on TFN?