OTP Message Format: Sample OTP SMS Templates and DLT Format

An OTP message has one job: deliver a code fast and clearly, so the user can log in or pay without confusion. The right format also protects users from fraud and lets their phone auto-fill the code.

Here are 20+ OTP message formats you can use, with the DLT version for India.

The ideal OTP message format

A good OTP SMS has five parts:

1. The code first, so it shows in the notification preview.
2. What it is for (login, payment, signup).
3. How long it is valid.
4. A safety line: "Do not share it with anyone."
5. Your brand name, which customers already see in the sender ID.

Example:

482913 is your OTP to log in to [Brand]. Valid for 10 minutes. Do not share it with anyone.

OTP templates for login and signup

• [OTP] is your OTP to log in to [Brand]. Valid for [X] minutes. Do not share it with anyone.

  ~100 chars · 1 SMSCopy

• Your [Brand] verification code is [OTP]. It expires in [X] minutes. Never share this code.

  ~99 chars · 1 SMSCopy

• [OTP] is your one-time password to sign up on [Brand]. Do not share it with anyone.

  ~87 chars · 1 SMSCopy

• Use [OTP] to verify your mobile number on [Brand]. Valid for [X] minutes.

  ~82 chars · 1 SMSCopy

• [OTP] is your [Brand] login code. If you did not request it, please ignore this message.

  ~92 chars · 1 SMSCopy

OTP templates for payments and transactions

• [OTP] is your OTP for a payment of Rs [Amount] at [Merchant]. Valid for [X] minutes. Do not share it. - [Brand]

  ~118 chars · 1 SMSCopy

• OTP for your transaction of Rs [Amount] is [OTP]. [Brand] will never ask for your OTP. Do not share it.

  ~107 chars · 1 SMSCopy

• [OTP] is the OTP to add beneficiary [Name] to your account. Never share it with anyone. - [Brand]

  ~103 chars · 1 SMSCopy

Live preview

What your customer sees

• DLT-approved sender ID and template
• Submitted to operators in real time
• Live delivery report for every number
• Works on every mobile phone

MessagesInbox

SH

JM-SHOPIN-S482913 is your OTP to log in to ShopIn. Valid for 10 minutes. Do not share it with anyone.

SH

JD-SHOPIN-SOrder #A1093 is out for delivery today.

HP

VK-HLTHPL-SReminder: appointment tomorrow, 11 AM.

Delivered in real timewith a live delivery report

OTP templates for orders and deliveries

• Your delivery OTP for order #[Order] is [OTP]. Share it only with the delivery partner at your door. - [Brand]

  ~115 chars · 1 SMSCopy

• [OTP] is the OTP to confirm return pickup for order #[Order]. - [Brand]

  ~76 chars · 1 SMSCopy

• Use OTP [OTP] to confirm cash on delivery for order #[Order]. - [Brand]

  ~76 chars · 1 SMSCopy

OTP templates for account changes

• [OTP] is your OTP to reset your [Brand] password. Valid for [X] minutes. Do not share it.

  ~98 chars · 1 SMSCopy

• [OTP] is your OTP to change the mobile number on your [Brand] account. If this wasn't you, contact us at [Number].

  ~118 chars · 1 SMSCopy

• [OTP] is your OTP to update your email on [Brand]. Do not share it with anyone.

  ~83 chars · 1 SMSCopy

OTP format for automatic reading on Android

Android apps can read the OTP automatically, so the user never types it. For this, add your app's 11-character app hash at the end of the message:

482913 is your OTP to log in to [Brand]. Do not share it. [App Hash]

Your app developer generates the hash for the SMS Retriever API. The hash must be the last part of the message.

OTP format for websites (Web OTP)

Modern browsers can fill the code automatically on your website if the last line of the SMS names your domain:

482913 is your OTP to log in to [Brand].

@[yourdomain.com] #482913

Keep the "@domain #code" line as the final line of the message.

DLT format for OTP SMS

In India, every OTP template must be registered on DLT. Register it in the transactional category (for banks) or service implicit category (for apps and businesses), and mark the code and other details as {#var#}:

{#var#} is your OTP to log in to {#var#}. Valid for {#var#} minutes. Do not share it with anyone.

OTP templates registered correctly reach DND numbers at any time of day. Read more in our OTP SMS service guide and the DLT registration guide.

OTP best practices

• Use 4 to 6 digits. Six digits are safer for payments.
• Keep validity short: 5 to 10 minutes for most uses.
• Never put links in OTP messages. Links make them look like phishing.
• Keep it under 160 characters and avoid the ₹ symbol, so the SMS stays in one part (see SMS character limit).
• Limit retries and add a wait time between resend requests.
• Use a fast, dedicated OTP route so codes arrive in seconds.

Frequently asked questions

What is the correct OTP message format?

Start with the code, then say what it is for, how long it is valid and "do not share it". Example: "482913 is your OTP to log in to ShopIn. Valid for 10 minutes. Do not share it with anyone."

How do I write an OTP SMS for DLT?

Register the template with {#var#} for the code and other changing details, for example: "{#var#} is your OTP for {#var#}. Valid for {#var#} minutes. Do not share it."

Which DLT category is used for OTP SMS?

Banks use the transactional category. Other businesses usually register OTPs under service implicit. Both reach DND numbers.

How many digits should an OTP have?

Most businesses use 4 or 6 digits. Six digits are recommended for payments and account changes.

Why should an OTP message not contain a link?

Fraudsters use links to steal codes. Keeping OTP messages link-free helps customers trust them and avoids operator filtering.