A developer's route to Lao (+856) one-time codes

What is the shortest path from API key to a +856 code?

Begin in the Developer console: create a Bearer key (it will start with or_live_) and keep one per environment, since an account allows ten. All requests go to https://otproute.com/api/v1, and the Laos country id is la. A minimal run looks like this:

1. Look up the service id from GET /api/v1/services; country ids come from GET /api/v1/countries.
2. Ask GET /api/v1/prices?country=la&service=<id> what the order costs and whether that pairing is open at this moment.
3. Create the activation with POST /api/v1/activations and a body like {"service": "telegram", "country": "la"}. The reply carries the activation id and the Lao number.
4. Submit the number in the app under test, then wait for the code.
5. If the test is torn down early, POST /api/v1/activations/{id}/cancel frees the hold.

That is the entire Laos OTP API surface a basic test needs. The developer overview and the full docs cover responses and error codes.

Polling or webhooks: which suits a Laos test suite?

For a one-off script, polling GET /api/v1/activations/{id} every few seconds is perfectly reasonable; at 300 requests per minute per account, several parallel jobs still fit comfortably. Larger suites benefit from push delivery instead. Add up to five webhook endpoints and listen for activation.sms_received, activation.expired and activation.cancelled.

The receiving handler has three duties. First, verify X-OTPRoute-Signature (t=<unix>,v1=<hex>) by computing HMAC-SHA256 over <t>.<raw body> with the endpoint secret. Second, refuse stale timestamps. Third, stay idempotent by recording the activation id, so a redelivered event becomes a no-op. More patterns live in the post on webhook-based OTP capture.

How are Lao phone numbers written, and what language do codes arrive in?

Domestically, Lao numbers are dialed with a trunk 0, and that zero disappears in international format. Mobile numbers generally begin with 20 after the country code, so a local 020 number becomes +856 20 followed by the subscriber digits in E.164. Store that E.164 form and strip the trunk zero during normalisation; otherwise lookups against your user table will miss duplicates written both ways.

Lao is the official language and has its own script. If your product sends localised OTP templates, confirm that Lao characters survive SMS encoding and that the digits remain easy to spot, because a long Unicode message can split into several parts. Plenty of international services keep their verification text in English for this market, so your parser should cope with both.

Why do product teams test in Laos?

The country borders Thailand, Vietnam, China, Cambodia and Myanmar, and many regional apps treat it as part of a wider Mekong rollout. Teams typically want a +856 number for testing when they add Lao to a localisation release, launch a cross-border wallet or delivery product, or support users who move between Laos and neighbouring markets. Running the sign-up flow over a real Lao route catches formatting, rate-limit and template issues before customers report them. The country routing guide explains how per-market OTP routing decisions are made.

Which services are open on +856 routes?

The current catalog for la lists more than 1,700 services. Popular ones at the time of writing include WhatsApp, Facebook, LINE, WeChat, TikTok, Telegram, Google (Gmail & YouTube), imo, Shopee, Lazada, Zalo, Instagram and ChatGPT (OpenAI). Availability shifts as partner capacity changes, so let the prices endpoint answer that question on each run.

Without code, the dashboard flow is short: pick the service, pick Laos, check the displayed price, order, and watch the activation card for the code.

What should I do when a Lao code doesn't show up?

Every activation holds the number for 20 minutes. You pay only if the code arrives; at expiry or on cancel, the money returns to the wallet automatically.

• Give the window its full time before deciding the route failed.
• Don't re-order in a tight loop; space retries out or come back later.
• Switch to another service route for the same test case if one keeps timing out.
• Check that the app accepts virtual numbers, since some decline them outright.
• Confirm your form sent +856 with no trunk zero still attached.

Long-term lines, billing and sandbox for Laos

OTP Route has no self-serve long-term Lao number. Dedicated Numbers are a US and Canada product from $1.95/month; for a +856 line, email [email protected] and the team will say whether local rules allow one, with no promise implied.

Payment is pay as you go from a prepaid USD wallet: no subscription, top-ups by card or USDT/USDC, and a PDF invoice by email for each one. For CI work, request a sandbox switch on your development account so simulated numbers and codes flow through the same endpoints at no cost. The pricing page has the details.

Frequently asked questions

Can I verify my app's Laos sign-up without owning a Lao SIM?

Yes. Order a +856 number on the OTP Gateway, use it on your sign-up screen, and collect the code via API, webhook or dashboard.

What country id does OTP Route use for Laos?

It is la. Use it in the prices query and in the activation request body.

Should I keep the leading 0 on Lao numbers?

Only for domestic dialing. In E.164, and in your database, drop it and store +856 followed by the national number.

What does a Laos verification number cost?

From $0.20 per code. The exact price depends on the service and is returned by GET /api/v1/prices before you order.

Is the refund automatic if the code never comes?

Yes. If no SMS arrives within 20 minutes, or you cancel, the full amount goes back to your wallet.

What counts as acceptable use for +856 numbers?

Exercising your own Lao sign-up flows and running accounts your business legitimately owns. OTP Route expects you to follow each service's terms and its Acceptable Use Policy, so one account per real person or business.

Service names are trademarks of their respective owners. OTP Route is not affiliated with them. Use numbers lawfully, follow each service's terms and our Acceptable Use Policy.