Handling Amazon phone verification for test and operations accounts

One-time code or a number you keep: which does an Amazon account need?

Decide this first, because Amazon accounts tend to ask for codes more than once.

• OTP Gateway number: good for a single verification, such as checking that your storefront integration or a localized sign-up screen behaves as expected. The number is reserved for one code and then released.
• Dedicated Virtual Number: good when the account will meet a code again, for example after enabling two-step verification or when a teammate signs in from a new browser. These are available in the United States and Canada from $1.95/month and forward inbound SMS to your webhook through number.sms_received.

A useful rule of thumb: if anyone will need to log in to that Amazon account next week, put it on a dedicated number. If the code is only needed once during a test, the OTP Gateway is cheaper and simpler. The trade-offs are covered in temporary vs dedicated numbers.

When does Amazon send an SMS verification code?

Amazon uses one-time passwords in several well-known places:

• Account creation, where a mobile number can be verified during sign-up in many regions.
• Two-step verification, which can deliver a code by text message each time a new device or browser signs in.
• Account recovery, when a password reset is confirmed with a code.
• Seller and business registration, which includes confirming a contact phone number.

That last point matters for marketplace teams: a seller identity is long-lived, so it belongs on a number your company controls for the long run, not on a one-time route.

Which countries can receive Amazon OTP codes?

The amazon service is currently available in 202 countries. Ones that teams ask about often include the United States, United Kingdom, Germany, Japan, India, Mexico, Canada, France, Italy, Spain, Brazil, Australia, the Netherlands, Poland, Turkey, Singapore, Saudi Arabia and the United Arab Emirates.

Match the country to the account under test. Amazon runs separate regional storefronts, and a sign-up test for a German audience should use a German number so the flow, language and validation rules match what real customers see. The full list sits under countries.

How do I wire the Amazon verification code API into a test?

Use a Bearer key (or_live_ prefix) against https://otproute.com/api/v1, with service id amazon and the country id of your market, such as de or jp.

1. GET /api/v1/prices?country=<id>&service=amazon returns the live price and availability.
2. POST /api/v1/activations with {"service": "amazon", "country": "<id>"} reserves a number and opens a 20-minute window.
3. Enter the number in Amazon's form under test.
4. Handle activation.sms_received on your webhook. Verify X-OTPRoute-Signature (HMAC-SHA256 of <t>.<raw body> with the endpoint secret), refuse stale timestamps, and record the activation id so a repeated delivery is ignored.
5. If webhooks are not practical in your environment, poll GET /api/v1/activations/{id} at a sensible interval within the 300 requests per minute limit.
6. Cancel aborted runs with POST /api/v1/activations/{id}/cancel.

Sandbox mode, enabled on request for a development account, returns simulated numbers and codes, which lets CI cover the plumbing without touching wallet funds.

Is there a dashboard route for receiving an Amazon OTP?

Yes. Open the OTP Gateway, pick Amazon and the country, confirm the price, and copy the number. Paste it into Amazon, request the code, and leave the activation open; the message appears next to the number when it arrives. Marketplace managers and agency staff often use this path while engineers use the API from the same wallet.

Why might an Amazon code not arrive?

Amazon, like many large platforms, may refuse some virtual numbers, and its risk checks can decline a number without saying why. Other causes include a busy route at that moment or a resend button pressed too soon. Let the window run; when it closes with nothing received, or you cancel, the full amount returns automatically. Try again later, try another country route that fits the test, and avoid hammering the order endpoint in a loop.

What counts as responsible use with Amazon?

Follow Amazon's terms, including its rules for seller and buyer accounts. Keep one account per real person or business, and use OTP Route only to test your own integrations or to operate legitimate accounts your organization owns. Do not create accounts to abuse promotions or reviews. Amazon is a trademark of its owner and OTP Route is not affiliated with it; the OTP Route Acceptable Use Policy applies to every order. See marketplace use cases for typical patterns.

Frequently asked questions

Can I receive an Amazon OTP for testing without using my own phone?

Yes. Order an OTP Gateway number for the amazon service and read the code in the dashboard or through the API.

Which Amazon phone number should I use for an account that needs two-step verification?

A Dedicated Virtual Number in the US or Canada, from $1.95/month, because two-step verification sends new codes at later sign-ins.

How much does Amazon SMS verification for testing cost?

Pricing starts from $0.20 per code and depends on the country. You pay only when the code arrives.

Does Amazon accept every virtual number for Amazon verification?

No. Amazon may decline some virtual numbers, which is why an activation with no SMS is refunded in full.

Should the country of the number match the Amazon storefront?

Ideally yes. Using a number from the same market as the storefront keeps the sign-up language and validation identical to what local customers get.

How do I know an Amazon code webhook is genuine?

Check the X-OTPRoute-Signature header by recomputing the HMAC-SHA256 with your endpoint secret, and reject requests with old timestamps.

Service names are trademarks of their respective owners. OTP Route is not affiliated with them. Use numbers lawfully, follow each service's terms and our Acceptable Use Policy.