Receiving Gojek phone verification codes through an API

How does Gojek use your phone number?

Gojek began in Indonesia as a motorbike ride-hailing service and grew into a super-app covering rides, food delivery, parcel sending and payments, and it now sits in the same group as Tokopedia. The phone number is the centre of a Gojek account: it is the login identifier, a one-time code confirms it at registration, and another code is requested when someone signs in on a new device or changes the number.

That is why anyone integrating with or supporting Gojek users ends up needing a Gojek phone number for testing. Where the app offers a choice of delivery channel, pick SMS, because an OTP Gateway number receives text messages.

Typical reasons a team requests a Gojek SMS verification for testing:

• A partner integration, such as a merchant or loyalty link, that needs a fresh Gojek login in a staging run.
• Support staff reproducing a customer's login problem on a clean account they control.
• Localisation checks that confirm how the code screen and its resend timer look in Bahasa Indonesia and English.

Why does the country of a Gojek test number matter?

The gojek service is listed in 197 countries on OTP Route, but the right one depends on what you are checking. Most real Gojek accounts are Indonesian, so Indonesia (+62) is the natural default; Indonesian mobiles are written 08… locally and become +62 8… in E.164 once the trunk zero is dropped. Verification texts on Indonesian accounts usually come in Bahasa Indonesia.

Other routes include Singapore, Malaysia, Vietnam, Philippines, Thailand, India, Australia, Japan, United Kingdom, United States and Brazil. A number from outside Southeast Asia is useful when you want to see how sign-up behaves for a traveller or an unsupported region. The country routing article explains how to choose.

What does the API flow look like for the gojek service?

Send requests to https://otproute.com/api/v1 with a Bearer key that starts with or_live_.

1. Read GET /api/v1/prices?country=id&service=gojek for the live price and availability on the Indonesian route.
2. Create the order: POST /api/v1/activations with {"service": "gojek", "country": "id"}. Keep the activation id.
3. Enter the returned number in the Gojek app and request the code.
4. Receive the code from activation.sms_received on your webhook, or poll GET /api/v1/activations/{id}.
5. Call POST /api/v1/activations/{id}/cancel if the test is abandoned.

For webhooks, check the X-OTPRoute-Signature header (t=<unix>,v1=<hex>) by computing HMAC-SHA256 of <t>.<raw body> with the endpoint secret, and drop old timestamps. Because a delivery can be retried, make the handler idempotent: key it on the activation id and ignore repeats. Polling is fine for single runs within the 300 requests per minute limit. See the docs for the full reference.

Can I receive a Gojek OTP from the dashboard instead?

Yes. Pick Gojek as the service, choose the country, confirm the price displayed and order. Type the number into the app, tap to send the code and watch the activation card; the SMS appears there once it arrives. The order stays open for 20 minutes, and if nothing comes or you cancel, the full amount returns to your wallet.

Why might the Gojek SMS not arrive?

A few causes are common:

• Gojek, like many apps, may refuse virtual numbers or ask for extra checks; you are not charged when no code arrives.
• The app may have sent the code over a channel other than SMS.
• The route can be busy; wait out the window, then retry later or try another country.
• Rapid repeat requests can trigger the app's own cooldowns, so space attempts out instead of looping.

When is a dedicated number a better fit?

A one-time number covers one code. If a Gojek test or operations account must keep logging in, a Dedicated Number with long-term SMS may suit better, but these are offered only in the United States and Canada, from $1.95/month, and they only help where the account accepts a US or Canadian number. Compare both options in temporary vs dedicated numbers.

How do you keep Gojek testing responsible?

Follow Gojek's terms. Keep one account per real person or business, use numbers only to test your own product's flows or operate your own legitimate accounts, and never to create extra accounts or claim sign-up promotions. OTP Route is not affiliated with Gojek, the name is a trademark of its owner, and the OTP Route Acceptable Use Policy applies to every order.

Frequently asked questions

Can I receive a Gojek OTP without an Indonesian SIM?

Yes. Order a one-time +62 number for the gojek service from the OTP Gateway and read the code in the dashboard or through the API.

What is the service id for Gojek in the OTP Route API?

It is gojek; combine it with a country id such as id for Indonesia.

Is a virtual number for Gojek accepted every time?

No. Gojek may decline some virtual numbers, which is why an activation without a code is refunded automatically.

How long does the Gojek activation stay open?

Twenty minutes. If no SMS arrives in that time, or you cancel, the charge goes back to your wallet.

Can I use the same number to log in to Gojek later?

Not with the OTP Gateway, which covers one code per number. For repeat logins, consider a US or Canadian Dedicated Number where the account allows it.

How do I avoid duplicate webhook processing for Gojek codes?

Verify the signature, then store the activation id and ignore any event you have already handled.

Can I test without spending money?

Yes, on request a development account can be moved to sandbox, which returns simulated numbers and codes.

Service names are trademarks of their respective owners. OTP Route is not affiliated with them. Use numbers lawfully, follow each service's terms and our Acceptable Use Policy.