Testing Lazada phone verification with one-time numbers

Where does Lazada ask for a phone number?

Lazada is a large online marketplace in Southeast Asia, with storefronts for markets such as Indonesia, Malaysia, the Philippines, Singapore, Thailand and Vietnam. Like most marketplaces, it uses phone verification at sign-up, for one-time-code login, when account details such as the phone number change, and when sensitive actions need extra confirmation. Sellers meet similar checks when onboarding a shop.

For a product or QA team, that means a phone step sits in front of almost every flow worth testing: a buyer journey you are integrating with, a seller tool you are building, or a support process your operations staff run on your own business accounts. Lazada is a trademark of its owner, and we have no affiliation with it.

Which countries can receive a Lazada code?

The lazada service is currently routable in 198 countries. The six core markets are all included: Indonesia, Malaysia, the Philippines, Singapore, Thailand and Vietnam. Further options include Hong Kong, Taiwan, India, Bangladesh, Cambodia, Laos, Myanmar, Australia, the United Kingdom and the United States.

Country choice matters more for a marketplace than for a chat app. Pick the number's country to match the storefront and the test case: a Thai buyer flow should get a +66 number, a Philippine seller check a +63 number. A mismatch can trigger extra checks or a refusal that has nothing to do with your code. The country routing guide covers the reasoning.

How do I request a Lazada OTP through the API?

Authenticate against https://otproute.com/api/v1 with a Bearer key prefixed or_live_, then:

1. Call GET /api/v1/prices?country=th&service=lazada (swap in the country id you need) to read the live price and availability.
2. Create the activation with POST /api/v1/activations and {"service": "lazada", "country": "th"}.
3. Enter the returned number in the Lazada step your test exercises.
4. Receive the code through a webhook, or poll GET /api/v1/activations/{id} every few seconds within the 300 requests-per-minute limit.
5. If the run stops early, call POST /api/v1/activations/{id}/cancel.

The developer hub lists every endpoint and error code.

How should the webhook handler treat Lazada codes?

Subscribe an endpoint to activation.sms_received, activation.expired and activation.cancelled. Before trusting a delivery, recompute the X-OTPRoute-Signature value: HMAC-SHA256 over <t>.<raw body> with the endpoint secret, compared in constant time, with old timestamps rejected.

Then make processing idempotent. Key the record on the activation id, write the code once, and ignore repeats. Return a 2xx quickly and hand the code to your test runner asynchronously, so a slow downstream step never causes a retry storm. Polling remains a fine choice for a single local test; webhooks win when many runs overlap.

Is there a no-code path in the dashboard?

Yes. Create an account, fund the wallet, choose Lazada and the country, check the displayed price and order. Paste the number into Lazada, and the verification code appears on the activation card when it lands. Category managers and support leads often use this to reproduce a customer-reported issue on a business account they operate.

Why might a Lazada code not arrive?

Several reasons, most of them outside your code:

• Lazada may refuse virtual numbers in some markets or flows. That is a decision on its side, which is exactly why activations that receive nothing are refunded.
• The number's country may not match the storefront you are testing.
• Delivery timing depends on the service and the route, so let the 20-minute window run before judging.

After an expiry, retry later or with another country route the API lists. Avoid ordering again in a tight loop; spaced attempts with logged activation ids are easier to debug. More ideas sit in reducing failed OTP deliveries.

When does a Dedicated Number fit better than a one-time code?

If a Lazada account must keep logging in, for example a staging seller shop your team revisits weekly, a number that disappears after one code becomes a problem at the next login or recovery prompt. Dedicated Numbers solve that in the United States and Canada: bought instantly from $1.95/month, with inbound SMS in the dashboard and on your number.sms_received webhook. They suit accounts registered in those markets; for other countries, there is no self-serve long-term line.

Responsible use applies throughout. Follow Lazada's terms, keep one account per real person or business, and use OTP Route only to test and operate your own legitimate products and accounts. The Acceptable Use Policy applies to every order.

Frequently asked questions

Can I get a virtual number for Lazada testing in Thailand?

Yes, when the route is available. Order the lazada service with country th, and check the live price first with the prices endpoint.

What is the service id for Lazada in the OTP Route API?

It is lazada. Pass it as the service value when creating an activation or querying prices.

Am I charged if Lazada rejects the number?

No. When no SMS reaches the number within 20 minutes, or you cancel, the amount is returned to your wallet automatically.

Which country should my Lazada phone number be from?

Match the storefront and the case you are testing, for example a Malaysian number for the Malaysian site. Mismatches can cause refusals unrelated to your integration.

Can I keep a Lazada phone number for future logins?

Only with a Dedicated Number in the United States or Canada. Elsewhere, OTP Gateway numbers are single-use, so plan recovery for long-lived accounts accordingly.

Can I build the Lazada flow without spending wallet funds?

Yes. Yes. Request sandbox mode for a development account; it hands back simulated Lazada numbers and codes so the whole path can run without real charges.

Is OTP Route connected to Lazada?

No. Lazada is a trademark of its owner, and OTP Route provides numbers only for legitimate testing and operation of your own accounts.

Service names are trademarks of their respective owners. OTP Route is not affiliated with them. Use numbers lawfully, follow each service's terms and our Acceptable Use Policy.