A checklist for receiving TikTok SMS codes in tests and operations

What does TikTok send SMS codes for?

TikTok lets people create an account with a phone number, log in with a one-time code instead of a password, turn on two-step verification and reset access when a password is forgotten. Each of those moments can produce an SMS code, and each is a step that teams building around TikTok may need to reproduce: an agency confirming a brand account it manages, a QA engineer checking a social-login integration, or an operations team that keeps a company profile off an employee's personal phone.

A virtual number for TikTok fits those cases, with TikTok SMS verification for testing being the most frequent one. All of them are legitimate when the account belongs to you or your client and stays within TikTok's terms.

Pre-flight checklist before you order

Ten minutes on these points before the first TikTok order saves hours of chasing missing codes later:

• Pick the market. The number's country should match the account's region or the test case you are reproducing.
• Check price and stock. GET /api/v1/prices?country=<id>&service=tiktok returns both, live.
• Fund the wallet. GET /api/v1/balance at the start of a run fails fast instead of mid-test.
• Decide on delivery. Webhook for CI and parallel jobs, polling for quick manual checks.
• Think ahead about re-login. If the account must log in again next month, a one-time number is the wrong tool (see the last section).
• Know the rules. One account per real person or business, TikTok's terms, and the OTP Route Acceptable Use Policy.

Which country should the TikTok phone number come from?

The TikTok route is open in 202 countries. Common picks include the United States, Canada, the United Kingdom, Germany, France, Brazil, Mexico, Indonesia, the Philippines, Vietnam, Thailand, Turkey, Saudi Arabia, Pakistan, Nigeria and Kenya.

Country choice is not cosmetic. TikTok tailors content, features and sign-up checks by region, so a QA case for a Brazilian launch should use a +55 number and a Philippine localisation test a +63 one. Mismatching the number and the account's market is a common reason a flow behaves differently from what users see.

Step by step: the TikTok verification code API

Authenticate against https://otproute.com/api/v1 with a Bearer key beginning or_live_ from the Developer console.

1. Resolve the country id with GET /api/v1/countries; the service id is tiktok.
2. Read the live price: GET /api/v1/prices?country=br&service=tiktok.
3. Create the activation with POST /api/v1/activations and {"service": "tiktok", "country": "br"}. Keep the activation id from the response.
4. Enter the returned number on TikTok's phone screen and request the code.
5. Collect it from the activation.sms_received event, or poll GET /api/v1/activations/{id} every few seconds.
6. If the scenario is abandoned, call POST /api/v1/activations/{id}/cancel so the funds return straight away.

The account limit is 300 requests per minute, plenty for polling several activations at once. The API docs list the full request and response shapes.

Building the webhook receiver

Register an HTTPS endpoint in the Developer console (up to 5 per account) and subscribe to activation.sms_received, activation.expired and activation.cancelled. Then harden it:

• Parse X-OTPRoute-Signature into t and v1, compute HMAC-SHA256 of <t>.<raw body> with the endpoint secret, and compare in constant time.
• Reject timestamps more than a few minutes old to block replays.
• Treat the activation id as an idempotency key, so a redelivered event updates nothing twice.
• Respond with a 2xx quickly and hand slow work to a queue.

Keep polling as a fallback for local development where no public URL exists. Our guide to securing OTP webhooks goes through the verification code.

Troubleshooting a TikTok code that never shows

Silence from TikTok usually has an ordinary cause:

1. Wait out the window. The activation stays open for 20 minutes; if nothing arrives, the full charge is refunded automatically.
2. Accept that some numbers are declined. TikTok may refuse virtual numbers in some regions or situations, and the refund rule covers that case.
3. Change one variable. Retry later, or try a different country that still fits your test.
4. Slow down. Requesting codes again and again in a short span can trigger TikTok's own rate limits; space attempts out.
5. Check your side. Confirm the number was entered in full international format and that your webhook returned a 2xx.

When is a dedicated US or Canadian line better?

A one-time activation suits a single verification. A brand account that must log in again, recover access or pass two-step checks months later needs a number your team keeps. Dedicated Numbers cover that case in the United States and Canada from $1.95/month, with inbound SMS in the dashboard and on your webhook via number.sms_received; see virtual numbers. Self-serve long-term lines are not available in other countries.

All spending comes from one prepaid USD wallet, topped up by card or USDT/USDC, with a PDF invoice for each top-up. A sandbox account can be enabled on request for integration tests with simulated codes.

Frequently asked questions

How do I get a TikTok code delivered to my backend automatically?

Order an activation with the service id tiktok, then receive the code through the signed activation.sms_received webhook or by polling GET /api/v1/activations/{id}.

Can I test TikTok SMS verification for a specific country?

Yes. Choose the country when you create the activation; the TikTok route currently covers 202 countries, and live availability comes from the prices endpoint.

What does a TikTok OTP cost?

From $0.20 per code, varying by country. The exact figure appears in the dashboard and in GET /api/v1/prices before you order.

What happens when TikTok rejects the virtual number?

No SMS arrives, so the activation expires after 20 minutes or you cancel it, and the full amount goes back to your wallet.

Is a one-time number enough for a brand account we manage long term?

Usually not. For repeat logins and recovery, use a US or Canadian Dedicated Number that your team keeps while it renews.

Can I use OTP Route to create many TikTok accounts?

No. OTP Route is for testing and operating your own legitimate accounts and products; follow TikTok's terms and keep to one account per real person or business.

Service names are trademarks of their respective owners. OTP Route is not affiliated with them. Use numbers lawfully, follow each service's terms and our Acceptable Use Policy.