Receiving Tokopedia OTPs on a routed number for your own test and ops accounts

Where does Tokopedia ask for a phone number?

Tokopedia is one of Indonesia's largest online marketplaces, and like most Indonesian commerce apps it treats the phone number as a core part of the account. A Tokopedia phone number is typically requested at registration, used for one-time codes at login on a new device, and checked again before sensitive changes such as editing payout details or swapping the number itself. Seller accounts go through similar confirmation steps.

The app can offer more than one channel for codes; OTP Route captures the SMS route, so choose SMS when the app asks. Messages generally arrive in Indonesian.

Legitimate reasons to receive a Tokopedia OTP on a routed number include QA for a seller tool or storefront integration you build, agencies operating merchant accounts on behalf of clients, and operations teams that want a shared shop login kept off an employee's personal SIM. The marketplaces solution page covers these setups.

Which country should the Tokopedia number come from?

The live snapshot lists Tokopedia in 197 countries. Match the number to the account's real market: an Indonesia (+62) number fits the typical Indonesian seller or buyer account, while a number from elsewhere is useful for checking how your own product handles international phone input.

Other countries on the list include Malaysia, Singapore, Brunei, the Philippines, Thailand, Vietnam, India, Australia, Japan, South Korea, Hong Kong, Taiwan, the United Kingdom, the Netherlands and the United States. A test case should state the country it expects, so a failure points at the flow rather than at a mismatched route.

How does the Tokopedia verification code API flow run?

Authenticate against https://otproute.com/api/v1 with a Bearer key prefixed or_live_. The service id is tokopedia, and Indonesia's country id is id.

1. Check GET /api/v1/prices?country=id&service=tokopedia for live price and availability.
2. Order with POST /api/v1/activations and the body {"service": "tokopedia", "country": "id"}.
3. Enter the returned number on the registration or login screen you are testing and request the code by SMS.
4. Read the result from your webhook, or poll GET /api/v1/activations/{id} until the code appears.
5. Call POST /api/v1/activations/{id}/cancel if the test aborts, so the funds return at once.

The account limit of 300 requests per minute is plenty for polling. Full request and response shapes are in the API docs.

How should a Tokopedia webhook handler be written?

Point one of your five webhook endpoints at a route that listens for activation.sms_received, activation.expired and activation.cancelled from Tokopedia orders. Each delivery includes X-OTPRoute-Signature: t=<unix>,v1=<hex>; compute HMAC-SHA256 over <t>.<raw body> with the endpoint secret, compare in constant time and refuse stale timestamps.

Make the handler idempotent by keying on the activation id, because a retried delivery must not complete the same test twice. If you would rather not expose an endpoint, polling works just as well for a single script. The webhook capture guide has a worked design.

Can the dashboard handle a Tokopedia code without any code?

Yes. Open the OTP Gateway, pick Tokopedia, choose a country and confirm the price on screen. Copy the number into the Tokopedia app, select SMS as the channel, and the code appears beside the activation once received. A merchant operations lead can do this while developers use the API from the same wallet.

Why might a Tokopedia OTP fail to arrive?

Several things can stop a code: the app may refuse virtual numbers for some flows, it may throttle repeated requests to the same number, or the code may have gone to a channel other than SMS. Routes also vary over the day.

Each activation lasts 20 minutes, and you pay only when the code arrives. If nothing lands, the amount returns to your wallet automatically. Let the window finish, retry later or from another country route that suits the account, and avoid reordering in a tight loop. Our guide to failed deliveries lists further checks.

Should a Tokopedia shop account sit on a Dedicated Number instead?

A one-time activation suits a fresh registration test. A shop account that must log in again next month needs a number that stays under your control, otherwise a future login code may have nowhere to go. Dedicated Numbers cover that case in the United States and Canada, from $1.95/month, with inbound SMS in the dashboard and forwarded to your number.sms_received webhook. Whether a US or Canadian number suits a Tokopedia account depends on the account itself, so check that before relying on it.

What are the rules for responsible Tokopedia testing?

Follow Tokopedia's terms, keep one account per real person or business, and use OTP Route only to test and operate your own legitimate products and accounts. The service name is a trademark of its owner, and OTP Route has no affiliation with it. OTP Route's Acceptable Use Policy applies to every order.

Billing comes from a prepaid USD wallet funded by card, USDT or USDC, with a PDF invoice for each top-up and no monthly fee. Developer accounts can request sandbox mode for simulated end-to-end tests.

Frequently asked questions

Can I test my seller tool's Tokopedia login without a team member's phone?

Yes. Order a Tokopedia activation from the OTP Gateway and read the code in the dashboard or through the API.

What service id does the API use for Tokopedia?

It is tokopedia. Pair it with a country id such as id for Indonesia.

Does Tokopedia accept every virtual number?

No. Some flows may decline virtual numbers, which is why an activation without a code is refunded in full.

Which country is best for a Tokopedia phone number?

Usually Indonesia, since that is where most accounts operate, but pick the country that matches the account and the test case.

Will I pay if Tokopedia sends the OTP by another channel?

Not if no SMS arrives on the number. When the 20-minute window closes empty, the full amount returns to your wallet.

How do I stop duplicate webhook deliveries breaking my tests?

Store processed activation ids and ignore repeats, after verifying the signature header on each request.

Can I keep a number for a Tokopedia shop account long term?

Dedicated Numbers are available in the US and Canada from the dashboard; other countries have no self-serve long-term line.

Service names are trademarks of their respective owners. OTP Route is not affiliated with them. Use numbers lawfully, follow each service's terms and our Acceptable Use Policy.