Security at SMSCreation: accounts, messages and payments

How your account is protected

You sign up with an email address and a password. No phone number or identity documents are needed, so there is less sensitive data to protect.

• Passwords are hashed, never stored in readable form.
• Connections between your browser and our servers are encrypted in transit.
• Secrets are kept server-side.
• Sign-ups and logins are checked by Cloudflare Turnstile to block automated bots.
• Two-factor authentication is available for staff accounts.

How messages are stored and who can read them

Every number is assigned to one account. SMS received on your numbers are stored so you can read them in your dashboard, together with your call records. They are not published anywhere and other customers cannot see them.

Staff access messages only when needed for support or abuse investigations. We share only what upstream telecom partners and our payment infrastructure need to deliver the service, and we never sell your data or share it with advertisers.

You can ask for access to, correction of or deletion of your data by contacting support@smscreation.com.

How payments are matched on-chain

SMSCreation accepts USDT and USDC on Tron (TRC-20), Polygon, BNB Smart Chain (BEP-20), Base and Solana. At checkout you see a unique exact amount and a company wallet address. The system watches the blockchain for that exact amount and matches it to your order automatically.

There are no cards or bank transfers, so we never see card numbers or bank details; we keep only payment metadata (amounts, network, transaction references).

Secure the apps you verify

A verification code proves you control a number at that moment. The strongest protection is making sure a code alone is never enough to get into your accounts. These settings are provided by the apps themselves and take a few minutes.

• WhatsApp: turn on two-step verification in the app's account settings. It adds a PIN that is asked for when your number is registered on a new phone.
• Telegram: turn on two-step verification and set a cloud password with a recovery email. Logging in on a new device then needs both the SMS code and the password.
• Google: turn on 2-Step Verification and add a method beyond text codes, such as Google prompts, an authenticator app or a security key, plus backup codes.
• Use a unique password for each account, stored in a password manager.
• Never share a verification code. Anyone who asks you to read out or forward one may be trying to take over the account it protects.

Keep your number renewed

A number is yours for as long as you keep it renewed. If a plan expires without renewal and your wallet balance is insufficient, the number may be suspended after a short grace period and released afterwards, and it can return to the pool.

Keep any number you use for account recovery active, with auto-renew on and enough wallet balance, or move recovery to another method before you let it go.

Report a security issue

If you believe you have found a security problem in SMSCreation, or you notice activity on your account that you didn't start, email support@smscreation.com with the subject “Security”. Describe what you saw, when, and how to reproduce it, and include your account email and order reference if it concerns your own account. Please don't include passwords.

Price, ownership and guarantee

Numbers cost from $1.80 a month on the yearly plan ($21.60 billed yearly), the same in all 181 countries, with unlimited incoming SMS and calls, 500 outgoing SMS and 1,000 outgoing call minutes a month. The number stays yours while renewed, and a 7-day replacement guarantee gives you a free replacement in the same country or a 100% refund if it doesn't work with the apps you need.