Bulk SMS in Indonesia: SMS Masking, UU PDP and Operators

How do you register SMS masking?

You register the sender names with the operators through your provider, with sample messages for each traffic type. Our typical lead time for Indonesia is 5 to 10 business days.

1. List your traffic. Classify messages as OTP, transactional alerts or promotions, and plan a sender name for each.
2. Choose names. Keep them short and tied to your company or brand. Do not use another company's brand name.
3. Prepare documents. Expect company papers and an authorisation letter naming the sender and your provider; the sender ID letter generator drafts one.
4. Write samples in Bahasa Indonesia for each use case, with your brand name and a clear purpose.
5. Submit through your provider and track approval per operator.
6. Test delivery on all networks before the first customer send.

Check the current position on the Indonesia sender ID page or in the sender ID checker. If you want our team to prepare and file the registration with you, see registrations. Approval decisions stay with the operators.

What content and consent practice should you follow?

Operators review sender names and sample messages, so clear, honest content helps approval and delivery. This is practice, not a rule we can cite from an official list:

• Name your brand in every message and say why the person is receiving it.
• Do not impersonate banks, couriers or government bodies.
• Avoid unrelated promotion inside OTPs and alerts.
• Keep links short and recognisable.

For consent, treat these as the minimum:

1. Ask clearly. Say what messages the person will get, from which brand and how often.
2. Record it. Keep source, timestamp, channel and wording for each number, in line with the written-or-recorded standard.
3. Offer a STOP. Put a simple opt-out in promotions, and process withdrawals promptly.
4. Suppress across channels. An SMS opt-out should also stop marketing on other channels unless the person opted in there separately.

Our opt-in guide for multichannel campaigns and the opt-in consent generator help with wording.

How does Bahasa Indonesia affect SMS length?

Plain Bahasa Indonesia uses the Latin alphabet, so most messages fit the default GSM 7-bit set: 160 characters in a single message and 153 per part when concatenated. Unicode applies only if you add characters outside that set, such as emoji or some typographic symbols, and then the limits drop to 70 and 67.

Here are examples we checked against the limits, all in GSM 7-bit:

Check final copy in the SMS character counter and read our guide to SMS character limits.

When should you send?

We have found no official time-of-day window for promotional SMS in Indonesia, and our data records none, so agree hours with each operator. Indonesia spans three time zones: UTC+7 (WIB), UTC+8 (WITA) and UTC+9 (WIT). Schedule promotions so they arrive in the recipient's local daytime and avoid late evening and early morning. OTPs and alerts are transactional and can run at any hour. The send time planner helps with scheduling.

How should you split OTP and promotional traffic?

Use separate sender names and routes for OTPs and promotions, so promotional filtering or a complaint never blocks login codes. Keep OTP text short, without links where possible, and never mix offers into it. Set the code's validity in the message. For more detail see our OTP authentication messages guide. At high volume, also read the high-volume SMS guide for throughput planning and queues.

How does WhatsApp complement SMS in Indonesia?

WhatsApp suits conversations, rich order updates and opted-in marketing, while SMS covers every handset and urgent alerts. A fallback sequence, for example WhatsApp first and SMS if it is not delivered or read, uses each for what it does best.

WhatsApp messages use approved templates in categories: marketing, utility, authentication and service. Meta charges per delivered message by category and recipient market, so check Meta's current rate card or our Indonesia WhatsApp pricing page instead of figures in articles. Meta's policy also requires opt-in and a way to opt out. See our market page for Indonesia for the combined set-up.

A worked example: an online store in Jakarta

"Toko Sinar" (synthetic) sells fashion across Java and wants OTPs, shipping updates and weekly promotions.

• It registers two masking names, one for OTP and alerts and one for promotions, with sample messages in Bahasa Indonesia.
• It tests an OTP and a promotion on Telkomsel, Indosat Ooredoo Hutchison and both XLSMART networks before launch.
• Consent is captured at sign-up with a tick box; the record stores timestamp, channel and wording.
• Promotions are scheduled for local daytime by time zone; OTPs and shipping updates run at any hour.
• Order updates go on WhatsApp first and fall back to SMS if not delivered.

What are the common mistakes?

• One sender for everything. A promotional complaint then threatens OTP delivery.
• Starting registration late. Plan around 5 to 10 business days and a test cycle.
• No consent evidence. You cannot show written or recorded consent without the record.
• One send time for the whole country. Three time zones means three local mornings.
• Calling it "SMS premium". That term means something else in Indonesia.

How OmniChannels.ai helps

OmniChannels.ai is powered by BroadNet, which has direct routes to Telkomsel, Indosat Ooredoo Hutchison and XLSMART. We prepare and file masking registration with you, support Bahasa Indonesia and English content, and give you per-operator delivery reports, with WhatsApp and SMS fallback in one platform. For indicative list prices, see our Indonesia SMS pricing page, then book a demo to plan your Indonesia launch.