Skip to content
OmniChannels.ai
Menu

Bulk SMS in Qatar: CRA Spam Rules, Sender ID and Arabic

Bulk SMS Qatar guide: CRA Spam Regulation consent, 21:00 to 09:00 marketing ban, opt-out rules, sender ID on Ooredoo and Vodafone, Arabic Unicode length.

Updated 10 min read

By OmniChannels.ai Editorial Team · Reviewed by BroadNet Messaging Solutions Team

SMS & OTP

Short answer

To send bulk SMS in Qatar, use a provider with direct routes to Ooredoo and Vodafone Qatar, register your alphanumeric sender ID (up to 11 characters), and send direct marketing only with prior, provable consent. The CRA's amended Spam Regulation bars direct marketing between 21:00 and 09:00, requires a free opt-out confirmed by message, and expects sender details in Arabic and English.

On this page
  1. What rules apply to bulk SMS in Qatar?
  2. What does the CRA Spam Regulation require?
  3. What does Qatar's data protection law add?
  4. Which operators carry SMS in Qatar?
  5. How does sender ID registration work in Qatar?
  6. When can you send marketing SMS in Qatar?
  7. How do Arabic and English affect SMS length?
  8. How should you separate OTP and promotional traffic?
  9. A worked example: a Doha pharmacy group
  10. What are the common mistakes?
  11. Is your message direct marketing or transactional?
  12. Launch checklist for Qatar
  13. How can WhatsApp complement SMS in Qatar?
  14. How OmniChannels.ai helps

Key takeaways

  • The CRA's amended Spam Regulation (6 August 2017) says no direct marketing may be sent without the recipient's prior consent and none between 21:00 and 09:00; transactional messages are outside that marketing window.
  • Withdrawal of consent must take effect without delay and within two business days, be free, work by the same method (a reply to the SMS) and be confirmed by a message to the customer.
  • A marketing message must identify who requested it and how to contact them, in both Arabic and English, and that contact information must stay valid for at least 30 days.
  • Two operators carry mobile traffic in our coverage data: Ooredoo Qatar (427-01) and Vodafone Qatar (427-02), both with direct routes; sender ID pre-registration is required, typically 5 to 7 business days.
  • Arabic text is Unicode at 70 characters per message (67 per part), so a bilingual disclosure line often pushes a promotion into two parts.

This guide is for marketing, e-commerce, healthcare and operations teams that want to send business SMS to mobile numbers in Qatar: OTPs, reminders, alerts and promotions. Qatar is one of the few Gulf markets where the regulator has published a specific spam regulation, so it is worth reading closely. This is a practical overview, not legal advice; confirm requirements with Qatari counsel and the operators before launch.

What rules apply to bulk SMS in Qatar?

The main rule is the Communications Regulatory Authority's Spam Regulation, amended on 6 August 2017, supported by Qatar's personal data law and operator policy. It governs "direct marketing" electronic communications, including SMS.

Layer What it covers Where to check
CRA Spam Regulation (amended 2017) Consent, hours, opt-out, sender information for direct marketing Regulation text
Law No. 13 of 2016, personal data privacy Consent and rights for personal data; reported ban on electronic direct marketing without consent Clyde & Co summary
Operators (Ooredoo, Vodafone Qatar) Sender ID registration and filtering Your provider during onboarding

CRA also issued a consumer protection policy in 2024, so check its site for revisions before you finalise copy and hours.

What does the CRA Spam Regulation require?

It requires prior consent, a ban on sending direct marketing between 21:00 and 09:00, a free and effective opt-out, and accurate sender information. In the text of the amended regulation:

  • Consent first. "No Direct Marketing shall be sent without the prior consent of the recipient." Consent must be an express approval for a clearly identified marketing activity, given before it starts, and related to the business relationship.
  • Records. Whoever asks for consent must state the purpose and the personal data involved, keep records of how and when consent was received, and be able to demonstrate its validity at any time.
  • Hours. No direct marketing between 21:00 and 09:00.
  • Opt-out. SMS marketing must contain a working, free mechanism to withdraw consent that does not require a voice call, and the sender must confirm the unsubscribe by message.
  • Speed. Effect must be given without delay and within two business days; later marketing counts as spam.
  • Sender information. The message must identify the person who requested it and how to contact them, in Arabic and English, valid for at least 30 days.

Transactional messages, such as an OTP the customer just requested, are not direct marketing. Keep them genuinely transactional, though: an OTP with an offer attached becomes marketing.

What does Qatar's data protection law add?

Law No. 13 of 2016 sets consent and rights for personal data, and published guidance asks for explicit, unambiguous, affirmative consent for direct marketing. The guidelines issued by the ministry's Compliance and Data Protection Department in November 2020 state that pre-ticked boxes and implied consent may not be valid, and that withdrawing consent should be easy. Secondary sources attribute the direct-marketing consent rule to Article 22 of the Law; read the official text with counsel.

Our regulation data summarises the position: verifiable opt-in with retained evidence, and opt-out wording on every promotional message. Our opt-in consent generator drafts bilingual wording, and opt-in consent across channels shows how to record it.

Which operators carry SMS in Qatar?

Two mobile networks appear in our coverage data, both with direct routes.

Operator MCC-MNC Route
Ooredoo Qatar 427-01 Direct
Vodafone Qatar 427-02 Direct

Read delivery reports per operator. The Qatar market page summarises our channels there, and improving SMS delivery rates explains how to diagnose a weak network.

How does sender ID registration work in Qatar?

Business SMS uses an alphanumeric sender ID of up to 11 characters, Latin or Arabic. Our regulation data lists pre-registration as required on Ooredoo and Vodafone Qatar, one ID per use case per entity, with a typical lead time of 5 to 7 business days. Treat it as typical, not guaranteed.

Step What to do
1. Classify Separate transactional and promotional use cases; plan one sender ID each
2. Choose names Use your registered business name; avoid imitating banks, operators or government bodies
3. Prepare documents Commercial registration and an authorisation letter naming your sender IDs and provider
4. Submit Your provider files with the operators and tracks approvals
5. Test Send both traffic types to an Ooredoo and a Vodafone handset

Use the sender ID letter generator for the letter and the Qatar sender ID page for the current position. We can prepare and file the registration with you (registrations); approval stays with the operators. Background: sender ID types explained.

When can you send marketing SMS in Qatar?

Marketing SMS may be sent between 09:00 and 21:00 Qatar time (UTC+3), under the amended Spam Regulation. Our regulation data records the same window and lets transactional traffic run 24/7. Schedule on the recipient's local clock; if you send from another time zone, convert deliberately and allow for queue delays so a campaign does not spill past 21:00. The send time planner helps, and SMS marketing rules by country compares hours across markets.

How do Arabic and English affect SMS length?

Arabic is Unicode: 70 characters in one message and 67 per part when split. Latin GSM-7 text holds 160 characters (153 per part). One Arabic letter switches the whole message to Unicode. See GSM-7 and Unicode SMS.

Encoding Single message Per part when concatenated
GSM 7-bit 160 characters 153
Unicode (UCS-2) 70 characters 67

Synthetic examples counted against the limits:

Message Encoding Characters Parts
Doha Pharma: your code is 739204. Never share it with anyone. GSM-7 61 1
دوحة فارما: رمز التحقق 739204. لا تشاركه مع أحد. Unicode 48 1
Doha Pharma: refill ready, order #771. Collect before 8 pm today. Reply STOP to opt out GSM-7 87 1
دوحة فارما: تجديد الوصفة جاهز، رقم 771. يرجى الاستلام قبل 8 مساء. للإلغاء أرسل ايقاف Unicode 84 2

The Arabic reminder with its opt-out line runs to two parts, while the English one stays at one. Count final copy in the SMS character counter and read SMS character limits and Unicode. Because the regulation wants sender information in both languages, plan for a short bilingual identifier such as the brand name in both scripts.

How should you separate OTP and promotional traffic?

Keep OTPs and service alerts on a transactional sender ID, and promotions on another. Service messages can run 24/7; promotions follow the consent and hours rules above.

Traffic Example Practice
Transactional OTP, appointment reminder, order status No offers; own sender ID; any hour
Promotional Seasonal offer, loyalty message Prior consent; opt-out; 09:00 to 21:00 only
Mixed "Your prescription is ready. 10% off vitamins" Avoid; treat as marketing

See the OTP authentication messages guide.

A worked example: a Doha pharmacy group

"Doha Pharma" (synthetic) wants prescription-ready alerts, OTPs for its app and a quarterly health-check offer.

  • It registers two sender IDs and tests both on Ooredoo and Vodafone.
  • It collects explicit consent in-store and in the app, storing wording, time, channel and number, with no pre-ticked box.
  • Refill alerts and OTPs go on the transactional ID at any hour.
  • The offer goes to opted-in numbers only, scheduled mid-morning, with a STOP line and a contact line in Arabic and English.
  • Replies of STOP are suppressed the same day, confirmed by message, and always within two business days.

What are the common mistakes?

  • Scheduling past 21:00. Queued campaigns that start at 20:55 can finish after the cut-off.
  • No unsubscribe confirmation. The regulation expects a confirmation message.
  • Pre-ticked consent boxes. Guidance says implied consent may not be valid.
  • Offers inside service messages. They turn the message into marketing.
  • English-only sender details. The regulation expects Arabic and English.
  • Assuming lead times are promises.

Is your message direct marketing or transactional?

Ask one question: would the recipient have received this message if you had no product to promote? A code they just requested, a receipt or a pickup notice passes. A reminder that also advertises a product, an invitation to a sale or a loyalty nudge does not, so it needs prior consent and the 09:00 to 21:00 window. When a message mixes both, treat it as marketing. If you are unsure, split it in two and send the service part on its own ID.

Launch checklist for Qatar

  1. Map each message type to transactional or promotional.
  2. Register one sender ID per use case and wait for approval on both networks.
  3. Write bilingual consent wording and store the evidence.
  4. Add an unsubscribe line and an automatic confirmation reply.
  5. Add sender and contact details in Arabic and English.
  6. Lock promotional schedules between 09:00 and 21:00 Qatar time.
  7. Test on Ooredoo and Vodafone handsets, then read delivery reports per operator.

How can WhatsApp complement SMS in Qatar?

WhatsApp suits two-way service and rich media for customers who opted in on WhatsApp, while SMS reaches every handset for OTPs and fallback. Label each WhatsApp template with its Meta category (marketing, utility or authentication) and keep the content consistent with it. Marketing templates still need consent. See the best WhatsApp Business API provider in Qatar and channel fallback strategy.

How OmniChannels.ai helps

OmniChannels.ai is powered by BroadNet, which has direct routes to Ooredoo Qatar and Vodafone Qatar in our coverage data, and an office in Doha. BroadNet is licensed in every country where it operates. We prepare and file sender ID registration with you, support Arabic Unicode SMS and give you per-operator delivery reports. For indicative list prices, see the Qatar SMS pricing page, then book a demo.

Frequently asked questions

Is bulk SMS legal in Qatar?

Yes, through licensed routes and within the CRA's rules. The amended Spam Regulation allows direct marketing by SMS only with the recipient's prior consent, outside 21:00 to 09:00, with a free opt-out and accurate sender information. Transactional messages such as OTPs and delivery alerts are different from direct marketing. Confirm details with Qatari counsel.

What hours can you send marketing SMS in Qatar?

The CRA's amended Spam Regulation says no direct marketing may be sent between 21:00 and 09:00, so marketing sends belong between 09:00 and 21:00 Qatar time (UTC+3). Our regulation data records the same window and states that transactional traffic runs 24/7. Check the regulation for later revisions before you launch.

Do I need a sender ID in Qatar?

Plan on it. Our regulation data lists pre-registration as required on Ooredoo and Vodafone Qatar, one ID per use case per entity, with a typical lead time of 5 to 7 business days. Alphanumeric IDs can be Latin or Arabic and up to 11 characters. The lead time is typical, not guaranteed, so allow buffer.

How do opt-outs work under the CRA Spam Regulation?

Every direct marketing SMS must contain a way to withdraw consent that works, is free, uses the same channel (no phone call required) and is not case sensitive. You must act without delay and within two business days, send no more marketing afterwards, and send a confirmation message that the person is unsubscribed.

Does the Qatar data protection law apply to SMS marketing?

Qatar's Law No. 13 of 2016 on personal data privacy protection is reported to ban electronic direct marketing without consent and the regulator's guidance calls for explicit, unambiguous consent. Combined with the CRA Spam Regulation, treat opt-in as mandatory and keep proof of when and how each person agreed.

Should Qatar SMS be in Arabic, English or both?

Use the language your audience reads. Arabic is common for residents and citizens, English for the large expatriate community, and the Spam Regulation expects sender identification and contact details in both languages. Since Arabic uses Unicode, test length: a bilingual promotion can easily run past one 70-character part.

Sources

  1. Spam Regulation (Amended), Communications Regulatory Authority, 6 August 2017
  2. Communications Regulatory Authority (CRA), Qatar
  3. New regulatory guidelines on the Qatar Personal Data Privacy Protection Law, Clyde & Co
  4. 3GPP TS 23.038: Alphabets and language-specific information

Keep reading

More guides