Skip to content
OmniChannels.ai
Menu

Bulk SMS in Spain: CNMC Alias Registry, Consent and Accents

Bulk SMS Spain guide (SMS masivos España): CNMC alias registry, LSSI consent, GDPR and LOPDGDD, Movistar, Vodafone, Orange routes and accents vs GSM-7.

Updated 9 min read

By OmniChannels.ai Editorial Team · Reviewed by BroadNet Messaging Solutions Team

SMS & OTP

Short answer

To send bulk SMS in Spain, register your alphanumeric alias in the CNMC Registro de Alias, because messages with unregistered aliases are blocked since 15 September 2026. Send advertising only to people who requested it or expressly authorised it (LSSI article 21 and the GDPR), offer a free, simple opt-out in every message, and use a provider with direct routes to Movistar, Vodafone, Orange and MásMóvil.

On this page
  1. What rules apply to bulk SMS in Spain?
  2. What is the CNMC alias registry and what changed on 15 September 2026?
  3. Do you need consent to send SMS marketing in Spain?
  4. Which operators carry SMS in Spain?
  5. How should you separate OTP and promotional traffic?
  6. Do Spanish accents work in GSM-7?
  7. When should you send?
  8. A worked example: a Valencia coffee chain
  9. What is a launch checklist for Spain?
  10. What are the common mistakes?
  11. How OmniChannels.ai helps

Key takeaways

  • Since 15 September 2026 the CNMC alias registry is in force for blocking: SMS, MMS and RCS sent to Spanish numbers under an alias that is not registered to a legitimate holder are blocked.
  • Our regulation data lists the CNMC alias registry as required, with a lead time of up to one month, so register before you plan campaign dates.
  • LSSI article 21 forbids advertising by email or equivalent electronic means unless the recipient previously requested or expressly authorised it, with a narrow exception for existing contractual relationships and a free, simple opt-out in every message.
  • Four mobile networks appear in our coverage data, all direct: Movistar (214-07), Vodafone Spain (214-01), Orange Spain (214-03) and MásMóvil (214-21).
  • Spanish is less GSM-7-friendly than it looks: é, ñ, ü, ¡ and ¿ are in the alphabet, but á, í, ó and ú are not, so most Spanish copy with those vowels is Unicode at 70 characters.

This guide is for marketing, e-commerce, banking and operations teams that want to send business SMS to Spanish mobile numbers: OTPs, delivery alerts, reminders and promotions. It explains the new alias registry, the consent rules, which operators carry traffic and how Spanish accents affect message length. It is a practical overview, not legal advice. Confirm your set-up with Spanish counsel before launch.

What rules apply to bulk SMS in Spain?

Three layers apply: the CNMC alias registry for sender names, the LSSI and the GDPR for consent, and operator policy. The CNMC handles telecom matters and the AEPD handles data protection, which is why our regulation data lists both bodies.

Layer What it covers Where to check
CNMC Registro de Alias Registered sender aliases; blocking of unregistered ones cnmc.es
LSSI article 21 Consent and opt-out for electronic advertising BOE
GDPR and LOPDGDD, AEPD Lawful basis, rights, enforcement aepd.es

What is the CNMC alias registry and what changed on 15 September 2026?

The registry is a CNMC-run list of alphanumeric sender aliases and their holders, and since 15 September 2026 operators must block SMS, MMS and RCS sent to Spanish numbers under an alias that is not registered. According to the CNMC, the date was set after a ministerial order (Orden TDF/558/2026 of 4 June) postponed the earlier June 2026 start, and the system is developed through CNMC Circular 1/2026, modified by Circular 2/2026. A specific regime applies to the first period, until 31 December 2026.

Facts from the CNMC that matter for senders:

  • The alias holder registers, directly or through a representative who has a valid Spanish digital certificate and a signed authorisation letter.
  • The CNMC will publish a public portal to check registered aliases and their holders.
  • The registry stays open: aliases registered after the blocking date can be used once they are active.
  • Our data gives a lead time of up to one month, so start early.

A company that sends under a brand name without registering it should expect delivery failures on Spanish networks. Messages sent from abroad to Spanish numbers are in scope too, so a sender based outside Spain still needs its alias registered, either by the brand or through its provider. Keep a copy of each registration confirmation with your campaign records, since it is the first thing to check when messages stop arriving. If you want us to prepare and file the registration with you, see registrations; the decision stays with the CNMC and operators. Draft the authorisation letter with our sender ID letter generator, and check the position with the sender ID checker or the Spain sender ID page.

Yes. Article 21(1) of the LSSI prohibits promotional communications by email or equivalent electronic means unless the recipient previously requested or expressly authorised them. Article 21(2) sets an exception where a previous contractual relationship exists: you lawfully obtained the contact details and use them only for similar products or services of your own company.

In every case the sender must offer a simple, free procedure to object, both when the data is collected and in each commercial communication. The GDPR adds that consent must be freely given, specific, informed and unambiguous. A safe routine follows:

  1. Capture consent with a record: wording shown, date, time, channel and number.
  2. Name the sender and the kind of messages at sign-up.
  3. Add an opt-out to every promotion.
  4. Honour objections at once and keep one suppression list across channels.
  5. Do not buy lists.

Our regulation data adds that opt-in must be GDPR-compliant with double opt-in as the operator-preferred standard, and that the STOP keyword is honoured network-wide. See the opt-in consent generator, opt-in consent across channels and the definitions of opt-in and opt-out.

Which operators carry SMS in Spain?

Four mobile networks appear in our coverage data, each with a direct route:

Operator MCC-MNC
Movistar 214-07
Vodafone Spain 214-01
Orange Spain 214-03
MásMóvil 214-21

Read delivery reports per operator, not just a blended rate. Our guide to improving SMS delivery rates explains how to diagnose gaps. Read sender ID types explained for the options beyond aliases.

How should you separate OTP and promotional traffic?

Keep OTPs, order updates and reminders on their own alias and route, with no promotion inside. A mixed message counts as advertising and brings the consent rules, and it puts login codes at risk if marketing traffic is filtered.

Traffic Example Practice
Transactional OTP, delivery alert, appointment reminder No offers inside; own registered alias; any hour
Promotional Sale, loyalty offer Consented numbers; opt-out in the message; daytime schedule
Mixed "Tu pedido va en camino. 10 % de descuento" Avoid; the offer makes it promotional

For code length and expiry see the OTP authentication messages guide and our OTP service page.

Do Spanish accents work in GSM-7?

Only partly, and that surprises many teams. The GSM 7-bit default alphabet (3GPP TS 23.038) contains é, ñ, ü, Ñ, Ü, ¡ and ¿, so those are safe. It does not contain á, í, ó or ú. Because most Spanish sentences contain one of those vowels, a large share of Spanish SMS is sent as Unicode, which holds 70 characters (67 per part) instead of 160 (153). See GSM-7 and concatenated SMS.

Encoding Single message Per part when concatenated
GSM 7-bit 160 characters 153
Unicode (UCS-2) 70 characters 67

These examples were counted against the limits:

Message Encoding Characters Parts
Tu codigo es 482913. Valido 10 minutos. No lo compartas con nadie. Cafe Sol GSM-7 75 1
Tu código es 482913. Válido 10 minutos. No lo compartas con nadie. Café Sol Unicode 75 2
Café Sol: ¡2x1 en cafés este sábado! Detalles: cafesol.example/s. Baja: cafesol.example/baja Unicode 92 2
Café Sol: ¡2x1 en café este viernes! Detalles: cafesol.example/s. Baja: cafesol.example/baja GSM-7 92 1
Café Sol: tu pedido 1042 llega mañana antes de las 17 h. ¡Gracias! GSM-7 66 1

Rows 1 and 2 differ only in accents, yet the first is one GSM-7 part and the second becomes Unicode and splits into two. Rows 3 and 4 show the same effect with one word: "sábado" forces Unicode, while "viernes" keeps the message in GSM-7 even though "é" and "¡" are in the alphabet. Check final copy in the SMS character counter, and see SMS character limits and Unicode for other scripts. Dropping accents saves characters but looks careless; for important customer messages accept the Unicode limit and write correct Spanish.

When should you send?

We found no regulator-published time-of-day window for promotional SMS in Spain, and our regulation data records none. Agree sending hours with your provider, send promotions in local daytime (Central European Time, UTC+1, or UTC+2 in summer; the Canary Islands are one hour behind) and avoid late evenings. OTPs and alerts can go at any hour. The send time planner helps with scheduling, and SMS marketing rules by country compares markets.

A worked example: a Valencia coffee chain

"Café Sol" (synthetic) has 20 shops and wants app OTPs, order alerts and a weekly promotion.

  • It registers its alias in the CNMC registry, allowing up to a month, before announcing a launch date.
  • It collects consent in the app and at the till, with a record of wording, time and number.
  • OTPs and order alerts use the registered alias and short copy.
  • The weekly offer goes to consented numbers only, carries an opt-out and is timed for local daytime. The team accepts Unicode for correct Spanish and keeps copy under 70 characters where it can.
  • Opt-outs feed one suppression list shared with WhatsApp and email.

What is a launch checklist for Spain?

A short checklist keeps the first campaign clean. Work through it in order and keep the evidence for each step.

  1. Register the alias first, through the holder or an authorised representative, and allow up to a month.
  2. Classify traffic into transactional (OTP, alerts) and promotional.
  3. Confirm consent for every promotional number: wording, date, time and channel stored.
  4. Count the copy and decide whether you accept Unicode for correct Spanish.
  5. Test on all four networks: Movistar, Vodafone, Orange and MásMóvil, including the opt-out.
  6. Schedule for local daytime and watch delivery reports during the first sends.
  7. Review results by operator and remove objecting numbers from every list.

What are the common mistakes?

  • Launching before the alias is active. Unregistered aliases are blocked.
  • Missing representative paperwork. A representative needs a valid Spanish digital certificate and a signed authorisation letter.
  • Assuming the existing-relationship exception is broad. It covers similar products and services of your own company only.
  • No opt-out in each message.
  • Surprise Unicode. Check copy for á, í, ó and ú.
  • Mixing OTP and promotion.

How OmniChannels.ai helps

OmniChannels.ai is powered by BroadNet, which has direct routes to Movistar, Vodafone, Orange and MásMóvil in our coverage data. We prepare and file alias registration with you, support Spanish and Unicode content, offer per-operator delivery reports and SMPP 3.4 for high volume, and manage consent-aware campaigns with suppression handling. For indicative list prices see the Spain SMS pricing page, then book a demo. Next door? See the France guide.

Frequently asked questions

Do I need to register my sender alias in Spain?

Yes, if you use an alphanumeric alias. The CNMC alias registry covers SMS, MMS and RCS sent to Spanish numbers, and the blocking obligations are fully in force from 15 September 2026. The holder registers the alias directly or through an authorised representative. The registry stays open, and new aliases can be used as soon as they are active.

How long does alias registration take?

Our regulation data gives a lead time of up to one month for the CNMC alias registry. That is a planning figure, not a promise, because the CNMC and operators decide each application. Allow buffer before a campaign date, and start with the alias names you will actually send.

Do I need consent to send SMS marketing in Spain?

Yes. Article 21 of the LSSI prohibits promotional communications by email or equivalent electronic means unless the recipient previously requested or expressly authorised them. There is an exception for a previous contractual relationship, limited to similar products or services of your own company, and every message must offer a simple, free way to object.

Which law covers personal data in Spain?

The GDPR applies directly, and Spain's Organic Law 3/2018 on personal data protection and digital rights (LOPDGDD) supplements it. The data protection authority is the AEPD. Keep a record of when and how each number agreed to receive messages, and honour objections at once.

Do Spanish accents need Unicode?

Some do. The letters é, ñ, ü and the punctuation ¡ and ¿ are in the GSM 7-bit alphabet, but á, í, ó and ú are not. A single such vowel switches the whole message to Unicode, limiting it to 70 characters. Test final copy in a character counter, and keep key messages short.

Is there a legal sending time window for promotional SMS in Spain?

We found no regulator-published time-of-day window for promotional SMS in Spain, and our regulation data records none. Send promotions in local daytime, avoid late evenings and Sundays out of courtesy, and keep OTPs and alerts on a transactional route that can run at any hour.

Sources

  1. CNMC, Registro de Alias
  2. CNMC press release on the alias registry circular (June 2026)
  3. Ley 34/2002 (LSSI), article 21, BOE
  4. Agencia Española de Protección de Datos (AEPD)
  5. 3GPP TS 23.038: Alphabets and language-specific information

Keep reading

More guides