Bulk SMS in Tanzania: TCRA, Sender ID and Data Protection
Bulk SMS Tanzania guide: TCRA sender ID registration with Vodacom, Airtel, Yas and Halotel, Personal Data Protection Act consent and Swahili GSM-7 text.
By OmniChannels.ai Editorial Team ยท Reviewed by BroadNet Messaging Solutions Team
SMS & OTP
Short answer
To send bulk SMS in Tanzania, use a provider with routes to Vodacom, Airtel, Yas and Halotel, register your alphanumeric sender ID (up to 11 characters) through the operators, and send marketing only to people who gave documented consent under the Personal Data Protection Act, 2022. Keep OTPs and payment alerts separate from promotions, offer an opt-out, and write Swahili in plain GSM-7 to stay at 160 characters.
On this page
- What rules apply to bulk SMS in Tanzania?
- What does the Personal Data Protection Act require before you send?
- How does sender ID registration work in Tanzania?
- Which operators carry SMS in Tanzania?
- How should you separate OTP and promotional traffic?
- How does Swahili affect SMS length?
- When should you send?
- A worked example: a Dar es Salaam retailer
- What are the common mistakes?
- How OmniChannels.ai helps
Key takeaways
- The Tanzania Communications Regulatory Authority (TCRA) is the regulator; our regulation data lists sender IDs as set up through the operators, with alphanumeric IDs of up to 11 characters and a typical lead time of 5 to 10 business days.
- The Personal Data Protection Act, 2022 has applied since 1 May 2023 and is enforced by the Personal Data Protection Commission; a phone number tied to a person is personal data, so marketing needs documented consent.
- Our regulation data calls for verifiable opt-in with timestamped consent records kept for at least 12 months and produced on regulator request, and for opt-out wording in every promotion.
- Four mobile networks appear in our coverage data, all with direct routes: Vodacom Tanzania (640-04), Airtel Tanzania (640-02), Yas Tanzania (640-03) and Halotel (640-09).
- Swahili uses plain Latin letters that sit in the GSM 7-bit alphabet, so one message holds 160 characters (153 per part); emoji and curly quotes switch it to Unicode at 70 (67).
This guide is for marketing, e-commerce, fintech and operations teams that want to send business SMS to mobile numbers in Tanzania: OTPs, mobile money confirmations, delivery alerts, reminders and promotions. It explains who regulates what, how sender IDs work, what the Personal Data Protection Act means for consent, which networks carry your traffic and how Swahili affects message length. It is a practical overview, not legal advice; confirm requirements with Tanzanian counsel and the operators before launch.
What rules apply to bulk SMS in Tanzania?
Three layers apply: TCRA and operator policy, the Personal Data Protection Act, 2022, and the rules of your own provider. None is called a "bulk SMS law", so you assemble the picture from each.
| Layer | What it covers | Where to check |
|---|---|---|
| TCRA and the operators | Telecom regulation, sender ID set-up, routes, filtering | tcra.go.tz |
| Personal Data Protection Act, 2022 | Lawful basis and consent for personal data; rights, including over direct marketing | pdpc.go.tz |
| Your provider | Sender ID filing, traffic categories, delivery reports | Your account team |
Our regulation data lists the Tanzania Communications Regulatory Authority as the regulator. It records that sender ID requirements are set by the operators, so the rule that matters on launch day is the one your operator route enforces.
What does the Personal Data Protection Act require before you send?
You need a lawful basis to process each number, and for marketing that basis is consent. The Personal Data Protection Act, 2022 has applied since 1 May 2023 and is enforced by the Personal Data Protection Commission. Phone numbers and contact lists count as personal data. The Act's table of contents includes a right to prevent processing of personal data for direct marketing (section 35), and DLA Piper's summary notes that people must be given clear consent mechanisms and a simple way to withdraw consent.
Our regulation data adds two operating rules: opt-in must be verifiable, with timestamped consent records kept for at least 12 months and produced on regulator request, and every promotion must carry opt-out wording. A safe routine follows:
- Capture consent with a record: the exact wording shown, the date and time, the channel and the number.
- Say who is sending and why at sign-up, for example "Offers from Duka la Pwani by SMS".
- Use the data only for what people agreed to. A number given for a delivery is not consent for a promotion.
- Honour opt-outs immediately. Accept STOP and the Swahili SIMAMA as keywords, and keep the suppression list across campaigns and channels.
- Do not buy lists. Purchased numbers have no consent trail.
Check with the Commission whether your organisation has registration duties under the Act's regulations. For wording, our opt-in consent generator drafts a consent text, and the guide to opt-in consent across channels shows how to record it.
How does sender ID registration work in Tanzania?
Business SMS to Tanzania uses an alphanumeric sender ID of up to 11 characters, which shows your brand instead of a number. Our data adds that a numeric long code is available on select networks. Requirements are set by the operators and confirmed at onboarding, and our published lead time is 5 to 10 business days. Treat it as typical, not guaranteed.
| Step | What to do |
|---|---|
| 1. Classify | Decide which traffic is transactional (OTP, payments) and which is promotional, and plan one sender ID for each |
| 2. Choose names | Use your registered business or brand name; generic words and names that imitate banks, mobile money services or operators invite rejection |
| 3. Prepare documents | Business registration papers and an authorisation letter naming the sender IDs and your provider |
| 4. Submit | Your provider files with the operators; track each approval, because networks decide separately |
| 5. Test | Send an OTP and a promotion to Vodacom, Airtel, Yas and Halotel handsets |
Our sender ID letter generator drafts the authorisation letter, and the Tanzania sender ID page shows the current data. If you want us to prepare and file the registration, see registrations; approval decisions stay with the operators and regulator. Adding a new brand or use case later usually means another filing. The background on formats is in SMS sender ID types explained.
Which operators carry SMS in Tanzania?
Four mobile networks appear in our coverage data, each with a direct route.
| Operator | MCC-MNC |
|---|---|
| Vodacom Tanzania | 640-04 |
| Airtel Tanzania | 640-02 |
| Yas Tanzania | 640-03 |
| Halotel | 640-09 |
Yas is the current name for the operator that traded as Tigo, so older documents may use either name. Read delivery reports per operator, not just a blended rate: a healthy overall figure can hide a weak network, and our guide to improving SMS delivery rates shows how to diagnose it. For a neighbouring market with a similar structure, see our bulk SMS Kenya guide.
How should you separate OTP and promotional traffic?
Keep OTPs, payment confirmations and other service messages on a transactional sender ID and route, and promotions on their own. A promotion inside an OTP puts your login codes at risk if the route is filtered, and it can confuse customers about what is safe to act on.
| Traffic | Example | Practice |
|---|---|---|
| Transactional | OTP, mobile money confirmation, delivery alert | No promotion inside; own sender ID; any hour |
| Promotional | Sale, new product, loyalty offer | Consented numbers only; opt-out in the message; daytime schedule |
| Mixed | "Your order shipped. Get 10% off your next order" | Avoid; the offer makes it promotional |
Mobile money is widely used in Tanzania, so OTPs and payment confirmations are among the most important messages you will send. Keep them short, never ask the recipient to reply with a code or PIN, and tell users that staff never request the code. For design and security, read our OTP authentication messages guide and the guide to SMS pumping fraud prevention.
How does Swahili affect SMS length?
Plain Swahili and English fit the default GSM 7-bit alphabet, so one message holds 160 characters (153 per part when split). Emoji, curly quotation marks and some symbols switch the whole message to Unicode with 70 characters (67 per part). See GSM-7 and concatenated SMS for definitions.
| Encoding | Single message | Per part when concatenated |
|---|---|---|
| GSM 7-bit | 160 characters | 153 |
| Unicode (UCS-2) | 70 characters | 67 |
These examples were counted against the limits (Duka la Pwani is a synthetic shop):
| Message | Encoding | Characters | Parts |
|---|---|---|---|
Nambari yako ya OTP ni 482913. Ni halali kwa dakika 5. Usimpe mtu yeyote. Duka la Pwani |
GSM-7 | 87 | 1 |
Duka la Pwani: Malipo yako ya oda #1042 yamepokelewa. Asante kwa kununua. |
GSM-7 | 73 | 1 |
Duka la Pwani: Punguzo la 20% kwa bidhaa zote wikendi hii! Maelezo: dukalapwani.example/p Kujiondoa: tuma SIMAMA |
GSM-7 | 112 | 1 |
Duka la Pwani: Punguzo la 20% kwa bidhaa zote wikendi hii! ๐ Maelezo: dukalapwani.example/p Kujiondoa: tuma SIMAMA |
Unicode | 115 | 2 |
The last row shows the cost of one emoji: the same message jumps from one part to two. Check final copy in the SMS character counter. For other scripts see SMS character limits and Unicode.
When should you send?
We have not found a regulator-published time-of-day window for promotional SMS in Tanzania, and our regulation data records none. Agree sending hours with your provider and the operators, send promotions in local daytime (East Africa Time, UTC+3) and avoid late evenings. OTPs and payment alerts can go at any hour. The send time planner helps schedule campaigns, and SMS marketing rules by country compares hours across markets.
A worked example: a Dar es Salaam retailer
"Duka la Pwani" (synthetic) has 12 shops and wants OTPs for its app, payment confirmations and a weekly promotion.
- It registers two sender IDs, one for transactional and one for promotional traffic, and tests both on Vodacom, Airtel, Yas and Halotel.
- It collects consent at the till and in the app, storing the wording, timestamp and number, and keeps those records for at least 12 months.
- OTPs and confirmations use plain Swahili at 160 characters or fewer.
- The weekly offer is checked against the suppression list, scheduled for local daytime and sent without emoji so it stays at one part.
- Opt-outs from replies feed one suppression list that also covers WhatsApp and email.
What are the common mistakes?
- Reusing data for a new purpose. Numbers collected for delivery are not consent for promotions.
- No consent evidence. Without a timestamp and source you cannot answer a regulator request.
- Generic sender IDs. Names that do not clearly link to your business are likely to be rejected.
- Emoji in every message. One emoji turns a 160-character message into a 70-character one.
- Mixing OTP and promotion on one sender ID.
- Treating lead times as promises. Plan buffer beyond 5 to 10 business days.
How OmniChannels.ai helps
OmniChannels.ai is powered by BroadNet, which has direct routes to Vodacom, Airtel, Yas and Halotel in our coverage data. We prepare and file sender ID registration with you, support English and Swahili content, and give you per-operator delivery reports, with SMPP 3.4 for high volume. For indicative list prices, see the Tanzania SMS pricing page, then book a demo. Small team? Our SMS marketing guide for small businesses covers the basics.
Frequently asked questions
Is bulk SMS legal in Tanzania?
Yes, businesses send OTPs, payment alerts and marketing by SMS through licensed operators. There is no single bulk SMS statute, so the rules come from TCRA, operator policy and the Personal Data Protection Act, 2022. Use a registered sender ID, send marketing only to people who agreed, and keep records you can produce if asked.
Do I need to register a sender ID in Tanzania?
Plan on it. Our regulation data says sender IDs are set up through the operators, with BroadNet confirming current requirements at onboarding and a typical lead time of 5 to 10 business days. Operators may ask for company documents and sample message content. Requirements and timing are not guaranteed, so test delivery on every network before a launch.
Does the Personal Data Protection Act apply to SMS marketing?
Yes. A mobile number linked to a person is personal data, so you need a lawful basis to process it, and for marketing that is consent. The Act has applied since 1 May 2023 and the Personal Data Protection Commission enforces it. Keep a record of when and how each number agreed, and honour objections to direct marketing.
Is there a do-not-disturb register in Tanzania?
Our regulation data says suppression of a do-not-disturb registry is applied where the regulator runs one, and we have not found a national register for promotional SMS. Do not rely on one. Keep your own suppression list, include opt-out wording in every promotion, and apply opt-outs across campaigns and channels.
Does Swahili text use GSM-7 or Unicode?
Standard Swahili uses Latin letters without accents, which sit in the GSM 7-bit alphabet, so 160 characters fit in one message. Emoji, curly quotation marks and some symbols force Unicode, which holds only 70. Check the final copy in an SMS character counter before sending a campaign.
How long does sender ID registration take in Tanzania?
Our published lead time for Tanzania is 5 to 10 business days. That is a typical range, not a promise. Operators review each application, and missing company documents can add time. Build the lead time into your launch plan and use our team to prepare and file the registration.
Sources
Keep reading
More guidesSMS & OTP
Bulk SMS in the Philippines: NTC, Sender ID and Consent Guide
Bulk SMS Philippines guide: NTC, sender ID registration with Globe, Smart and DITO, SIM Registration Act context, Data Privacy Act consent and GSM-7 text.
10 min read
SMS & OTP
Bulk SMS in Poland: UKE, Consent and Polish Characters Guide
Bulk SMS Poland guide: UKE, consent under the 2024 Electronic Communications Law and GDPR, Orange, T-Mobile, Play and Plus routes, Polish diacritics.
9 min read
UAE & Saudi Arabia
Best WhatsApp Business API Provider in Oman: What to Check
How to choose a WhatsApp Business API provider in Oman: app or API, Meta's Oman pricing market, Arabic templates, PDPL written consent and SMS fallback.
9 min read