Automated Fraud Defense • Zero Config
Cooldowns & Abuse Defense.
Protect your infrastructure and budget from SMS pumping attacks and bot abuse with built-in multi-layer rate limiting.
Enforced Throttling
30-Second Resend Cooldown
Dispatches to the same phone number are blocked until the 30-second cooldown expires. Prevents accidental double-clicks and repeated dispatch spam.
Time-To-Live
5-Minute Code Expiration (TTL)
Verification codes expire strictly 300 seconds after generation. Expired codes are immediately invalidated and purged from active memory.
Brute-Force Guard
Max 5 Verification Attempts
Limits wrong code submissions to 5 attempts per verification ID. Once exceeded, the session is locked and requires a fresh dispatch.
Toll Fraud Defense
Client IP Velocity Limits
Monitors and throttles requests originating from individual IP addresses and anomalous subnet ranges to prevent automated SMS pumping bot attacks.
HTTP 429 Rate Limited Response Spec429 Too Many Requests
{
"error": "rate_limited",
"message": "Please wait 24 seconds before requesting a new verification code.",
"cooldown_remaining_seconds": 24,
"retry_after": 24
}Explore More Features
Test without risk using sandbox keys or issue signed JWT sessions.