The Complete SMSGatewayHub Guide: IP Whitelisting, OTP SMS, Transactional, Promotional & RCS Messaging
Everything you need to know about securing your SMSGatewayHub account with IP whitelisting — and a deep dive into every messaging product the platform offers, from instant OTPs to next-generation RCS conversations.
With over 65,000 businesses across India relying on SMSGatewayHub for critical communications — from bank OTPs to marketing campaigns — security and product knowledge are not optional. They are survival skills.
This guide covers two essential topics in one place: how to lock down your account with IP whitelisting, and how to choose the right messaging product for your exact use case. Whether you are a developer integrating an API, a marketer running bulk campaigns, or a business owner setting up your panel for the first time, this article is written for you.
Part 1: IP Whitelisting on SMSGatewayHub — Why It Matters & How to Enable It
What Is IP Whitelisting?
IP whitelisting is a security mechanism that restricts access to your SMSGatewayHub account and API to only a pre-approved list of IP addresses. When enabled, even if someone obtains your API key or login credentials, they cannot use your account unless their request comes from a whitelisted IP address.
Think of it as a digital guest list. Only servers or computers on the list are allowed inside — everyone else gets turned away at the door, regardless of what credentials they carry.
⚠️ Real Risk Without IP WhitelistingIf your API key is accidentally exposed — in a public GitHub repository, a misconfigured environment file, or a leaked codebase — an attacker can immediately start sending SMS messages using your credits, impersonate your sender ID, and potentially send spam that gets your account blacklisted. IP whitelisting eliminates this risk entirely.
Why Is IP Whitelisting Important for SMSGatewayHub Users?
- Protects your SMS credits — Only your authorized servers can make API calls, preventing credit theft from leaked API keys.
- Prevents account takeover — Even with stolen credentials, attackers from unknown IPs are blocked automatically.
- Stops unauthorized sender ID use — Criminals cannot send fraudulent or spam messages from your registered sender ID.
- Ensures DLT compliance — Unauthorized use of your sender ID on TRAI's DLT system can result in suspension. Whitelisting prevents misuse.
- Adds a zero-cost security layer — IP whitelisting is free to set up and takes under 5 minutes. There is no reason not to enable it.
- Required for enterprise security audits — If you ever undergo a security audit or need SOC 2 documentation, IP restrictions are a standard requirement.
💡 Best PracticeIP whitelisting works as a second layer of security — it does not replace strong passwords or 2FA. Use all three together for maximum protection.
How to Enable IP Whitelisting via the SMSGatewayHub Panel
The panel-based method is ideal for businesses and marketers who manage campaigns directly through the SMSGatewayHub web interface and want to restrict panel login access to specific office or server IPs.
1 Log in to your SMSGatewayHub account Visit www.smsgatewayhub.com and sign in with your registered email and password.
2 Navigate to Account Settings Go to your dashboard sidebar. Click on My Account→ then select Settings.
3 Open the IP Validation Tab Inside the Setting page, look for the IP Validiation
4 Find your current IP address If you are unsure of your IP, the panel usually shows a "Find My IP" option. You can also visit whatismyip.com to find your current public IP before adding it.
5 Add your IP address Enter your IP address (IPv4 or IPv6) in the input field. Give it a label like "Office Server" or "Production Server" so you can identify it later. Click Add IP.
6 Verify and save Your newly added IP should appear in the whitelisted IP list. From now on, only requests from this IP address can access your panel session.
⚠️ Important Warning Before saving, make sure the IP you are adding is the correct one for your network. If you whitelist the wrong IP, you could accidentally lock yourself out of your own account. Always confirm your IP from the panel's helper tool before saving.
support related please contact at : +91 9907922122
API Call Example After Whitelisting
Once your server IP is whitelisted, a standard SMSGatewayHub API call looks like this:
https://www.smsgatewayhub.com/api/mt/SendSMS?APIKey=yourapicode&senderid=TESTIN&channel=2&DCS=0&flashsms=0&number=91989xxxxxxx&text=test message&route=1&EntityId=Registered-Entity-Id&dlttemplateid=Registered-DLT-Template-Id
Without IP whitelisting, anyone with your API key can make this exact call. With whitelisting enabled, this call only succeeds when it originates from your approved server IP - giving you true access control.
IP Whitelisting Tips for Different Infrastructure Types
| Infrastructure | What to Whitelist |
|---|
| Single VPS / Dedicated Server | The server's static public IP address |
| AWS EC2 | The Elastic IP (EIP) assigned to your instance |
| Google Cloud / Azure VM | The static external IP of your VM |
| Load Balancer Setup | All egress/NAT gateway IPs used by your backend |
| Office Network | Your office router's public static IP (ask your ISP) |
| Home / Dynamic IP | Not recommended — dynamic IPs change. Use a static IP or VPN with a fixed IP for API work. |
| Serverless / Lambda Functions | NAT Gateway IP assigned to your VPC — configure NAT before whitelisting |
📋 Maintenance Checklist Review your IP whitelist every time you: change hosting providers, add or retire servers, onboard new team members with their own servers, or encounter "IP not allowed" errors after an infrastructure change. Keeping the list clean and updated is as important as enabling it.
Part 2: SMSGatewayHub Products - A Complete Guide
SMSGatewayHub offers four core messaging products, each designed for a different business need, regulatory category, and customer journey moment. Understanding which product to use — and when — is the difference between effective communication and wasted spend. know Diffrence Between
| Feature | OTP SMS | Transactional SMS | Promotional SMS | RCS |
|---|
| Primary Use | Authentication | Service alerts | Marketing | Rich engagement |
| DND Numbers | ✓ Delivered | ✓ Delivered | ✗ Blocked | ✓ Delivered |
| Delivery Hours | 24/7 | 24/7 | 10 AM – 9 PM only | 24/7 |
| Sender ID | Alphanumeric | Alphanumeric | Numeric header | Verified brand name |
| Content Type | Text only | Text only | Text only | Images, video, carousels, buttons |
| Delivery Speed | Sub-4 seconds | High priority | Standard | High priority |
| DLT Required | Yes | Yes | Yes | No (verified brand) |
| Pricing (approx) | ₹2,450/annum+ | ₹2,250/annum+ | ₹2,250/annum+ | Custom pricing |
1. OTP SMS — Instant Authentication at Scale
Sub-4 Second Delivery DND Bypassed24/7 AvailableHigh Priority Route
What Is OTP SMS?
OTP (One-Time Password) SMS is a dedicated messaging route designed for one purpose only: delivering time-sensitive, security-critical authentication codes to users in real time. Every millisecond of delay in OTP delivery can mean a failed login, an abandoned transaction, or a frustrated user who simply gives up.
SMSGatewayHub's OTP SMS route is engineered for speed above all else. The platform processes OTP requests in under half a second on the server side, with end-to-end delivery typically completing in under four seconds across all major Indian telecom networks including Jio, Airtel, Vi, and BSNL.
How OTP SMS Works on SMSGatewayHub
When a user triggers an OTP event on your website or app — a login, a payment, a password reset — your system calls the SMSGatewayHub OTP API. The platform immediately assigns the request to a premium high-priority route, bypasses standard queue systems, and pushes the message directly to the telecom operator for delivery. The OTP arrives in your user's inbox before they have even finished looking down at their phone.
Key Features of SMSGatewayHub OTP SMS
- Sub-4-second guaranteed delivery via express routes
- Delivered to both DND and non-DND numbers without restriction
- Available 24 hours a day, 7 days a week — no delivery windows
- Alphanumeric sender ID (e.g. SMSHUB) for brand recognition and trust
- Automatic retry logic if initial delivery fails due to network issues
- Voice OTP fallback — if SMS fails, an automated call speaks the code
- Full DLT compliance with TRAI regulations
- Real-time delivery reports for every OTP request
- Supports Two-Factor Authentication (2FA) workflows
Who Should Use OTP SMS?
OTP SMS is essential for any business that needs to verify user identity or authorize actions. Common use cases include e-commerce platforms verifying new registrations, fintech apps authorizing payments and fund transfers, banking apps sending transaction alerts, healthcare portals confirming appointments, and any SaaS platform using 2FA for account security.
ℹ️ OTP Route vs Transactional RouteMany businesses mistakenly send OTPs through the transactional route to save costs. This is a mistake. The OTP route has dedicated infrastructure with higher priority and separate capacity — meaning your OTPs are never delayed by high-volume transactional traffic from other senders. For authentication codes, always use the OTP route.
2. Transactional SMS — The Backbone of Customer Communication
DND Numbers Reached24/7 DeliveryAlphanumeric Sender IDNon-Promotional Only
What Is Transactional SMS?
Transactional SMS is used to send messages that are directly related to an action a customer has taken or a service they are subscribed to. These are not marketing messages — they are service notifications that customers expect and need. Examples include order confirmations, delivery updates, appointment reminders, account balance alerts, and booking confirmations.
Because these messages carry information customers genuinely need, TRAI allows them to be delivered to all numbers — including those registered on the Do Not Disturb (DND) registry — at any hour of the day or night.
- Reaches both DND and non-DND numbers without restriction
- High-priority delivery route — messages go through first
- Available 24/7 — critical for e-commerce midnight orders and banking alerts
- Alphanumeric sender ID displays your brand name instead of a number
- Supports dynamic variables — personalize each message with names, order IDs, amounts
- Intelligent smart retry — automatically resends if first delivery attempt fails
- Real-time delivery reporting with operator-level visibility
- API integration with CRM, ERP, and e-commerce platforms
- Excel plugin for sending personalized transactional messages in bulk
- Full TRAI DLT compliance with pre-approved templates
Common Transactional SMS Use Cases
| Industry | Use Case Examples |
|---|
| E-Commerce | Order placed, shipped, out for delivery, delivered confirmations |
| Banking & Finance | Account debit/credit alerts, loan EMI reminders, balance updates |
| Healthcare | Appointment reminders, lab report ready notifications, prescription alerts |
| Logistics | Pickup confirmed, in-transit updates, delivery slot notifications |
| Education | Fee payment receipts, exam schedule alerts, result notifications |
| Travel & Hospitality | Booking confirmations, check-in reminders, flight delay alerts |
⚠️ Critical Compliance Rule Transactional SMS must only contain service-related content. You cannot include promotional offers, discount codes, or marketing language in transactional messages. TRAI actively monitors this, and misuse can result in template suspension, account blacklisting, and DLT penalties. Keep it strictly informational.
3. Promotional SMS — Reach Your Customers at Scale
Non-DND Numbers Only 10 AM – 9 PM Window Numeric Sender IDCost-Effective Marketing
What Is Promotional SMS?
Promotional SMS is the channel for sending marketing messages — offers, discounts, new product launches, event invitations, sale announcements, and any content designed to drive customer action. These messages are sent to opted-in non-DND numbers and are subject to stricter delivery windows under TRAI regulations.
Despite their constraints, promotional SMS campaigns remain one of the most cost-effective marketing channels available to Indian businesses. With open rates approaching 98% and most messages read within three minutes of delivery, no email newsletter or social media post can compete with the immediacy of a well-crafted SMS.
Key Features of SMSGatewayHub Promotional SMS
- Mass delivery to thousands of opted-in numbers in seconds
- Campaign scheduling — plan messages days in advance for optimal delivery timing
- Contact group management for targeting specific customer segments
- Regional language support — send messages in Hindi, Tamil, Telugu, and more
- Media-rich attachments — add images, PDFs, and shortened web links to messages
- Click-through tracking — see exactly who opened your link and from which device
- A/B testing capability — test different messages to find what converts best
- Real-time delivery reports and campaign analytics
- Reseller-friendly multi-account management
- Excel-based bulk upload for easy contact import
| Rule | Details |
|---|
| Delivery Hours | Only between 10:00 AM and 9:00 PM |
| DND Numbers | Completely blocked — cannot be delivered to DND registered numbers |
| Sender ID | Numeric header (random 6-digit number assigned by operator) |
| DLT Registration | All templates must be pre-registered and approved on TRAI's DLT platform |
| Content | Must clearly identify your business; no misleading or deceptive content |
| Opt-Out | Recipients must always be able to opt out by replying STOP or calling 1909 |
💡 Pro Marketing TipSMSGatewayHub supports media-rich SMS with shortened URL links. Instead of a plain text offer, include a link to a landing page with full product images, a countdown timer, and a buy button. Track who clicked, at what time, and from which device — then retarget non-clickers with a follow-up message.
4. RCS Messaging — The Future of Business Communication Is Here
Rich MediaInteractive ButtonsVerified Brand IDEnd-to-End Encrypted
What Is RCS?
RCS — Rich Communication Services — is the next evolution of SMS. Where traditional SMS is limited to 160 characters of plain text, RCS turns the humble messaging app into a full interactive experience. Think product image carousels, tap-to-buy buttons, live delivery tracking, boarding pass displays, appointment booking confirmations — all delivered directly inside your customer's native messaging app, with zero app downloads required.
SMSGatewayHub was among the first mover platforms in India to offer RCS Business Messaging, and with Apple officially enabling RCS on iPhones in India in mid-2025, the channel now reaches both Android and iOS users — covering virtually the entire Indian smartphone market.
How RCS Is Different From SMS
| Feature | Traditional SMS | RCS via SMSGatewayHub |
|---|
| Character Limit | 160 characters | Unlimited |
| Media | Text only | Images, videos, GIFs, documents |
| Interactive Elements | None | Buttons, carousels, quick replies, menus |
| Sender Verification | No verification — easily spoofed | Verified brand badge builds trust |
| Read Receipts | Not available | Full read receipts and delivery confirmation |
| Analytics | Basic delivery reports only | Click-through rates, engagement time, response tracking |
| Encryption | No end-to-end encryption | End-to-end encrypted messages |
| Brand Identity | Numeric or plain alphanumeric header | Logo, brand name, custom chat colour, verified badge |
| Two-Way Communication | Limited | Full conversational two-way messaging |
Key Features of SMSGatewayHub RCS
- High-resolution image and video delivery within the message
- Product carousels — customers can browse and tap to buy without leaving the message
- Suggested reply buttons and quick action menus
- Verified business profile with logo, brand name, and badge — eliminating spoofing
- Live delivery tracking directly in the message thread
- Read receipts and engagement analytics in real time
- Two-way conversational messaging — customers can reply and businesses can respond
- End-to-end encryption for all RCS messages
- Advanced RCS API for seamless integration with existing systems
- Intelligent routing — automatically falls back to SMS if RCS is not supported on the recipient's device
RCS Use Cases by Industry
🛒E-Commerce & Retail
Send product carousels, abandoned cart reminders with images, order tracking with live map, and post-purchase feedback forms — all inside one message thread.
🏦Banking & Finance
Verified sender badge eliminates fraud concerns. Send loan offers with apply-now buttons, credit card statements with PDF downloads, and investment summaries with charts.
✈️Travel & Airlines
Digital boarding passes, live flight status updates, hotel check-in links, and real-time baggage tracking — replace multiple apps with one rich message thread.
🏥Healthcare
Appointment confirmations with calendar add buttons, pre-appointment instructions with images, prescription pickup reminders, and teleconsultation join links.
🎓Education & EdTech
Course enrollment carousels, video lesson previews, exam schedules with add-to-calendar buttons, and result notifications with downloadable mark sheets.
🚚Logistics
Real-time parcel tracking maps, delivery slot selection via tap-to-choose menus, signature confirmation prompts, and proof-of-delivery images.
📱 RCS Fallback — No Customer Left Behind SMSGatewayHub's RCS solution includes intelligent routing. If a recipient's device does not support RCS — whether due to an older phone or unsupported carrier — the message automatically falls back to a standard SMS. You never miss a customer, and you only pay the higher RCS rate for messages actually delivered as RCS.
Which SMSGatewayHub Product Is Right for You?
Use this quick decision guide to match your use case to the correct product:
| Your Situation | Use This Product |
|---|
| User is logging in and needs a verification code | OTP SMS |
| Customer just placed an order and needs confirmation | Transactional SMS |
| You want to send a discount offer to your opted-in database | Promotional SMS |
| You want to send an offer with product images and a buy button | RCS Messaging |
| You need to reach DND numbers with service information | Transactional or OTP SMS |
| You need to send at 2 AM for a midnight sale alert | Transactional SMS only (not promotional) |
| You want read receipts and two-way conversation | RCS Messaging |
| You want lowest cost per message for mass marketing | Promotional SMS |
| User needs a password reset immediately | OTP SMS |
| You want to build a branded, app-like experience in messaging | RCS Messaging |
Conclusion
SMSGatewayHub is not a one-size-fits-all messaging tool — it is a complete communication platform with four distinct products, each purpose-built for a specific type of message and business outcome.
Enabling IP whitelisting should be your very first step after creating an account. It costs nothing, takes five minutes, and eliminates the largest single security risk for any SMS platform user — credential abuse through exposed API keys. Do it today, not after something goes wrong.
On the product side, match your message type to the right route. Use OTP SMS for authentication. Use Transactional SMS for service notifications. Use Promotional SMS for marketing campaigns. And use RCS when you want to give customers a rich, branded, interactive experience that goes far beyond what 160 characters can achieve.
Together, IP whitelisting and the right product selection will make your SMSGatewayHub account both secure and maximally effective — protecting your investment and delivering real results for your business.
🚀 Get Started Visit www.smsgatewayhub.com or call +91 9907922122 to set up your account, enable IP whitelisting, and choose the right messaging product for your business. Free 1000 credits are available for Startups
Contact SMSGatewayHub: 163-B Sachidanand Nagar, Kesar Baugh Road, Indore – 452012 | 📞 +91 9907922122 | ✉ support@smsgatewayhub.com | 🌐 www.smsgatewayhub.com