Development Sandbox Only: OTP TRAP is a developer testing tool. Virtual numbers are sandbox identifiers and cannot receive real telecommunication SMS or WhatsApp messages.
OTP TRAP is a developer sandbox—like Mailtrap, but engineered specifically for SMS and WhatsApp OTP flows. Route simulated payloads to our API and view captured codes in a fast virtual inbox.
Your verification code is 482193. Valid for 5 minutes.
Use PIN 9021 to complete your account login.
Testing two-factor authentication shouldn't require burning SMS provider credits or bothering team members with real verification codes.
Twilio and WhatsApp Cloud APIs bill per message segment. With OTP TRAP, local and staging tests are completely free of per-message fees.
Generate realistic virtual numbers in Indonesia (+62), USA (+1), UK (+44), and Singapore (+65) to isolate automated test runs cleanly.
Integrate seamlessly into Playwright, Cypress, Jest, and backend integration tests using standard HTTP POST requests and deterministic inboxes.
Replace your external telecom gateway endpoint with OTP TRAP during local and staging runs.
Sign in, generate a dedicated sandbox project, and assign virtual testing numbers formatted in E.164 for your target country.
In your application dev environment, point your SMS/WhatsApp service client to https://otp.gas.pm/api/v1/messages with your API key.
Open your project dashboard. Captured messages appear instantly with auto-highlighted OTP codes and copy-to-clipboard actions.
A single POST endpoint receives both SMS and WhatsApp simulated OTP messages. Strict API key hashing, payload validation, and rate limiting ensure your sandboxes stay fast and secure.
Read API Documentationcurl -X POST https://otp.gas.pm/api/v1/messages \
-H "Authorization: Bearer otptrap_live_your_api_key" \
-H "Content-Type: application/json" \
-d '{
"to": "+6281234567890",
"channel": "sms",
"message": "Your verification code is 482193",
"sender": "MyApp"
}'OTP TRAP is designed purely as an internal sandbox. It does not send messages to physical mobile devices and does not connect to real GSM/CDMA networks or WhatsApp servers. Virtual numbers are non-routable simulation identifiers.
All API keys are securely hashed using cryptographic salts, passwords hashed with bcrypt, and data isolated strictly by project tenant.
Clear answers about OTP TRAP and its sandbox architecture.
No. OTP TRAP is strictly an inbox sandbox. It receives simulated payloads directly from your application server via API and renders them in your private web console without outbound telecommunication routing.
No. Virtual numbers generated by OTP TRAP are internal sandbox identifiers and cannot receive messages from third-party cellular carriers or public services. Only payloads sent by your own API key to our ingestion endpoint will be captured.
We support generating realistic E.164 virtual numbers for Indonesia (+62), United States (+1), United Kingdom (+44), and Singapore (+65), validated using international telephone parsing standards.
By default, captured messages are retained for 7 days (customizable up to 30 days per project in project settings). An automated background cleanup process removes expired messages continuously.
Set up your free sandbox in 2 minutes and keep your verification testing cost-free and secure.
Create Free Account