To ensure business and channel security and minimize potential financial losses caused by malicious calls of SMS APIs, the default frequency limit for sending SMS messages is as detailed below:
Organizational users can log in to the SMS Console to set or modify the corresponding frequency limit policy. For detailed directions, please see Setting Sending Frequency Limit.
Note: individual users have no permission to modify the frequency limit. To use this feature, change "Individual Identity" to "Organizational Identity".
For detailed directions, please see Configuring Alarm Contact.
SMS bombing is an attack where the attacker exploits web client or server vulnerabilities to send a large number of verification code SMS messages to many irrelevant mobile numbers in a short period of time (such as within one day) by using malicious programs or tools. Such attacks harass mobile phone users severely.
Below is an actual case encountered by a customer (in normal cases, dozens of SMS messages are delivered every day, while tens of thousands of messages are delivered every day during the bombing):
SMS bombing not only makes the SMS channel unavailable due to high numbers of complaints made by harassed users, but also causes serious financial losses for the business. Therefore, you need to take preventive measures.
As SMS bombing is usually initiated by servers, you are recommended to take the following measures for prevention:
As required by carriers, Mainland China SMS messages must carry an SMS signature; for global SMS messages, SMS signature is optional, and you can choose whether to carry a signature as needed.
You can log in to the SMS Console, click the name of the target application to enter the application details page, and select a query method as needed:
An SDK AppID
is used to identify an application. Each SMS application has a unique SDK AppID
, which will be automatically generated by the system after the application is added.
You can log in to the SMS Console, select Application Management > Application List, and click the name of the target application to enter the application details page and view its SDK AppID
.
To exclude testing mobile numbers from the frequency limit, please consult SMS Helper.
You can log in to the SMS Console, click the name of the target application to enter the application details page, and select a record query or export method as needed:
Under a single Tencent Cloud account, up to 1,000 Global SMS messages can be sent per day. To adjust the limit, please consult SMS Helper.
Was this page helpful?