Second Accounts Without a Second SIM
Contents
- Why do people keep a second account, and which reasons hold up?
- What actually happens when a service asks for your phone number?
- What are your options for a second number, and how do they compare?
- How does a rented number work from top-up to code?
- Step by step: create a second account with a rented number
- Which country should you pick for the number?
- What are the per-service rules and limits you should know?
- What changes when the second account is a messaging app?
- What changes for social, marketplace and gaming accounts?
- How do you lock a second account down after signup?
- What happens if you lose access, and how do you get back in?
- Why did the code not arrive, and what should you do next?
- How do developers and QA teams automate OTP flows?
- Where is the line between privacy and misuse?
- Frequently asked questions about second accounts and numbers
- Print this checklist before you start
Four methods work in 2026, and each one fits a different situation. Use a number you already control (a spare SIM, a work line, a landline where the service allows voice calls). Use a carrier eSIM as a second line on a phone that supports dual SIM. Use a service that lets you sign up with email or a username and never asks for SMS at all. Or rent a real mobile number for a single verification, receive the code, and let the number go back to the pool.
What a verification costs by service
| Service | Cheapest country | Price | Numbers in stock |
|---|---|---|---|
| Telegram | Canada | $0.51 | 4,802,818 |
| United Kingdom | $0.90 | 4,779,728 | |
| Uzbekistan | $0.10 | 454,961 | |
| Sweden | $0.06 | 478,629 | |
| Discord | United Kingdom | $0.04 | 2,871,349 |
| TikTok | United Kingdom | $0.05 | 4,140,654 |
| United Kingdom | $0.06 | 4,120,223 | |
| Uber | Portugal | $0.02 | 8,383,072 |
| Amazon | Uzbekistan | $0.02 | 634,089 |
| OpenAI | United Kingdom | $0.06 | 1,508,953 |
Source: MarioSMS catalog, 2026-09-10.
The fourth option is what most people land on when the first three fail. A rented number from MarioSMS starts at $0.04, covers 35+ countries and hundreds of services, and delivers the code to the app or dashboard, usually within a minute. If no SMS arrives inside the activation window, the activation cancels and the price returns to your balance automatically.
Per-service rules worth knowing
| Service | Second account allowed | Number needed again later |
|---|---|---|
| Telegram | Yes, several in the app | Only if you lose 2FA and the session |
| Yes, with the business app or a second device | On re-registration | |
| Yes, several per login | For some security checks | |
| Discord | Yes | Rarely, password based |
| TikTok | Yes | For some security checks |
Always check the current terms of the service; this table is a summary, not a permission.
The short answer in four options
| Method | Cost | Setup time | Reusable for login | Best for |
|---|---|---|---|---|
| Spare SIM you own | $5 to $30/month | Days (order, activate) | Yes | A long-term second account you log into often |
| Carrier eSIM second line | $5 to $25/month | Minutes to hours | Yes | Dual-SIM phones, travel plus a permanent second line |
| Email or username signup | $0 | Seconds | Not applicable | Services that never require a phone (many forums, some marketplaces) |
| Rented number for one code | From $0.04 | Under 2 minutes | No, one activation | One-time signups, QA runs, keeping your main number private |
Read the “reusable for login” column carefully, because it drives most of the decisions later in this guide. A rented number handles the signup SMS verification and then stops being yours. That is fine if you plan to move the account onto an authenticator app and an email recovery address in the first ten minutes. It is a problem if the service will text you a login code every time you sign in from a new device and you have no other recovery path.
When a rented number is the right pick
Pick a rented number when the phone number is a gate, not an identity. Concretely:
- You want a second Telegram, Instagram or Discord account and you already plan to secure it with an authenticator app and a recovery email.
- You are testing your own signup flow and need 20 fresh accounts this afternoon without buying 20 SIMs.
- You do not want your personal number sitting in a marketplace listing, a delivery app, or a forum profile that leaks contact details.
- You need a number in another country, for example a US number for a service that only ships codes to US carriers.
- You want the cost to match the use. One code costs cents, and a failed activation costs nothing because the refund is automatic.
For QA teams the math is blunt. A REST API with Python, Node.js, Go and PHP examples means the number request, the code poll, and the cancel all fit inside your existing test suite, and the per-run cost stays in the pennies rather than a monthly line rental per test account.
When a rented number is the wrong pick
Skip it in four cases.
First, when the account holds money or identity. Banks, government portals, tax accounts and anything tied to your legal name need a number you keep forever. Losing the recovery channel on a bank login is not a small inconvenience.
Second, when the service texts a login code on every single sign-in and offers no authenticator app, no backup codes and no email recovery. You would be locked out the moment your session expires.
Third, when the account is meant to last years and you cannot lock it down after signup. Section 10 of this guide covers exactly which settings to change and in what order, but if the service offers none of them, buy a real second line.
Fourth, when the goal is evading a ban, impersonating someone, or creating accounts to break a platform’s rules. That is outside acceptable use and it is not what these numbers are for. See /acceptable-use/ for the specifics.
What this guide covers and in what order
The next two sections cover why people run second accounts and what a service actually does with your number when you hand it over. Then a comparison of every number type, including VoIP versus non-VoIP, which decides whether codes arrive at all. After that comes the mechanics: top-up, activation, code, and a numbered walkthrough of a real signup. Later sections handle country choice, per-service limits, messaging apps versus social apps, post-signup lockdown, account recovery, troubleshooting a code that never landed, API automation for QA, and the line between privacy and misuse. The final two sections are an FAQ and a printable checklist.
Why do people keep a second account, and which reasons hold up?
Cheapest countries in the catalog
| Country | From | Services | Numbers in stock |
|---|---|---|---|
| USA | $0.01 | 200 | 79,628,810 |
| Germany | $0.01 | 144 | 133,034,615 |
| United Kingdom | $0.02 | 291 | 411,388,327 |
| France | $0.02 | 153 | 147,270,821 |
| Portugal | $0.02 | 143 | 158,296,560 |
| Uzbekistan | $0.02 | 38 | 19,322,104 |
| Italy | $0.03 | 149 | 407,944,706 |
| Austria | $0.04 | 126 | 190,341,321 |
| Australia | $0.04 | 135 | 135,706,406 |
| Indonesia | $0.04 | 45 | 101,053,478 |
Source: MarioSMS catalog, 2026-09-10.
A second account is not exotic. Most people already run one without thinking about it: a work email next to a personal one, a spare login for a shop they do not trust. The phone number is where it gets awkward, because one SIM usually maps to one account per service, and carriers do not hand out spare lines for $0.04. The reasons below are the ones that hold up, followed by the ones that do not.
Prices for the accounts people duplicate most
| Service | Cheapest country | Price | Numbers in stock |
|---|---|---|---|
| Telegram | Canada | $0.51 | 4,802,818 |
| United Kingdom | $0.90 | 4,779,728 | |
| Sweden | $0.06 | 478,629 | |
| TikTok | United Kingdom | $0.05 | 4,140,654 |
| Discord | United Kingdom | $0.04 | 2,871,349 |
| Tinder | United Kingdom | $0.09 | 2,708,238 |
| grindr | Germany | $0.04 | 532,595 |
| bumble | Italy | $0.06 | 6,526,013 |
Source: MarioSMS catalog, 2026-09-10.
Work and personal separation
If you run a business page, a support inbox or a freelance profile, mixing it with your personal account leaks in both directions. Colleagues see your family photos. Clients get your private number in their contact list. Messaging apps make this sharper, because most of them sync your address book and show your number to anyone in a shared group.
Two accounts on two numbers keeps the boundary clean. The work account carries the business handle, the business hours and a number you are willing to publish. The personal account stays with people who already have your real number. When you leave the job or close the business, you stop using that number and the account can be archived without touching your primary identity.
Selling, buying and local classifieds
Classifieds are the clearest case. To sell a couch you post a listing, and a dozen strangers now have a way to reach you forever. Some of them call at 11pm. Some of them resell the number to a lead broker. There is no unsubscribe once a number is in circulation.
A separate account with a rented number closes that loop. You post, you sell, you move the conversation to the platform’s own chat, and when the listing is gone you stop caring about that number. The same logic applies to loyalty signups, delivery apps used once on a trip and any form where the phone field is required but the relationship is a single transaction.
Testing your own product
If you build software with a login, you need accounts that are not yours. QA teams run signup flows, password resets, OTP delivery and win-back campaigns, and every one of those needs a number that has never been used on the platform before. Reusing a developer’s personal SIM pollutes the test data and hits per-number limits fast.
Renting a number per test run gives each case a clean identity. It also lets you test what users actually see: how long the SMS takes, whether the template renders on a small screen, whether the code still works after the retry timer. Section 14 covers the API side of this in detail.
Regional storefronts and travel
Services behave differently by country. Pricing pages, catalogue availability, app store listings and support hours all shift with the region tied to your account. If you sell into three markets, you may need to see all three the way a local customer sees them, and that often means an account registered with a local number.
Travel creates a milder version of the same problem. You land somewhere, a local app wants a phone number, your home SIM is roaming or off. A rented number in that country covers the signup without buying a tourist SIM you use for four days. Pick the country deliberately, since delivery rates and price vary by pair. That choice gets its own section later.
| Reason | Holds up | Why |
|---|---|---|
| Work account separate from personal | Yes | Different audiences, different contact info |
| Classifieds and one-off transactions | Yes | Number is exposed to strangers permanently |
| QA and OTP testing | Yes | Test data needs fresh, isolated identities |
| Regional storefront checks | Yes | Catalogue and pricing are region-bound |
| Evading a ban or suspension | No | The original decision still applies to you |
| Posing as someone else | No | Impersonation, not privacy |
| Bulk accounts for spam or ratings | No | Platform abuse, and it fails fast anyway |
Reasons that fail the acceptable use test
Three patterns do not qualify, and MarioSMS does not support them. First, coming back after a suspension. A ban attaches to the person and the behaviour, not to the digits, and the service will match device, payment and writing patterns anyway. Second, pretending to be someone else, whether that is a real person, a brand or a support agent. Third, running dozens of accounts to inflate votes, reviews, referrals or giveaway entries.
The test is simple. If the second account exists because you want a boundary between two parts of your own life, or because you are testing something you own, it holds up. If it exists because a platform told you no, it does not. The full policy lives at /acceptable-use/, and it is worth reading before you top up.
What actually happens when a service asks for your phone number?
When you type a number into a signup form, you start a chain of systems that most people never see. Knowing the order of operations tells you why a code lands in 20 seconds on one app and never lands on another, and why a number that worked on Tuesday gets refused on Friday.
Largest stock by country
| Country | Numbers in stock | Services | From |
|---|---|---|---|
| United Kingdom | 411,388,327 | 291 | $0.02 |
| Italy | 407,944,706 | 149 | $0.03 |
| Austria | 190,341,321 | 126 | $0.04 |
| Portugal | 158,296,560 | 143 | $0.02 |
| France | 147,270,821 | 153 | $0.02 |
| Australia | 135,706,406 | 135 | $0.04 |
| Germany | 133,034,615 | 144 | $0.01 |
| Canada | 113,876,950 | 37 | $0.05 |
| Netherlands | 109,102,472 | 49 | $0.05 |
| Mexico | 101,179,272 | 38 | $0.10 |
Source: MarioSMS catalog, 2026-09-10.
Registration, verification and recovery are three different jobs
Services collapse all three into one input box, which is where the confusion starts.
Locking the account down on day one
| Setting | Where | Why |
|---|---|---|
| Two-step verification | Security settings | The number alone stops being enough |
| Recovery email | Account settings | A way back that is not SMS |
| Hide the number | Privacy settings | Strangers stop seeing it |
| Active sessions reviewed | Security settings | You see every device |
Registration is identity creation. The service needs a unique key so two accounts cannot collide. Some platforms use the phone number as that key, others use email and treat the phone as a secondary attribute.
Verification is a liveness check at a single moment. The service sends a code and asks you to prove you can read messages sent to that number right now. It says nothing about next month.
Recovery is a long-term claim. If the service keeps the number on file for password resets or two-factor authentication, it needs the number to still reach you weeks or years later.
A rented number covers job one and job two well. It does not cover job three, because the number goes back into the pool after the activation ends. That is the single most important thing to plan around, and it is why recovery codes and a backup email matter more on a second account than on your main one.
How a one-time code is generated and checked
The mechanics are simple enough to draw as steps.
- You submit the number. The service normalizes it to E.164 format, so +1 555 0142 and 15550142 become the same string.
- The service checks the number against its own database. If it is already attached to an account, or on an internal block list, the flow stops here with an error, before any SMS is sent.
- The service generates a code, usually 4 to 8 digits, and stores a hash of it with an expiry timestamp and an attempt counter.
- It hands the message to an SMS provider, which routes it toward the destination carrier.
- The message lands. You read it in the app or dashboard and type it back.
- The service compares your input to the stored value, checks that the expiry has not passed and that you have not burned the attempt limit, then marks the number verified.
Two things follow from step 3. Codes expire, often within 5 to 10 minutes, so a code that arrives late may already be dead. And attempt counters are small, often 3 to 5 tries, so guessing burns the activation. If you want the full vocabulary, the OTP glossary entry covers the terms.
Number reputation, carrier type and routing
Every number carries metadata that the service can look up before it sends anything. A lookup returns the country, the carrier, the line type (mobile, landline, VoIP, toll-free) and whether the number has been ported.
Line type is where most rejections happen. Many services refuse VoIP numbers outright, because those are cheap to mint in bulk. Mobile numbers issued by real carriers pass more often, which is why non-VoIP numbers are the useful category for verification. MarioSMS rents real mobile numbers, one verification at a time, across 35+ countries.
Routing matters separately. The SMS provider picks a path to the destination carrier, and some paths filter aggressively on message content or sender ID. That filtering is why a code sometimes never arrives even though the service says it sent one. With MarioSMS, if no SMS lands inside the activation window, the activation cancels and the price returns to your balance automatically, so a dead route costs you time rather than money.
Why some services accept a number once and reject it later
Reputation is a moving state, not a fixed property.
| What changes | Effect on the next signup |
|---|---|
| Number already tied to an account | Blocked at step 2, no SMS sent |
| Prior spam or fraud reports on that number | Provider or service flags it |
| Number recycled between users | New verification behaves like a fresh one |
| Service tightens rules for a country or range | Whole prefixes stop working |
| Rate limit hit from your IP or device | Temporary block regardless of number |
The practical read: a rejection is usually about the number’s history or your request rate, not about you. Try a different country or a different service-specific number rather than retrying the same one three times in a row. Each retry on a burned number costs another activation.
What the service stores after you verify
Most platforms keep the normalized number, a verified-at timestamp, and the line-type metadata from the lookup. Many also keep a hash of the number so they can detect reuse without storing it in plain text everywhere.
Some keep the number visible in your profile or discoverable by contact upload, which is the part that surprises people on messaging apps. Check the privacy settings right after signup, before you add contacts. Turning off phone-number discoverability is a 30 second job on most apps and it is the difference between a private second account and one your entire address book can find.
What are your options for a second number, and how do they compare?
Five routes exist for getting a phone number that is not your main one. They differ in what you pay, how long the number stays yours, and whether you actually control it. The right choice depends on one question: do you need a number you keep, or a number that receives one code and disappears?
Where a number type is accepted
| Number type | Messengers | Marketplaces | Ride and delivery | Banking |
|---|---|---|---|---|
| Rented mobile number | Usually | Usually | Usually, country must match | Often not |
| Your own carrier line | Yes | Yes | Yes | Yes |
| VoIP number | Often blocked | Often blocked | Often blocked | No |
| Landline | Only where voice codes exist | Rarely | No | Sometimes |
Acceptance changes by market and over time; the catalog shows what is in stock for a service right now.
Comparison table: cost, setup time, ownership, reuse
| Option | Upfront cost | Setup time | Who owns it | Lifespan | Best for |
|---|---|---|---|---|---|
| Second physical SIM | $5 to $30 plus monthly fee | 1 to 3 days (store visit or delivery) | You, tied to your ID in most countries | Months to years, dies if unused | A permanent second line you answer calls on |
| Travel eSIM | $5 to $20 per data pack | 5 to 15 minutes | The eSIM reseller | Days to weeks, often data only | Data abroad, rarely SMS |
| VoIP number | $1 to $15 per month | 10 to 30 minutes | The VoIP provider | As long as you pay | A business line, call forwarding, voicemail |
| Landline verification | Existing line, no new cost | 1 call | Your landline provider | Years | Services that offer voice call codes |
| Rented number (MarioSMS) | From $0.04 per number | Under a minute | Rented for one activation | One verification, then released | Signup, privacy hygiene, QA and OTP testing |
Read the table with your use case in mind. A number you want to keep for years and a number you need for 90 seconds sit at opposite ends, and paying monthly for the second case is the most common mistake.
If you lose access
| Situation | What usually works |
|---|---|
| You have 2FA and the app session | Change nothing, you are fine |
| Session lost, 2FA set | Recovery email and the 2FA password |
| Session lost, no 2FA | Account recovery through the service, often slow |
| Brand account, staff left | The company mailbox on recovery, set in advance |
Second physical SIM and dual SIM phones
A second SIM from a carrier gives you a real line with calls, SMS and data. Most phones sold since 2019 take two SIMs or one SIM plus one eSIM, so the hardware is rarely the blocker. The friction is registration. In a large share of countries, prepaid SIM activation requires a passport or national ID, which means the second number is legally attached to you in exactly the same way the first one is. If your goal is separating a hobby account from your identity, that goal is not met.
Cost adds up quietly. A prepaid SIM in Europe runs roughly 5 to 15 euros for the starter pack, then needs a small top-up every 3 to 6 months or the number is recycled. If the SIM sits in a drawer and lapses, every account tied to it becomes unrecoverable when the service sends a re-verification code. People discover this two years later, locked out of an account they still care about.
The upside is real: a physical SIM handles voice calls, works with banks that block virtual ranges, and survives service checks that flag VoIP. If you need a durable second identity for a business or a side job, buy the SIM.
Travel eSIM and data-only plans
Travel eSIMs are sold for roaming data, and most of them are data only. No phone number is issued, which makes them useless for SMS verification. Some regional plans do include a local number, but read the product page before you buy, because the ones that do are a minority and they usually cost more.
A travel eSIM separates your traffic, not your identity. You can run a second data profile on a trip and keep your home SIM’s number available for codes. Setup is a QR scan and takes 5 to 15 minutes. Do not plan a second account around one unless the seller states in writing that an inbound-SMS-capable number is included.
VoIP and virtual numbers you keep
A VoIP number is a phone number that routes over the internet instead of a cell tower. You rent it monthly, keep it as long as you pay, and use it for calls, texts and voicemail from an app. For a freelancer publishing a contact number, this is the correct tool.
Verification is where VoIP breaks down. Many services keep a list of number ranges assigned to internet telephony carriers and refuse codes sent to them. Banks and payment apps do this almost universally, and several large social platforms do it selectively. The filter reads the carrier prefix on your number, not anything about you. That is why the term non-VoIP number exists as a category at all: it describes ranges assigned to mobile network operators, which pass those filters far more often.
Monthly cost is the other factor. Ten numbers at $2 each is $240 a year whether you use them or not.
Rented numbers for a single verification
A rented number is a real mobile number that a provider makes available to you for one number activation. You choose a country and a service, the number appears, you enter it at signup, and the code lands in your dashboard, usually within a minute. Prices start at $0.04 and vary by service and country. MarioSMS stocks 35+ countries and hundreds of services.
The timer is the part worth understanding. Every activation has a window. If no SMS arrives inside it, the activation cancels and the price returns to your balance automatically, so a failed attempt costs nothing but the minute you spent. You can then pick a different country or service and try again.
What you do not get is permanence. The number goes back to the pool after the activation, which is why this route fits signup, privacy hygiene, second accounts for legitimate reasons and QA or OTP testing, and does not fit an account you will need to re-verify next year. Set up an authenticator app and recovery codes at signup and that limitation stops mattering for most accounts. See /acceptable-use/ for where the line sits.
How does a rented number work from top-up to code?
The mechanics are short enough to describe in one pass. You add balance, pick a service and country, get a number, paste it into the signup form, and read the code back in the app. The parts worth understanding are the timer, the refund rule and the three places a code can land.
Why a code fails to arrive
| Cause | What you see | What to do |
|---|---|---|
| The service filtered the number | Nothing arrives, no error | Cancel, take another country |
| Wrong format entered | The service rejects the number | Re-enter in international format |
| The window ran out | The activation cancels itself | Rent again, the price came back |
| The service is rate limiting you | Resend does nothing | Wait, then try a different service window |
| The account already exists | The service sends a login code, not a signup code | Use account recovery instead |
Renting one number for one verification
MarioSMS rents a real mobile number for one verification at a time. You are not buying a line, you are booking a number for a single SMS verification window. Pick the service (Telegram, Instagram, TikTok, Discord and hundreds more), pick the country, and the system pulls a number from the pool that is currently in stock for that pairing.
Pick the service and the country for the second account
The one-at-a-time model matters for two reasons. First, nobody else is receiving codes on that number during your window, so the message that arrives is yours. Second, the number is tied to the service you selected, which is why a Telegram activation shows Telegram numbers and not a generic inbox. If you need two accounts on two different services, you rent two numbers, and each has its own window and its own price.
The activation timer and what it means
Every number has an activation window, shown as a countdown from the moment the number is issued. That timer is your working time to paste the number into the signup form and trigger the SMS. It is not a trial period for deciding whether you want the account, so treat it as a live clock.
The practical order of operations:
- Open the signup screen first and get to the phone number field.
- Rent the number in MarioSMS.
- Copy it, paste it into the form, press send.
- Watch the MarioSMS screen for the incoming code.
Doing step 1 before step 2 usually removes 30 to 60 seconds of fumbling, which is the difference between a comfortable window and a rushed one. If the service makes you solve a captcha or accept terms before the SMS goes out, do those first too. More on number activation as a concept in the glossary.
Automatic refund when no SMS arrives
If no SMS arrives before the timer runs out, the activation cancels and the price goes back to your balance automatically. You do not file a ticket, you do not email support, and you do not lose the money because a carrier route was slow or the service quietly declined to send.
This is what makes retrying cheap. A country that does not deliver for one service costs you time, not balance. If Instagram will not send to your first pick, cancel or let it expire, then try a different country. The failed attempt refunds and you are back where you started with the same balance and a bit more information about which routes work for that service.
Where the code shows up: app, dashboard, API
The code appears in the same place you rented the number, usually within a minute. There are three surfaces:
| Surface | Where | Best for |
|---|---|---|
| Mobile app | iOS and Android | Signing up on the same phone, copy and paste between apps |
| Web app | app.mariosms.com | Signing up on a desktop browser, two windows side by side |
| REST API | Your own code | QA, OTP test suites, repeated runs |
The API has examples in Python, Node.js, Go and PHP, so a test harness can request a number, poll for the code and release it without a human watching a screen. For a single personal signup, the mobile app on the same device is the fastest path, because the code is one tap away from the field that needs it.
Pricing from $0.04 and why it varies
Prices start at $0.04 per number and vary by service and country. Two inputs move the number. Services with heavy verification traffic and tight filtering cost more than quiet ones, because the numbers that still work for them are scarcer. Countries vary by the cost and availability of the underlying mobile ranges.
That spread is why the same service can show several prices across countries in the same session. It is also why the refund rule matters more than the sticker price. At these amounts, the cost of a failed attempt is a rounding error, and the cost of picking a country that actually delivers is the thing worth optimizing.
Topping up by card or crypto
Balance is prepaid. Top up by card or by crypto, and the balance funds activations one at a time. Because refunds go back to the balance rather than to your card, a run of failed attempts leaves your spendable total roughly where it started.
Fund a small amount before your first signup rather than after, so you are not entering card details while an activation timer counts down. A few dollars covers dozens of attempts at the low end of the price range, which is enough for a second Telegram account plus a handful of retries on a service that is picky about routes.
Step by step: create a second account with a rented number
The order below matters. Most failed signups come from doing things in the wrong sequence, usually starting an activation before the app is ready to receive a code, then watching the timer run out while hunting for a password.
What it costs to try twice
| Attempts | Numbers used | You pay for |
|---|---|---|
| First code arrives | 1 | 1 |
| First expires, second arrives | 2 | 1, the failed one is refunded |
| Three failures in one country | 3 | Nothing, all refunded |
| Wrong country, then right one | 2 | 1 |
Only activations that receive an SMS are charged.
Step 1: Prepare the email and password first
Open the target app and get as far as the phone number field before you rent anything. That means the email address exists and can receive mail, the password is saved in your manager, and any profile fields the signup form demands are filled in.
The code for the second account arrives in the app
Use a separate email address from your main account. Same-email second accounts are the most common way two profiles get linked, and some services block a second signup on a reused address outright. A dedicated address also keeps password resets and security alerts for the second account out of your primary inbox, where you will skim past them.
Write the password down in a manager, not in your head. You will use it again in Step 6 on a second device, and typing a half-remembered password three times on a phone keyboard is a good way to trigger a rate limit on a fresh account.
Step 2: Choose country and service
Pick the service entry that matches the app exactly. Services are listed individually because routes differ per app, and a number that works for one app is not automatically valid for another. Picking “Telegram” when you meant a different messenger is a wasted activation, though the timer refund means you get the money back.
Country choice affects two things. It affects price, since some countries cost more per number than others, and it affects how the account is treated later, since the country code becomes part of the account’s identity. If you plan to use the second account from a specific region, matching the country to that region is the less surprising option. With 35+ countries in stock, there is usually more than one candidate at the cheaper end.
Step 3: Start the activation and copy the number
Press to rent. The dashboard or app shows a number and starts a timer. Copy the number as displayed, in full international format, including the country code and without spaces.
The activation window is the whole budget for the rest of the process. Do not start it and then walk away to make coffee. If no SMS arrives before it ends, the activation cancels and the price returns to your balance automatically, so nothing is lost except the time, but you still have to start over.
One number, one verification. Do not plan on reusing this number for a second app or a later re-verification of the same account. Step 6 exists precisely because the number is temporary.
Step 4: Request the code in the target app
Paste the number into the app’s phone field and press send. Check the digits before you submit, since a single wrong digit sends the code to a stranger’s phone and burns the activation.
Some apps ask you to confirm the number in a dialog that shows it reformatted. Read that dialog. If the app has stripped a leading digit or guessed a different country, correct it there rather than pressing through.
If the app offers a voice call as an alternative, ignore it and use SMS. Rented numbers deliver text messages; a voice call has nowhere to land.
Step 5: Paste the code before the timer ends
Switch back to the dashboard or app and watch for the code. It usually appears within a minute. When it lands, copy it and paste it into the app.
If the code has not shown up and the timer is running low, do not cancel and immediately re-rent the same country. Let the activation expire on its own so the refund lands, then either retry the same country once or switch to a different country. Repeated sends to the same number in a short span can also hit the app’s own resend limit, which locks the phone field for several minutes regardless of what your number is doing.
Type the code manually if the paste does not take. Some apps use per-digit input boxes that reject clipboard content.
Step 6: Set a permanent recovery method immediately
The number is gone the moment the activation closes. Anything the account needs the number for later, password reset, login from a new device, a security re-check, has to move to something you keep.
Do these three inside the first session, before you close the app:
- Confirm the email address on the account and verify it from the inbox.
- Turn on two-factor authentication with an authenticator app, not SMS, and save the backup codes into your password manager.
- Set an app-level passcode or PIN where the service offers one, since messengers often use this as the recovery gate rather than the phone number.
Skipping this step is the single biggest cause of permanently lost second accounts. An account with only a rented number attached to it has no way back in.
Step 7: Record what you used and where
Write a four-line note into your password manager alongside the credentials:
| Field | Example |
|---|---|
| Service and country | Telegram, UK |
| Number used | full number as displayed |
| Date of activation | 2026-09-10 |
| Recovery set | authenticator + backup codes saved |
Now log in on the second device using the email and password, and confirm the authenticator code works there. Doing this while the first session is still open means that if the second login fails, you still have a live session to fix it from.
Which country should you pick for the number?
The country attached to a rented number does more than set the price. It sets the routing path the SMS travels, the language the service shows you after signup, the currency in checkout screens, and sometimes which features appear at all. Picking well takes about thirty seconds of thought before you spend $0.04 to $2, and it saves the rework of setting the account up twice.
Every service shows the countries it covers and the lowest price
Match the country to the account, not to the price
Start from where the account will live. If you read the app in Portuguese, pay in euros, and message people in Lisbon, a Portuguese number keeps everything consistent. If you rent the cheapest number in stock from a country you have never visited and then log in from a European IP with a European payment card, the pieces disagree with each other. Services do not publish how they weigh that, but the mismatch is real and it shows up as extra checks later.
The same flow on another service
There is one common exception. When you only need the account to exist (a QA account for OTP testing, a throwaway login for a tool you will use twice), the cheapest number in stock is fine. The account has no social graph, no payments, and no recovery value. Optimize for price there and for consistency everywhere else.
The second rule is to keep the number and the account together for life. Whatever country you pick, that number stays in the notes file from the previous section, because a re-verification prompt six months from now will ask for the same number, not a same-country replacement.
Table: what changes when the country changes
| What changes | Effect of picking a distant country | Effect of picking your own country |
|---|---|---|
| Price per number | Often lower, some countries start near $0.04 | Usually higher for high-demand services |
| Delivery speed | More hops, so codes can land toward the end of the window | Typically the fastest path |
| Default app language | Set from the number’s region on some services | Matches what you already read |
| Currency shown | Foreign currency in stores and checkout | Your currency |
| Feature availability | Some regional features hidden or different | Full feature set for your market |
| Support and recovery | Foreign-language help flows | Help in your language |
| Looks consistent with your IP and card | No | Yes |
Language, currency and content differences
Several services derive locale from the country code of the verification number, not from the device. A US number can put an app into US English with US pricing even though your phone is set to French. On marketplaces, a foreign number can pin you to a foreign storefront, which changes shipping options and the payment methods offered. On messaging apps, the visible country code shows next to your profile for anyone who has your number saved, so contacts will notice a foreign prefix. That is fine for a work-only Telegram account, and awkward for a family group.
Content ratings also shift. Some regions apply stricter defaults on video and social feeds, which you then have to change in settings. Check the language and region settings right after signup, before you post anything or invite anyone.
When stock and price move
Stock is a live pool, not a fixed catalog. MarioSMS lists 35+ countries and hundreds of services, and what is available for a given service changes through the day as numbers are used and returned. Prices vary by service and country for the same reason: a service with heavy demand in one country costs more there than in a country where demand is thin.
Three practical habits:
- Check the service and country pair in the app before you plan the signup, not after you have filled in the form. The stock list is the source of truth.
- If your first choice shows no stock, wait a few minutes and refresh rather than jumping three countries away. Pools refill.
- If an activation ends with no SMS, the price returns to your balance automatically, so trying a second country costs you time, not money.
Countries to avoid for a given service
Avoid any country where the service does not operate. Signup often completes, then the app fails to load a regional feature or refuses the account on the next login. Avoid a country whose ranges the service has already saturated, which you will notice as repeated activations that time out while other countries deliver in under a minute. Two failed activations on the same country and service is enough signal to switch.
Also avoid picking a country you cannot read. Recovery emails, two-factor prompts and account warnings sometimes arrive in the number’s language, and a warning you cannot parse is a warning you will ignore.
What are the per-service rules and limits you should know?
Search the service, then pick a country by price and stock
Every service treats a phone number differently, and the differences matter more than the signup screen suggests. Some services store the number as a permanent recovery anchor. Others treat it as a one-time check and forget it. A few ask again every time you switch phones. Before you rent a number, know which category you are dealing with, because that decides whether a rented number works for a week or for years.
Table: one account per number, reverification, recovery options
The pattern below describes how service categories generally behave. Check the current terms and settings for your specific app, since products change these rules without announcements.
| Service category | Number reused across accounts | Number stays tied to the account | Reverification triggers | Recovery without the number |
|---|---|---|---|---|
| Messaging apps (Telegram, WhatsApp, Signal) | No, the number is the account identity | Yes, until you migrate the account to a new number | New device login, session expiry, reinstall | Only if you set a password or passkey in advance |
| Social apps (Instagram, TikTok, X) | Usually one account per number for verification | Often yes, unless you remove it in settings | Suspicious login, new country, flagged activity | Email plus authenticator app, if configured |
| Marketplaces (classifieds, resale) | Sometimes reused, sometimes strictly one | Often shown to buyers or required per listing | New listing category, payout setup, dispute | Email, order history, ID check in some cases |
| Gaming and platform accounts | Often one per account for 2FA enrollment | Yes, if it is the second factor | Password reset, hardware change, refund request | Backup codes, authenticator app, email |
| Developer and cloud consoles | Usually one per account, tied to billing | Yes, for account risk checks | Billing change, new region, API key rotation | Support ticket with payment proof |
| Banking and payment apps | One per account, verified against identity | Yes, legally tied | Almost any sensitive action | In-branch or ID-based process only |
Banking sits in that table as a warning, not a suggestion. Financial accounts require your own identity and your own number, and a rented number has no place in them.
Services that tie the number to recovery forever
Messaging apps are the clearest case. The number is not a check at the door, it is the account’s name. If you sign up for Telegram with a rented number and never set a cloud password, the only way back in is another SMS to that same number. Rented numbers are single-use and go back to the pool, so that path closes within the hour.
Two consequences follow. First, add a password or passkey inside the first ten minutes, before you close the app. Second, keep at least one long-lived logged-in session so a lost login does not mean a lost account. A desktop client that stays signed in is cheap insurance.
Some social and platform accounts behave the same way when SMS is the only second factor. If the number is your only recovery route and the number is gone, the account is effectively read-only until you can prove ownership another way.
Services that let you swap or remove the number
A second group uses the number as an entry check and then lets you edit it. On several social platforms you can open security settings after signup, add an email address and an authenticator app, then remove the phone number entirely. The verification happened, the account exists, and the number is no longer load-bearing.
Do the swap in this order:
- Complete signup and receive the code.
- Add and confirm an email address you control.
- Enroll an authenticator app or passkey as the second factor.
- Save backup codes somewhere offline.
- Remove the phone number from the account, if the setting exists.
- Log in once from a second device to confirm recovery works without SMS.
Steps 4 and 6 are the ones people skip. Backup codes you never tested are not backup codes.
Services that ask again after a device change
Reverification is where second accounts quietly break. A service that never asked for a code in eight months will ask the moment you install it on a new phone, change your password, log in from a different country, or trip a risk score. The number that received the original code is usually the number it dials.
Categories that reverify most often:
- Messaging apps on reinstall or new-device login.
- Social apps after a login from a new country or IP range.
- Marketplaces before payouts or after a buyer dispute.
- Gaming accounts on password reset or hardware change.
Plan for this at signup, not at the prompt. If the service supports an authenticator app, enroll it. If it supports email-based recovery, confirm the email. If it supports neither and SMS is the only channel, accept that the account has a short useful life and treat it that way. Renting a second number later will not help, because the service asks for the original one.
How to read a service’s own terms before you sign up
You do not need to read forty pages. Search the terms and help center for five phrases and read only what surrounds them.
- “phone number” in the account terms, which tells you whether one account per number is a rule or a default.
- “verification” in the help center, which tells you when codes get sent again.
- “recovery” or “regain access”, which lists the routes back in.
- “virtual” or “VoIP”, which tells you whether certain number types are refused.
- “multiple accounts”, which is often permitted with limits (a personal plus a business profile, for example).
Two things worth checking in settings before you rely on the account: whether the phone field can be removed, and whether authenticator-based 2FA is offered. Both are visible in under a minute and both change your risk profile.
When the honest answer is do not make a second account
Some cases are not privacy hygiene, they are misuse, and no number solves them.
- Returning to a service after a ban or suspension. The rules that produced the ban still apply to you.
- Any account meant to look like a different person, a brand you do not own, or a business you do not represent.
- Financial, medical, tax and government accounts. These require your legal identity and your own number.
- Voting, review, referral and promo systems where extra accounts are the point. That is fraud against other users.
- Anything where the second account exists to contact someone who blocked you.
MarioSMS is built for privacy hygiene, second accounts with legitimate reasons and QA/OTP testing, and the acceptable use policy says so plainly. If your use case is on the list above, the right move is to stop, not to find a different country code.
What changes when the second account is a messaging app?
Messaging apps treat the phone number as the account itself. On a social network, the number sits next to a username and an email, and you can often change or remove it later. On Telegram, WhatsApp, Signal and most regional messengers, the number is the primary key. Change it, and the account moves. Lose it, and the account is stranded.
The number is yours while the timer runs
Number as identity versus number as verification
Instagram, TikTok and Discord use the number as a check at signup and a recovery path later. The account is keyed to a username, an internal ID and usually an email. Delete the phone number in settings and the account still works.
Messaging apps invert that. Your Telegram account is the number, presented as a username to other people if you set one. Your WhatsApp account is the number, full stop. There is no email login to fall back on, and the recovery flow is another SMS code to the same number.
Three practical consequences follow:
- The number you use at signup is the number you keep, unless you run a deliberate migration inside the app.
- Anyone who controls that number in the future can request a new login code for the account.
- A number you rent for a single activation gives you the account today, and the account exists after the rental window closes, but it does not give you a permanent claim on that number.
A rented number is a one-time delivery channel for a code, not a lease on an identity. If you plan to keep a messaging account for years, plan the login path around device sessions and a password, not around re-receiving codes.
Device linking and multi-device sessions
The way messaging apps survive without repeated SMS is the session. Once the first code lands and the account is created, the app holds an authenticated session on that device. That session is what keeps you logged in, not the number.
| Mechanic | What it does | Why it matters for a second account |
|---|---|---|
| Primary session | Created by the SMS code at signup | The only session that can authorize new devices in most apps |
| Linked devices | Desktop, web, tablet linked by QR code from the primary | Adds access without any new SMS |
| Session expiry | Idle sessions time out after a set period per app | An unused second account can log itself out |
| Remote logout | Any session can end others | Also means one compromised session ends yours |
Practical order of work after signup:
- Open the app on your main device and complete the profile.
- Link a desktop or web session the same day, using the QR code from the phone.
- Set a login password or PIN inside the app (the second factor described in the two-factor authentication entry).
- Open the app at least once every few weeks so no session goes idle long enough to be dropped.
Two live sessions on different devices is the difference between having a backup way in and needing a code sent to a number you no longer rent.
Contact discovery and what your contacts see
Messaging apps build the contact list from the address book. Someone who has your rented number saved will see the second account appear as a contact, with whatever display name and photo you set. That is normally nobody, since a fresh rented number has no history with your contacts, and that is exactly the separation people want.
The reverse also happens. Numbers get recycled between subscribers over time, so a number you use may have been in someone else’s address book under an old owner’s name. You may show up in a stranger’s contact list labeled with a name that is not yours, and you may receive messages meant for that person. Check the privacy settings on day one:
- Set who can see your phone number to Nobody or My Contacts.
- Set who can find you by number, where the app offers it.
- Set profile photo and last-seen visibility to contacts only.
- Turn off “sync contacts” if you do not want the second account uploading your address book.
A second Telegram account that syncs your main address book will suggest you to everyone you know, which defeats the separation. The Telegram second account guide covers the setting order in detail.
Why losing the number matters more here
On a social account, losing the number costs you one recovery option out of several. On a messaging account, it can cost you the account.
The failure mode is specific. Your session expires or you factory reset the phone. You reinstall, enter the number, and the app sends a code to a number you no longer control. If the app allows in-app code delivery to an existing session, you are fine. If it does not, and you have no linked device, the account is gone.
Defenses, in order of how much they help:
- Keep at least one active session on a device you own.
- Set an in-app password so a code alone does not grant access.
- Add an email as recovery where the app supports it (Telegram supports this for the cloud password).
- Write down which number and which country you used, with the date, so you can rent from the same country later if you need a fresh activation.
Backups and chat history on a second account
Chat history behavior splits by app. Telegram keeps messages in the cloud tied to the account, so a new device signs in and the history appears. WhatsApp stores history on the device and in an optional Google Drive or iCloud backup tied to a cloud account, not to the number alone.
For a second account, that difference decides your setup:
- Cloud-history apps have nothing to back up, but the in-app password is critical because anyone with a code gets everything.
- Device-history apps need a backup destination you pick deliberately. Using your personal iCloud or Google account for a second account’s backup links the two, which may be exactly what you were trying to avoid.
- Either way, export important threads manually before you change devices.
Prices for a fresh activation start at $0.04 and vary by service and country, so re-verifying an account you can still log into is cheap. Re-creating one you locked yourself out of is not, because the contacts, groups and history do not come back with a new number.
What changes for social, marketplace and gaming accounts?
The rules tighten as soon as money, reputation or regional pricing is attached to the account. A second Telegram account is mostly a personal-boundary question. A second seller account on a marketplace touches payouts, tax identity and buyer protection, so the platform treats it as a compliance matter. The number is the cheapest handle the platform has for grouping accounts, which is why it carries more weight here than an email.
The code arrives in the app; one tap copies it
Social platforms and per-person account limits
Most large social platforms allow more than one account per person and build the switching into the app. What they restrict is what the extra accounts do: coordinated posting, inflating engagement on your own content, or evading a restriction placed on the first account.
Practical points when you add a second social account:
- Check whether the platform has an account switcher. If it does, multiple accounts are expected behavior and you are inside the rules.
- Use a different number per account. Platforms that allow multiple accounts still usually bind one number to one profile at a time.
- Keep the accounts operationally separate. Do not have the second account like, share or comment on the first account’s posts in a pattern.
- Set up two-factor authentication with an authenticator app after signup, not SMS to a rented number you no longer hold.
Photo and short-video platforms are stricter about signup patterns than about the existence of a second account. Creating five accounts in twenty minutes from one device and one IP looks like automation regardless of intent. Space signups out and finish the profile (photo, bio, one post) before you create the next one. Service pages like Instagram and TikTok list current stock and price per country if you need a specific region.
Marketplaces, seller ratings and payout identity
Marketplaces separate the browsing account from the selling account. Buying under a second account for privacy is usually uncontroversial. Selling under a second account is where the rules bite, because ratings, dispute history and payout identity are supposed to follow a real person or business.
| Account type | Second account usually allowed | What the platform actually checks |
|---|---|---|
| Buyer only | Yes, on most marketplaces | Number, device, payment card reuse |
| Casual seller | Sometimes, one per person | Bank or payout account, tax ID, address |
| Business seller | Yes, with separate legal entity | Registration documents, VAT or tax number, bank account |
| Second account after a suspension | No | Number, device fingerprint, payout details, address |
Two things to hold onto. First, a rented number gets you through signup, but it does not change payout identity, and it should not be used to make a suspended seller look like a new one. Second, ratings do not transfer. A fresh seller account starts at zero visibility, so splitting your listings across two accounts usually costs you more in ranking than it gains in separation.
Gaming, regional stores and platform bans
Game platforms use the number for account recovery and for rate-limiting new accounts in competitive modes. Alternate accounts (smurfs) sit in a grey zone. Many games tolerate them, ranked ladders often penalize them, and some titles ban them outright in the terms.
Three separate things get confused here:
- A second account for a different game or a shared family console. Normally fine, and the platform gives you profile slots for exactly this.
- A region-shifted store account for cheaper pricing. Store terms usually require you to live in the region and to have a local payment method. A number from that country does not satisfy either requirement, and stores do check the card’s issuing country.
- A new account after a ban. Ban evasion is banned everywhere, and the platform links accounts by hardware ID and payment method, so a new number changes nothing. Our acceptable use policy rules this out.
Voice and community apps that sit alongside games, like Discord, tend to require a non-VoIP number and reject numbers already tied to another account on the same server list.
Loyalty programs and one-per-household rules
Loyalty and referral programs are where the number does the most work, because the reward is direct and the fraud pressure is high. Programs commonly limit signup bonuses to one per person, one per household or one per payment card, and the terms say so in the section nobody reads.
The number is only one of the signals. Delivery address, payment card, device and email domain are checked together. Signing up a second time with a new number and the same address and card gets flagged during the reward payout, not at signup, which means you find out weeks later when the points are reversed.
A second number earns its keep in two cases. It keeps a supermarket or airline account off your primary number so the marketing SMS goes somewhere else, and it lets you QA your own program’s signup flow with fresh numbers per test run at $0.04 and up per activation. Farming a referral bonus twice from one household is the one use this article rules out completely.
How do you lock a second account down after signup?
A rented number does one job. It delivers the code that opens the account, then goes back into the pool where someone else can rent it later. If the account still depends on that number for password resets or 2FA challenges, you have built a door with a key you no longer own. The hardening pass below moves every recovery path onto things you control permanently, and it takes about ten minutes.
One balance, topped up by card or crypto
Do it the same day you sign up. A second account is easiest to secure in the first hour, before the service starts asking for extra confirmation on security changes.
Replace SMS with an authenticator app
Most services support TOTP codes from an authenticator app (Google Authenticator, Aegis, 1Password, Bitwarden). TOTP generates a 6 digit code every 30 seconds from a secret stored on your device. No carrier, no number, no delivery failure.
In the account’s security settings, add the authenticator first, confirm it works by logging out and back in, then remove SMS as a two-factor method if the service allows removal. Some services keep SMS as a permanent fallback and will not let you delete it. In that case the number stays listed but the authenticator becomes the primary prompt, which is still an improvement.
Back up the TOTP secret when you scan the QR code. Aegis and Bitwarden export encrypted vaults. If you only have the code on one phone and the phone dies, you are back to needing the number.
Save recovery codes somewhere you will find them
Recovery codes are single use strings, usually 8 to 10 of them, generated once when you turn on 2FA. Each one logs you in without a phone or an app. Services almost never show them twice.
Where to put them:
| Storage | Works offline | Risk |
|---|---|---|
| Password manager secure note | Yes, if vault is synced | Loses codes if you lose the vault |
| Printed sheet in a drawer | Yes | Physical loss, fire |
| Encrypted file on a backup drive | Yes | Forgotten passphrase |
| Screenshot in camera roll | Yes | Syncs to cloud, readable by any app with photo access |
Use the first two together. Put the codes in the manager and print one copy. Never store them in the email inbox tied to the same account, because an attacker who reaches the inbox gets both factors at once.
Add a recovery email you actually control
Second accounts often get created with a throwaway inbox that expires in a week. Six months later the reset link goes to a mailbox nobody owns. Use a real address you keep: a subaddress like you+shopping@yourdomain.com, an alias from your mail provider, or a separate free account you log into every few months.
Verify the address the same session. An unverified recovery email is not a recovery path, it is a field with text in it.
Turn on login alerts and review sessions
Almost every major service has a “where you’re logged in” page listing device, approximate location and last active time. Open it, end every session you do not recognize, and enable email alerts for new logins.
Do this once at setup and again roughly every 90 days. On messaging apps the list is the fastest way to spot a linked desktop session you did not create (see Telegram for how session lists work on that side).
Set a strong unique password in a manager
The second account needs a password that shares nothing with the first. Reuse turns one leaked database into two compromised accounts, and second accounts frequently live on smaller sites with weaker storage.
Generate 20 or more random characters in the manager, save it, and never type it from memory. Store the account’s username, the recovery email, the recovery codes and a note saying which country’s number was used for the original activation, all in the same vault entry. That note saves you fifteen minutes of guessing later.
Audit connected apps and permissions
Signup flows quietly attach OAuth grants. A scheduler, an analytics tool, a game you tried once. Each grant can post, read messages or pull your contact list long after you stopped using it.
Open the connected apps page, read the scopes, and revoke anything you cannot name. Then set a reminder to repeat it. Fewer grants means fewer ways in that do not touch your password or your 2FA at all.
The 10 minute hardening pass
- Add TOTP in an authenticator app, minute 0 to 2.
- Generate recovery codes, save to manager, print one copy, minute 2 to 4.
- Add and verify a recovery email you control, minute 4 to 6.
- Set a 20+ character unique password, minute 6 to 7.
- Enable login alerts and end unknown sessions, minute 7 to 8.
- Revoke unrecognized connected apps, minute 8 to 9.
- Log out fully, log back in using only the authenticator, minute 9 to 10.
Step 7 is the one people skip, and the only one that proves the rest worked. If you can get in without an SMS arriving, the rented number has finished its job and the account no longer depends on it.
What happens if you lose access, and how do you get back in?
A second account created with a rented number has one structural weakness. The number was rented for a single activation, it went back to the pool after the timer closed, and nobody can hand it back to you. Recovery then depends entirely on what else you attached to the account before you lost it.
Recovery paths ranked by success rate
Try them in this order. Each one takes minutes, and a failed attempt rarely costs you anything except a rate limit on retries.
- Active session on another device. Check every phone, tablet, browser profile and desktop app you have ever signed into. A live session usually lets you change the phone number, email and password from settings without any code. This works far more often than people expect.
- Password plus authenticator app. If you enabled TOTP during lockdown, most services accept password and a six digit code with no SMS at all. The rented number becomes irrelevant.
- Recovery email. A confirmed email on file gives you a reset link. Some services then ask for an SMS as a second factor, which is where this path stops.
- Backup codes. Ten single use strings you saved when you turned on two factor authentication. Each one substitutes for a code once.
- In app device transfer or QR login. Messaging apps often let a signed in device authorize a new one by scanning a code. Telegram works this way for desktop and web clients.
- Support ticket. Slow, uncertain, and covered below.
- A new rented number on the account you can still reach. Only useful if a session is still alive, in which case you are back at step 1.
When support can help and what they ask for
Support can restore access when the account has an identity trail they can match. Expect to supply some of the following, and expect a 24 hour to 14 day wait depending on the service.
| What they ask for | Why it works | If you cannot supply it |
|---|---|---|
| Registered email address | Ties the ticket to a record | Path usually ends |
| Approximate signup date | Matches server logs | A month is often close enough |
| Last four digits of the old number | Confirms you knew it | Save it in your notes at signup |
| Receipt or transaction ID | Payment records are strong proof | Only exists on paid accounts |
| Device model and IP region | Matches session history | Weak on its own |
| Selfie or ID document | Full identity check | Do not send ID for a pseudonymous account |
Two limits to understand. First, support will not reissue access based on you controlling a number you say used to be yours, because you no longer control it. Second, if the account was suspended rather than locked out, no recovery path applies, and asking support to reverse a ban is outside acceptable use.
When the account is genuinely unrecoverable
Be honest about the dead ends so you stop spending days on them.
- No session anywhere, no email attached, no authenticator, no backup codes. Nothing links you to the record.
- The service only offers SMS reset and the number is back in the pool.
- The account had zero activity, so there is no payment history or content to match.
- You registered with a temporary phone number on a service that later required re-verification on the same number.
In these cases the fastest move is a clean new account with the lockdown steps done at minute zero, and a note in your password manager about what went wrong.
Preventive habits that make recovery unnecessary
Five habits, each under two minutes.
- Record the rented number, the country and the date in your password manager entry, right after the code arrives.
- Attach and confirm a recovery email you own before you close the signup tab.
- Turn on an authenticator app and store the backup codes in the same entry.
- Keep a second signed in device that you do not log out of, ideally a desktop client.
- Once a quarter, open the account and confirm you can still reach settings. Dormant accounts get purged, and a 90 day check catches it early.
Migrating a second account to a number you own
Some services will let you swap the phone number later, which removes the rented number from the recovery chain. The flow is the same across most platforms.
- Sign in with an active session, not a fresh login.
- Open settings, then the phone or security page.
- Enter the new number, a personal SIM or a long term line you control.
- Receive the confirmation code on that number, usually within a minute.
- Confirm the old number no longer appears on the account.
- Log out of one device and log back in to prove the new number works.
The swap only works while you still have access, which is why step 5 of the lockdown list matters more than any recovery plan. If you handle several accounts, a rented number at $0.04 for signup and a personal number attached later gives you both separation at creation and a durable way back in.
Why did the code not arrive, and what should you do next?
Most failed verifications come from one of five causes, and each has a different fix. Work through them in order instead of buying number after number, because repeated attempts on the same account often trigger the cooldown described below and make the next try harder than the first.
The number never received an SMS
Nothing arrived, the timer counted down, and the activation ended. On MarioSMS this is the cheapest failure to absorb: the activation cancels automatically and the price returns to your balance, so a $0.04 attempt costs you $0.04 for a few minutes and then nothing. You do not file a ticket or ask for the refund.
The usual cause is that the service never sent anything. Some platforms silently drop a send when the destination range is flagged, when their SMS provider has a regional outage, or when your account already hit an internal send cap. Before spending again, check that you typed the full number exactly as the dashboard shows it and that you pressed “send code” in the app rather than assuming it fired on page load.
Order of fixes:
- Wait out the full timer instead of cancelling early. Codes at minute two are common.
- Confirm the refund landed on your balance.
- Rent a new number in the same country and service and try once more.
- If the second attempt also silently fails, switch country before switching service.
The code arrived after the timer
You saw the SMS in the dashboard history, but the activation had already closed and the code was expired on the service side. Two clocks are running at once: the number activation window on the rental, and the service’s own code lifetime, often 5 to 10 minutes.
The fix is sequencing. Have the signup form open with your email, username and password already filled in, then rent the number, then paste it and request the code within the first 20 seconds. Any time you spend picking a username is time subtracted from the delivery window.
The service rejected the number outright
The form returns “this number cannot be used” or “enter a valid mobile number” before any SMS is attempted. That is a screening decision, not a delivery failure. Some services accept numbers only from a set of carrier ranges, and some block ranges associated with VoIP numbers entirely.
Change the country first. A number that fails for one platform in one country often passes for the same platform in another, because the service’s rules are per-region. Do not re-enter the same rejected number with a different formatting, that changes nothing about the underlying range.
Rate limits and cooldowns after repeated attempts
Three or four failed requests from the same browser session, same device or same account draft will often put you into a cooldown. The service stops sending for a period measured in hours, and every new number you rent during that window fails identically no matter how good the number is.
Signs you are in a cooldown: the form accepts the number, shows “code sent”, and nothing ever arrives, repeatedly, across different countries. When you see that pattern twice in a row, stop. Come back after several hours on the same connection you plan to keep using, and try once.
Wrong country format or a missing prefix
Rental dashboards show numbers in full international form. Signup forms differ: some want a country selector plus the local part without the leading zero, some want the whole string including the plus sign. Entering a UK number as 07… in a form that already has +44 selected sends the code nowhere.
| Dashboard shows | Form has country selector | Enter |
|---|---|---|
| +447700900123 | Yes, UK selected | 7700900123 |
| +447700900123 | No selector, one field | +447700900123 |
| +12025550147 | Yes, US selected | 2025550147 |
| +4915112345678 | Yes, Germany selected | 15112345678 |
Drop the leading zero from a national trunk prefix when a country selector is present. Copy and paste rather than retyping.
Voice call fallback and when it helps
Many services offer “call me instead” after one or two failed SMS attempts. The call reads the code aloud. This helps when the failure is on the SMS route specifically, an operator filter or a carrier block, and not when the number range itself is rejected. If the number was refused at the form, voice will not save it.
Voice availability depends on the number and the service. When it is offered and the SMS path has already failed twice, it is worth one attempt before you change country.
Troubleshooting table: symptom, likely cause, next action
| Symptom | Likely cause | Next action |
|---|---|---|
| Timer ran out, no SMS, balance refunded | Service did not send, or filtered the range | Retry once in the same country, then change country |
| SMS visible in history, code says expired | Slow paste, service code lifetime passed | Pre-fill the form, request the code within 20 seconds |
| Form says “invalid number” before sending | Range screening | Switch country, do not reformat |
| “Code sent” every time, never arrives, several countries | Account or IP cooldown | Wait several hours, then one attempt |
| Code arrives but is refused | Wrong digits, or a second code was requested | Use the newest SMS only |
| Works for one app, fails for another | Per-service rules differ | Check the service page, for example Telegram |
Two rules cover almost every case. Never request a second code while the first is still valid, because most services invalidate the older one and you will paste the wrong string. And never chase a rejection with five numbers in five minutes, since the cooldown you create costs more time than the country switch you skipped.
How do developers and QA teams automate OTP flows?
A signup test that needs a real SMS code has one hard dependency the rest of your suite does not: an inbound message from a third party you do not control. The way to keep that from wrecking your pipeline is to treat the number as a leased resource with a timer, poll it politely, and let the refund path handle the cases where nothing arrives.
What the REST API exposes
The MarioSMS REST API covers the same four actions the dashboard does. You list services and countries with stock, you request a number for one service in one country, you poll that activation for a code, and you cancel it if you no longer need it. Every request is authenticated with your API key, and every activation is billed against the same balance the web app uses.
The unit you work with is the activation, not the number. One activation means one number held for one verification with an expiry attached. Your code should store the activation ID, the phone number, the created timestamp and the expiry, because those four fields drive every branch that follows.
Python, Node.js, Go and PHP starting points
The docs ship working examples in Python, Node.js, Go and PHP. They all follow the same three calls, so porting between them is mostly HTTP client syntax.
| Language | Typical use in a test stack |
|---|---|
| Python | pytest fixtures, Locust load tests, data seeding scripts |
| Node.js | Playwright and Cypress signup specs |
| Go | Load generators and internal test services |
| PHP | Laravel Dusk suites and legacy app QA |
Wrap the raw calls in one small client module per repo. Give it three methods (rent, wait_for_code, cancel) and never let a test file call the HTTP endpoint directly. When rate limits or retry policy change, you edit one file.
A polling loop that respects the activation window
The code usually lands within a minute, and the activation window is finite. A loop that hammers the endpoint every 200 milliseconds gets you nothing except rate limit errors.
- Request the number and record the expiry from the response.
- Trigger the signup in the app under test, then start polling.
- Poll every 3 to 5 seconds, not faster.
- Stop polling the moment the code arrives or the expiry passes, whichever comes first.
- Return the code to the test, or raise a typed timeout error.
Add jitter of a second or so between parallel workers so ten tests starting at once do not all hit the endpoint on the same tick. Set your own client timeout slightly below the activation expiry, so the test fails on your clock rather than waiting for the platform to clean up.
Handling cancellations and refunds in code
If no SMS arrives before the window closes, the activation cancels and the price returns to your balance automatically. Your code does not need to reconcile that, but it does need to distinguish it from a real product bug.
Use three outcomes instead of pass and fail:
| Outcome | Meaning | CI action |
|---|---|---|
| Code received | The OTP arrived and the flow completed | Assert normally |
| Window expired, refund issued | No SMS reached the number | Retry once, then skip with a reason |
| API or app error | Bad request, no stock, app 500 | Fail loudly |
Cancel explicitly when a test aborts early. A try/finally block that calls cancel on the activation ID keeps abandoned runs from sitting on a number until the timer runs out.
Running signup tests in CI without flakiness
Signup tests belong in their own job, not mixed with unit tests. Give that job a concurrency cap of 2 to 4 parallel activations so one branch cannot drain stock for a country. Tag the tests so a pull request runs a smoke subset (one or two full signups) and the nightly run does the full matrix.
Never assert on the exact SMS text. Extract the digits with a regex on the first 4 to 8 digit run and compare only the code. Sender IDs and wording change without notice, and a strict string match turns a working flow into a red build.
Keep one recorded fixture per service so the parts of the suite that are not testing OTP delivery use a stored code and skip the network entirely. Only the tests that specifically cover SMS verification should rent a number.
Cost control across a test suite
Numbers start at $0.04 and vary by service and country, so the math is easy to run before you commit to a schedule. Twenty signup tests a night at $0.06 each is $1.20 a night. The same twenty on every pull request across 15 merges a day is a different bill.
Three practical limits:
- Budget per job, checked before the run starts, with a hard stop.
- Cheapest country in stock that the service accepts, chosen at runtime from the stock list.
- A daily cap on activations per service, enforced in your client wrapper.
Expired activations are refunded, so the failure mode of a broken pipeline is wasted time, not a drained balance.
Test data hygiene and cleanup
Every test account you create is a real account on someone’s platform. Tear them down in the same run that creates them, or tag them with an obvious prefix so a weekly cleanup job can find them. Store the activation ID and the account identifier together in the test log, so a failed run can be traced back to a specific number without guessing.
Keep test signups inside what the platform allows and inside your own acceptable use terms. QA and OTP testing on accounts you own is the case this is built for.
Where is the line between privacy and misuse?
A rented number is a tool. The same activation that keeps your personal number out of a marketplace listing can also be used to rebuild an account a platform closed on purpose. The difference is not technical, both flows look identical from the number’s side. The difference is what you are doing on the other end, and it is worth being precise about it before you spend $0.04.
Privacy hygiene is a normal reason
Handing your personal number to a service means handing it to that service’s marketing stack, its data broker relationships and whatever leaks out of its next breach. Once a number is in a leaked dataset it stays there. Rotating a rented number into a signup form for a service you plan to use for two weeks, or one that only exists to send you a receipt, is basic hygiene. So is keeping the number you gave to your bank and your family separate from the number you gave to a food delivery app.
The same logic covers marketplace listings, forum accounts, freelance profiles and anything where a stranger can see or request contact details. You are not hiding from the platform, the platform still has an account record tied to a real number it can reach during signup. You are limiting who else ends up with the number afterward.
Second accounts that platforms permit
Most large services allow more than one account per person, and several build it into the product. Separate work and personal profiles, a business page beside a personal one, a test account for a team, a regional account for travel. The rules are written down in each platform’s terms, and they vary. Some allow multiple accounts but forbid using them to interact with each other. Some cap the number per device. Some allow a second account only if it is clearly labeled.
Read the actual terms for the service you care about rather than the general advice. A second Telegram account sits under different rules than a second seller account on a marketplace, and both differ from a second gaming account tied to a purchase history.
Ban evasion and impersonation are out of scope
If a platform closed your account, a new number does not reopen the question. The closure was a decision about you, and returning under a different number is a separate violation on most services, usually one that gets both accounts removed. MarioSMS is not for that, and the acceptable use terms say so.
Impersonation is the other hard stop. Creating an account that presents itself as another person, a company you do not represent, or a support channel for a brand is fraud in most jurisdictions and against every major platform’s rules. So is using a number to receive a code meant for someone else’s account. The account you verify must be yours.
A three question test before you sign up
Run these three before you rent a number. If any answer is wrong, stop.
| Question | Green light | Stop |
|---|---|---|
| Whose account is this? | Yours, or one you are authorized to create for an employer or client | Someone else’s, or one presenting as someone else |
| Does the platform allow a second account here? | Terms permit it, or the account is your first on that service | Terms forbid it, or a previous account was suspended |
| Would you be comfortable explaining this to support? | Yes, the reason is boring and honest | No, the plan depends on the platform not noticing |
The third question does most of the work. Privacy reasons survive being said out loud. “I did not want my personal number in a marketplace listing” is a complete answer. “I needed a new account because the old one was banned” is also a complete answer, and it is the wrong one.
Reading the acceptable use policy
The acceptable use page is short on purpose. It names the permitted cases (privacy hygiene, second accounts for legitimate reasons, QA and OTP testing on accounts you own) and the prohibited ones (ban evasion, impersonation, receiving codes for accounts that are not yours). Read it once before your first activation rather than after a problem.
Two practical notes. Numbers are rented for one verification at a time, so a number is not a permanent identity you control, and treating it as one leads to the recovery problems covered earlier. And a refunded activation costs you nothing, which means there is no financial pressure to push a signup through a service where the rules say no.
Frequently asked questions about second accounts and numbers
Can I use one rented number for two accounts?
No. A MarioSMS number is rented for one verification at a time, so the activation covers a single code for a single service. Once the activation ends, the number goes back to the pool and can be assigned to someone else. If you need two accounts, rent two numbers.
Will the same number work again next month?
Assume it will not. You do not hold a lease on a specific number between activations, and the pool rotates. If a service sends a re-verification SMS four weeks later, the number that received your first code may be serving another customer by then. Plan recovery around email, an authenticator app and saved backup codes instead of the number.
What if the service asks me to verify a second time?
You rent a new number and go through signup recovery on the service’s terms, which usually means confirming the email on file or entering a backup code. Some services accept any valid number for the re-check and simply update the number on the account. Others tie the re-check to the original number, and in that case the account is effectively locked. Read the per-service notes before you commit to an account you care about.
Do I get charged when no code arrives?
No. Every activation runs on a timer. If no SMS arrives before the window closes, the activation cancels and the price returns to your balance automatically. You do not file a ticket, and you do not wait for a manual review. The practical effect is that retrying a different country or a different service costs you attempts, not money.
How fast does the code usually appear?
Usually within a minute. The code shows up in the MarioSMS app or in the dashboard at app.mariosms.com as soon as the carrier delivers it. Delivery time depends on the sender and the route, so some services land in ten seconds and others take most of the window. Keep the activation screen open rather than refreshing the service’s signup page.
Can I receive a voice call instead of an SMS?
MarioSMS numbers receive SMS. If a service offers “call me instead” as a fallback, treat that path as unavailable and finish on the SMS path. In practice this matters when the SMS route to a given country is congested. The fix is to cancel, let the refund land, and rent a number in a different country where SMS delivery for that service is in stock.
Can I send messages from a rented number?
No. The service is receive-only for verification codes. That is a deliberate limit and it lines up with the use case: you need one inbound OTP to finish a signup, not an outbound messaging channel. Conversations happen inside the app you signed up for, using the app’s own identity, not the phone number underneath it.
Which country is cheapest, and does that matter?
Prices start at $0.04 per number and vary by service and by country, so the cheapest option changes week to week as stock moves. Cheapest is not always the right pick. A number in a country the service routes to reliably is worth more than a few cents saved on a route that times out. Two things to weigh:
| Factor | Why it matters |
|---|---|
| Price per number | Sets the cost of a retry, which is small at these prices |
| Delivery reliability for that service | Sets how many retries you actually need |
| Country display in the app | Some apps show a country flag or code on the profile |
| Stock depth | A country with few numbers left may run out mid-session |
Pick a country where the service is in stock and known to deliver, then let price break the tie.
Is a second account against the rules?
It depends on the service, and the answer is written in that service’s terms rather than in any general rule. Some platforms allow multiple accounts outright. Some allow a personal and a business account. Some allow one account per person and treat extras as a violation. Check the terms for the specific service before you create the account, not after.
Can I use this for work accounts?
For testing and QA, yes, and that is a common use. Teams register test accounts, run SMS verification flows against staging and production, and check that their own OTP delivery works from a real handset number rather than a mock. The REST API with Python, Node.js, Go and PHP examples exists for exactly that. For a production business account that colleagues will share and recover, use a company-controlled number instead, because recovery is the whole point of that account.
What happens to the number after the activation ends?
The activation closes, the number leaves your dashboard, and it returns to the pool. Any SMS sent to it afterward is not yours. Copy anything you need out of the activation while it is open: the code itself, and the number in the format the service displayed it, in case you want a record of which number is on the account.
Can I move my account to a permanent number later?
Usually yes, and it is often a good idea for accounts you plan to keep. Most services let you change the phone number in settings after login. If you eventually get a SIM you are happy to attach, switching moves recovery onto something you control permanently. Do the switch while you still have access, not while you are locked out.
How many second accounts is too many?
The number that matters is the number the service allows, not a number you set. One extra account with a clear reason (work separate from personal, a test account, a regional account) is a different situation from ten accounts created in an hour on the same service. Volume patterns are what platforms watch for, and mass registration is outside acceptable use. Read /acceptable-use/ before you scale anything up.
Does using a rented number affect account trust?
Some services score numbers by type and route, and a non-VoIP number generally clears more checks than a VoIP one. Beyond the number, most of your account’s standing comes from behavior after signup: a filled-out profile, a normal posting pace, logins from one device, and 2FA turned on. A clean signup on a real mobile number followed by ordinary use looks ordinary.
Print this checklist before you start
Before you rent a number
- Pick the service and confirm which country codes it accepts. Some services reject certain prefixes for new signups, so check the service page for stock and price before you commit.
- Decide what the account is for and write it down in one line. Privacy hygiene, a work-facing profile, or QA testing all pass. Ban evasion and impersonation do not.
- Create the email address first. A second account needs an inbox you control, separate from your main one, with its own password.
- Top up the balance with card or crypto. Numbers start at $0.04, so a $5 top-up covers a lot of attempts, and cancelled activations return to the balance anyway.
- Have a password manager open with a new entry ready. You want somewhere to paste the number, the password and the recovery codes within seconds of getting them.
- Close the old session. If you are signing up for a second account on a service where you already have one, log out or use a separate browser profile.
During the activation window
- Rent the number, then copy it into the signup form immediately. The timer starts when the number activates, not when you paste it.
- Enter the number in full international format, with the country code and no spaces or dashes.
- Watch the dashboard or the app, not your email. The code lands there, usually inside a minute.
- Do not request a resend in the first 60 seconds. Most services rate-limit resends, and a second request can invalidate the first code.
- If nothing arrives before the timer ends, let it cancel. The price returns to your balance automatically, and you can rent a fresh number from a different country.
- Save the number in your password manager the moment the code works, before you touch anything else on the signup screen.
Within 10 minutes of signup
- Set a strong, unique password if the signup flow let you skip it.
- Turn on two-factor authentication using an authenticator app, not SMS. This is the single change that matters most, because the rented number goes back into the pool after your activation ends.
- Download and store the recovery or backup codes. Screenshot them, save them to the password manager, and keep one copy offline.
- Add the second email as a recovery address inside the account settings.
- Set a username or handle if the service offers one, since a handle lets you sign in without the phone number.
- Check the privacy settings before you post anything. Hide the phone number from other users, restrict who can find you by number, and set discovery to the narrowest option.
Within the first week
- Log in from the same device every time. Repeated logins from one device build a stable pattern.
- Fill out the profile normally. A photo, a bio and a few ordinary actions look like a real account because that is what a real account does.
- Post at a human pace. Ten actions in an hour on a brand-new account draws review on most platforms.
- Confirm you can sign in with password plus authenticator alone, with no SMS step. Log out and log back in once to prove it.
- Re-check that the recovery codes still open in the file where you saved them.
Red flags that mean stop
| Signal | What to do |
|---|---|
| The service asks for ID or a selfie during signup | Stop. A rented number does not solve identity checks. |
| You are recreating an account that was banned | Stop. That falls outside acceptable use. |
| The account will use another person’s name or photos | Stop. Impersonation is off limits. |
| Three activations in a row bring no code | Switch country, or check whether the service still accepts new numbers from that region. |
| The platform asks you to confirm the number again a week later | Do not reuse the old number. Treat the account as at risk and rely on your recovery codes. |
Reasons for a second account that hold up
| Reason | Typical setup |
|---|---|
| Work and personal separated | Two messenger accounts on one phone |
| A brand or community channel | An account the company owns, staff-independent |
| Selling on marketplaces | A number that is not your personal line |
| Testing your own product | A fresh account per test run |
| Travel and local services | A local number where you are |