SMS Short Code List (2026): 60+ Verified Codes, Who Owns Them and What They Mean

All Major Short Codes (2026) Sorted & Verified: Full SMS Short Code List

You received a text message from an unfamiliar 5-digit number.

This might be your bank. Might be a shipment update. It could be a scam.

Short codes are everywhere and most people have no idea who owns them or why they are there. This guide corrects that. We’ve put up a list of 60+ active SMS short codes per industry, along with all the info businesses need to know about short codes, how they work, how much they cost, and what the landscape will look like in 2026.

What Is an SMS Short Code?

A SMS short code is a 5 or 6 digit number that corporations, government agencies and platforms use to transmit large volumes of text messages. A short code is different from a normal 10-digit phone number. It is designed for bulk messaging — such as one-time passwords, bank fraud alerts, shipment notifications, promotional offers, etc.

In the United States, short codes are leased through the Common Short Code Administration (CSCA) and are permitted by major carriers such as AT&T, Verizon, and T-Mobile, with restrictions from CTIA guidelines. These are country specific, thus a short code will work in the US, but not the UK or Canada.

The important features of a short code:

• They are leased not owned and generally for a 3, 6 or 12 month period.
• They only work with one brand (carriers have deprecated shared short codes).
• They support high throughput – starting at 100 messages per second and growing into the thousands.
• They bypass the normal carrier filtering since they go through a vetting process before being activated.
• They also support SMS and MMS (MMS needs to be provided separately).

Types of SMS Short Codes: Vanity, Random, and What Happened to Shared

Today, there are two sorts of active short codes. A third form, shared short codes, has been discontinued.

Vanity short codes are selected by the brand for memorability or brand alignment. (CHASE spells 24273 on a telephone keypad.) The number 26435 spells ANGEL — utilized by Victoria’s Secret. Vanity codes lease for $1,000 a month and are used by large enterprises.

Random short codes — The register assigns short random codes. They have no brand meaning but act like vanity codes. Random short codes are leased at $500/month and are a cost-effective option for organizations who need the specialized short code functionality but don’t need a memorable number.

Shared short codes were widespread, when many businesses used one number and messages were directed by keyword. Carriers stopped shared short codes, where many firms could split one short code, in 2021. Why? Because there is zero accountability for spam and phishing abuse. There is no reliable way to detect rogue actors. All short codes in the US have to be allotted to one brand. There is still some legacy shared code lying around (more on that below).

Short Codes vs. 10DLC vs. Toll-Free: What Does What

Businesses don’t just send text messages with short codes. Here’s how the three possibilities break down:

Shortcodes are great for large-scale or repeating initiatives, but they demand significant advance time and cost. Toll-free lines are quicker to furnish and more budget friendly but still need verification. First comes the choice of the right route, but in 2026 permission is not delivery. Your opt-ins are ambiguous. Your campaign information is insufficient. Your traffic pattern raises red flags. Even compliance communications can be blocked.

For most small and mid-sized organizations, 10DLC is the best solution. It’s more cheaper than short codes, follows a familiar local number structure, and enables the types of messaging most businesses need, including reminders, notifications and customer answers.

Short codes remain the standard for enterprise-scale OTP distribution, national retail campaigns and banking warnings where millions of messages need to land within minutes.

The Complete SMS Short Code Directory (2026)

The short codes below are grouped by the sort of business or service that supports them. This list includes short codes with an average of 100+ searches/month in the US during the past year, verified against publicly available registration data and CTIA filings.

Banking & Financial Services

Banks send fraud alerts, 2FA one time passwords, transaction alerts and balance updates via specialized short numbers. These codes are heavily regulated — if Chase is texting you it will always be from 24273 or 242733, never a random 10 digit number.

Why do you sometimes receive financial texts from an unknown number? Sometimes banks will utilize secondary short codes for special functions – maybe fraud alerts from a separate short code than your normal account alerts. Text HELP back to the number to confirm. If the code doesn’t return a corporate name, treat it with suspicion.

Tech & Security Verification (2FA / OTP)

These codes are used nearly solely for two-factor authentication (2FA) and one-time passwords. If you get a code from one of these numbers that you didn’t ask for, it could mean someone is trying to get into your account — don’t give them the code.

A note on 22395: This is one of the most searched short numbers in the US because it seems to text from various companies. This is a relic of a shared code used by Twilio, a company that routes messages for various customers. Shared short codes are no longer given, although existing ones like 22395 are running under legacy agreements and will be phased out over time.

E-Commerce & Retail

Retailers use short codes to send promotional offers, flash sale notifications, order confirmations, shipment updates and loyalty program messaging. These are usually opt-in marketing programs – if you are receiving them without opting in, your number has probably been bought by a data broker or an opt-in with fine print.

Important scam alert: Home Depot’s short code 53747 and FedEx’s short code 46339 are among the most commonly falsified short codes in the country. The scammers replicate their formatting to send phishing URLs. If any of these coded texts contain a link demanding for your personal information or payment, do not click.

Shipping & Delivery

Social Media & Entertainment

Healthcare, Crisis & Non-Profit

Wireless Carrier Short Codes

7726 is the global code for reporting spam. If you get a questionable text from any short code or phone number, forward it to 7726. It reports it to your carrier, starts an investigation, and helps protect other users. All the big US carriers support this – AT&T, Verizon, T-Mobile and others.

N11 Numbers (Essential 3-Digit Service Numbers)

These are not SMS short codes in the classic sense; they are 3-digit calling codes maintained by the FCC. But they do show up often in searches with short code directories, so here is the whole citation.

The Real Way Businesses Get a Short Code in 2026

Here’s what the procedure looks like today if you’re a business considering a short code.

Step 1 — Select your short code type. You have options: vanity short code (you pick the number, $1,000/month) or a random short code (assigned by the registry, $500/month). Both are leased through CSCA for 3, 6 or 12 month leases.

Step 2 — Your campaign brief. You must document your use case, opt-in process, sample message content, opt-out flow (STOP keyword), and help answer (HELP keyword). Vague or incomplete briefs will be turned down.

Step 3 — Carrier assessment and approval. A carrier must authorize a business’s campaign before it may send traffic over a short code. All carriers usually control short codes in accordance with the CTIA’s Short Code Monitoring Handbook, as well as the Mobile Marketing Association, which requires all firms to obtain consent (opt-in) before contacting an individual.

Step 4 — Provisioning. The code gets activated once it is accepted by all the major carriers. Overall timeline: Most of the time it takes 8–12 weeks, sometimes more for more sophisticated use cases.

Step 5 — Continued compliance. Occasionally, your messaging program is subject to audits by the carrier. Review or suspension may occur due to content modifications, volume increases or high opt-out rates.

The honest cost picture: The monthly leasing payment is only the beginning. Add in provisioning fees, per-message carrier costs and the cost to construct or integrate an SMS platform. For many enterprises, short code messaging is no longer the best or most cost effective solution – and that’s where newer channels like A2P 10DLC and toll-free SMS shine. 10DLC is likely the less expensive option if your organization transmits fewer than 100k messages a month.

What’s New in Short Codes and Compliance (2026)

In the last two years, the standards governing SMS compliance have become a lot stricter and short code users are not exempt.

One-to-one consent update to TCPA: A significant event for US SMS marketers in 2026 was the Eleventh Circuit’s decision to vacate the FCC’s one-to-one consent rule, which had required consumers to provide consent to each individual business, rather than to the broad partner list of a lead generator. Recent developments included the US TCPA revisions with the Eleventh Circuit vacating the one-to-one consent regulation and the FCC’s update on consent revocation timescales. That does not mean SMS compliance has gotten easier, it indicates the specific mechanism for multi-brand consent is still in development. If you are unsure, collect your own explicit opt-ins.

Consent revocation is tighter. Updated rules from the FCC, as of April 2025, mandate businesses to respond more quickly to opt-out requests (STOP messages). When a subscriber texts STOP, you must stop messaging that number within a brief set frame, not at the end of a campaign cycle.

T-Mobile pricing adjustments effective January 2026: T-Mobile has announced new A2P SMS pass-through fee changes, effective January 19, 2026, impacting Short Code, 10DLC, and Toll-Free messages. These fees are passed through to end users by SMS platforms, therefore businesses employing short codes at scale may suffer per-message cost hikes based on their provider’s pricing structure.

CTIA HELP and STOP compliance is required. Each short code program must answer to HELP with a company name, program description, and opt-out instructions. All short code programs must honor STOP. These are not guidelines, they are obligations. Any code which does not respond to either keyword should be reported immediately.

Short Codes and the Future of RCS

Rich Communication Services (RCS) is the biggest fundamental change to commercial messaging in a generation, and it has immediate ramifications for short codes.

RCS is not a new kind of short code. You can’t send RCS via a long code, toll-free number, or short code. RCS is not a new sort of message that sits on top of your existing number infrastructure. It uses a completely different sender ID system, where businesses register RCS agents with confirmed brand identities instead of leasing numeric codes.

What this implies in practice: When RCS Business Messaging is live, your recipients will see your brand name, logo and verified checkmark instead of a 5-digit number. No number to look up, no short code directory to reference, no misunderstanding as to who is texting you.

RCS supports branded verified sender identities, encryption and a more engaging experience. As RCS corporate texting takes off, anticipate a similar verification and regulation structure to govern it.

Short codes aren’t going away overnight. Hundreds of millions of SMS messages are exchanged every day through short codes and the infrastructure that supports them is firmly ingrained in banking, healthcare and enterprise operations. However, new firms entering the market in 2026 will need to comply with the CTIA Messaging Principles and Best Practices and all US Mobile Network Operator criteria for RCS messaging — including unambiguous opt-in consent, transparent call-to-action language, and program-specific enrollment. We know the compliance framework. The channel is new.

The wise move for businesses right now: keep your existing short code or 10DLC infrastructure for backward compatibility, and start looking into RCS Business Messaging for forward-facing customer interactions.

Finding Out Who Owns an Unknown Short Code

You received a text message from an unidentified 5 or 6-digit number. This is what you should do.

Method 1 — Text HELP to the number. Under CTIA guidelines, all proper short code programs must reply with the company name, a description of the service, and opt-out instructions. It is the quickest and most reliable way of identification.

Method 2 — Check the number online. A search of the type “[short code] SMS” or “[short code] text message” will often turn up the owner in the first few results, through carrier databases, consumer forums or official corporate pages.

Method 3 — Verify standard STOP/HELP compliance. If a code doesn’t reply to HELP or STOP, it’s a big red flag. Forward it to 7726 and your carrier now.

How to spot a scam:

• Urgency language — “Your account will be suspended in 24 hours” is a manipulative strategy, not a legitimate bank notification.
• Unexpected links — if you receive a link in a text message from a number you don’t recognize, consider it possibly harmful until you have validated it.
• PINs or Verification Codes — No real organization will ever require you to provide an OTP or verification code to a caller or via a text.
• Wrong number format — If your bank usually sends SMS from a known short code, and you suddenly get an “account alert” from a 10-digit number, that’s a spoofing red flag.
• You get a code you did not request — This suggests someone else might be trying to access your account. Now change your password.

Why you might be texted from a short code you didn’t opt into:

• A company you do business with signed you up using fine-print consent language.
• The phone number you entered was used by a subscriber earlier.
• Your number was sold to a marketing list by a data broker.
• Worst case scenario, it’s spam or a fraud. Notify 7726.

Short Codes Around the Globe: US vs. Canada vs. UK

Short codes are peculiar to a country. The US registration has no interaction with overseas short code systems. A code that works for a US store will not get through to you in another country.

In the US, short codes are 5–6 digits, dedicated, through the CSCA, not shared (sharing codes were deprecated).

In Canada, under CWTA guidelines, codes are 4 to 6 digits in length and maintained in a separate registry. Often the same corporation will use an entirely different short code in Canada than it does in the US. Canada’s Anti-Spam Legislation (CASL) addresses opt-in criteria and is deemed more stringent than US TCPA standards in several ways. Canada has likewise implemented A2P long code registration requirements under CASL, effective 2024.

In the UK, short codes are 5 or 6 digits. Some ranges are set aside for certain reasons – codes beginning with 70 are used by charity, 72 by lotteries – so recipients get an immediate contextual clue as to who is texting them.

There is no global short code network. If you travel abroad, you will not get short code communications from services in your home country, and vice versa.