SMS With Links Not Delivering? TRAI's URL, APK and Callback Number Whitelisting Explained

Your festive offer SMS went out to fifty thousand customers. The dashboard says "submitted", the template is approved and the sender header is registered, yet hardly anyone has clicked. When you dig into the delivery reports, a large share of messages show as failed or rejected. Nothing seems wrong with the campaign itself, so what happened?

Very often, the problem is the link inside the message. Since late 2024, India's SMS rules have treated web links, app links and callback numbers as something that must be registered in advance. If they are not, operators can block the message even when everything else is in order.

The rule in plain language

TRAI directed telecom operators that, from 1 September 2024, they must not deliver commercial messages containing URLs, APKs, OTT links or callback numbers that have not been whitelisted by the sender. Later in 2024, TRAI also required the full chain of every commercial message, from the business to the recipient, to be traceable. Together, these measures were designed to stop fraudsters from using the SMS channel to push phishing links and fake helpline numbers.

For legitimate businesses, the practical meaning is simple. Every link and phone number you put in an SMS needs to be registered against your entity on the DLT platform before you use it. An approved template is no longer enough on its own.

What needs to be whitelisted

The obvious item is your website URL, but the rule goes wider than many teams realise. Landing pages on separate domains or subdomains, campaign pages hosted on third-party tools and payment links all count. Short links need attention too, because the shortener domain matters as much as the destination. App download links, especially direct APK links, are treated with particular caution because fraudsters have used them to install malicious apps. OTT links such as WhatsApp click-to-chat links and Telegram links must be registered as well. Finally, callback numbers, meaning any phone number you ask customers to call, fall under the same expectation.

Why messages still get blocked

Most delivery failures come from a few repeat mistakes. Generic public URL shorteners are frequently associated with spam, so many businesses have switched to branded short domains or to shorteners supplied and whitelisted by their SMS provider. Another common issue is registering one domain and sending another; registering yourbrand.com and then sending a link to offers.yourbrand.in or a landing page built on a different platform can cause failures.

Template structure can also cause trouble. Putting a full URL inside a free-text variable, rather than in the position the template defines for links, may lead to rejection. WhatsApp links are easy to forget because they do not look like web links to many marketers, and new phone numbers, such as a new branch or a salesperson's mobile, are often added to messages without being registered first.

How to fix failures and prevent them

Start by building a complete inventory of every link and number your business sends by SMS. Include websites, landing pages, payment links, app links, WhatsApp links and helpline numbers. Then register them on your DLT portal, or ask your SMS provider to help, and wait for approval before using them in live campaigns.

Standardise how links appear. Use one consistent branded short domain and keep templates aligned with where the link sits in the message. Before any large send, test with a small internal group covering Jio, Airtel and Vi numbers, and check delivery reports by error code rather than looking only at an overall delivery percentage. Error codes usually tell you exactly what went wrong.

The most durable fix is a simple change process. Any new landing page, short link or phone number that marketing wants to use should go through registration first. A shared sheet listing approved links and numbers, owned by one person, prevents most last-minute surprises during festive campaigns.

Why this rule ultimately helps you

Phishing messages with fake bank, courier and electricity bill links have caused real losses for Indian consumers, and they have made many people suspicious of every SMS with a link. Whitelisting makes it harder for criminals to exploit the channel and helps restore trust in genuine business messages. Brands that follow the rules benefit from a cleaner channel and customers who are more willing to click.

When to use richer channels alongside SMS

If your campaigns depend heavily on links, images and buttons, it can make sense to add RCS Business Messaging, which shows a verified brand name and logo with tappable buttons on supported Android phones, or WhatsApp templates with call-to-action buttons. SMS then remains the universal fallback that reaches every phone. The same discipline applies across channels: use registered, trusted links and clear sender identities.

Frequently asked questions

Do transactional messages with links need whitelisting too?

The directive covers commercial communications broadly, so treat every link and callback number in business SMS as needing registration.

How long does whitelisting take?

It varies by DLT operator and provider. Plan ahead rather than registering on the day of a campaign.

Can I use popular public link shorteners?

They are risky. A branded or provider-approved short domain is a safer choice.

Get your SMS delivering again

OM Enterprises helps businesses register URLs, callback numbers and templates correctly, and provides delivery reports that show exactly why a message failed. Talk to our SMS compliance team.