SMS Security

This document is intended to introduce the new feature — SMS security, which will make SMS generation rules more strict.

When a user registers on the CleanPay Mobile App, forgets his/her password, resets his/her password or changes the phone number bound to the account, it will result in a need to generate an SMS code.

Here is the new SMS flow.

SMS Security for Domestic users

1. For users using a number from the USA/Canada country code, if the same mobile number requests an SMS, the time delay to generate another SMS will be compounded by +60 seconds after the first two SMS. For example, Generate SMS → Wait 60 seconds → Generate SMS → Wait 120 seconds → Generate SMS → Wait 180 seconds and so on.

2. There is a Domestic Cooldown Period for the domestic license. Domestic Cooldown Period = 5 mins (300 seconds). That is, if users try again with the same number after waiting for 5 minutes, the process will reset.

3. The new SMS flow will check if the number of SMS generated this month for this operator is less than the last 3 month average number of SMS generated or the domestic minimum limit. If it is not, check if the number of SMS generated is 3 times or higher than the 3 month average. If yes, the maximum (max) limit is reached, SMS cannot be generated and a prompt will be displayed. If no, generate SMS.

   Note: The minimum limit is the minimum allowable amount of SMS messages. The Domestic Minimum Limit is 10000 SMS generated.

SMS Security for International users

1. For users using the non-USA/Canada country code, if the same number or same country requests an SMS, the time delay to generate another SMS will be compounded by +180 seconds after the first two SMS. For example, Generate SMS → Wait 60 seconds → Generate SMS → Wait 240 seconds → Generate SMS → Wait 420 seconds and so on.

2. The International Cooldown Period is 10 mins (600 seconds) since the last same number or same country requested. That is, if users try again with the same number after waiting for 10 minutes, the process will reset.

   Note: When device tries to request a new SMS but the cooldown period has not passed, the interface will display “You must wait x seconds then try again”.

3. The new SMS flow will check if the number of SMS generated this month for this operator is less than the last 3 month average number of SMS generated or the international minimum limit. If it is not,  check if the number of SMS generated is 3 times or higher than the 3 month average. If yes, the max limit is reached, SMS cannot be generated and a prompt will be displayed. If no, generate SMS.

   Note: The International Minimum Limit is 300 SMS generated.