Enabling Phone Verification for Web Forms
You can enable phone verification on web forms to authenticate consumers with a One-Time Password (OTP) sent via SMS/text. This allows organizations to support SMS authentication as an additional verification method.
The Captcha service must be enabled to use phone verification. For more information, see Managing Web Form Settings.
As of the OneTrust 6.20 release, phone verification for web forms now supports Chinese phone numbers.
To enable phone verification
- Enable the setting Enable Phone Number Verification.
- The Phone Number field will populate in the web form preview. The field requires the country code followed by the full phone number.
- You can also provide custom text for the Success and Failure screens. For more information, see Customizing Text on Verification Screens.
Processing requests with phone verification enabled
When a request is submitted against a web form with phone verification enabled, the SMS Authentication screen appears. Consumers will enter the One-Time Password (OTP) sent to their submitted phone number. Consumers will be shown a successful or failed verification screen.
SMS Messaging
The following content will be included in the SMS phone verification message as of OneTrust 6.15.0. The default code is a six-digit format.
Your Phone verification code is: XXXXXX. Don't share this code with anyone; our employees will never ask for the code.Resend Verification Code Option
Consumers can request another code by clicking the Resend Code button once every two minutes, up to ten minutes.
If users miss the ten-minute window, they will be presented an Unable to Verify screen that will instruct the consumer to contact the organization's privacy team.
Request Details Screen Labels
The request will appear in the Request Details screen as Unverified until the consumer enters the successful OTP and all other required methods are completed.
Once the consumer is authenticated by their phone number and all required verification methods are successful, their request will appear as Verified.
Phone Verification FAQS
Does the data subject get billed for receiving a text/SMS messaging in order to process their own verification?
OneTrust does not charge the data subject for receiving the message, though, standard rates may apply depending on the data subject's phone provider. For more information, see Twilio's SMS FAQ.
Do OneTrust customers receive a charge for each verification text that is sent to a data subject?
OneTrust customers will not be charged for the verification text, though, standard rates may apply depending on the data subject's phone provider. For more information, see Twilio's SMS FAQ.
Can the text messages be sent in multiple languages?
This is dependent on the languages supported by Twilio. Currently, OneTrust cannot offer language customization of text messages sent for phone verification.