Every company obsesses over email open rates, push-notification click-through, and whatever the WhatsApp broadcast is converting at this quarter. Meanwhile, the single most reliably opened message any Indian company sends - the OTP text - gets written once, by whoever happens to be setting up the SMS gateway, and never looked at again.
That’s backwards. A marketing email competes with forty other unread emails for a glance. An OTP text gets read within thirty seconds of being sent, by a user who is actively waiting for it, phone already in hand. There is no other message in a brand’s entire toolkit with that kind of guaranteed, immediate attention - and almost nobody is using it for anything beyond the six-digit number.
The template nobody owns
Ask most founders who wrote their OTP message and the honest answer is: nobody, really. It came bundled with the SMS gateway’s default template, got copy-pasted into the codebase during an engineering sprint, and has sat there since - usually something like “123456 is your OTP. Valid for 10 minutes. Do not share this with anyone.” Functional, forgettable, and indistinguishable from the OTP text sent by the food delivery app, the bank, and the sketchy lending app that spammed the same user an hour earlier.
That sameness is the actual cost. In a message category this crowded with lookalikes, a brand that bothers to sound like itself - even in six words appended to the mandatory compliance line - gets remembered precisely because everyone else skipped that step.
What the ten extra characters can do
Nobody is asking for a jingle. The regulatory text has to stay intact, the brand name has to appear where carriers expect it, and the whole thing has to fit in one SMS segment or it gets truncated or billed twice. Within those constraints, there’s still room for a brand’s actual voice: a sign-off that sounds like the company instead of the gateway, a consistent sender ID instead of a rotating shortcode that looks like spam, a tone that matches what the company sounds like everywhere else it talks to this same customer.
The test is simple. Read the OTP text out loud. If it could have been sent by any of the other eleven apps on the user’s phone, it’s not doing brand work - it’s just doing plumbing.
Where this actually compounds
The OTP moment usually sits at the highest-stakes point in the relationship: a login, a payment, a password reset, a transaction being verified in real time. A user who’s anxious about a transaction and gets a message that reads as careless - wrong casing, a dead giveaway it’s a bulk template, a sender ID that doesn’t match the app name - carries a sliver of that unease into the next screen. A user who gets a message that reads as considered doesn’t notice anything, which is exactly the point: trust at this moment isn’t built by being clever, it’s built by not giving the user a single reason to hesitate.
Nobody budgets time for rewriting an OTP template. That’s exactly why the few companies that do stand out in a category where everyone else left the default in place.