Updated
OTP and account alert templates protect customer accounts on WhatsApp. Verification codes use Meta’s fixed Authentication format with a copy-code or one-tap button, while alerts about new sign-ins, usage limits, failed payments and card transactions are Utility templates. Both deliver to US numbers.
Hi Isaac, we noticed a new sign-in to your Acme account from Chrome on Windows on March 3 at 9:41 AM. If this was you, no action is needed. If not, please secure your account now.
9:00
It was me
9:01 ✓✓
Done! I’ve noted that for you. Anything else I can help with?
9:01
Reply lands inOTP & verification codes
OTP and verification code templates deliver one-time passcodes for login, sign-up and password reset. They are Authentication templates: Meta fixes the wording (“123456 is your verification code.”), with an optional security disclaimer and expiry note. Authentication templates deliver to US numbers and are priced separately from Marketing.
Authentication templates deliver one-time passcodes with a copy-code or one-tap autofill button. Meta fixes the wording, so these examples show exactly what customers will see, with different expiry settings for each use.
login_verification_code · en_US
WhatsApp message preview:
482913 is your verification code. For your security, do not share this code.
This code expires in 10 minutes.
10:24
Tip: Authentication templates use Meta's fixed wording; when you create one, Meta adds the Copy code (or one-tap autofill) button for you.
signup_verification_code · en_US
WhatsApp message preview:
730215 is your verification code.
This code expires in 5 minutes.
10:24
Tip: Use a short expiry for sign-up codes and keep an SMS fallback for people who don't have WhatsApp installed.
password_reset_code · en_US
WhatsApp message preview:
915604 is your verification code. For your security, do not share this code.
This code expires in 15 minutes.
10:24
Tip: Keep password resets on their own template name so you can monitor their delivery separately from sign-in codes.
Meta generates the body text and adds the Copy code button when you create an Authentication template; you choose the security note and expiry time.
Keep a separate template per flow (sign-in, sign-up, password reset) so you can monitor delivery for each.
Have an SMS fallback for people who don’t use WhatsApp, and never include links or promotions in a code message.
Confirm the user’s WhatsApp number before sending the code to it, and tell them the code is coming by WhatsApp.
Offer a fallback channel (SMS or email) if the code doesn’t arrive within a minute.
No. Social Intents is built for broadcasts and conversations, not for sending one-time codes from your app’s login flow. Generate and send codes from your own authentication system through the WhatsApp Business Platform, and use these examples to get Meta’s format right.
Account & security alerts
Account and security alert templates tell customers about new sign-ins, usage limits, failed payments, card transactions and password resets. They are Utility or Authentication templates, so they deliver to US numbers. Add a “This wasn’t me” quick reply so suspicious activity reaches your security team in seconds.
Security and account alerts need to be seen quickly. These Utility templates notify customers about new sign-ins, transactions, usage limits and payment problems, with quick replies so suspicious activity reaches a person fast.
new_login_alert · en_US
WhatsApp message preview:
Hi Isaac, we noticed a new sign-in to your Acme account from Chrome on Windows on March 3 at 9:41 AM. If this was you, no action is needed. If not, please secure your account now.
10:24
Tip: Route "Secure my account" replies to a priority channel in Slack or Teams so a person responds within minutes.
usage_limit_alert · en_US
WhatsApp message preview:
Hi Adam, your Acme workspace has used 80% of its monthly API call allowance. Usage resets on April 1.
10:24
Tip: Keep it informational; adding "upgrade now" pricing makes this an upsell, which Meta treats as Marketing.
Route “Not me” and “Secure my account” replies to a priority Slack or Teams channel so someone responds in minutes.
Never include passwords, full card numbers or codes in alerts; use an Authentication template for codes.
Keep alerts informational. An upgrade pitch inside a usage alert turns it into Marketing.
Mask sensitive values (show only the last four digits of a card) and never ask for passwords in the chat.
Send “This wasn’t me” replies to a dedicated security channel in Slack or Teams with clear escalation steps.
It can answer routine questions, but configure it to hand off immediately to a person for anything that suggests fraud or account takeover.
Let them choose in their account settings. Critical security notices may still be sent by email, but honor their channel preference for routine alerts.
These live in other collections; open one to see the full message, buttons and tips.
Hi {{1}}, we couldn't process the payment for your {{2}} subscription. Please update your…
Hi {{1}}, a payment of {{2}} to {{3}} was made with your card ending in {{4}}. If you…
| Template | Meta category | When to send | Variables (example values) |
|---|---|---|---|
| Sign-in verification code | Authentication | Instantly on request | {{1}} 482913 |
| Sign-up phone verification | Authentication | Instantly on request | {{1}} 730215 |
| Password reset code | Authentication | Instantly on request | {{1}} 915604 |
| Payment failed | Utility | Within an hour of decline | {{1}} Elijah · {{2}} Acme Pro · {{3}} March 10 |
| New sign-in alert | Utility | Instantly | {{1}} Isaac · {{2}} Acme · {{3}} Chrome on Windows · {{4}} March 3 at 9:41 AM |
| Usage limit alert | Utility | At 80% and 100% | {{1}} Adam · {{2}} Acme · {{3}} 80% · {{4}} API call · {{5}} April 1 |
| Card transaction alert | Utility | Real time | {{1}} Aaron · {{2}} $129.99 · {{3}} Acme Store · {{4}} 4821 |
Categories follow Meta’s message template documentation; Meta assigns the final category when it reviews each template, and charges per its pricing documentation.
Practical answers about OTP & account alerts messages on WhatsApp.
Related collections:
Send account alerts on WhatsApp and make sure every “This wasn’t me” reply reaches your security team in Slack or Teams.
No credit card required • Meta message fees billed separately by Meta
