Are virtual numbers safe to use — and are they legal?
Two different questions that get answered as one. The legal answer is short; the safety answer depends entirely on what you put behind the number.
These get asked together and they are not the same question. One is about the law, which is straightforward in most places. The other is about what happens to your account, which is where the real risk lives — and it has almost nothing to do with the number being virtual.
The legal part #
Renting a phone number is renting a phone number. Virtual and cloud numbers are ordinary commercial products, used every day by call centres, delivery firms, marketplaces that mask buyer and seller, and any company that runs a support line. Nothing about receiving an SMS on a line you rent is unusual.
What the law cares about is what you do with it, exactly as with a SIM bought in a shop. Fraud is fraud whichever number sent the message. We do not help with that, and no legitimate provider does. What the service does do is set out plainly on the FAQ.
What people actually use them for #
- Keeping a personal number off marketplaces, delivery apps and classified ads, where it becomes a permanent spam magnet.
- Separating work from personal without carrying two phones.
- Signing up to something once, from a country where the service requires a local number.
- Testing their own sign-up flow — developers verifying that their SMS actually arrives in the countries they sell to.
What these have in common: the number is a doorway, not an identity. Nobody is pretending to be someone else.
The safety question, properly #
The real risk is not that the number is virtual. It is that a one-time number is temporary, and people build permanent things on it.
| Risk | How real it is | What removes it |
|---|---|---|
| Someone else gets the number later | Real. Lines are recycled continuously | Set a password or an email on the account so the number is not the only key |
| You cannot re-verify | Real, and the most common loss | Rent the number if the account will be re-checked |
| The code is seen by someone | Low. The message shows on your order and is removed shortly after it closes | Do not paste codes into anything but the service that sent them |
| The provider keeps your data | Depends entirely on the provider | Ask what is stored. Here it is an email address and a password hash — no name, no document, no card |
Where SMS itself is the weak part #
Worth saying plainly: SMS is the weakest form of two-factor authentication there is, on any number. It is vulnerable to SIM swapping, to interception on some networks, and to the ordinary problem that a message is readable by whoever holds the line.
That is an argument for using an authenticator app wherever a service offers one — and it applies just as much to the number in your pocket. A virtual number is neither better nor worse than a physical one on this point.
What we hold about you #
An email address, a password hash, and the ledger of what you spent. No name, no document, no phone number of your own, no card — the balance is topped up in crypto. Messages are shown while the order is open and removed shortly after it closes.
The full list, including what we do not do, is on the FAQ.
