2026 Unified Policy — SMS cannot be forced as the sole 2FA/OTP method
Under Twilio's September 2026 Unified Content Policy (and 10DLC Error 30923), if your campaign is registered for Two-Factor Authentication (2FA / OTP), you cannot force users to check a mandatory marketing/recurring SMS box to log in, nor can SMS be the mandatory condition for account access without user-initiated trigger disclosure.
Why DCA Reviewers Trigger Error 30553
- A 2FA login screen has a `required` checkbox forcing recurring SMS consent.
- The 2FA message_flow fails to clarify that one-time passcodes are only sent on-demand when a user requests a login or verification code.
Side-by-Side Technical Comparison
FAILRejected Forced 2FA Checkbox (Triggers 30553 / 30923)
<input type="checkbox" name="sms_2fa" required /> <label>Required: You must agree to recurring SMS alerts to sign in to your account.</label>
PASSCompliant 2FA / OTP Disclosure (Passes 30553)
<p>Enter your mobile number to receive a one-time verification code when signing in. Message & data rates may apply. One message per login request. Reply STOP to opt out or HELP for help.</p>