What the sender's number format tells you

By MercPrivacy · Published 2026-06-22 · Updated 2026-08-05

Short codes, ten-digit numbers, toll-free senders and email gateways each say something about who is texting and how accountable they are. A field guide to reading the format.

Every text arrives from something: a five-digit code, a local-looking number, a toll-free number, or an address that is suspiciously an email. Most people never read anything into the format.

They should. The sending number is a return address, and its format tells you how much vetting stood between the sender and your phone — which in turn says a lot about how identifiable, how accountable, and how deliberate the sender is.

Learning to read the formats takes about five minutes. Here is the field guide.

## Short codes: the vetted lane

A short code is the five- or six-digit number your bank and your airline text from. Short codes are leased through a central registry, and putting one into service involves review: the use case, the opt-in flow, and the required STOP handling all get looked at before traffic runs. The lane exists because carriers wanted a channel they could police: misbehavior on a short code traces back to a contract with a real counterparty, which is why your bank trusts it with login codes.

What that means for you:

- **A findable company is usually behind it.** Short codes are costly and traceable, so fraud operations mostly stay out of this lane. - **STOP handling is built in.** Reply STOP to a short code and the messaging platform itself processes the opt-out, whatever the company behind it would have preferred. - **Vetted is not the same as lawful.** A company can hold a pristine short code and still send marketing to people who never gave written consent. The difference is that a short-code sender is exactly the kind you can hold to account — identifiable, documented, and worth [asking for the consent record](https://mercprivacy.com/knowledge/what-a-valid-consent-record-looks-like).

## Ten-digit numbers: the everything lane

An ordinary ten-digit number is the most ambiguous format, because everyone uses it: your plumber, your kid's school, registered marketing campaigns, and a large share of the spam economy.

Two facts sort the lane out:

- **Legitimate business texting from regular numbers is registered.** Carriers require businesses that send campaign traffic from ten-digit numbers to register who they are and what they send, so lawful senders leave a paper trail even here. - **The unregistered remainder rotates.** Spam operations burn through numbers, swapping to a fresh one as each gets flagged. The area code is chosen to look like a neighbor. It is not a neighbor, and the familiar prefix is doing the same job as a [spoofed caller ID](https://mercprivacy.com/knowledge/spoofed-caller-id-not-a-dead-end): borrowing trust the sender has not earned.

A sender that changes numbers every few days is answering your accountability question for you.

Two practical reads for this lane. First, check whether the number answers a call: a marketing operation's burner usually cannot, or dead-ends in generic voicemail, while a real business's texting number usually connects to that business. Second, watch for the same message arriving from different numbers across days — screenshot each one, because the rotation itself documents that the sender expected to be blocked and planned around it.

## Toll-free senders

Toll-free numbers — 800, 833, 844 and their siblings — can be text-enabled, and platforms run a verification process on them before allowing traffic. Accountability sits in the middle of the range.

- **Traceable to a platform and a customer.** Verified toll-free traffic has a business attached to it somewhere, reachable through the provider. - **A favorite of gray-area volume.** Collections-adjacent notices, lead-generation follow-ups, "account alerts" that are really marketing: the toll-free lane carries a lot of traffic engineered to feel official while selling something.

Treat toll-free texts as identifiable but not automatically honest. Read the message on its merits and keep the sender's number in your notes.

## Email-to-text gateways: the bargain basement

Sometimes a "text" visibly arrives from an email address, or the header shows one. Carriers operate gateways that convert email into SMS, and this is the cheapest, least vetted way to reach a phone.

- **No meaningful review.** Anyone who can send email can push messages into the gateway lane. - **Aggressively filtered.** Carriers treat the lane with the suspicion it has earned, which is why so little legitimate traffic uses it. - **A legitimate marketer has no reason to be here.** Real senders want deliverability and branding. A message arriving by gateway is telling you what its sender's budget and intentions look like.

> The cheaper the lane, the less anyone vetted the sender — and the more the message itself is the only credential.

## What this means for your log

The format is context, not a verdict. Recording it is what turns context into leverage.

1. **Capture the full sender identity in every screenshot** — the exact short code, the complete ten-digit number, or the whole gateway address. [The evidence file](https://mercprivacy.com/knowledge/the-evidence-file-what-to-keep) covers the rest of the kit. 2. **Note the lane.** A vetted-lane sender is identifiable and reachable. A rotating burner is harder — but not hopeless, because of the next point. 3. **Follow the product, not just the number.** Whatever the text is selling identifies who benefits, and sellers can be liable for messages sent on their behalf. The company whose product shows up in the pitch cannot always hide behind "a vendor sent that." 4. **Track lane changes.** Campaigns sometimes start on a vetted channel and migrate to rotating ten-digit numbers once complaints pile up. That migration deserves a line in your notes: a sender that switched lanes to keep reaching you was making a choice, and choices read differently than accidents.

## Reading the return address with you

Send a screenshot to [Stephanie](https://mercprivacy.com/stephanie) — she reads sender formats all day, instantly and free — or call (830) 587-5011. If the sender turns out to be the accountable kind, [how it works](https://mercprivacy.com/how-it-works) shows the road from screenshot to claim.