SMS Verification API — SimNoKYC

Automate OTP verification at scale. Purchase virtual phone numbers across 190+ countries, receive SMS codes in seconds, rent dedicated long-term numbers, and manage every order through a single REST endpoint — no API key, no KYC, billed in cryptocurrency.

Reading time: 5 min REST · JSON · OpenAPI 3.0 Last updated: 2026-05-08 OpenAPI spec →

Why developers choose the SimNoKYC API

SimNoKYC is the most flexible SMS verification API for developers who need anonymity, global coverage and predictable pricing. Unlike legacy SMS-OTP providers that gate access behind enterprise contracts, monthly minimums and KYC questionnaires, SimNoKYC works with any HTTPS client, charges strictly per-number, and accepts 20+ cryptocurrencies including Bitcoin, Monero, Ethereum, USDT, USDC, Solana, Litecoin, XRP, TRON and Toncoin.

Typical use cases include automating account signups for scaled QA, retrieving one-time passwords for headless agents and CI bots, validating phone-required flows in continuous integration, renting dedicated long-term numbers for Telegram or WhatsApp accounts that need uninterrupted SMS reception, and powering geo-distributed verification across 190+ countries with explicit operator-tier control — virtual, physical or premium.

Authentication

The API uses cookie-based session authentication. To authenticate programmatically:

Send a POST request to /auth-api.php with your seed phrase
Store the session cookie from the response
Include the cookie in all subsequent API requests

POST /auth-api.php

Authenticate with your seed phrase and establish a session.

Parameter	Type	Required	Description
action	string	required	Must be `"login"`
seed	string	required	Your 16-character access seed (e.g. `AbC3-dEf4-gHj5-kLm6`)

cURL
Python
JavaScript
# Login and save session cookie
curl -X POST https://simnokyc.com/auth-api.php \
  -d "action=login&seed=AbC3-dEf4-gHj5-kLm6" \
  -c cookies.txt
import requests

session = requests.Session()
resp = session.post("https://simnokyc.com/auth-api.php", data={
    "action": "login",
    "seed": "AbC3-dEf4-gHj5-kLm6"
})
data = resp.json()
print(data)  # {"success": true, "user": {...}}

# session object now holds the cookie for all future requests
const resp = await fetch("https://simnokyc.com/auth-api.php", {
  method: "POST",
  credentials: "include",
  headers: { "Content-Type": "application/x-www-form-urlencoded" },
  body: "action=login&seed=AbC3-dEf4-gHj5-kLm6"
});
const data = await resp.json();
console.log(data); // {success: true, user: {...}}

Success Response

{ "success": true, "user": { "id": 42, "prefix": "AbC3", "balance": "74.50" } }

Error Response

{ "success": false, "error": "Invalid seed." }

Base URL

All API endpoints are relative to:

https://simnokyc.com/api.php?action={action}

All responses are JSON. POST endpoints accept both application/json and application/x-www-form-urlencoded request bodies.

Rate Limits

The API enforces the following rate limits:

Endpoint	Limit	Window
Authentication	5 attempts	15 minutes
All other endpoints	No hard limit	—

Rate limiting: Authentication is limited to 5 attempts per 15 minutes. Other endpoints are not currently rate-limited, but excessive usage may be throttled. Use reasonable request intervals.

Error Handling

All errors return a JSON object with an <code>error</code> field:

{ "error": "Description of what went wrong" }

HTTP Code	Meaning
200	Success (check response body for application-level errors)
403	Invalid CSRF token
405	Wrong HTTP method (e.g. GET on a POST-only endpoint)
429	Rate limit exceeded

Common application-level errors:

Error	Cause
`"Login required"`	Session expired or not authenticated
`"Insufficient balance"`	Not enough funds — includes `need` and `have` fields
`"Service not available for this country"`	No stock or service inactive for the selected country
`"Missing country or service"`	Required parameters were not provided

List Countries

GET /api.php?action=countries

Returns all active countries with available virtual numbers. No authentication required.

cURL
Python
JavaScript
curl https://simnokyc.com/api.php?action=countries
resp = session.get("https://simnokyc.com/api.php", params={"action": "countries"})
countries = resp.json()
for c in countries:
    print(c["code"], c["name"])
const resp = await fetch("https://simnokyc.com/api.php?action=countries");
const countries = await resp.json();

Response

[ { "id": 1, "code": "us", "name": "USA" }, { "id": 2, "code": "gb", "name": "UK" }, { "id": 3, "code": "de", "name": "Germany" } ]

List Services

GET /api.php?action=services&country={code}

Returns available services for a specific country, including prices and stock. Without a country code, returns all services without pricing.

Parameter	Type	Required	Description
country	string	optional	ISO 3166-1 alpha-2 country code (e.g. `us`, `gb`, `de`)

Response (with country)

[ { "id": 12, "name": "WhatsApp", "slug": "whatsapp", "icon_code": "WA", "icon_color": "#25d366", "category": "social", "price": "0.35", "stock": 847 } ]

List Operators

GET /api.php?action=operators&country={code}

Returns available operators (carriers) for a specific country. Each operator has a type and a price multiplier applied to the base service price.

Parameter	Type	Required	Description
country	string	required	ISO 3166-1 alpha-2 country code

Response

[ { "id": 5, "name": "T-Mobile", "type": "physical", "price_multiplier": "1.50", "icon_slug": "tmobile", "icon_domain": "t-mobile.com" } ]

Operator types: virtual — VoIP numbers, cheapest, may be blocked by some services. physical — real SIM cards, higher success rate. premium — fastest delivery (~10s), highest success rate.

Buy Number (SMS Activation)

POST /api.php?action=buy

Purchase a virtual number for one-time SMS verification. The number is active for 20 minutes. If no SMS is received, your balance is automatically refunded.

Parameter	Type	Required	Description
country	string	required	Country code (e.g. `us`)
service_id	integer	required	Service ID from List Services
operator_id	integer	optional	Operator ID from List Operators. Omit for default operator.

cURL
Python
JavaScript
curl -X POST https://simnokyc.com/api.php?action=buy \
  -b cookies.txt \
  -H "Content-Type: application/json" \
  -d '{"country":"us","service_id":12,"operator_id":5}'
resp = session.post("https://simnokyc.com/api.php?action=buy", json={
    "country": "us",
    "service_id": 12,
    "operator_id": 5
})
order = resp.json()
print(f"Order #{order['order_id']} — ${order['price']}")
const resp = await fetch("https://simnokyc.com/api.php?action=buy", {
  method: "POST",
  credentials: "include",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ country: "us", service_id: 12, operator_id: 5 })
});
const order = await resp.json();

Success Response

{ "success": true, "order_id": 1847, "price": 0.53, "balance": "73.97" }

Error: Insufficient Balance

{ "error": "Insufficient balance", "need": 0.53, "have": "0.10" }

List Orders

GET /api.php?action=orders

Returns your 50 most recent orders, including phone numbers and SMS codes. Poll this endpoint to check for incoming SMS codes on active orders.

Response

[ { "id": 1847, "price": "0.53", "status": "completed", "phone_number": "+12025551234", "sms_code": "847293", "created_at": "2026-04-09 14:32:00", "country_code": "us", "country_name": "USA", "service_name": "WhatsApp", "operator_name": "T-Mobile" } ]

Order statuses: active — waiting for SMS. completed — SMS received. cancelled — cancelled by user. refunded — auto-refunded (no SMS received before timeout). expired — timed out.

Get Rental Price

GET /api.php?action=rental_price&country={code}&operator_id={id}&duration={days}

Get the price for renting a dedicated number from a specific operator for a given duration.

Parameter	Type	Required	Description
country	string	required	Country code
operator_id	integer	required	Operator ID
duration	integer	required	Rental duration in days: `7`, `14`, `30`, or `90`

Response

{ "price": "12.50", "duration": 30, "operator": "T-Mobile", "type": "physical", "country": "USA" }

Rent Number

POST /api.php?action=rental_buy

Rent one or more dedicated phone numbers. The number is exclusively yours for the entire rental period and receives unlimited incoming SMS.

Parameter	Type	Required	Description
country	string	required	Country code
operator_id	integer	required	Operator ID
duration	integer	required	`7`, `14`, `30`, or `90` days
qty	integer	optional	Number of numbers to rent (1–10, default: 1)

Success Response

{ "success": true, "order_ids": [1848, 1849], "total": 25.00, "qty": 2, "unit_price": 12.50, "duration": 30, "balance": "49.50" }

Get User Info

GET /api.php?action=user

Returns the current user's account information and balance. Use this to check authentication status and available funds.

Authenticated

{ "logged_in": true, "id": 42, "prefix": "AbC3", "balance": "74.50" }

Not Authenticated

{ "logged_in": false }

Complete Workflow Example

Here's a full Python example that authenticates, finds a service, buys a number, and polls for the SMS code:

Python
import requests, time

BASE = "https://simnokyc.com"
SEED = "AbC3-dEf4-gHj5-kLm6"

s = requests.Session()

# 1. Authenticate
s.post(f"{BASE}/auth-api.php", data={"action": "login", "seed": SEED})

# 2. Check balance
user = s.get(f"{BASE}/api.php?action=user").json()
print(f"Balance: ${user['balance']}")

# 3. Get services for USA
services = s.get(f"{BASE}/api.php?action=services&country=us").json()
whatsapp = next(svc for svc in services if svc["name"] == "WhatsApp")
print(f"WhatsApp: ${whatsapp['price']} ({whatsapp['stock']} in stock)")

# 4. Buy a number
order = s.post(f"{BASE}/api.php?action=buy", json={
    "country": "us",
    "service_id": whatsapp["id"]
}).json()
print(f"Order #{order['order_id']} created")

# 5. Poll for SMS code
for _ in range(60):
    orders = s.get(f"{BASE}/api.php?action=orders").json()
    my_order = next(o for o in orders if o["id"] == order["order_id"])

    if my_order["sms_code"]:
        print(f"SMS code: {my_order['sms_code']}")
        print(f"Phone:    {my_order['phone_number']}")
        break

    print("Waiting for SMS...")
    time.sleep(5)
else:
    print("Timeout — balance will be refunded automatically")

Frequently Asked Questions

What can I do with the SimNoKYC SMS verification API?

The SimNoKYC API gives developers programmatic access to virtual phone numbers in 190+ countries for one-time SMS verification (OTP codes) and long-term number rental (7, 14, 30 or 90 days). You can list services, query live pricing, allocate numbers, retrieve incoming SMS codes, and refund failed activations — all over a JSON REST interface, with no KYC and crypto-only billing.

Do I need an API key or OAuth token to use the API?

No. The SimNoKYC API uses cookie-based session authentication: send a single POST request to /auth-api.php with your 16-character access seed, then reuse the returned session cookie on every subsequent call. There is no API key to provision, rotate or revoke — you authenticate once per session and remain authenticated for the lifetime of the cookie.

How much does it cost to use the SimNoKYC API?

The API itself is free — there is no monthly fee, no subscription, and no minimum request volume. You only pay per number: one-time SMS activations start at $0.05 and dedicated long-term rentals start at $4.79 for 7 days. Every action is billed against your prepaid balance, and any activation that fails to receive an SMS is refunded automatically.

Which programming languages and frameworks are supported?

Any language or platform that can issue HTTPS requests can call the API — Python (requests, httpx), Node.js (fetch, axios), Go, PHP, Ruby, Java, C#, Bash with cURL, and more. The documentation ships ready-to-run examples in cURL, Python and JavaScript, and a complete OpenAPI 3.0 specification is published at /openapi.json so you can auto-generate a typed client in your language of choice.

What happens if my SMS verification code never arrives?

Every activation has a 20-minute delivery window. If no SMS arrives before that window expires, the order is automatically cancelled and the full price is credited back to your account balance — no support ticket, no manual retry. You can immediately use the refunded balance to allocate another number, optionally on a different operator tier (virtual, physical or premium) for higher delivery success.

Are there rate limits on the SimNoKYC API?

Authentication is rate-limited to 5 attempts per 15 minutes per IP, which protects against brute-force seed enumeration. All other endpoints — catalog, buy, orders, rentals — currently have no hard rate limit, but we ask that you keep request intervals reasonable: polling /api.php?action=orders every 3–5 seconds is plenty for SMS retrieval, and sustained bursts above ~10 req/s may be throttled at the WAF layer.