Why OTP SMS fails abroad

A code that does not arrive has failed somewhere between the bank and the phone, and the failure is almost never the one people assume. There are four layers, they fail for different reasons, and the fix for one does nothing for the others.

Layer one: the kind of number it is

Before anything is sent, the bank decides whether the number is the kind it will send to. Capital One's help page is explicit about both halves of this: "in order to receive a code, you will need to have a US mobile phone number registered to your name on file. VOIP- or Wi-Fi- based services are not eligible to receive a code."

Bank of America draws the same line from the other side, for its transfer code: "if you have a U.S. based mobile number and can receive SMS internationally, you can continue to use Secured Transfer as you travel", and where there is no US number, "we do not support international phone numbers at this time", per its Security Center.

This layer fails before a message exists, which is why it produces no trace anywhere: nothing appears on a phone bill, nothing appears in the bank's log of sent messages, because nothing was sent. It is also the layer a reader can test in advance, by checking the number type on the account rather than waiting for a failure abroad.

Layer two: whether the carrier passes short codes

Bank codes come from short codes, the five- and six-digit senders, and short codes are handled differently from ordinary messages. Capital One names this failure outright and points at the party who can fix it: "it is also possible that your phone carrier may be blocking short codes such as OTP from reaching your phone. If so, this can also be adjusted by your phone carrier."

A carrier-side block is a setting rather than an outage, and it can be introduced by a plan change, a spam filter, or a new SIM. It is the layer most often described in forums as "the bank will not text me", which misreads where the failure happened: the bank sent, and the carrier declined to deliver.

Layer three: the network you are standing on

The third layer belongs to the country you are in, not to the bank or the home carrier. Capital One states the limit as a condition rather than a promise: "if you are traveling outside the US, we may not be able to deliver a text or voice message to you depending on your phone's coverage."

Notice what that sentence does not say. It is not about cost, and it is not about permission. A carrier's own statement about roaming charges answers a different question: Jio publishes that "all incoming text messages are free in international roaming (IR)", per its FAQ , which settles the price and leaves delivery untouched.

What this layer turns on is whether the line registers on a foreign network at all, and that is where the settings live: roaming enabled on the line, and the service active. Those are the two things to arrange before departure rather than during an emergency, because both usually require access to the home carrier's app or portal.

Layer four: the bank's own channel rules

The last layer is the bank's decision about which channels it offers for which action, and it varies more than the other three. Bank of America sends its one-time authorization code "by text or email" according to its Security Center, and offers a USB security key where the account has no US mobile number. Chase publishes a setting on its own Security Center page to receive one-time codes by email alongside its app approvals. Capital One leans on its app for a code-free approval path.

None of these is a workaround in the sense of circumventing security; they are the channels the bank itself runs. The practical consequence is that the layer is negotiable in advance and not during a locked-out afternoon: the setting has to be switched on while the account is still ordinary.

A checklist for before you fly

• Confirm what kind of number is on the account. VOIP and Wi-Fi services are ruled out by at least one of the three banks we read, in writing.
• Confirm the line will be active and roaming-capable while you are away. Cost-free incoming messages still require registration on a foreign network.
• Switch on any alternate channel the bank offers, email or app, and test it once from home.
• Keep the number itself alive: how, and at what price, is on keep the number you are leaving.
• If a code still fails, work the layers in order, because the first one produces no error message at all.

The banks, bank by bank

Capital One publishes the fullest statement of the three. Bank of America draws the number boundary and offers hardware. Chase publishes the email setting. The question of which numbers a bank will accept at all is answered as far as the banks answer it.