Verification & notifications for lenders — WhatsApp, SMS and email
One API to verify applicants and send any transactional message — one-time passcodes, payment confirmations, reminders, alerts and more — over WhatsApp, SMS or email, from your own verified sender, with automatic fallback so it always gets through.
Verify and notify, on the channel that reaches them
One integration for customer verification and transactional messaging across three channels — WhatsApp, SMS and email. Send a one-time passcode or any transactional message, choose the channel or let it fall back automatically, and it sends from your own brand. All in the same place as the rest of Connect.
One-time passcodes
Send and validate OTPs for login, onboarding and step-up checks over WhatsApp, SMS or email. Codes are single-use and time-limited, with expiry and retry handled for you — you call one endpoint and get a pass or fail back.
Transactional messaging
Any transactional message — payment confirmations, arrears reminders, decision updates, document requests, delivery and status alerts — delivered where each borrower actually reads them, using approved templates so you stay inside each channel's rules.
Automatic fallback
Start on the channel you prefer and fall back automatically — WhatsApp to SMS to email — so a delivery failure never means a missed code or a missed notice. Delivery status comes back on every attempt.
Each channel earns its place
Choose per message, set a default, or let fallback decide. The integration is the same either way — one endpoint, one set of delivery receipts.
Rich, branded and end-to-end encrypted, with the highest open and completion rates. Best for engaged customers who have opted in to be messaged there.
SMS
Universal reach with no app required. The dependable fallback that reaches almost any UK mobile in seconds — ideal for time-critical codes.
Room for detail — statements, documents and longer updates — sent from your own authenticated sending domain so it lands in the inbox, not spam.
Your senders, your brand — we handle the plumbing
Messages send from your own verified WhatsApp number, SMS sender and email domain, so borrowers see your brand on every channel. Getting live takes four steps.
Bring your senders
Your WhatsApp Business number, an SMS sender ID or number, and a sending domain for email — or we help you provision the ones you don't have. All stay registered to your business.
Verify and authenticate
We guide WhatsApp business verification, SMS sender registration, and email domain authentication (SPF, DKIM, DMARC) — so messages are delivered and show up as a legitimate, verified brand.
Approve your templates
We register the templates you need — verification codes, reminders, alerts — and submit them for approval on each channel that requires it.
Call one API
Point your app at a single Credit Canary endpoint. Choose a channel or let fallback decide; we handle routing, rate limits and delivery status across all three — no direct integrations to maintain.
The basics, up front
A short summary of how data is handled across all three channels. Full detail — including retention windows and data residency — is set out in the data processing agreement we sign with you.
Processor, on your instructions
You remain the data controller. Credit Canary acts as your processor under UK GDPR, handling personal data only to deliver the verification and messaging you ask for, under a signed DPA.
Minimal data, short-lived codes
We take the phone number or email address needed to deliver a message. Verification codes are single-use and time-limited — validated, then discarded once they expire.
Encrypted in transit
Traffic to our API is encrypted with TLS. WhatsApp messages are additionally end-to-end encrypted across WhatsApp's network; SMS and email are secured in transit by the carriers and mail providers that deliver them.
No secondary use
Message content, phone numbers and email addresses are never used for marketing, profiling or model training. They exist only to deliver the message you sent.
Auditable, and deletable
Delivery metadata is retained for troubleshooting and audit for the window agreed in your DPA. We honour access and deletion requests to help you meet your own obligations.
Consent stays with you
As controller you decide who is messaged, on which channel, and hold the lawful basis and consent to contact them. We give you the template controls and opt-out handling to do it cleanly.
Ready to connect?
Book a demo and we'll walk you through verification and notifications across WhatsApp, SMS and email — how your senders get connected, and how it fits the rest of your decisioning flow. Prefer email? Reach us at hello@creditcanary.co.uk.