SMS Marketing in Pakistan: Branded (Masked) SMS, Rules and What to Send

Everyone talks about WhatsApp, and for good reason. But SMS still has one thing WhatsApp doesn't: it reaches every phone in Pakistan, with or without data, with or without an app, and it lands in the same inbox where people get their bank alerts and delivery updates.

That's exactly why it's easy to get wrong. Most of us have received a "SALE SALE SALE" message from a random number at 11 pm, and most of us have ignored it, blocked it, or reported it. If your brand sends messages like that, SMS stops being a sales channel and becomes a reputation problem.

In this guide I'll explain how branded (masked) SMS works, what the PTA rules actually say, how to pick a provider and what to send. The regulatory parts come from PTA's own published regulations and consumer pages, which I read on 30 October 2026. I'm a marketer, not a lawyer, so treat this as a practical summary and check the PTA regulations page or ask your SMS provider before a big campaign.

Masked SMS, short codes and normal numbers: what's the difference?

When people in Pakistan say "masked SMS" or "branded SMS", they mean a message that shows your brand name as the sender instead of a phone number. So instead of a message from 0300-1234567, the customer sees something like "SKSTORE".

Here's how the three options compare:

PTA's 2022 amendment to the spam regulations says marketing messages should go through approved short codes or alphanumeric IDs, sent via agreements with SMS aggregators or mobile operators. In plain English: if you want to send promotional SMS in bulk, do it through a proper provider with an approved sender ID, not from a spare SIM card and a cheap "bulk sender" app.

What PTA's rules actually say

The main document is the Protection from Spam, Unsolicited, Fraudulent and Obnoxious Communication Regulations, 2009, amended in 2020 and again in 2022 (the second amendment was published in the Gazette of Pakistan on 31 December 2022). You can download all three from the PTA regulations page. Here are the parts that matter most for a small business:

1. "Unsolicited" means marketing without consent. The 2022 amendment defines unsolicited communication as promotional or marketing information sent to people who haven't consented to receive it and whose details are recorded in the central Do Not Call Register (C-DNCR).

2. Consent comes first. The amended regulation 6 says telemarketers sending through an SMS aggregator should seek individual consent by message, in English and Urdu, before sending marketing messages. The telemarketer is also responsible for keeping a record of each person's consent in case of a dispute.

3. Every opted-in customer needs a way out. Regulation 4(3), as amended, says that when someone opts in to marketing messages, the business doing the direct marketing must give them the option to unsubscribe.

4. Messages should arrive in normal business hours. The same regulation says operators must make sure these messages are received within "normal business hours". The regulations don't define exact hours, so ask your provider what sending window they enforce.

5. People can block marketing completely. PTA's unwanted ads page tells customers to send "reg" to 3627 to join the Do Not Call Register. Operators keep this register, and the regulations expect marketing traffic to respect it.

6. Customers can report you. The same PTA page tells people to report unsolicited messages by sending them to 9000, with the sender's number and a space at the start. The 2022 amendment also says that if a sender keeps sending obnoxious communication after a first warning, the operator should suspend that sender within 24 hours of the complaint.

The regulations also tie the meaning of "spamming" to the Prevention of Electronic Crimes Act, 2016 (PECA). So this isn't only about operator rules. It's another reason to keep your list clean and your consent records safe.

Step 1: Build a list people actually agreed to

This is where most small businesses in Pakistan cut corners. A list of numbers you bought, scraped from Facebook groups or copied from a market association's WhatsApp group isn't a marketing list. It's a list of people who'll report you.

Good places to collect consent:

• Checkout: an unticked box on your Shopify or website checkout that says "Send me offers and new arrivals by SMS". Keep order updates separate from marketing.
• Your shop counter: a small QR code or a line on the receipt: "Want early access to sales? SMS SUB to [your short code]" (only if your provider supports keyword replies).
• Your WhatsApp chats: when a customer asks about new stock, ask "Can we send you an SMS when it's back?" and note their yes.
• Lead forms: if you run Meta lead ads, add a clear, optional consent line rather than assuming everyone who filled the form wants promotions.

Then record the consent: the number, the date, where they said yes and what they agreed to receive. A simple Google Sheet is fine. If someone complains later, that record is your proof, and PTA's rules put the responsibility for it on the sender.

Finally, ask your provider to filter your list against the Do Not Call Register before every promotional send, and remove anyone who has unsubscribed from your own list straight away.

Step 2: Pick a provider (questions to ask first)

You'll find many "bulk SMS Pakistan" companies online, and prices vary a lot. Before you pay anyone, ask these questions:

1. Are you a PTA-licensed or registered provider, or do you work through one? Ask for the licence or registration details, and if anything feels off, check with PTA before you pay.
2. How do I get a branded sender ID, and how long does approval take? Ask what documents they need (usually business details and proof that you own the brand name).
3. Which networks do you deliver to? You want Jazz, Zong, Telenor and Ufone covered with your brand name showing.
4. Do you filter against the 3627 Do Not Call Register? If the answer is vague, move on.
5. How do customers unsubscribe, and how do I get that list? You need opt-outs synced back to your own records.
6. Do you give delivery reports? "Sent" isn't the same as "delivered".
7. How do you charge for Urdu and long messages? More on this below.
8. Is there an API or a Shopify integration? That matters if you want automatic order updates or abandoned cart reminders.

Keep transactional messages (order confirmations, delivery updates, OTPs, appointment reminders) separate from promotions in your provider account if you can. The regulations' definitions are about promotional and marketing messages, but ask your provider how they classify each template, because operators and providers can apply their own rules too.

Step 3: Write messages that fit (and don't look like spam)

SMS is short, so every character counts. Here's the technical part most people learn the hard way:

• A standard SMS in English letters (including Roman Urdu) usually fits about 160 characters in one message.
• If you use Urdu script or emojis, the message switches to Unicode and one SMS usually fits only about 70 characters.
• Longer messages are split into parts, and each part is normally billed as a separate SMS.

So a 200-character Urdu message can cost you three or four SMS per customer. Check your provider's counter before you hit send. For most promotions, Roman Urdu or simple English gets you more words for the same price.

A few writing rules I follow:

• Say who you are in the first few words, even with a branded sender ID. "SK Store:" at the start builds trust.
• One message, one action. Don't put a sale, a new collection and a contest in the same SMS.
• Use a short, branded link if you can, and add UTM tags so you can see SMS traffic in Google Analytics. Setting utm_medium=sms puts those visits in GA4's SMS channel; my GA4 guide for small business owners shows the full tagging setup.
• Use a unique coupon code per campaign (like SMS10). It's the easiest way to measure SMS sales, especially with cash on delivery.
• Include the opt-out line your provider supports, so it matches the unsubscribe option PTA requires.
• No ALL CAPS, no "Congratulations, you've won", and no fake urgency. Those are the patterns people already associate with fraud.

Step 4: Send at sensible times and sensible frequency

The regulations say "normal business hours" without defining them, so here's my practical approach rather than a legal rule:

• Send promotions in the daytime and early evening on working days, and never late at night.
• Avoid Friday prayer time, and in Ramadan think about sehri and iftar times before scheduling.
• Keep promotions to a few a month, not daily. Transactional messages can go when they're needed, because the customer is expecting them.
• Don't send the same promotion by SMS, WhatsApp and email on the same day. Pick the channel that fits the message.

What to send: 7 templates you can copy

Replace the brackets, keep it short and only promise what's true. The opt-out line depends on your provider, so use the exact wording they give you.

1. Consent request (English and Urdu, as PTA's rules expect):

[Brand]: Get early access to sales and new arrivals by SMS. Reply SUB to join. / [Brand]: Sale aur new arrivals ki SMS updates ke liye SUB likh kar reply karein.

If your sender ID is one-way, collect this consent on your website, checkout or shop counter instead, and record it.

2. Order confirmation (transactional):

[Brand]: Order #[1234] confirmed. Total Rs [2,450], cash on delivery. Expected delivery [2-4] working days. Questions? WhatsApp [number].

3. COD confirmation before dispatch:

[Brand]: Aapka order #[1234] (Rs [2,450]) kal dispatch hoga. Confirm karne ke liye [link] par click karein ya WhatsApp [number] par "YES" bhejein.

Confirming COD orders before dispatch is one of the most useful SMS jobs in Pakistan, because a parcel that gets refused at the door costs you delivery both ways.

4. Appointment reminder (clinics, salons, tutors):

[Brand]: Reminder: your appointment is tomorrow, [date] at [time]. To reschedule, call [number].

Keep reminders free of any health details. A clinic reminder should say "appointment", not the treatment.

5. Cart reminder (only for opted-in customers):

[Brand]: Aapka cart abhi saved hai. Order complete karein: [link]

6. Promotion:

[Brand]: Winter collection is live. 15% off with code SMS15 till Sunday: [link] [opt-out line]

7. Review request after delivery:

[Brand]: Thank you for ordering! If you're happy with your order, a quick Google review helps us a lot: [review link]

If you want more wording for review requests, my WhatsApp review request templates work just as well as SMS with a few edits.

SMS, WhatsApp and email: who does what

I don't think of SMS as a replacement for the other channels. Each one has a job:

• SMS: short, important, time-sensitive messages: order updates, COD confirmations, reminders and the occasional big sale.
• WhatsApp: conversations, questions, sharing your WhatsApp Business catalogue and closing sales from click-to-WhatsApp ads. For promotions, read my comparison of WhatsApp broadcast lists vs marketing messages first, so you don't get reported or blocked.
• Email: longer content, stories, product education and flows like the ones in my 5 emails every small business needs guide.

If you want to estimate what a campaign could return before you spend anything, try the calculators on my SMS marketing page.

Mistakes I'd avoid

• Buying a number list or adding people from WhatsApp groups
• Sending promotions from a normal SIM instead of an approved sender ID
• Not keeping any record of who agreed and when
• Ignoring unsubscribes or the 3627 Do Not Call Register
• Writing in Urdu script without checking how many SMS parts it becomes
• Sending late at night or every single day
• Running SMS without a coupon code or tracked link, then guessing whether it worked

You'll find more guides like this on my blog, and more about me on my home page.

FAQ

What is masked SMS in Pakistan?

Masked (branded) SMS shows your business name as the sender instead of a phone number. It's set up through a mobile operator or a licensed SMS provider, and the sender ID needs approval before you can use it.

Is bulk SMS marketing legal in Pakistan?

Yes, if you follow the rules. PTA's spam regulations expect consent before marketing messages, an option to unsubscribe, delivery within normal business hours and sending through approved short codes or alphanumeric IDs. Check PTA's regulations page or your provider for the latest requirements.

How do people stop marketing SMS in Pakistan?

PTA tells subscribers to send "reg" to 3627 to join the Do Not Call Register. They can also report unsolicited messages by sending them to 9000 with the sender's number and a space at the start.

Do I need consent to send promotional SMS to my customers?

Yes. PTA's 2022 amendment says senders using an SMS aggregator should seek individual consent, by message in English and Urdu, before marketing, and keep a record of that consent.

How many characters can one SMS have?

A message in English letters usually fits about 160 characters. Urdu script or emojis switch it to Unicode, which usually fits about 70 characters, and longer messages are split and billed as several SMS.

What time can I send marketing SMS in Pakistan?

The regulations say messages should be received within normal business hours but don't define them. Stick to daytime and early evening on working days, and ask your provider what window they enforce.

Keep reading

• Abandoned cart emails: timing, templates and discounts for Shopify and Klaviyo
• Email marketing for small businesses: the 5 emails to start with (with templates)
• WhatsApp Business catalogue: how to set it up and sell without a website
• Click-to-WhatsApp ads: how to turn chats into sales
• WhatsApp templates to ask customers for Google reviews (English + Roman Urdu)
• WhatsApp broadcast lists vs marketing messages: how to message customers without getting blocked
• Google Analytics 4 for small business owners: the 5 reports worth checking
• See all posts on the blog
• Back to my home page