DigitRelay sits between you and every signup form on the internet. Here's exactly how the system works — and the controls that keep it safe.

Create your account in one click with Google. We never ask for a password. The very first user on the platform becomes the administrator automatically.
Choose Starter, Pro, or Business. Plans differ by included inbound SMS, number of dedicated lines, and message-retention window. You can upgrade, downgrade, or cancel at any time.
Pick an area code or vanity pattern. Your number is provisioned in seconds and locked to your account — nobody else can use it.
Whenever a service sends an SMS to your number, it appears instantly in your encrypted inbox. We auto-detect 4–8 digit codes using a battery of regex patterns and highlight them in brand blue.
One click copies the code to your clipboard with a toast confirmation. Codes are masked in previews to keep over-the-shoulder snoops at bay.
Toggle real-time email delivery in Settings. Every inbound SMS lands in your email within seconds — perfect when you're away from the dashboard.
We parse every inbound SMS through a layered regex pipeline that handles every common OTP format: 6-digit raw, 123-456 with hyphen, "Code: 482910", "OTP 7891", and more.
Every message body is encrypted with Fernet (AES-128 + HMAC) before it touches the database. Admins cannot read plaintext from raw exports.
Inbound SMS callbacks are cryptographically verified against the carrier's signing key. Spoofed or replayed requests are rejected with HTTP 403.
Velocity rules, suspicious-keyword scoring, multi-service abuse, and new-account-burst detection auto-suspend or hold accounts crossing thresholds.
Every administrative action (status changes, credential updates, manual assignments) is logged with actor, timestamp, target, and metadata. Exportable.
No. DigitRelay is a privacy tool for legitimate authorized verifications on services you own. Fraud, ban evasion, mass signups, financial scams, and any use prohibited by carriers or law trigger automatic suspension and may be reported to law enforcement.
Sub-second from the carrier delivering the SMS to our inbound webhook. Email forwarding adds 1–3 seconds depending on your email provider.
We assign genuine local phone numbers, not VOIP shortcodes. Most major platforms accept them, but a small minority (some banks, some government services) block any non-residential line. We can't guarantee compatibility with every service.
Yes. Release any number from the Numbers page — the number returns to the pool and you can purchase a replacement within your plan's limit immediately.
Your numbers are released, your inbox remains readable for a 7-day grace period, then messages are deleted per the plan's retention setting. Audit logs are retained for 13 months for compliance.
Never sold. We share with our SMS carrier and payment processor strictly to deliver the service, with law enforcement only when compelled by court order, and within our own admin team for abuse review.
Start in 60 seconds. Cancel anytime.