To improve the security of civil registration services, several Disdukcapil offices have started implementing two-factor authentication (2FA) using OTP delivered via SMS Masking.
Why SMS Masking is Selected for OTP 2FA in Disdukcapil?
SMS Masking allows OTPs to be sent with a registered and verified sender ID, making it easy for citizens to distinguish official messages from potential phishing attempts. The service is also tightly integrated with local telecom infrastructure, ensuring high delivery rates even in areas with limited cellular coverage.
In addition to SMS Masking, some Disdukcapil agencies are testing WhatsApp Business API as a backup channel to send OTPs when SMS service is disrupted, creating a more resilient omnichannel approach.
FAQ
Is OTP via SMS Masking secure? Yes, because the sender number is registered and cannot be spoofed by unauthorized parties, and each OTP has a short validity period (typically 30‑60 seconds).
What if a citizen does not receive the OTP? Disdukcapil activates a fallback to WhatsApp Business API or Voice OTP, allowing users to verify their identity without needing to visit the office in person.