BankSorter
Loans Personal Accounts Savings Accounts Financial Apps Blog Rankings Loans Personal Accounts Savings Accounts
GUIDE

How One-Time SMS Codes Work for Online Payments

What is the SMS code for online card payments, how do you enter it, and why must no one ever ask for it by phone? Explained simply for beginners.

IS
Ingrid Schneider · 13 July 2026 · 5 min read
How One-Time SMS Codes Work for Online Payments

How the one-time SMS code works for online payments

Have you ever paid online with your bank card and suddenly received a text message with a row of numbers? This message is not a mistake and not a coincidence. It is a normal part of a secure online payment. In this guide we explain exactly what this code is, how long it lasts, and how to enter it correctly. Don't worry: it is much simpler than it sounds at first.

What is this one-time code?

When you pay online with your card, your bank wants to be sure that it is really you making the purchase, and not someone else using your card number. That is why the bank sends you a short text message, called an SMS, with a row of numbers. This row of numbers is called an SMS code or TAN. TAN simply means: a number that is valid only once, for this one single purchase. You then enter this code on the payment page to confirm the purchase.

Where does the SMS come from and what does it look like?

The SMS comes directly from your bank to your phone, to the phone number you gave your bank. The sender is often shown as your bank's name, for example "Sparkasse" or "Volksbank", and sometimes just a number instead of a name. The message usually contains a sentence such as "Your confirmation code is 483920" or something similar. Sometimes the payment amount is shown too, so you can check that the sum is correct.

Step by step: how to enter the code correctly

  1. Pay as usual with your card in an online shop, for example by entering your card number.
  2. Wait a moment. The website automatically redirects you to a page belonging to your bank.
  3. Check on this page whether the amount shown matches your purchase.
  4. Switch briefly to your text messages on your phone. There you will find the new SMS from your bank.
  5. Read the row of numbers from the SMS calmly.
  6. Switch back to your bank's payment page.
  7. Tap the empty field on the screen, where it says "Enter code" or "Confirmation code".
  8. Enter the row of numbers from the SMS exactly, digit by digit.
  9. Tap the button labelled "Confirm" or "Complete payment".
  10. Wait until a green confirmation or a tick appears. Then your payment has been successful.

How long is the code valid?

This code is only valid for a short time, usually just a few minutes, often between three and ten minutes. After that it automatically becomes invalid. So enter the code promptly, as soon as the SMS arrives. If the time has run out, there is no need to worry: you can simply start again, and the bank will send you a new code.

Why no one but you must ever learn this code

This code is like a one-time key meant only for you. It belongs only in the input field on your bank's genuine payment page. No one else must ever learn this code — not over the phone, not by replying to the text, not by email.

Scammers know this, and that is why they sometimes call. They pretend to be an "employee of your bank" and might say: "Good day, this is your bank. We have noticed a suspicious purchase on your card. To stop the payment, please tell me the code you just received by text." This sounds urgent and frightening. That is exactly the scammers' intention.

A real bank will never ask you for this code over the phone. If anyone asks for it, no matter how friendly or urgent they sound, hang up immediately. Then call your bank back yourself, using only the phone number printed on the back of your bank card.

What to do if something goes wrong

Has no SMS arrived? First wait two to three minutes, as the message sometimes takes a little time. Check that your phone has signal. If nothing has arrived after that, cancel the purchase and start again from the beginning.

Did you make a typing mistake while entering the code? That is not a problem. Simply enter the code again calmly. As long as you have not tapped "Confirm", nothing happens.

Did someone on the phone ask for your code? Hang up. Do not share the code with anyone. Then call your bank using the number on your card and report what happened.

Summary — the key points at a glance

If you are thinking about a new current account with a secure app, you can calmly compare offers at BankSorter.com.

Checklist
The SMS code confirms that it is really you paying online.
The SMS comes directly from your bank to your phone.
Enter the code only on the payment page, nowhere else.
The code is only valid for a few minutes.
No one on the phone must ever ask you for this code.
If you get a suspicious call: hang up and call back yourself.
Ready to find the best offer?
Compare current bank offers and find the best one for you.
See the ranking →
IS
Ingrid Schneider
Digital Banking Advisor