Quick answer: A short code lookup identifies the business behind a five- or six-digit texting number. The fastest reliable method is to reply HELP to the code. CTIA rules require registered senders to answer with their program name and contact details, even if you never subscribed. No reply is itself a warning sign.
A short code lookup is what you need when a five- or six-digit number texts you and nothing in the message says who sent it. Americans exchanged nearly 2.2 trillion SMS and MMS messages during 2024, according to CTIA’s 2025 Annual Survey, and a large share of the automated ones arrive from codes most people never recognize. The rules governing those codes are public. CTIA’s Short Code Monitoring Handbook, effective August 2023, sets out exactly what a sender must tell you when you ask. This guide covers how to run the lookup, how to read the result, and when you should not reply at all.
TL;DR
- A short code lookup identifies the business behind a five- or six-digit texting number. The fastest reliable method is to reply HELP.
- CTIA rules require registered senders to answer with their program name and contact details, even if you never subscribed.
- No reply is a warning sign. It means the code is non-compliant or the text did not come from a registered short code.
- If a message asks you to click a link, pay, or confirm account details, do not reply. Forward it to 7726 instead.
- Only 5 and 6 digit codes are covered by the US registry. 10-digit senders are less reliable, and 11-digit or email-style senders are unverified.
- Reply STOP to opt out. END, CANCEL, QUIT and UNSUBSCRIBE must all be honored, in any capitalization.
First, Identify What Kind of Number Texted You
Before any short code lookup, check the digit count. It tells you which rules apply and which method will work.
| Digits | What it is | How to identify the sender | Can you reply safely? |
|---|---|---|---|
| 5 to 6 | Registered short code | Reply HELP. A registered sender must respond with its name | Yes, if the message looks legitimate |
| 10 | Standard long code, often A2P 10DLC | Reply HELP, or search the number. Identification is less reliable | Usually, with more caution |
| 11 or more | International or gateway-originated | Treat as unverified. No US registry covers it | No |
| Email-style address | Sent through an email-to-text gateway | No registry lookup exists | No |
Only the first row is covered by the US registry, which is why short code messaging carries more trust than other formats. A2P 10DLC numbers are registered too, but the A2P 10DLC framework records the sender with carriers rather than in a consumer-facing directory, and the same applies to toll-free texting.
How to Run a Short Code Lookup
Reply HELP to the code. This is the method that actually works. CTIA requires message senders to respond to HELP with the program or brand name plus further contact information. Failing to reply is an auditable violation.
Note that you do not need to be a subscriber. The handbook states that short code programs should respond to customer care requests regardless of whether the requester is enrolled. You can ask about a code you never signed up for.
Read what comes back. A compliant reply names the brand and gives you a way to reach a human, usually a toll-free number, an email address, or a support URL.
Check the registry for context. The Short Code Registry, overseen by CTIA and administered by iconectiv, is the authoritative database of registered codes. Its public search is built for businesses leasing codes rather than consumers identifying them, so treat it as a secondary check rather than your first move.
Ready to start texting smarter?
Two-way texting, groups, templates and automation for your team, set up and compliant from day one.
Short Code Lookup Decision Tree: Legitimate or Scam
Here is where most guides give dangerous advice. Replying is safe on a registered code and risky on a suspected scam, because any reply confirms your number is live. Work through this in order.
Does the message ask you to click a link, pay something, or confirm account details? If yes, stop. Do not reply, do not tap the link, and skip to the reporting step below.
Did you ever opt in to anything from this brand? If yes, HELP is safe and will confirm the sender.
If you did not opt in and nothing looks urgent, reply HELP. A legitimate code answers with a name. Impersonating another brand is a top severity violation, so a compliant reply is meaningful evidence.
Did you get a reply? A named brand and contact details mean the code is registered and behaving. Silence, or a reply with no company name, means the code is non-compliant, or the message did not come from a registered short code at all.
Do you want it to stop? Reply STOP. Variants including end, cancel, quit, and unsubscribe must all be honored, and capitalization does not matter.
Was it a scam? Forward the message to 7726, which spells SPAM. The FCC’s guidance on unwanted texts confirms most carriers support this. You can also report abuse to the registry directly.
What to Do When a Short Code Lookup Comes Back Empty
Silence is information. A registered code that ignores HELP is failing a requirement CTIA audits weekly, and a code that answers without naming a brand is failing another. Either way, the sender is not operating the way a legitimate program does.
Two other explanations are worth ruling out. The message may not have come from a short code at all, because spoofed sender details can make a text appear to originate somewhere it did not. Or the number may be a long code dressed up to look official, which is one of the more reliable signs of a fake text message.
What Short Code Lookup Means If You Send Business Texts
Every consumer running this lookup on your number is testing your compliance. Answering HELP correctly is not optional, and neither is the rest of the flow.
Your HELP reply must name your brand. Program name or product description, plus contact information. A generic auto-reply fails an audit.
Answer everyone, not just subscribers. The obligation applies regardless of enrollment.
STOP must work on the first attempt. An incorrect response to STOP is a severity zero violation with an immediate cure date.
Never impersonate another brand. Content impersonating a third party requires all messaging on the program to cease.
Consent still governs everything. Understanding what opt-in means in text messaging determines which of the three CTIA consent tiers your program needs. This is factual guidance, not legal advice.
How SendHub Keeps Your Number Identifiable
SendHub handles the keyword responses and consent records that a lookup tests.
- Text keywords with automatic HELP and STOP handling built in
- Templates that keep brand identification consistent in every reply
- Two-way texting so a customer asking who you are reaches a person
- SendHub Inbox giving the team one view of every inbound question
- Contact database holding consent records and audit logs per contact
- Analytics and reporting to spot spikes in opt-outs and HELP requests
Ready to start texting smarter?
Two-way texting, groups, templates and automation for your team, set up and compliant from day one.
Frequently Asked Questions
It is the process of identifying which business owns a five- or six-digit texting number. Typically, replying HELP is the fastest route.
The Short Code Registry maintains the official database. However, its search is built for businesses leasing codes rather than consumers identifying senders.
On a legitimate code, yes. However, never reply to a message asking you to click a link or confirm account details.
Treat that as a warning sign. Since CTIA requires a response, silence suggests the sender is non-compliant or not a registered code.
Not reliably. Instead, forward the message to 7726 so your carrier can investigate it.
Reply STOP. Additionally, end, cancel, quit, and unsubscribe must all be honored by a compliant sender.
No. Specifically, CTIA guidance says programs should answer customer care requests regardless of enrollment.
Five or six. Meanwhile, a ten-digit sender is a long code and falls under different registration rules.
It is difficult because codes are leased and audited. Nevertheless, scammers often spoof or imitate them from other number types.
Forward it to 7726 and file with the FCC. Furthermore, the Short Code Registry accepts abuse reports directly.
Get Started
A short code lookup usually takes one text and four letters. If nothing comes back, that silence tells you as much as a name would. Book a demo with SendHub to see how keyword handling keeps your own number identifiable.
