Reset of Unused Programmable SMS Geo Permissions on accounts created before April 2019

Twilio has implemented an urgent precautionary measure to protect Programmable Messaging accounts created before April 2019 from possible exploitations of their service by automatically disabling unused SMS Geo Permissions. We’re taking this action to protect customers from potential fraud known as SMS Traffic Pumping. Given the rise of fraud in the ecosystem, we want to help ensure that we minimize potential exploits and reduce the risks faced by our customers. Disabling destination countries your business doesn’t serve or uses infrequently is an additional line of defense against fraudulent activity. See this Help Center article for more information on SMS Traffic Pumping Fraud and how to protect your applications from it.

Why only accounts created before April 2019?

Accounts created during and before March 2019 previously had SMS Geo Permissions enabled globally by default. For our customers’ convenience and protection, Twilio will disable SMS Geo Permissions on a one-time basis for country destinations to which messages have not been sent in the 30 day period from 23 July 2022 to 22 August 2022. This one-time action on accounts will begin on 25 August 2022 and end on or before 9 September 2022.

If needed, you can enable or disable SMS Geo Permissions to any country at any time in Twilio Console by following the steps in this Support Article.