xpay✦ Commerce
Directory
WooCommerce plugins
Fast2SMS – OTP Login & SMS Notifications
Fast2SMS – OTP Login & SMS Notifications
Free OTP login & checkout OTP, WhatsApp/SMS order alerts, abandoned cart recovery, COD verification and bulk campaigns for WordPress & WooCommerce.
Will this break my store?
What the WordPress.org registry says about keeping Fast2SMS – OTP Login & SMS Notifications running.
Tested to 7.1.3
Tested against the WordPress branch in use today.7 days ago
7.4
Your host must be running at least this version.5.8
2
Maintenance & trust
Scored on how Fast2SMS – OTP Login & SMS Notifications is looked after — not on how many stores run it.
Maintenance
35 / 35WordPress compatibility
20 / 20Support responsiveness
Not enough dataMerchant satisfaction
Not enough dataListing transparency
10 / 10Ratings
No one has rated this plugin on WordPress.org yet. That is a statement about the ratings page, not about the plugin — plenty of well-kept plugins never collect them.
Add OTP login, checkout OTP verification, WhatsApp and SMS order notifications, abandoned cart recovery, COD verification and bulk campaigns to WordPress and WooCommerce with the official Fast2SMS plugin.
The plugin is completely free. Bring your own Fast2SMS API key — messages are billed to your own Fast2SMS wallet at your account rates, and delivery reports stay in your own Fast2SMS panel. No monthly fee, no per-site licence.
WooCommerce order notifications — 25+ events
- Order placed, pending payment, payment received, processing, on hold, completed, cancelled, refunded, partially refunded, failed and customer notes
- Shipped, delivered and partially shipped — the statuses set by shipment-tracking plugins
- Custom order statuses detected automatically: every status registered by your courier or workflow plugin (In Transit, Out for Delivery, RTO, Packed…) gets its own automation with its own template
- Pending-payment reminder with a pay-now link that cancels itself once the order is paid
- COD order alerts, one-tap COD OTP verification link to cut RTO, and a COD-to-Prepaid nudge inviting COD customers to pay online
- Abandoned cart recovery with a configurable delay
- Review request a set number of days after the order is completed
- Back-in-stock alerts — customers subscribe on out-of-stock products and are messaged when you restock
- Welcome message for new customers, and an optional admin copy of every message
- Admin alerts for new orders, low stock and out-of-stock products
Templates, variables and previews
- SMS, WhatsApp, or both per event — pick approved DLT / WhatsApp templates straight from your Fast2SMS account with a searchable picker and variable mapping
- 25+ built-in variables: customer, order, items, totals, coupon, shipping method, pay link, order-status link and more — plus any order meta key as a custom variable (tracking IDs, custom checkout fields)
- WhatsApp media headers (image, video, PDF) with an auto-generated PDF invoice you can attach with
{invoice_url} - WhatsApp dynamic URL button variables — templates whose Visit-website button carries a variable are mapped with a dedicated button-variable field
- Live SMS and WhatsApp phone previews while you configure, and a one-click test send to your own number
OTP everywhere
- Login with OTP on the WooCommerce login form and wp-login.php, with account creation for new numbers
- Phone verification on signup/registration
- Checkout OTP verification: the customer must verify their billing mobile number before the order is placed — works with every payment gateway, box pre-filled with the billing number, your own title and colors
- One-tap COD order verification after purchase
- OTP verification on Contact Form 7 (
[fast2sms_otp]tag), WPForms and Elementor Pro Forms ([fast2sms_otp_verify]) [fast2sms_otp_login]shortcode for any page or page builder- Polished OTP screen: masked number (“OTP sent to 98XXXXXX10”), Edit number, resend countdown, light/dark theme, your accent color and corner style
- Works with Smart OTP on SMS or WhatsApp (with automatic fallback), including OTP templates with extra variables
- Server-side protection: per-phone and per-IP send limits, attempt caps, OTP expiry and single-use verification tokens
Bulk campaigns
- Send an approved template to all customers, all users, or a pasted/CSV list — immediately or scheduled
- Queue-based sending with automatic retries, do-not-send list respected, full logs
Consent, admin alerts and data
- Opt-in consent checkbox at checkout and a do-not-send list for marketing messages
- Up to 10 admin numbers for alerts; admin SMS/WhatsApp alert on form submissions; low-balance email alert
- Wallet balance and SMS count in the dashboard header, 30-day stats
- Message logs with masked phone numbers, one-click retry and CSV export
- Phone numbers and API key encrypted at rest (AES-256-GCM), automatic data retention purge, WordPress privacy export/erase support
- WooCommerce HPOS compatible; instant delivery via a real cron URL or WP-CLI (
wp fast2sms worker), with WP-Cron as the fallback
Works without WooCommerce too — OTP login, form OTP, form alerts and campaigns run on plain WordPress. WooCommerce-only features light up automatically when WooCommerce is installed.
Requirements
- A free account at fast2sms.com with your own API key
- For SMS: approved DLT templates in your Fast2SMS panel
- For WhatsApp: approved WhatsApp templates in your Fast2SMS panel
- For OTP: an OTP ID created in your Fast2SMS panel (Smart OTP section)
- Target market: India (10-digit Indian mobile numbers)
Guides & documentation
- Complete setup guide — every feature, step by step
- OTP login for WordPress and for WooCommerce
- SMS & WhatsApp order notifications and WhatsApp-only setup
- WhatsApp OTP with SMS fallback
- DLT registration explained for store owners
- Bulk SMS campaigns from WordPress
- WhatsApp Business API setup
External services
This plugin connects to the Fast2SMS API (https://www.fast2sms.com) to send SMS/WhatsApp messages, send/verify OTPs, fetch your approved templates and read your wallet balance. Your API key and the recipient phone numbers of messages you configure are sent to Fast2SMS for this purpose. See the Fast2SMS privacy policy and terms.
No. You bring your own Fast2SMS API key; message costs are billed by Fast2SMS to your own wallet at your account’s rates.
Yes. OTP login, registration OTP, form OTP, form submission alerts and bulk campaigns work on plain WordPress. Order notifications, checkout OTP, COD verification, abandoned cart recovery and back-in-stock alerts require WooCommerce and unlock automatically when it is installed.
Yes. Turn on Fast2SMS → OTP & Login → Checkout OTP verification. A “Verify your mobile number” box appears below the billing details on the classic (shortcode) checkout, pre-filled with the billing number, and the order is only accepted once that exact number has been verified — before any payment gateway is called. You can skip it for logged-in customers, give the box its own title and colors, and choose its position (below billing details, just above the payment options, above the order summary, top of the page, or anywhere via the [fast2sms_checkout_otp] shortcode).
Yes, automatically. Every custom order status registered on your site (In Transit, Out for Delivery, RTO and so on) appears as its own automation card in the Automations tab — just pick a template for it.
Yes. Add the order meta keys (for example a tracking number saved by your shipping plugin) under Settings → Custom variables and they become {variables} in every order automation.
Contact Form 7, WPForms and Elementor Pro Forms — both for OTP verification and admin submission alerts.
Phone numbers, message variables and your API key are encrypted at rest with AES-256-GCM. Phones are masked in all screens and logs, and old records are purged automatically on a schedule you control.
Indian DLT regulations require pre-approved sender IDs and templates for SMS. Manage them in your Fast2SMS panel; the plugin fetches your approved templates for one-click selection.
India only. Fast2SMS sends to Indian 10-digit mobile numbers with full DLT compliance as required by TRAI. If your customers are outside India, this plugin is not for you.
For SMS, yes — it is mandatory in India for every business. Fast2SMS provides free dedicated DLT support to get you registered. WhatsApp messages need no DLT, only Meta template approval. DLT explained in simple English.
Yes. Create a Smart OTP in your Fast2SMS panel with WhatsApp as the primary channel and SMS as automatic fallback (or the other way around). The plugin follows whatever the OTP ID is configured for — no code changes.
Create a free account at fast2sms.com and copy the key from the Dev API section. Paste it into the plugin dashboard and it is validated live.
Plugin details
Tags on WordPress.org
