Validate OTP Code (Laravel SDK) - Hypersender

Check whether an OTP code is correct, unexpired, and unused using the Laravel SDK. Use this after the user submits the code they received via WhatsApp.

Parameters

Field	Type	Required	Description
chatId	string	yes	WhatsApp chat ID that received the OTP.
code	string	yes	The OTP code entered by the user.

Validate the code

use Hypersender\Hypersender;

$response = Hypersender::otp()->validateCode([
    'chatId' => '[email protected]',
    'code' => '439713',
]);

if (($response['success'] ?? false) && (($response['data']['status'] ?? '') === 'validated')) {
    // proceed with login or protected action
}

Common failure reasons

Code does not match the active OTP
Code expired based on expires value
Code already used (single-use)
No active OTP found for the chatId

Implement rate limits on validation attempts (e.g., max 3-5 tries) to block brute-force guessing.

Next

For passwordless login flows, try Generate OTP Link to avoid manual code entry.

Last modified on November 7, 2026