66886 is a five-digit short code that Malaysian businesses use to send one-way SMS: verification codes, appointment reminders, delivery updates and promotions. The number tells you which route the message took, not who wrote it. The sender is the business named inside the message.
In Malaysia an SMS arrives either from a registered brand name (an alphanumeric sender ID such as a bank's name), from an ordinary mobile number, or from a short code: a five-digit number leased from the mobile operators for sending at volume. 66886 is a shared short code. Many businesses send through it at the same time, which is why messages from very different companies can all show up in the same 66886 thread on your phone.
HantarSMS customers send from 66886. Other services on the same operator route may use it too, so a message from 66886 is not necessarily sent through us. Either way, the company responsible for the message is the one named in its text, not the owner of the number.
| Message looks like | What it usually is |
|---|---|
| A 4–6 digit code, "valid for 5 minutes" | A login or sign-up verification code (OTP). Someone, normally you, entered your number on a website or app. |
| Date, time and a place | An appointment or booking reminder from a clinic, workshop, salon or service you used. |
| Order or tracking number | A delivery or order update from a shop or courier. |
| An offer, a brand name and a link | A promotion from a business that has your number on its customer list. |
If you receive a verification code you did not request, someone typed your number into a sign-up or login form. Usually it is a typo by another user. Do not share the code with anyone who asks for it, including people claiming to be from the company: a genuine company never needs you to read a code back to them.
The short code itself is legitimate: it is leased through the operators and every sending account is tied to a business. That does not make every message on it trustworthy, because the code does not vouch for the content. Treat it the way you would treat an email:
Our terms forbid phishing, impersonation and sending to people who did not agree to receive messages. If a message from 66886 looks like a scam, send it to us (the WhatsApp button at the bottom of this page) with the date and time you received it. If it was sent through HantarSMS we can identify the sending account and act on it. You can also complain to the MCMC through its official complaints portal.
66886 is send-only. A reply to it does not reach the business that wrote the message, and it does not reach us either, so texting STOP will not take you off a list. To stop promotional messages, contact the business named in the message and ask it to remove your number. Under the PDPA a business must stop using your personal data for direct marketing when you tell it to (we explain the rules businesses have to follow in our PDPA guide). If it keeps sending after you have asked, report it to us with a copy of the message.
Blocking 66886 on your phone works, but it blocks every business on the shared code at once, including verification codes you may need later for banking, e-wallet or online-shopping logins.
If you landed here because you want your own customers to receive messages like these, the shared short code is the quickest way to start: no sender ID registration and no waiting period, from RM0.20 per segment with no monthly fee. Because recipients cannot reply, every message should name your business and say how to reach you. See short code SMS in Malaysia for how short codes compare with branded sender IDs, and OTP SMS if you need verification codes.
66886 is a shared five-digit short code leased through the Malaysian mobile operators. Many businesses send through it, including HantarSMS customers, so the sender of any single message is the business named in its text.
Because the code is shared. Your phone groups messages by the number they came from, so verification codes, reminders and promotions from unrelated businesses all end up in the same 66886 thread.
No. 66886 is send-only, so a reply, including STOP, reaches neither us nor the business that sent the message. Contact the business named in the message directly.
Usually not: someone entered your number into a sign-up or login form, often by mistake. Do not share the code with anyone. If it keeps happening for the same service, change that account's password.
If you lost money or gave away banking details, call the National Scam Response Centre on 997 and your bank immediately. Then send the message, with the time you received it, to HantarSMS on WhatsApp so we can check whether it was sent through our platform.
Create an account, claim RM1 of trial credit on WhatsApp, and send a real message to your own phone before you top up. Got a message you want to report? Use the WhatsApp button and paste it in.