Spam or Phishing Risk Detected

Why This Rejection Happens

This code ("Opt-out Workflow Error" in some systems, or "Spam/Phishing Risk") indicates your campaign samples or website look like a scam. The carrier algorithms or human reviewers flagged your content as deceptive, likely due to public URL shorteners, "urgent" language, or requests for sensitive data.

• Using `bit.ly` or `tinyurl.com` links (Strictly prohibited).
• Messages like "Your account is locked. Click here." (Phishing pattern).
• Requests for passwords or social security numbers.
• Website domain was registered < 30 days ago (New domain risk).

Root Cause Analysis

Primary Triggers

• Link Obfuscation: Using public shorteners hides the destination, which is a classic phishing tactic. Carriers block these at the network level.
• High-Pressure Tactics: Messages that create false urgency ("Act NOW or lose your account") are flagged as potential fraud.

Step-by-Step Remediation

Replace Public Shorteners

Change all `bit.ly` links in your sample messages to full `https://brand.com/page` links. If you need shortening, use a branded short domain owned by you.

De-Risk Language

Rewrite samples to sound informational, not alarming. Remove "Urgent," "Final Notice," or requests for personal info.

Pre-Resubmission Checklist

• I have removed all `bit.ly`, `tinyurl`, or `goo.gl` links.
• My samples do not ask for passwords or SSNs.

Fix It Faster

Scan your content for spam triggers.

Look Like a Brand, Not a Bot

Using branded links and professional language is key to passing 10DLC vetting.

What reviewers check for code 30884

Code 30884 is reported as "Spam or Phishing Risk Detected". Reviewers and carrier filters look for signals of spam, phishing and deceptive marketing: urgency and fear tactics, prize or giveaway claims, requests for credentials or payment details, misleading sender identity, obscured links and offers that are too good to be true. Any of these in samples, the description or the website can trigger rejection.

Where code 30884 comes from

Code 30884 is one of the brand and campaign registration errors Twilio returns in its 30xxx error range when vetting fails. Other CSPs report the same underlying problem under their own reason codes, so the remediation below applies on any platform. It is marked High severity: it blocks approval, but it is fully fixable by correcting the submission and resubmitting.

Sample message

Rejected:

URGENT: Your account is locked! Verify now: bit.ly/acct-fix

Approved:

Ostrander & Lee Law: We noticed a sign-in from a new device. If this wasn't you, call us at the number on our website. Reply STOP to opt out.

Fix and verify before resubmitting

1. Remove urgency language such as "act now", "final notice" or "your account will be closed".
2. Remove prize, gift card and free-money claims unless they are real and fully described.
3. Never ask for passwords, card numbers or codes by text.
4. Use full branded HTTPS links and name the brand at the start of every message.
5. Make the website show real products, pricing and contact details.
6. Resubmit with a note that references code 30884 (Spam or Phishing Risk Detected) and lists each change made.

Sample resubmission note

Many CSPs let you add a note for the reviewer when you resubmit. A short, specific note shows what changed and speeds up the second review. Example for Ostrander & Lee Law:

Ostrander & Lee Law corrected the deficiency reported as code 30884 (Spam or Phishing Risk Detected). Changes made: remove urgency language such as "act now", "final notice" or "your account will be closed"; remove prize, gift card and free-money claims unless they are real and fully described; never ask for passwords, card numbers or codes by text. All URLs, keywords and auto-replies were re-tested from an external network before this resubmission, and the campaign text now matches the live opt-in exactly.

Common mistakes that keep code 30884 coming back

• Copying aggressive marketing copy into samples.
• Using generic sender wording like "Customer Service" with no brand.
• Linking landing pages that collect personal data without context.

Related rejection codes

• Code 30885: High Risk or Deceptive Marketing
• Code 2131: Verbal Script Missing STOP Instructions
• Code 2128: Opt-in Form Missing HELP Instructions
• Code 2127: Verbal Script Missing STOP Instructions
• Code 2126: Opt-in Form Missing STOP Instructions
• Code 2124: Verbal Script Missing Frequency Disclosure

Frequently asked questions about code 30884

Our offer is genuine. Why code 30884?

Reviewers judge how the message reads. Rewrite it with the brand name, a clear offer and a branded link, and remove pressure language.

Can security alerts mention account access?

Yes, but they must not ask for credentials or link to login pages from unknown domains.

Legal Disclaimer: Code 30884 protects consumers from fraud. Ensure your messaging practices align with anti-phishing guidelines.

© 2025 MyTCRPlus. All rights reserved.