Hospital SMS in India: DLT registration, templates and what still works

DLT registration for SMS is mandatory for any hospital sending commercial SMS in India. Register your entity on an operator DLT portal, register headers and templates in the right category (usually service implicit for appointments, OTPs and reports), whitelist every URL and callback number, bind your telemarketer chain, and send promotions only with consent and within permitted hours.

SMS is the least glamorous channel in hospital marketing and one of the most important. Appointment confirmations, OTPs, report-ready alerts and bill links still go by SMS because it reaches every phone, needs no app and needs no internet connection. It is also the channel most likely to break without warning, because India’s commercial SMS system runs on rules that have tightened repeatedly since 2018.

New to the topic? Start here: Healthcare digital growth sets out the reading order.

If your appointment reminders suddenly stop arriving, or your new campaign template gets rejected, the cause is usually DLT: the registration system every business sender in India must use. This guide explains how DLT registration for SMS works, which message categories a hospital should use, what TRAI changed in 2024 and 2025, what hospital SMS marketing can still realistically do, and how to measure it.

This is a practitioner’s guide, not legal advice. TRAI rules and operator implementations change, so confirm current requirements with your SMS provider and your legal or compliance team.

What is DLT registration for SMS, and why does a hospital need it?

DLT stands for Distributed Ledger Technology. Under TRAI’s Telecom Commercial Communications Customer Preference Regulations, 2018 (TCCCPR 2018), telecom operators run blockchain-based registries on which every business sender (called a Principal Entity, or PE) must register itself, its sender IDs (headers), its message templates and, where needed, its consent records. When your SMS provider pushes a message, the operator checks it against the ledger. If the entity, header or template does not match, the message is blocked.

Any hospital, clinic or diagnostic centre that sends SMS from a branded sender ID through a bulk SMS provider needs DLT registration. That includes OTPs from your app, appointment confirmations from your HIS, and report alerts from your lab system. If you use a vendor’s system, check whether messages go out under your entity registration or theirs. In most cases you want your own.

The current regulations, including the 2025 amendments, are on TRAI’s website.

How does the DLT registration process work?

The process has four main steps. Each operator (Jio, Airtel, Vi and BSNL) runs its own DLT portal, but registering on one is generally enough because the ledgers are shared across operators.

1. Entity registration

The hospital registers as a Principal Entity on one operator’s DLT portal. You typically need the legal entity name, PAN, GST registration or other business proof, an authorised signatory and a letter of authorisation on letterhead. There is a registration fee, which varies by portal. Once approved, you get an Entity ID, which must accompany every message you send. A hospital group with multiple legal entities may need a separate registration for each.

2. Header (sender ID) registration

The header is the name that appears as the sender, for example a six-letter abbreviation of your hospital name. Alphabetic headers are used for service and transactional messages; promotional messages go from a numeric header. Choose a header that patients will recognise. Since 2025, TRAI requires commercial SMS headers to carry a suffix showing the message type: -P for promotional, -S for service, -T for transactional and -G for government, according to TRAI’s announcement of the TCCCPR amendments. Patients will see something like HOSPNM-S on an appointment reminder.

3. Consent template registration (if needed)

If you plan to send service explicit or promotional messages that rely on explicit consent, you register a consent template describing what the customer is agreeing to. Consent is then collected and recorded in a verifiable way, typically confirmed through an OTP or similar flow tied to the DLT system. Service explicit content templates must be linked to a consent template, or they are rejected.

4. Content template registration

Every message you send must match a registered content template. Fixed text stays fixed; variable parts (patient name, date, doctor name, link) are marked with the {#var#} placeholder. The template is approved for a specific header and category. If a sent message deviates from the approved template, even by a few words, operators can block it.

5. Telemarketer chain binding

Your SMS provider is a telemarketer (TM) on DLT. From 1 December 2024, TRAI required the full path of each message from the Principal Entity through every telemarketer to be declared and bound on DLT, so commercial messages are traceable. Messages with an undeclared or mismatched chain are rejected. If you change or add providers, update the chain on the portal before switching traffic.

What are the SMS categories, and which should a hospital use?

DLT recognises four template categories. Choosing the wrong one is the most common reason templates are rejected or messages are blocked.

The 2025 amendments sharpened the definitions. TRAI describes transactional messages as those sent in response to a customer-initiated transaction within 30 minutes, and limits consent given to complete an ongoing transaction to seven days. Implicit consent for service messages lasts for the duration of the customer relationship. Customers can block promotional messages but cannot opt out of genuine service and transactional messages, which is why misclassifying a promotion as a service message is treated seriously.

What did TRAI change in 2024 and 2025?

Several directions and amendments since 2024 affect what hospitals send and how.

This connects directly to Health camps that bring patients: planning a medical camp that works, Ayurveda and homeopathy clinic marketing: what the rules allow and Marketing teleconsultations: how Indian clinics fill online slots.

URL, APK, OTT link and callback number whitelisting

Through a direction dated 20 August 2024, TRAI required that URLs, APKs and OTT links in SMS must be whitelisted against the sender’s templates. From 1 October 2024, senders who had not whitelisted their links could no longer send messages containing them. Industry implementation also extended to callback numbers in templates. For hospitals this means:

• Every domain you link to (your website, booking page, report portal, payment page) must be whitelisted with your provider and on DLT.
• Generic public URL shorteners are a problem. Use a whitelisted branded short domain, or whitelist the exact links.
• Callback numbers in templates (for example, your appointment helpline) should be declared.
• Links in variables are restricted. Put the base URL in the fixed template text where possible.

Header suffixes and categories

The February 2025 amendments introduced the -P, -S, -T and -G suffixes, a separate government category, mandatory opt-out in promotional messages, and a rule that a sender cannot seek consent again from a customer who opted out for 90 days.

140 and 1600 series for commercial calls

Voice calls follow the same logic. Promotional calls must come from the 140 number series, and service and transactional calls from the 1600 series that TRAI allocated for this purpose. Using ordinary 10-digit numbers for commercial calling risks disconnection and blacklisting. If your contact centre calls patients to confirm appointments, check with your telecom provider which series your outbound numbers should use. The guidance on voice bots and contact centre costs touches on this.

Tighter complaint thresholds and penalties

The complaint window for customers was extended to seven days, and the threshold for action was lowered to five complaints within ten days. A first violation can lead to a 15-day suspension of outgoing services for the sender; repeat violations can lead to disconnection for one year and blacklisting. For a hospital, being cut off from SMS would stop OTPs, appointment confirmations and report alerts at once. That alone is a reason to keep promotional SMS conservative.

Scrubbing and DND preferences

Before delivery, operators scrub messages against each recipient’s preferences. People can block all promotional communication or choose categories through the 1909 short code, their operator’s app or the TRAI DND app. Promotional messages to people who have blocked them do not deliver. Service explicit and promotional messages backed by valid explicit consent can still reach them.

Timing for promotional SMS

Promotional SMS is restricted to daytime hours, commonly implemented as 9 am to 9 pm, with providers holding or dropping messages outside that window. Service and transactional messages are not time-restricted, but common sense applies: an appointment reminder at 11 pm helps nobody. Confirm the exact window your provider enforces.

What should a hospital use SMS for?

SMS is most valuable where reliability matters more than richness. In my experience, these are the use cases worth getting right.

1. Appointment confirmations. Sent immediately after booking, with date, time, doctor, location and a whitelisted link to reschedule.
2. Appointment reminders. One the day before and, for morning slots, one a few hours before. Reminders reduce no-shows and matter for cost per honoured appointment.
3. OTPs. For patient app login, portal access, payment verification and report downloads.
4. Reports ready. A short alert with a secure link. Never put results or diagnoses in the SMS itself.
5. Bills and payment receipts. Amount, reference number and a link to the receipt.
6. Discharge and follow-up. Follow-up appointment date and the helpline number. See automating patient follow-up after OPD.
7. Camp and event invitations. Only to people who opted in, using the right category.
8. Health check reminders. Annual check reminders to past patients who consented. Pair with a clear offer page; see marketing health check packages.

The first six are service messages and form the bulk of hospital traffic. The last two drift towards promotion and need explicit consent or a promotional template.

What do good hospital SMS templates look like?

Good templates are short, specific and boring in the best sense. They identify the hospital, state the facts, give one action and avoid anything that looks like a promotion inside a service message. Here are illustrative examples in DLT format, with {#var#} marking variables. Your provider may suggest adjustments.

Template writing rules

• Keep the hospital name and the base URL in the fixed text, not in a variable.
• Use as few variables as possible; templates with many variables get scrutinised and are open to misuse.
• Do not include results, diagnoses or sensitive clinical details. Use a secure link with login.
• Do not add offers or “book a health check” lines to service templates.
• Keep within one or two SMS segments where possible to control cost.
• Maintain a template register: template ID, category, header, owner, the system that sends it and the date of last review.
• Any marketing claim must also follow medical advertising rules; see NMC and ASCI rules for hospital ads.

SMS vs WhatsApp vs RCS: which should hospitals use?

Most hospitals now run SMS and WhatsApp together, and some are testing RCS (Rich Communication Services, the richer messaging format inside Android’s default messaging app). Each has a place.

A sensible default: use WhatsApp as the primary channel for rich, conversational flows, and keep SMS as the guaranteed channel for OTPs and as a fallback when WhatsApp delivery fails. The guide to the WhatsApp Business API for hospitals covers the WhatsApp side in detail. Watch RCS, but do not rebuild your communication stack around it yet.

How does DPDP consent fit with TRAI consent?

TRAI’s rules govern whether a commercial message can be delivered over a telecom network. The Digital Personal Data Protection Act, 2023 governs whether you may process the person’s personal data for that purpose. They overlap but are not the same thing. The DPDP Rules, 2025 were notified on 14 November 2025 with a phased timeline of up to 18 months, and require consent notices that are standalone, clear and specific about purpose.

For hospital SMS, that means:

• Service messages (appointments, reports, bills) are tied to the care the patient asked for. Your notice at registration should still say you will send them.
• Marketing messages (health check offers, new services, camp invitations) need a separate, specific opt-in that you can prove, with a simple way to withdraw.
• Withdrawal of consent must be honoured across systems: if someone opts out of promotional SMS, your CRM, WhatsApp tool and SMS tool should all reflect it.
• Purchased or scraped lists should never be used.

Read DPDP consent for hospital marketing, and use the DPDP consent notice template and the WhatsApp consent flow tool to design opt-ins. This is not legal advice.

How to measure hospital SMS

Most hospitals only look at “messages sent”. That tells you almost nothing. Measure in three layers.

Delivery

• Submission success rate: messages accepted by the provider versus attempted. Drops usually mean template or chain problems.
• Delivery rate: delivered reports versus submitted, by template and by operator.
• Failure reasons: template mismatch, header issues, unwhitelisted URL, DND scrubbing, invalid numbers. Ask your provider for reason codes.
• Latency: time from trigger to delivery, critical for OTPs.

Engagement

• Link clicks on whitelisted tracked links (report views, reschedule clicks, payment clicks).
• Reply or callback volume on the helpline in the template.
• Opt-outs and complaints per thousand promotional messages.

Outcomes

• No-show rate for appointments with versus without reminders.
• Report collection or online view rate after the alert.
• Bill payment time after a payment link.
• Bookings attributed to a health check reminder or camp invitation, using a unique link or code per campaign in your CRM.

Feed these into the same reporting as other channels. If you want a view of where enquiries and bookings leak, the enquiry leakage calculator helps frame the conversation, and healthcare marketing automation covers how SMS fits in automated journeys.

What good looks like

• A single owner for DLT: entity, headers, templates, consent templates, chain binding and whitelisting.
• A template register reviewed every quarter; unused templates retired.
• Delivery above what your provider considers normal for your mix, with failures investigated weekly.
• Service messages that never carry promotions.
• WhatsApp first for rich flows, SMS as the reliable fallback.
• Very low complaint rates and a documented consent record for every promotional recipient.

Mistakes to avoid

• Using public URL shorteners. Unwhitelisted links get messages blocked. Use a whitelisted branded domain.
• Sneaking offers into service templates. A health check discount in an appointment reminder is promotional content. It risks rejection, complaints and penalties.
• Letting vendors register under their own entity. If the vendor relationship ends, your templates and headers go with it.
• Forgetting chain binding when changing providers. Messages fail on the first day of the switch.
• Putting results or diagnoses in SMS. SMS is not secure, phones are shared, and it is a privacy problem.
• Too many variables in a template. Increases rejection risk and invites misuse.
• Sending promotions late at night or to DND numbers without consent. They will not deliver, and complaints add up quickly.
• Ignoring opt-outs across systems. Someone who opted out on WhatsApp still getting promotional SMS is a consent failure.
• Measuring only “sent”. Track delivery, engagement and outcomes per template.
• Calling patients from ordinary mobile numbers for commercial calls. Use the right number series for your call type.

Where SMS fits from here

SMS has lost the marketing role it had a decade ago, and that is fine. Its job now is reliability: getting the OTP, the confirmation, the reminder and the report alert to every patient, every time. Get DLT clean, keep templates honest and categorised correctly, whitelist every link, use WhatsApp for richer conversations, and send promotions only to people who asked for them. Then measure delivery and outcomes like any other channel, and connect the numbers to enquiry to appointment reporting.

Frequently asked questions