Getting messages into the Gulf: sender IDs, licensed aggregators and the AD marker

Teams that have launched messaging in Europe or North America consistently underestimate the Gulf. The API integration is the same; the path to being allowed to send is not. Sender IDs are registered per operator, promotional traffic is marked and time-restricted, and in Saudi Arabia traffic must pass through a licensed provider. None of this is difficult, but it is serial and slow, and it decides the launch date.

The details below reflect common practice as described by regulators and licensed providers in 2025–2026. Rules change; confirm current requirements with your provider before you plan around them.

Business SMS is overseen by the Telecommunications and Digital Government Regulatory Authority (TDRA). In practice:

• Sender IDs are registered with each operator (e& and du), not in one central registry. Approval from one does not cover the other.
• Promotional sender IDs carry an "AD-" prefix, which providers report has been required since late 2020. Because sender IDs are limited to 11 characters, the prefix leaves eight for the brand.
• Transactional traffic — codes, alerts, confirmations — uses a separate, unprefixed sender ID.
• Promotional sending hours are restricted. Providers commonly cite no promotional SMS between 9pm and 7am.
• Consent must be documented, and the UAE's personal data protection law (Federal Decree-Law No. 45 of 2021) applies alongside telecom rules.

The Communications, Space and Technology Commission (CST, formerly CITC) oversees the sector.

• Licensed providers. Senders contract with an authorised service provider; traffic does not reach operators any other way. This is the constraint that most often surprises a global platform: coverage is not only a commercial matter.
• Registered sender names, supported by documents such as a commercial registration or an authorisation letter. Numeric and unregistered international senders are heavily filtered.
• Promotional sender names carry an "-AD" suffix, per provider guidance, and cannot be reused for service messages. Promotional quiet hours apply; providers quote slightly different windows, so confirm the current one.
• Personal data falls under the Saudi Personal Data Protection Law.

Qatar, Kuwait, Bahrain and Oman each have their own operator-level sender ID processes, documents and lead times. They are broadly similar in shape — register the sender, separate promotional from transactional — but not identical. Plan each as its own workstream.

The same pattern appears in India (DLT registration of headers and templates), Singapore (the SMS Sender ID Registry) and Australia (the SMS Sender ID Register). See 10DLC registration without tears for how these compare.

Order matters more than effort, because several steps cannot start until the previous one has finished.

A European online retailer plans to launch order updates and weekly offers in the UAE and Saudi Arabia in one quarter.

1. Week 1: confirm the route. Their global provider reaches the UAE directly but Saudi Arabia through a licensed local partner — acceptable, but noted as a separate dependency.
2. Weeks 1–2: gather documents: trade licence, letters of authorisation on company letterhead, brand evidence.
3. Weeks 2–5: register four sender IDs: transactional and AD- promotional in the UAE (with both operators), service and -AD promotional in Saudi Arabia.
4. In parallel: add a separate marketing opt-in at checkout, and set promotional sends to respect local quiet hours in each country's time zone.
5. Launch: order updates first on the transactional senders; offers only once the promotional senders are approved.

The integration work took a week. The calendar was set by registration.

Ask one question and listen to the shape of the answer: are you the licensed party in this market, or do you reach it through someone who is?

Both answers can be fine. A provider reaching Saudi Arabia through a licensed partner may deliver very well. But the failure modes differ. A direct licence means the provider owns the regulatory relationship and can escalate. A partner route means a party in the path you have no contract with, whose problems arrive at your desk as unexplained delivery failures. A coverage map is not an answer; a map is not a licence.

• Are you licensed in this country, or do you use a partner? Which partner?
• Which documents do you need for sender registration, and what is your current lead time per operator?
• Do you enforce promotional quiet hours and the AD marker for me, or is that my responsibility?
• What happens to my registered sender IDs if I move to another provider?

Next in this track: telling people they are talking to a machine. For the wider market structure, read regional messaging in the Gulf; for language and layout, Arabic-first is not translation.