When the Form Wants a Phone Number

Stage: the form asks for one more field. In control: the site, and it will not explain.

1. The number is asked for in addition, not instead

Forms that want a phone number almost never want it in place of an address. They want both, and the reasons are rarely written next to the field.

What is written there tends to be about you: for your security, to keep your account safe, so we can reach you about your order. Those phrases are not lies exactly, they are one of four motives dressed as the only one.

Knowing which motive is in play changes what you do about it, because two of the four are about proving something and two are about reaching or identifying you later, and only some of them survive the question of whether the field is genuinely required.

2. Four motives sit behind one field

Proof of a person is the first. A number costs money and paperwork to obtain, and in most places obtaining many of them leaves a trail. That makes it a barrier to bulk account creation in a way an address is not, which is the honest half of the security framing.

Recovery is the second. When the account is locked out, the number is a second channel to reach you that does not depend on your mailbox being alive or accessible.

The third is a channel that gets read. Messages to a phone are opened within minutes and mail is opened whenever, so anything urgent to the business, and quite a lot that is not urgent at all, prefers the number.

The fourth is identity. A number is a durable key for matching your activity across services and against purchased datasets, and it is a better key than an address precisely because you cannot make a new one on a whim. Marketing platforms are built around it, and where a form asks for a number with no verification step, no lockout recovery and no transactional messages, this is usually the reason.

3. The number is a worse thing to hand over than an address

Most people have one number and many possible addresses, and that asymmetry decides everything.

The number is tied to your legal identity in most countries because getting it required documents. It is durable across employers, providers and house moves, so a record keyed on it stays accurate for a decade. It is expensive to change and painful to change, since every account and every human contact has to be updated. And it cannot be generated: there is no equivalent of clicking a button and receiving a fresh number that works.

That last point is the one worth sitting with on a site like this. An address made on demand exists because addresses are cheap and infinitely replaceable. Nothing in the phone system works that way, and it is a mistake to treat the two fields as similar just because they both look like contact details.

A number is also the strongest link between accounts that are otherwise unconnected, which is the mechanism described in why mass signups do not work.

4. A recycled number arrives with somebody else's life attached

Numbers are returned to circulation and reassigned after a disconnection, and whatever the previous holder attached to them is still attached.

The new holder starts receiving somebody else's confirmation codes, delivery notifications, appointment reminders and account alerts. Where a service uses the number for recovery, the new holder can sometimes reset accounts they have never heard of, without doing anything more devious than tapping the link in a message that arrived on their own phone.

It runs the other way as well. Give a number to a service, change providers a year later, and the account you thought was protected by it now has a recovery channel pointing at a stranger's handset. Nobody is notified, because nothing in the system knows the number changed hands.

This is the property that makes a number a poor long-term key despite being a good short-term proof, and it is the argument against relying on it as the last line of recovery for anything that matters.

5. Some services genuinely cannot proceed without one

Where money moves or the sector is regulated, the number is part of an identity check the service does not have discretion over, and there is no version of the signup that skips it.

Banks, payment services, anything with a legal identity requirement, and services delivering something to a physical location where a driver has to call you all fall in that group. Arguing with the form is not a strategy there, and neither is a substitute.

Everything else is a business preference presented as a requirement, and the distinction is usually visible from how the field behaves rather than from what it says.

6. Three responses are available and legal

Check whether the field is really mandatory. Marked fields are often optional in the underlying system, particularly on longer forms, and leaving it blank and submitting costs one attempt to find out. If the form refuses, look for the point later in the flow where the number is requested rather than demanded, which is common at checkout.

Keep a separate number for services if numbers are demanded often enough to matter. A second line, whether physical or from an operator that provides one, keeps the durable identifier that everyone matches on separate from the one your family uses.

Decline where the number is only for marketing. When a service asks for it, never verifies it, and never sends anything transactional to it, the field is feeding the fourth motive, and refusing costs you nothing at all.

7. There is no way past verification described here

This page does not explain how to get around a verification message, and it is not going to.

The material offering that route is either reselling access to numbers that belong to other people, which is somebody else's account and somebody else's problem you are inheriting, or it stops working within weeks as services stop accepting the ranges involved.

The useful conclusion is the opposite one. Where a number is genuinely required, the account is one that expects to know who you are, which means it is also not an account to attach a disposable address to. Where a number is not genuinely required, you do not need a trick, you need to notice that the field is optional.

The handover

Control at this stage belongs entirely to the site, which chose to ask and is not going to explain why. What it does with either identifier once it has one, and how much can be bought about you starting from it, is set out in what an address is worth as a lookup key. If the number is being requested as recovery for a passwordless account, the role it is playing is the one described in what a passkey replaces. And before deciding what to type into either field, it is worth checking whether the account is needed at all, which is the subject of signing up without an address.