Twilio errors · 2026

Twilio account suspended or under review for outbound calling: what to do, and how to stop it recurring

Last updated September 4, 2026

The email arrives mid-shift: your account has been suspended, or is under review, pending information about your use case. Calls stop. The numbers you spent two months warming up are frozen and still billing. Twilio's fraud-response guide is written for engineering teams that were hacked; this is the version for a sales team that dialed a list, with the deadlines that matter and the list of things to send.

The short answer

Reply to the suspension email within 24 hours, through the channel it names, with your use case, list source and consent basis, DNC-scrub evidence, and, if the account may have leaked, the token you rotated. Settle any negative balance. Numbers keep billing while suspended and are at risk of reclaim after 90 days. Then fix the pattern that caused it: ramp volume, cap dials per number, scrub the list, get the Business Profile approved.

What triggers a review on a cold-calling account

Trigger	Why Twilio reacts	Prevention
Volume spike on a new account	Zero to hundreds of calls in hours looks like a compromised token	Ramp over a week; keep the Auth Token and API keys out of shared docs
Short, unanswered call pattern	The signature of a robocaller or a bad list	Clean and scrub the list; let connected calls run; cap dials per number
Complaints traced to your numbers	Carrier and consumer complaints reach Twilio's abuse team	DNC scrub, calling hours, identify yourself, honour opt-outs on the spot
Unfamiliar destinations	Calls to countries you never used are the classic sign of toll fraud	Keep geo permissions to the countries on your lists; rotate the token if it leaked
Negative balance	Usage outran the prepaid balance	Enable auto-recharge; set a usage trigger alert
Missing Customer Profile	Calls to +1 need an approved profile; a Business one for accounts opened abroad since 8 Oct 2025	Submit the Business Profile the day you open the account

Twilio's own categories are AUP violation, fraud, non-payment and security risk. The rows above are how those show up on an account whose only activity is a sales team dialing.

The first 24 hours

Read the email for the category. AUP, fraud, non-payment and compromised-account cases want different evidence.
Reply through the channel it names, within 24 hours. Twilio's guide says to reply directly to the notification and follow its instructions; paid-support accounts open a ticket in the Help Center, free-tier accounts use the Help Center assistant and ask to submit a ticket, suspected fraud goes to fraud@twilio.com.
Send the use case in plain language. Who you call (businesses or consumers), where the list came from, the consent or exemption you rely on, calling hours, how you scrub against the Do Not Call Registry, the dialer you use and its abandoned-call handling.
If the account may have leaked: rotate the Auth Token, revoke API keys you do not recognise, check the debugger for calls to countries you never dial, and say so in the reply. Repeat compromises require a root-cause report.
Settle any negative balance and turn on auto-recharge.
Keep support informed as you complete each step; Twilio says delays in the process come from silence.

Twilio does not publish a review timeline. What it does publish is that phone numbers on a suspended account keep billing monthly and are at risk of reclamation after 90 days, and that a suspended account can neither make nor receive calls or texts. If the numbers matter, the response matters.

Running a cold-calling account that does not get reviewed

Business Profile on day one. Approved profiles with the SHAKEN/STIR trust product get A attestation on their numbers and are the first thing a reviewer looks for. See Business Profile approval for cold calling.
Ramp, do not spike. Dozens of calls on day one, doubling over the first week. A new account that dials a thousand numbers before lunch looks like the fraud Twilio sees most.
One number per rep, capped. Roughly 100–150 dials a day per number before carrier labels start; rotate by volume. See calls per day before spam-likely.
Scrub, hours, identity. DNC scrub for consumer lists, 8 am–9 pm local, say who you are. The AUP requires consent where the law does and honouring opt-outs; the fastest way to a complaint is ignoring “take me off your list”.
Guard the credentials. The Auth Token in a shared Google Doc is how a sales team gets a fraud suspension. Connect the dialer once with an API key it creates, and give reps logins to the dialer, never to Twilio.
Geo permissions tight. Only the countries on your lists. A leaked token cannot dial premium ranges you never enabled. See geo permissions.

If the suspension was earned, fix the campaign first. A reinstated account that resumes the same unscrubbed list at the same volume will be suspended again, and the second review is harder. The AUP says Twilio may suspend on violation; it does not say it must reinstate.

Your Twilio, connected once, with the guardrails on by default.

DialSheet creates its own API key on your account so reps never hold the Auth Token, pins a number per rep, and dials at ~$0.014/min. Free for one person, $29 per 3 seats. Rather not run a carrier account at all? A managed line is $49/month, with the cap that keeps it clean.

Start dialing

Questions people actually ask

Why was my Twilio account suspended for outbound calling?

Twilio suspends for four reasons, per its fraud-response guide: a violation of the Acceptable Use Policy, directly fraudulent activity, non-payment, or a security risk such as a compromised account. For a cold caller the realistic triggers are a sudden jump in call volume on a new account, a high share of very short or unanswered calls, complaints traced back to your numbers, calls to destinations the account never used before (which looks like a leaked Auth Token), and a balance that went negative. The suspension email names the category; read it before you do anything else.

How do I get a suspended Twilio account reactivated?

Twilio's guidance is to contact support within 24 hours of the suspension to start review and reactivation, replying directly to the notification email and following its instructions. Paid-support customers open a ticket in the Help Center; free-tier accounts use the Help Center assistant and ask to submit a ticket; suspected fraud goes to fraud@twilio.com. Send what they ask for: a description of the use case, the list source and consent basis, evidence you scrub against the Do Not Call registry, and for a compromised account the steps you took to secure it (rotated Auth Token, revoked API keys). Settle any negative balance. Twilio does not publish a review timeline.

Do I still pay for phone numbers while my Twilio account is suspended?

Yes. Twilio's support documentation states you are charged monthly for every phone number on the account even while it is suspended, and that after 90 days of suspension the numbers are at risk of being reclaimed. A suspended account cannot make or receive calls or texts. If you own numbers you warmed up over months, the 24-hour response window matters twice.

Is cold calling allowed on Twilio?

Yes, on an upgraded account, within the law and the Acceptable Use Policy. The AUP requires that consent is obtained where the law requires it, that opt-out requests are honoured, and that identity and origin are never falsified; it states Twilio may suspend use of the services on violation. In the US that means scrubbing consumer lists against the Do Not Call Registry, calling 8 am to 9 pm local time, identifying yourself, and not spoofing caller ID. B2B office-hours calling on an owned, attested number at a sane daily volume is exactly the traffic Twilio carries all day.

How many calls a day will get a new Twilio account flagged?

Twilio does not publish a number, and the flag is about pattern more than count: a brand-new account that goes from zero to a thousand short calls in an afternoon looks like a compromised token running a dialer campaign, which is the most common fraud on the platform. Ramp instead: a few dozen calls on day one from a number assigned to an approved Business Profile, doubling over a week, with calls that connect lasting long enough to count. Separately, the carriers score each number, and 100–150 dials a day per number is the practical ceiling before spam labels start, whatever Twilio thinks.

Can a dialer get my Twilio account suspended?

A dialer places the calls you tell it to; the account is judged on the calls. A parallel dialer that abandons connected calls above the 3% TCPA cap, a list that was never scrubbed, or a number dialed 400 times a day will draw complaints under any dialer. What a dialer can do is make good behaviour the default: per-number daily caps, DNC suppression, connected-call handling, and a Business Profile prompt at setup. Check those before you blame the tool or the carrier.