Engineering2 min read
2FA at Scale Without the Per-Verification Tax
Most 2FA APIs bill you per verification and cap you out. Here's a flat-rate, no-hard-caps way to verify users at scale over iMessage — with a live demo you can try right now.
Most 2FA APIs bill you per verification and cap you out. Here's a flat-rate, no-hard-caps way to verify users at scale over iMessage — with a live demo you can try right now.
A typical verification API charges roughly $0.05 per verification on top of the underlying carrier SMS fee. That sounds tiny until you run the numbers on a product that's actually working:
We built a demo that flips the flow. Instead of us sending a code to the user, the user sends a code to us — straight from their own iMessage. Blooio watches for the inbound message, matches the one-time code, and hands your app back the verified identifier (phone number or email).
You can try it right now at demo.blooio.com/2fa. It generates a code, opens Messages with that code pre-filled, and verifies the moment you hit send.
The verification logic is almost nothing — Blooio delivers every inbound message to your webhook, and you just match the code:
// Blooio delivers every inbound message to your webhook.
// Match the one-time code and read the verified sender.
app.post('/webhook/blooio', async (c) => {
const event = await c.req.json();
if (event.event === 'message.received') {
const code = event.text.trim();
const challenge = await challenges.get(code);
if (challenge) {
// event.sender is the verified phone number or email
await challenge.verify(event.sender);
}
}
return c.json({ ok: true });
});There's no demo call, no DUNS number, and no procurement cycle. You sign up, claim a line, drop in your webhook, and you're verifying users the same afternoon. For around $100/month you get a dedicated iMessage line with no per-verification fees and no hard caps — pricing that stays flat while your user base grows.
Try the live demo, then wire it into your own app in an afternoon.
Try the 2FA demo
There's no official Apple iMessage API — so which provider should you actually build on in 2026? We compared Blooio, Sendblue, LoopMessage, and Linq on pricing, features, onboarding, and reliability. Here's the honest breakdown.
iMessage vs RCS in 2026: open rates, deliverability, cost, and reach compared. See which channel actually wins for business messaging — and how to use both with automatic fallback.
Blooio's co-founders joined HighLevel's Spotlight Session to explain how to send real blue-bubble iMessage inside GoHighLevel workflows, why P2P beats A2P SMS, and how agencies are doubling response rates.