When a guest orders on your website, entering their phone number can trigger a one-time text code. This is a passwordless sign-in, not a security check on the order.

Entering the code signs the guest into their account (or creates one), which brings back their saved name, address, past orders, and loyalty points. The text reads: "Your [Restaurant Name] sign in code is: [code]."

As soon as a guest finishes typing a recognized US phone number, checkout looks it up. The code is only sent if that number already belongs to an account with a complete profile (first name, last name, email, phone, and a previously verified phone). First-time guests, and guests with an incomplete profile, get no code and simply finish checkout as a guest. That's by design, not a failure.

The text-code system only supports US numbers. A guest entering a non-US number skips the code step automatically and continues through checkout. The tradeoff: they check out without signing in, so no saved info or loyalty points on that order, but the order still goes through. This mostly comes up in tourist-heavy areas.