Unstructured Supplementary Service Data (USSD), sometimes referred to as "quick codes" or "feature codes", is a communications protocol used by GSM cellular telephones to communicate with the mobile network operator's computers. USSD can be used for WAP browsing, prepaid callback service, mobile-money services, location-based content services, menu-based information services, and as part of configuring the phone on the network.[1] The service does not require a messaging app, and does not incur charges.[2]
USSD messages are up to 182 alphanumeric characters long. Unlike short message service (SMS) messages, USSD messages create a real-time connection during a USSD session. The connection remains open, allowing a two-way exchange of a sequence of data. This makes USSD faster than services that use SMS.[1]
While GSM is being phased out in the 2020s with 2G and 3G technologies, USSD services can be supported over LTE, 5G, and IMS.
When a user sends a message to the phone company network, it is received by a computer dedicated to USSD. The computer's response is sent back to the phone, generally in a basic format that can easily be seen on the phone display. Messages sent over USSD are not defined by any standardization body, so each network operator can implement whatever is most suitable for its customers.
USSD can be used to provide independent calling services such as a callback service (to reduce phone charges while roaming), enhance mobile marketing capabilities or interactive data services.
USSD is commonly used by prepaid GSM cellular phones to query the available balance. The vendor's "check balance" application hides the details of the USSD protocol from the user. On some pay as you go networks, such as Tesco Mobile, once a user performs an action that costs money, the user sees a USSD message with their new balance. USSD can also be used to refill the balance on the user's SIM card and to deliver one-time passwords or PIN codes.
Some operators use USSD to provide access to real-time updates from social-networking websites including Facebook and Twitter.[3] Between 2012 and 2018, the Wikipedia Zero project provided access to Wikipedia articles via USSD.[4]
USSD is sometimes used in conjunction with SMS. The user sends a request to the network via USSD, and the network replies with an acknowledgement of receipt:
"Thank you, your message is being processed. A message will be sent to your phone."
Subsequently, one or more mobile terminated SMS messages communicate the status and/or results of the initial request.[5] In such cases, SMS is used to "push" a reply or updates to the handset when the network is ready to send them.[6] In contrast, USSD is used for command-and-control only.
Most GSM phones have USSD capability.[7] USSD is generally associated with real-time or instant messaging services. An SMSC is not present in the processing path, so that the store-and-forward capability supported by other short-message protocols such as SMS is not available.
USSD Phase 1, as specified in GSM 02.90, only supports mobile-initiated ("pull") operations.[8] In the core network, the message is delivered over MAP, USSD Phase 2, as specified in GSM 03.90.[9] After entering a USSD code on a GSM handset, the reply from the GSM operator is displayed within a few seconds.
While GSM is being phased out in the 2020s with 2G and 3G, a solution is available for supporting USSD services directly from the LTE/5G/IMS network, providing a similar user experience as in GSM.[10]
A USSD message typically starts with an asterisk symbol (*) or a hash symbol (#) and is terminated with a hash symbol (#). A typical message comprises digits for commands or data; groups of digits may be separated by additional asterisks.[1]
Mobile-initiated
Network-initiated
| Example USSD codes | |
|---|---|
| |
|
The codes below are not USSD codes, these are the related Man-Machine Interface (MMI); they are standardized so they are the same on every GSM phone. They are interpreted by the handset first before a corresponding command (not the code itself) is sent to the network. These codes might not always work when using an AT interface; there are standard AT commands defined for each of these actions instead.[11] [12]
BS is the type of bearer service, some valid values are:
T is number of seconds for the No Reply Condition Timer, default is 20 seconds if not specified.
| 002 | all diversions | unconditional, busy, unreachable, does not answer |
|
|
| |
| 004 | all conditional redirections | busy, unreachable, does not answer |
|
|
| |
| 03 | Change Network password | password is network dependent, default on some networks is 0000. See call barring functions *33 |
| |||
| 04 | Change PIN |
| ||||
| 042 | Change PIN2 | Only with Phase 2 SIM |
| |||
| 05 | Change PIN by PUK |
| ||||
| 052 | Change PIN2 via PUK | Only with Phase 2 SIM |
| |||
| 06 | read device number (IMEI) |
| ||||
| 21 | unconditional divert | all incoming calls will be diverted |
|
|
| |
| 30 | get the caller's number displayed (CLIP) | as a callee get the CLIP displayed |
|
|
| |
| 31 | suppressing the transmission of caller's phone number (CLIR) | for all subsequent calls |
|
|
| |
| 31 | temporary change of the transmission of CLIR | valid just for the next call; no final # |
|
| ||
| 330 | total incoming and outgoing service barring | password is network dependent, default on some networks is 0000 |
|
|
| |
| 33 | outgoing call barring | password is network dependent, default on some networks is 0000 |
|
|
| |
| 331 | outgoing international call barring | password is network dependent, default on some networks is 0000 |
|
|
| |
| 332 | outgoing international call barring, excluding to home | password is network dependent, default on some networks is 0000 |
|
|
| |
| 333 | total outgoing service barring | password is network dependent, default on some networks is 0000 |
|
|
| |
| 35 | incoming call barring | password is network dependent, default on some networks is 0000. Incompatible with call diversion |
|
|
| |
| 351 | incoming call barring, when international roaming | password is network dependent, default on some networks is 0000 |
|
|
| |
| 353 | total incoming service barring | password is network dependent, default on some networks is 0000 |
|
|
| |
| 37 | Call back on busy (CCBS) | valid on some mobile networks only |
|
|
| |
| 43 | incoming call notification when busy | aka call waiting |
|
|
| |
| 61 | call divert when not answered |
|
|
| ||
| 62 | call divert when off or not reachable |
|
|
| ||
| 67 | call divert when busy or pressing reject |
|
|
| ||
| Code | Function | Note | Switch on | Switch off | Display status | |
|---|---|---|---|---|---|---|