The limit here is the length of the text message. We need to have a message that informs the receiver and include a link that is long enough so it can not be easily brute forced.