Yes. By default, the user’s registered mobile number is whitelisted automatically when Sandbox is enabled.