HomeSMS & TCPA Compliance

Compliance Guide

SMS Compliance Under the TCPA

Does the TCPA apply to text messages?

Yes. The FCC treats SMS and MMS as "calls" under the Telephone Consumer Protection Act, so marketing texts to a mobile number need the same prior express written consent that a marketing robocall needs. Opt-outs must be honored within 10 business days, and the keywords stop, quit, cancel, unsubscribe and similar are automatically effective. This is separate from A2P 10DLC registration, which is a carrier throughput requirement, not a TCPA obligation.

SMS gets treated as an afterthought in a lot of TCPA guidance — a footnote on the call rules. That's backwards for anyone actually running text campaigns: the FCC's "SMS is a call" position means every consent, opt-out and disclosure rule built for voice applies to texts in full, and the mechanics of texting introduce failure modes voice calling doesn't have.

The baseline: texts are calls

The FCC has consistently treated SMS and MMS as within the TCPA's definition of a "call." Practically, that means:

Statutory damages are the same as voice: $500 to $1,500 per text. A campaign sending thousands of messages to a poorly-vetted list multiplies that per-message exposure the same way an equivalent call campaign would.

A2P 10DLC is a different requirement, from a different source

This is the single most common point of confusion for small SMS senders, and it's worth being precise about because the two systems get solved completely separately.

A2P 10DLC vs TCPA compliance
A2P 10DLC registrationTCPA compliance
Who requires itWireless carriers, via The Campaign Registry / CTIAFederal law, enforced by the FCC and private lawsuits
What it governsWhether your messages get delivered at allWhether sending the message was legal
Consequence of non-complianceMessages filtered, throttled or blocked by carriers$500–$1,500 statutory damages per message
Does one satisfy the other?No — you need both independently

Being fully 10DLC-registered says nothing about whether you had consent to text a given number. Holding documented consent says nothing about whether carriers will deliver your traffic. Treat them as two separate checklists, not one.

What a defensible opt-in looks like

Consent language a consumer actively agrees to, before any marketing text goes out, should cover:

Retain the exact form text, the timestamp, and the number it was tied to. A description of your consent process, produced after the fact, is not the same evidence as the record itself.

State layers

Where a state runs its own mini-TCPA statute, text messages are typically inside its definition of a covered call, not carved out. Florida's FTSA explicitly includes text messages in its "telephonic sales call" definition and adds a 15-day post-STOP safe harbor specific to Florida — a narrower backstop that sits on top of the federal 10-business-day rule, not a replacement for it. Build to the federal deadline everywhere, and state-specific allowances take care of themselves. See state mini-TCPA laws.

SMS compliance checklist

  1. Consent language names your business specifically and discloses it's not a condition of purchase.
  2. The exact consent form, timestamp and number are retained and producible.
  3. STOP and equivalent keywords are recognized and processed automatically, within the platform.
  4. Opt-outs are honored within 10 business days, and cross-channel (a text opt-out also stops calls).
  5. A2P 10DLC registration is current and separate from your consent process.
  6. The number list has been checked for line type — texts to landlines fail silently and waste spend.
  7. The list has been screened against known TCPA litigators before the campaign runs.

NumberBroom covers the last two rows: carrier-level validation to confirm a number can actually receive SMS, and a litigator scrub in the same pass. Check a single number free, or see bulk pricing.

Frequently asked questions

Is A2P 10DLC registration the same thing as TCPA compliance?

No, and mixing these up is one of the most common mistakes small SMS senders make. A2P 10DLC (Application-to-Person, 10-Digit Long Code) is a carrier-level registration system run through The Campaign Registry under CTIA guidelines — it exists to reduce spam and improve message deliverability, and unregistered traffic gets filtered or blocked by carriers. It has nothing to do with federal law.

TCPA compliance is a legal consent requirement enforced by the FCC and private lawsuits. You can be perfectly registered on 10DLC and still violate the TCPA by texting someone without consent, and you can hold documented TCPA consent and still have your messages blocked for not being 10DLC-registered. They're solved independently, by different processes.

What does a compliant SMS opt-in look like?

At minimum, the consent language a consumer agrees to before receiving marketing texts should: name your specific business, describe the kind of messages they'll receive, disclose that consent is not a condition of purchase, state that message and data rates may apply, and explain how to opt out (reply STOP). It should be something the consumer actively agrees to — a pre-checked box or a buried clause in unrelated terms does not create valid consent.

Retain the exact form, the timestamp, and the phone number the consent was tied to. If a claim is ever filed, that record is what you produce — not a description of your process.

How do state text messaging laws differ from the federal TCPA?

Where a state has its own telemarketing statute, it generally applies to text messages the same way it applies to calls, running alongside federal law rather than replacing it. Florida's FTSA (Fla. Stat. § 501.059) defines a "telephonic sales call" to expressly include text messages, and separately grants a 15-day safe harbor after a STOP reply — but that's a Florida-specific backstop, not a replacement for the federal 10-business-day deadline, which is both stricter and applies everywhere. See state mini-TCPA laws for which states have their own statute.

Can I remove the 'reply STOP to opt out' language from my texts?

Not if the message is marketing content to a number you don't have an exemption for. The opt-out mechanism is what makes the FCC's revocation framework function — removing it doesn't remove the underlying legal requirement to honor opt-outs, it just removes the consumer's easiest way to exercise a right they still have. Some platforms market the ability to strip this language; doing so shifts risk onto you, not away from it.

Not legal advice. NumberBroom is a phone data and list hygiene tool, not a law firm. This page summarises publicly available federal rules as of 2026-08-14 and is provided for general information only. TCPA and state telemarketing law change frequently and apply differently depending on your business, your consent records, and the states you call. Consult qualified counsel before relying on any of it.

Founder, NumberBroom · 10 years in telecommunications and marketing

Cameron Hoffman is the founder of NumberBroom and has spent 10 years working in telecommunications and marketing. He built NumberBroom after repeatedly watching outbound teams dial purchased lists that were full of dead numbers, landlines and TCPA litigators.

Line type decides whether a text lands at all.

A marketing text to a landline fails silently — no bounce, no error, just nothing. NumberBroom flags line type and litigator status on every number before you build an SMS list. $0.20 per number, $5 minimum, no subscription.

Check a number free See pricing