How to Send Marketing Text Messages Legally in 2026

How to Send Marketing Text Messages Legally: The Complete Framework

Learning how to send marketing text messages legally isn't complicated, but the consequences of getting it wrong are severe. TCPA fines start at $500 per non-compliant text and can reach $1,500 for willful violations. Send 5,000 texts without proper consent and you're looking at $2.5 million to $7.5 million in potential liability.

The good news is that legal SMS marketing boils down to a handful of clear rules. Follow them, and you'll never have to worry about lawsuits or carrier blocks. Here's the complete framework for texting customers legally in 2026.

The Legal Foundation: TCPA and SMS Marketing Laws

The Telephone Consumer Protection Act (TCPA) is the primary federal law governing text message marketing. Originally passed in 1991 to regulate telemarketing calls, it now applies fully to SMS. Here's what it requires:

  • Prior express written consent for all marketing texts sent via autodialer or automated system
  • Clear identification of the sender in every message
  • Opt-out mechanism that's easy to use (Reply STOP)
  • Reasonable sending hours — no texts before 8 AM or after 9 PM in the recipient's time zone
  • Honest content — no misleading or deceptive messages

Beyond the TCPA, the FCC's 2024-2025 updates introduced one-to-one consent: consumers must consent specifically to YOUR business, not just to "marketing partners" or a generic list of companies. This dramatically changed how lead generation and shared lists work.

State Laws Add More Requirements

Several states have enacted their own SMS marketing regulations that layer on top of federal rules:

  • Florida (FTSA): Written consent required, 8 AM - 8 PM sending window (stricter than TCPA's 9 PM)
  • California (CCPA/CPRA): Data privacy requirements — consumers can request deletion of their phone data
  • Oklahoma: Additional disclosure requirements for commercial texts
  • Washington: Enhanced consent requirements for automated political messages

If you're texting customers in multiple states, you need to comply with the strictest applicable rules.

Step-by-Step: How to Send Legal Marketing Texts

Step 1: Collect Proper Consent

This is the single most important step. Without valid consent, every text you send is a potential violation.

What qualifies as valid consent:

  • A web form with a clear, unchecked SMS consent checkbox
  • A text-to-join keyword where the consumer initiates contact
  • A paper form with explicit SMS consent language and a signature
  • A point-of-sale opt-in with verbal confirmation and recorded consent

Your consent language must include:

  • Your business name (the specific entity that will text them)
  • That they're agreeing to receive text messages
  • Approximate message frequency (e.g., "up to 4 msgs/month")
  • "Msg & data rates may apply"
  • How to opt out (e.g., "Reply STOP to cancel")

Example consent language:

"By checking this box, you agree to receive promotional text messages from [Business Name] at the number provided. Message frequency varies, up to 4 msgs/month. Msg & data rates may apply. Reply STOP to cancel. Reply HELP for help. Consent is not a condition of purchase."

Step 2: Register for 10DLC

All business text messaging through standard 10-digit phone numbers requires 10DLC registration with The Campaign Registry (TCR). This involves:

  • Brand registration: Verify your business identity (EIN, address, website)
  • Campaign registration: Register each messaging use case (marketing, notifications, etc.)
  • Carrier approval: Carriers review and approve your campaigns

Without 10DLC registration, carriers will filter or block your messages entirely. A platform like CampaignCNX+ handles the entire registration process for you.

Step 3: Structure Your Messages Correctly

Every marketing text should include:

  • Business identification: "[Business Name]:" at the start, or clearly stated within the message
  • Clear purpose: What you're offering or communicating
  • Call to action: What you want the recipient to do
  • Opt-out instruction: "Reply STOP to unsubscribe" in your first message and periodically after

Compliant example:

"[Store Name]: Flash sale today only! 30% off all winter items. Shop now: [Link]. Reply STOP to opt out."

Step 4: Respect Timing Rules

Never send marketing texts outside the allowed window:

  • Federal (TCPA): 8:00 AM - 9:00 PM recipient's local time
  • Florida: 8:00 AM - 8:00 PM
  • Your platform should enforce this automatically — segment by time zone and block sends outside allowed hours

Step 5: Handle Opt-Outs Instantly

When someone texts STOP (or QUIT, CANCEL, UNSUBSCRIBE, END):

  • Remove them from your active list immediately
  • Send one final confirmation: "You've been unsubscribed from [Business Name] texts. You will not receive further messages."
  • Never re-add them without brand-new explicit consent
  • Add them to a permanent suppression list

Step 6: Keep Records

If you're ever challenged, you need proof of consent for every number you've texted. Store:

  • The exact consent language they agreed to
  • Timestamp of when consent was given
  • Source (web form URL, keyword, event name)
  • IP address (for web-based consent)
  • All opt-out requests and when they were processed

What You Absolutely Cannot Do

  • Buy phone number lists and text them. Purchased lists never have valid consent for YOUR business.
  • Text your email subscribers without separate SMS consent. Email consent is not SMS consent.
  • Share consent between companies. The FCC's one-to-one consent rule prohibits this.
  • Pre-check the consent box. Consent must be affirmative — the consumer must take action.
  • Make consent a condition of purchase. "You must agree to texts to complete checkout" violates TCPA.
  • Ignore opt-out requests. Every message sent after an opt-out is a separate violation.

Compliant Campaign Examples

Retail promotion:

"[Brand]: Weekend sale! 25% off everything online & in-store through Sunday. Use code SAVE25: [Link]. Reply STOP to opt out."

Restaurant special:

"[Restaurant]: Tonight's special: half-price appetizers 5-7 PM. Bring a friend! Show this text to your server. Reply STOP to unsubscribe."

Service reminder + upsell:

"[Auto Shop]: Your car is due for an oil change! Book this week and get a free tire rotation: [Link]. Reply STOP to cancel texts."

The Cost of Getting It Wrong

TCPA enforcement is aggressive and getting more so:

  • $500 per non-compliant text (standard penalty)
  • $1,500 per willful violation (if you knew or should have known)
  • Class action lawsuits — TCPA is one of the most-litigated consumer protection statutes
  • Carrier blocks — unregistered or non-compliant senders get filtered silently
  • Platform bans — messaging platforms will suspend accounts that generate complaints

The cost of compliance (proper consent forms, a registered platform, opt-out management) is trivial compared to the cost of a single violation.

Send Legally, Send Confidently

Legal SMS marketing isn't about navigating loopholes — it's about building a text program that respects your customers and protects your business. Get consent, identify yourself, honor opt-outs, and send at appropriate times. That's it.

CampaignCNX+ builds TCPA compliance directly into the platform — automated opt-out processing, consent tracking, sending-hour enforcement, and 10DLC registration management. Start your free 30-day beta and send your first compliant campaign today.

Back to Blog