How to Send Marketing Text Messages Legally: A Complete Guide
Sending marketing text messages legally is not complicated, but the consequences of getting it wrong are severe. Fines under the TCPA (the federal Telephone Consumer Protection Act) start at $500 per non-compliant text and can reach $1,500 for willful violations. A business that sends 5,000 texts without proper consent could face $2.5 million to $7.5 million in potential liability.
Legal SMS (text message) marketing comes down to a small number of clear rules. Following them greatly reduces your risk of lawsuits and of blocks by carriers, the phone companies that deliver texts. This guide explains how to text customers legally in 2026.
The Legal Foundation: TCPA and SMS Marketing Laws
Before anyone gets a text
- Ask in writingThe form or sheet says plainly that they agree to receive texts from you.
- Keep the recordNote the date and where each person signed up.
- Send at reasonable hoursQuiet-hours scheduling keeps texts out of the night.
- Honor STOPA STOP reply is handled automatically.
The TCPA is the primary federal law governing text message marketing. It was passed in 1991 to regulate telemarketing calls and now applies fully to text messages. It requires:
- Prior express written consent (clear permission, given in writing in advance) for all marketing texts sent by an autodialer or other automated system
- Clear identification of the sender in every message
- Opt-out method that is easy to use (Reply STOP)
- Reasonable sending hours: no texts before 8 AM or after 9 PM in the recipient's time zone
- Honest content: no misleading or deceptive messages
You may have read about the FCC's (Federal Communications Commission) one-to-one consent rule. It never took effect: the U.S. Court of Appeals for the Eleventh Circuit struck it down on January 24, 2025, days before it was due to apply, and the FCC formally removed it in August 2025. The longstanding standard still applies: written consent must authorize your business to send marketing texts, so make sure your consent language names your business rather than relying on a general agreement to hear from "marketing partners."
State Laws Add More Requirements
Several states have enacted their own SMS marketing regulations in addition to the federal rules:
- Florida (FTSA): Written consent required, and texts may be sent only from 8 AM to 8 PM (stricter than the TCPA's 9 PM limit)
- California (CCPA/CPRA): Data privacy requirements under the state's consumer privacy laws. Consumers can ask you to delete their phone data
- Oklahoma: Additional disclosure requirements for commercial texts
- Washington: Enhanced consent requirements for automated political messages
If you text customers in more than one state, you must follow the strictest rules that apply.
Step-by-Step: How to Send Legal Marketing Texts
Step 1: Collect Proper Consent
This is the single most important step. Without valid consent, every text you send is a potential violation.
What qualifies as valid consent:
- A web form with a clear, unchecked SMS consent checkbox
- A text-to-join keyword, where the consumer texts a word to your number first
- A paper form with explicit SMS consent language and a signature
- An opt-in at the register with spoken confirmation and a record of the consent
Your consent language must include:
- Your business name (the specific entity that will text them)
- That they are agreeing to receive text messages
- Approximate message frequency (for example, "up to 4 msgs/month")
- "Msg & data rates may apply"
- How to opt out (for example, "Reply STOP to cancel")
Example consent language:
For a complete overview, read what compliant texting actually requires.
"By checking this box, you agree to receive promotional text messages from [Business Name] at the number provided. Message frequency varies, up to 4 msgs/month. Msg & data rates may apply. Reply STOP to cancel. Reply HELP for help. Consent is not a condition of purchase."
Step 2: Register for 10DLC
All business texting from standard 10-digit phone numbers requires 10DLC registration, which registers your number with the carriers through The Campaign Registry (TCR). This involves:
- Brand registration: Verify your business identity (EIN or federal tax ID, address, website)
- Campaign registration: Register each type of messaging, or use case (marketing, notifications and so on)
- Carrier approval: Carriers review and approve your campaigns
Without 10DLC registration, carriers will filter or block your messages entirely. A platform such as CampaignCNX+ handles the entire registration process for you.
Step 3: Structure Your Messages Correctly
Every marketing text should include:
- Business identification: "[Business Name]:" at the start, or clearly stated within the message
- Clear purpose: What you're offering or communicating
- Call to action: What you want the recipient to do
- Opt-out instruction: "Reply STOP to unsubscribe" in your first message and periodically after
Compliant example:
"[Store Name]: Flash sale today only. 30% off all winter items. Shop now: [Link]. Reply STOP to opt out."
Step 4: Respect Timing Rules
Never send marketing texts outside the allowed hours:
- Federal (TCPA): 8:00 AM to 9:00 PM in the recipient's local time
- Florida: 8:00 AM to 8:00 PM
- Your platform should enforce this automatically by grouping contacts by time zone and blocking messages outside allowed hours
Step 5: Handle Opt-Outs Immediately
When someone texts STOP (or QUIT, CANCEL, UNSUBSCRIBE, END):
- Remove them from your active list immediately
- Send one final confirmation: "You've been unsubscribed from [Business Name] texts. You will not receive further messages."
- Never re-add them without brand-new explicit consent
- Add them to a permanent suppression list (numbers you must never text again)
Step 6: Keep Records
If your texting is ever challenged, you will need proof of consent for every number you have texted. Store:
- The exact consent language they agreed to
- The date and time consent was given
- The source (web form address, keyword or event name)
- The device's IP address (for web-based consent)
- All opt-out requests and when they were processed
What You Must Not Do
- Buy phone number lists and text them. Purchased lists never have valid consent for your business.
- Text your email subscribers without separate SMS consent. Email consent is not SMS consent.
- Share consent between companies. Written consent must authorize the business that sends, so consent given to one company does not cover another.
- Pre-check the consent box. Consent must be affirmative, meaning the consumer must take an action.
- Make consent a condition of purchase. "You must agree to texts to complete checkout" violates the TCPA.
- Ignore opt-out requests. Every message sent after an opt-out is a separate violation.
Compliant Campaign Examples
Retail promotion:
"[Brand]: Weekend sale. 25% off everything online & in-store through Sunday. Use code SAVE25: [Link]. Reply STOP to opt out."
Restaurant special:
"[Restaurant]: Tonight's special: half-price appetizers 5 to 7 PM. Bring a friend. Show this text to your server. Reply STOP to unsubscribe."
Service reminder with an added offer:
"[Auto Shop]: Your car is due for an oil change. Book this week and get a free tire rotation: [Link]. Reply STOP to cancel texts."
The Cost of Getting It Wrong
What one text costs on each plan
TCPA enforcement is strict and becoming stricter:
- $500 per non-compliant text (standard penalty)
- $1,500 per willful violation (if you knew or should have known)
- Class action lawsuits: the TCPA is one of the consumer protection laws most often used in lawsuits
- Carrier blocks: carriers filter messages from unregistered or non-compliant senders without notice
- Platform bans: messaging platforms will suspend accounts that generate complaints
The cost of compliance (proper consent forms, a registered platform, opt-out management) is very small compared with the cost of a single violation.
Sending Marketing Texts Legally and With Confidence
Legal SMS marketing means building a texting program that respects your customers and protects your business, rather than looking for loopholes. Get consent, identify yourself, honor opt-outs and send at appropriate times.
CampaignCNX+ builds TCPA compliance directly into the platform, including automatic opt-out processing, consent tracking, limits on sending hours and 10DLC registration management. Start with 100 free SMS and set up your first compliant campaign. You get 100 free SMS to start, your number is $5 a month, and we file the carrier approval for you. That review usually takes about 3 business days for a toll-free number.
Read more about CampaignCNX+ automations that keep the rules in place.


