SMS Opt-In Requirements Explained: What Every Business Must Know

SMS Opt-In Requirements: The Rules Every Business Must Follow

SMS (text message) opt-in requirements are federal law. An opt-in is a person's permission to receive your texts, and every marketing text you send to a customer requires their prior express written consent. If you skip this step, you face penalties of $500 to $1,500 per message under the TCPA (the federal Telephone Consumer Protection Act).

Opt-in rules are not the same for every message. Different types of messages require different levels of consent, consent language must include specific details, and some collection methods qualify while others do not. This guide explains what your business needs to collect subscribers legally.

Types of SMS Consent Under the TCPA

Prior Express Consent (Informational and Transactional Messages)

For non-marketing texts (order confirmations, appointment reminders, shipping updates, account alerts), you need prior express consent. This means the customer provided their phone number voluntarily and reasonably expects to receive these types of messages.

A customer giving you their phone number at checkout to receive order updates qualifies. No written agreement is required for purely transactional messages.

Prior Express Written Consent (Marketing Messages)

For promotional texts (sales, discounts, new products, marketing campaigns), you need the higher standard of prior express written consent. This requires:

• A written agreement (paper or electronic)
• A clear and conspicuous disclosure that the person is agreeing to receive marketing texts
• The specific business name that will be sending messages
• A statement that consent is not a condition of purchase

Electronic consent (web forms, text keywords) satisfies the "written" requirement under the federal E-SIGN Act.

Compliant Opt-In Methods

Web Form Opt-In

This is the most common method. Add a dedicated checkbox (unchecked by default) to any form that collects phone numbers:

Required elements:

• Unchecked checkbox (must not be checked in advance)
• Clear consent language next to the checkbox
• Business name specified
• Message frequency disclosed
• Data rates disclaimer
• Opt-out instructions
• Statement that consent isn't required for purchase

Compliant example:

For a complete overview, read the rules a texting program runs under.

"[ ] I agree to receive promotional text messages from [Business Name] at this phone number. Up to 4 msgs/month. Msg & data rates may apply. Reply STOP to cancel. Consent is not a condition of any purchase."

Text-to-Join (Keyword Opt-In)

Customers text a keyword to your number (for example, "Text DEALS to 55555"). This counts as an opt-in because the customer contacts you first. However, you must still:

• Send an immediate confirmation text with full disclosure
• Include your business name, message frequency, data rates and STOP instructions
• Ask for explicit confirmation (double opt-in, explained below, is recommended)

Auto-reply example:

"Thanks for joining [Business Name] texts. You'll receive up to 4 promotional msgs/month. Msg & data rates apply. Reply STOP to cancel. Reply HELP for help. Reply YES to confirm."

Paper Form Opt-In

At events, in stores or during consultations, you can collect SMS consent on paper forms. The form must include the same disclosure language as a web form, plus a signature line. Keep these forms on file, because they are your proof of consent.

Point-of-Sale Verbal Consent

Some businesses collect spoken consent at checkout: "Would you like to receive text deals from us?" This can work for transactional messages, but for marketing texts, the FCC (Federal Communications Commission) strongly recommends written consent. If you do collect verbal consent for marketing, send an immediate confirmation text and keep records of the conversation.

Double Opt-In as a Best Practice

Double opt-in adds a confirmation step after the first sign-up:

1. Customer provides phone number and consent through a web form, keyword or paper form
2. Your system sends a confirmation text: "Reply YES to confirm your subscription to [Business Name] texts."
3. Customer replies YES
4. Only then are they added to your active subscriber list

Double opt-in is not legally required. However, it provides stronger proof of consent, reduces spam complaints, produces a higher-quality subscriber list and helps you defend against claims that a person never signed up.

What Does Not Qualify as SMS Consent

• A pre-checked checkbox: Consent must be an affirmative action by the consumer
• Buried terms in a privacy policy: Consent must be clear and conspicuous, not hidden in legal documents
• Email consent: Agreeing to receive emails does not authorize text messages
• Having a phone number: A person who gave you their phone number for a transaction has not consented to marketing texts
• Third-party consent: Consent given to Company A does not authorize Company B, because written consent must authorize the business that sends
• Purchased lists: Numbers from purchased or rented lists have no valid consent for your business
• Social media connections: Following you on Instagram does not authorize SMS marketing

Opt-In Compliance by Channel

E-Commerce Checkout

Add a separate, unchecked SMS consent checkbox. Do not combine it with the "I agree to terms and conditions" checkbox, because SMS consent must be a separate choice.

Lead Generation Forms

If you use forms that collect contact details from potential customers (such as Facebook Lead Ads or landing pages), each form should name your business in the consent language. The FCC's one-to-one consent rule, which would have banned general consent for "marketing partners," was struck down in January 2025 before it took effect, but consent that names your business remains the safe standard.

In-App Signups

Mobile app sign-ups that collect phone numbers should include SMS consent as a separate, optional step, not combined with account creation.

Customer Service Interactions

If a customer texts your support line, you may respond to their question. That text does not authorize future marketing messages, which require separate consent.

Record Keeping Requirements

For every subscriber, document and store:

• Phone number
• Consent timestamp (date and time)
• Consent source (which web form, keyword, event, or store location)
• Exact consent language they agreed to
• IP address (the internet address of the device, for web-based consent)
• Opt-out date (if they later unsubscribe)

Keep these records for at least 5 years. The statute of limitations (the deadline for filing a lawsuit) for TCPA claims is 4 years, so your records should remain available well beyond that period.

CampaignCNX+ automatically records consent for every subscriber, including the source, date and time, and consent language. Together with automatic opt-out processing and TCPA compliance enforcement, this removes the burden of keeping these records by hand.

Opt-In Best Practices for More Sign-Ups

• Offer an incentive: "Get 15% off when you join our text list" produces 3 to 5 times more sign-ups than a plain invitation
• Set clear expectations: Tell subscribers exactly what they will receive and how often
• Deliver what you promised: Send the promised discount code or exclusive content right away
• Make opt-in easy: Keep forms short. A phone number field and a consent checkbox are all you need
• Place opt-in forms where they work best: Checkout pages, pop-ups that appear when a visitor starts to leave, and thank-you pages produce the most sign-ups

Build Your List Right From the Start

Every subscriber on your list should be there because they chose to join. That is a legal requirement, and it is also the foundation of an effective SMS program. Subscribers who have consented open your texts, respond to your offers and stay subscribed for months or years.

CampaignCNX+ provides the SMS marketing tools you need, including compliant opt-in forms, double opt-in sequences, consent tracking and automatic compliance monitoring. Start with 100 free SMS and build your subscriber list on a sound legal basis. You get 100 free SMS to start, your number is $5 a month, and we file the carrier approval for you. That review by the carriers (the phone companies) usually takes about 3 business days for a toll-free number.

Read more about CampaignCNX+ two-way texting and how consent is captured.