TCPA Compliant SMS Marketing: What Businesses Need to Know in 2026

What Is the TCPA?

The Telephone Consumer Protection Act (TCPA) regulates how businesses can contact consumers via phone calls, text messages, and faxes. Violations range from $500 to $1,500 per unsolicited message, and class-action lawsuits are a booming industry — over $3 billion in TCPA settlements since 2010.

This isn't something to take lightly. But it also shouldn't scare you away from SMS marketing — the most effective channel available.

The Two Types of SMS Consent

1. Express Written Consent (Required for Marketing)

To send promotional or marketing texts, you need express written consent. This means:

• The person actively opted in (checked a box, filled a form, texted a keyword)
• They knew they were signing up for text messages specifically
• The consent was recorded with a timestamp
• They were told the approximate frequency of messages

2. Prior Express Consent (OK for Transactional)

For non-marketing messages (appointment confirmations, service updates, delivery notifications), you just need a reasonable prior business relationship. If someone gave you their phone number when they became a customer, you can send transactional texts.

Database Reactivation: Where It Gets Interesting

The question businesses always ask: "Can I text my old leads?"

The answer depends on how you got their number:

• They filled out a form with SMS consent language → Yes, you can re-engage them.
• They were a customer (gave you their number) → Transactional messages are fine. Marketing messages need consent.
• You bought a list → Absolutely not. This is the #1 way businesses get TCPA lawsuits.

The safe approach for reactivation: Frame your outreach as transactional/service-related, not promotional. "Hi [Name], we noticed you haven't been in for a cleaning in 14 months. Want to schedule?" is very different from "50% OFF ALL CLEANINGS!!!"

10DLC Registration (Required Since 2024)

All businesses sending texts from a standard 10-digit phone number must register with The Campaign Registry (TCR). This involves:

1. Brand registration — Your business info, EIN, website
2. Campaign registration — What you're texting about, sample messages, opt-in method
3. Vetting — Carriers score your brand (higher score = higher throughput)

Without 10DLC registration, your messages get filtered or blocked by carriers. This is non-negotiable in 2026.

Compliance Checklist

• ✅ Consent recorded with timestamp for every contact
• ✅ Clear opt-in language on all forms ("By submitting, you agree to receive text messages...")
• ✅ STOP/opt-out honored within 10 seconds
• ✅ Every message includes opt-out instructions
• ✅ 10DLC brand and campaign registered
• ✅ No messages before 8 AM or after 9 PM recipient's local time
• ✅ Frequency matches what was disclosed at opt-in
• ✅ Records kept for 5+ years

How Revive Flow Handles Compliance

We build compliance into the system by default:

• Consent verification — We audit your contact list before any message sends
• 10DLC registration — We handle the entire registration process for you
• Instant opt-out — STOP responses are processed in real-time
• Time window enforcement — Messages only send during legal hours in the recipient's timezone
• Message templates — Pre-approved, compliance-vetted templates for each industry
• Full audit trail — Every message, consent record, and opt-out logged and retained