TCPA-Compliant SMS Marketing for US Small Businesses

Text messages are read quickly, and for many US small businesses, from restaurants and salons to dental clinics and home service companies, SMS drives more bookings per dollar than almost any other channel. But the United States also has one of the most active litigation environments for text marketing. The main federal law is the Telephone Consumer Protection Act (TCPA), and lawsuits under it can involve statutory damages per message.

This guide explains the rules in plain English, so you can build a text marketing program that is both effective and defensible. It is general information, not legal advice; for a large or high-risk program, speak to a US attorney who handles TCPA matters.

What is the TCPA?

The TCPA is a federal law passed in 1991 and enforced by the Federal Communications Commission (FCC). It restricts telemarketing calls, autodialed calls and texts, prerecorded messages and unsolicited faxes. Courts and the FCC treat text messages as "calls" for TCPA purposes.

The TCPA allows private lawsuits. Statutory damages are $500 per violation, and up to $1,500 per violation if a court finds the violation willful or knowing. Because a single campaign can involve thousands of messages, the potential exposure grows quickly, which is why class actions over text messages are common.

The core rule: get prior express written consent for marketing texts

For marketing texts sent using automated systems, the safest standard is prior express written consent. In practice, that means:

• The customer actively agrees to receive marketing texts from your business, for example by ticking an unchecked box, texting a keyword, or submitting a form.
• The agreement is in writing, which can include an electronic signature or a recorded online opt-in.
• The disclosure clearly states that they agree to receive marketing messages by text from your business, that consent is not a condition of purchase, that message and data rates may apply, roughly how often they will hear from you, and how to opt out.
• You keep a record of when and how consent was given, including the wording shown at the time.

A good opt-in line on a web form looks like this:

By checking this box, I agree to receive recurring marketing text messages from [Business Name] at the number provided. Consent is not a condition of purchase. Msg frequency varies. Msg & data rates may apply. Reply STOP to opt out, HELP for help. See our Privacy Policy and Terms.

Informational and transactional messages, such as an appointment reminder for a booking the customer made, generally carry less risk than marketing, but they still require consent to receive texts. Do not slip promotions into reminder messages.

What about the Supreme Court's autodialer decision?

In Facebook v. Duguid (2021), the US Supreme Court narrowed the definition of an "automatic telephone dialing system". Some businesses read this as meaning the TCPA no longer applies to their texting platform. That is risky: other TCPA provisions, the Do Not Call rules, state laws and carrier rules still apply, and several states have passed their own broader laws. Build your program on consent, not on technical arguments about how your software dials.

Do Not Call rules and quiet hours

The TCPA's telemarketing rules include the National Do Not Call Registry and restrictions on calling times. For telephone solicitations, contact is restricted to between 8 a.m. 9 p.m. in the recipient's local time. Many businesses apply the same window to marketing texts, and some state laws are stricter. Practical tips:

• Schedule campaigns by the recipient's time zone, not yours. A 9 a.m. Eastern send arrives at 6 a.m. Pacific.
• Keep marketing texts to sensible daytime hours, such as late morning to early evening.
• Check whether the states you target have stricter time windows or frequency limits.
• If you text people who did not give you prior express written consent, you also need to consider Do Not Call registry scrubbing. The simplest approach is to only text people who opted in.

Honoring opt-outs

Customers must be able to revoke consent easily. Your program should:

• Recognize common opt-out words such as STOP, END, CANCEL, UNSUBSCRIBE, QUIT and STOP ALL, and treat other clear requests ("please stop texting me") as opt-outs too.
• Send a single confirmation message after an opt-out, with no marketing content.
• Stop marketing texts promptly. The FCC has strengthened its rules on revoking consent, including recognizing revocation by any reasonable means and requiring timely processing, so do not wait for a monthly list clean-up.
• Keep an internal suppression list so opted-out numbers are never re-imported.

State "mini-TCPA" laws

Several states have their own telemarketing and text marketing laws, sometimes called mini-TCPAs. Florida and Oklahoma are well-known examples, and other states have their own calling-time, frequency and registration rules. Requirements vary, so if you market nationally, design your program around the strictest common rules: clear written consent, daytime-only sending, low frequency, and immediate opt-out handling.

Carrier rules: 10DLC, toll-free and short codes

Separately from the law, US mobile carriers require businesses to register application-to-person (A2P) text traffic:

• 10DLC (standard 10-digit local numbers) requires brand and campaign registration through The Campaign Registry (TCR), usually via your SMS provider.
• Toll-free numbers used for texting must complete toll-free verification.
• Short codes are approved through a separate application process and suit high-volume programs.

Unregistered traffic is filtered or blocked, so registration is not optional. Our 10DLC registration guide walks through the process step by step. Carriers also follow industry guidelines (for example, CTIA messaging principles) that expect clear opt-in, HELP and STOP keywords, and disclosure of message frequency.

A simple compliance checklist

1. Use opt-in wording that names your business, says "marketing text messages", notes consent is not a condition of purchase, and explains STOP/HELP.
2. Use unchecked checkboxes or keyword opt-ins; never pre-tick consent.
3. Send a confirmation text after opt-in that repeats your name, frequency, rates and STOP instructions.
4. Store consent records: phone number, timestamp, source, IP or keyword, and the disclosure text.
5. Register your 10DLC brand and campaigns, or verify your toll-free number.
6. Send only in daytime hours in the recipient's time zone.
7. Process opt-outs immediately and keep a permanent suppression list.
8. Do not buy, rent or share phone lists.
9. Identify your business in every message.
10. Review your program at least once a year, as rules and court decisions change.

Writing texts that comply and convert

• Start with your business name: "Maple Dental: .."
• Keep it short and specific: one offer, one link, one deadline.
• Avoid ALL CAPS, excessive punctuation and public URL shorteners, which carriers often filter.
• Include "Reply STOP to opt out" regularly, especially in the first message and periodically after.
• Send less often than you think. Two to four well-timed messages per month usually beats daily blasts.

What does a compliant SMS program cost?

Prices are in US dollars and follow our current price list. Message fees depend on volume and route and are quoted separately. These prices are positioned below typical US agency rates. Contact us for an exact quote.

How DND Teams helps

We set up compliant text marketing for small businesses in cities such as New York, Los Angeles, Chicago and Houston. We focus on the parts that most small businesses get wrong: consent capture, registration, timing and opt-outs. See our bulk SMS services and our US SMS compliance guide.

Prices shown are indicative ranges in US dollars and exclude taxes and third-party charges (such as Meta or carrier fees, billed at cost) unless stated. Your price depends on your requirements; get a custom quote for an exact figure. This article is general information, not legal advice, and reflects our understanding as of October 2026.