{"id":22820,"date":"2024-05-01T21:17:44","date_gmt":"2024-05-01T21:17:00","guid":{"rendered":"https:\/\/www.bloomreach.com\/library\/understanding-tcpa-and-ctia-compliance-for-sms-marketing-in-the-us"},"modified":"2026-10-02T21:22:08","modified_gmt":"2026-10-02T21:22:08","slug":"understanding-tcpa-and-ctia-compliance-for-sms-marketing-in-the-us","status":"publish","type":"library","link":"https:\/\/www.bloomreach.com\/en\/blog\/understanding-tcpa-and-ctia-compliance-for-sms-marketing-in-the-us","title":{"rendered":"Understanding TCPA and CTIA Compliance for SMS Marketing in the US"},"content":{"rendered":"<p><strong>Disclaimer:<\/strong><\/p>\n<p><b>The information in this post is for informational purposes only. Please contact your legal team to obtain advice with respect to any particular issues or concerns regarding TCPA compliance.<\/b><\/p>\n<p><b>What changed in 2026:<\/b><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Quiet hours are a litigation target.<\/b><span style=\"font-weight: 400;\"> Class actions over opted-in texts sent outside 8 a.m. to 9 p.m. have run since 2025. One federal court sided with the defense in April 2026, but the FCC has not ruled on whether the window applies to consented messages.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Texts are not &#8220;calls&#8221; for Do Not Call lawsuits in three states.<\/b><span style=\"font-weight: 400;\"> A July 2026 Seventh Circuit ruling covers Illinois, Indiana, and Wisconsin; the consent rules for marketing texts are unchanged.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Opt-out rules are moving again.<\/b><span style=\"font-weight: 400;\"> The FCC delayed its &#8220;revoke-all&#8221; rule to January 31, 2027, and will vote on September 30, 2026 on a draft that would let senders make a clearly disclosed &#8220;Reply STOP&#8221; their only opt-out method.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Details and sources are in <\/span><strong>What Changed: TCPA Updates for 2025-2026<\/strong><span style=\"font-weight: 400;\"> below.<\/span><\/p>\n<h2>What Is the TCPA?<\/h2>\n<p><b>The Telephone Consumer Protection Act (TCPA)<\/b><span style=\"font-weight: 400;\"> is a United States federal law governing the regulation of telephone solicitations. The TCPA was first signed into law in 1991 and has remained the bedrock of federal telemarketing regulations ever since.<\/span><\/p>\n<h2>Who Must Comply With the TCPA?<\/h2>\n<p><span style=\"font-weight: 400;\">Because the TCPA regulates all telephone solicitations, any person, business, or entity that markets or sells their products or services over the phone, including voice calls, faxes, VoIP calls, and <\/span><b>text messages<\/b><span style=\"font-weight: 400;\">, is subject to the TCPA.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Brands using or planning to use <\/span><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/sms-marketing\"><span style=\"font-weight: 400;\">SMS marketing<\/span><\/a><span style=\"font-weight: 400;\"> should be aware of Sections <\/span><a href=\"https:\/\/www.fcc.gov\/sites\/default\/files\/tcpa-rules.pdf\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">4<\/span><\/a><span style=\"font-weight: 400;\"> and <\/span><a href=\"https:\/\/www.fcc.gov\/sites\/default\/files\/tcpa-rules.pdf\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">5<\/span><\/a><span style=\"font-weight: 400;\"> of the TCPA&#8217;s definition, which define what they mean by &#8220;telephone solicitation&#8221; and &#8220;unsolicited advertisement.&#8221;<\/span><\/p>\n<h3><b>Why Does the TCPA Matter for SMS Marketing?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">You cannot send unsolicited marketing text messages to your customers unless they voluntarily give you <\/span><b>prior express written consent<\/b><span style=\"font-weight: 400;\">, which the <\/span><a href=\"https:\/\/www.ecfr.gov\/current\/title-47\/chapter-I\/subchapter-B\/part-64\/subpart-L\/section-64.1200\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">FCC&#8217;s rules<\/span><\/a><span style=\"font-weight: 400;\"> define as:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">&#8220;An agreement, in writing, bearing the signature of the person called that clearly authorizes the seller to deliver or cause to be delivered to the person called advertisements or telemarketing messages using an automatic telephone dialing system or an artificial or prerecorded voice, and the telephone number to which the signatory authorizes such advertisements or telemarketing messages to be delivered.&#8221;<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This consent must specify the phone number to be called and include the receiver&#8217;s written or electronic signature, which could be a button press confirming the agreement. The caller must also disclose that consent is not a condition of purchase.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Typically, consent is captured via opt-in forms on your website or during checkout. The consent language must be clearly communicated and separate from other terms.<\/span><\/p>\n<p><b>If you already have phone numbers from your customers, can you just start sending them marketing messages?<\/b><span style=\"font-weight: 400;\"> No. Having someone&#8217;s phone number does not mean you have permission to text them. They must explicitly opt in to marketing communications from your brand.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The same goes for an email opt-in. Consent to marketing email is not consent to marketing texts: the written agreement has to name the phone number and authorize text messages to it.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Consent is tied to the owner of the phone number, not the phone number itself. And if you operate a family of brands, consent to SMS from one brand does <\/span><b>not<\/b><span style=\"font-weight: 400;\"> mean consent to SMS from another. Each consent must be captured separately and clearly defined.<\/span><\/p>\n<h3><b>Transactional vs. Promotional Messages<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The TCPA applies different consent standards depending on the type of message you send:<\/span><\/p>\n<p><b>Promotional\/marketing messages<\/b><span style=\"font-weight: 400;\"> require <\/span><b>prior express written consent<\/b><span style=\"font-weight: 400;\"> (the higher standard). These include discount offers, product announcements, flash sales, upsell campaigns, and any message designed to promote or advertise.<\/span><\/p>\n<p><b>Transactional\/informational messages<\/b><span style=\"font-weight: 400;\"> require <\/span><b>prior express consent<\/b><span style=\"font-weight: 400;\">, which can be oral or written (a lower standard). These include order confirmations, shipping updates, appointment reminders, account alerts, and password resets. However, transactional messages cannot contain promotional content. If you include a discount code in a shipping notification, the entire message may be classified as promotional.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">What decides the category is the message&#8217;s purpose. The FCC&#8217;s rules define an advertisement as any material advertising the commercial availability or quality of goods or services, and telemarketing as a message sent to encourage a purchase. Under the FCC&#8217;s <\/span><a href=\"https:\/\/docs.fcc.gov\/public\/attachments\/FCC-03-153A1.pdf\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">dual-purpose rule<\/span><\/a><span style=\"font-weight: 400;\">, a message that informs and also promotes counts as promotional. Here is how that sorts the texts a retailer sends most often:<\/span><\/p>\n<table>\n<thead>\n<tr>\n<th>\n<p><span style=\"font-weight: 400;\">Message<\/span><\/p>\n<\/th>\n<th>\n<p><span style=\"font-weight: 400;\">Treat as<\/span><\/p>\n<\/th>\n<th>\n<p><span style=\"font-weight: 400;\">Why<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\n<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Order confirmation<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Transactional<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Confirms a purchase the customer already made<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Shipping or delivery update<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Transactional<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Reports on an existing order<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Shipping update with a discount code for the next order<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Promotional<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">The code encourages a new purchase, so the whole message is promotional<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">One-time passcode or login code<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Transactional<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Completes a security step, promotes nothing<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Password reset or account alert<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Transactional<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Account service, no offer<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Abandoned cart reminder<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Promotional<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Its purpose is to get the customer to complete a purchase, with or without an offer<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Back-in-stock or price-drop alert<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Promotional<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Advertises the availability or price of goods<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">&#8220;Buy again&#8221; or product recommendation<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Promotional<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Encourages a new purchase<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Birthday or loyalty offer<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Promotional<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">Advertises an offer<\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400;\">Edge cases, such as a review request or a loyalty points balance with a link to the store, depend on the wording. When a message is borderline, treat it as promotional and hold it to the written-consent standard.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Understanding this distinction is important. Many businesses overcollect consent for transactional messages or undercollect for promotional ones. The safest approach: obtain written consent for all SMS communications and clearly separate transactional from promotional messages in your workflows.<\/span><\/p>\n<h2><b>TCPA Requirements for SMS Marketers<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Here are the key TCPA requirements for SMS marketing, along with Bloomreach solutions to help you stay compliant:<\/span><\/p>\n<h3><b>Consent<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Above all else, capturing clear and unambiguous consent is the most important requirement of TCPA compliance. Without prior express written consent, you may not send marketing messages.<\/span><\/p>\n<p><b>Bloomreach solution:<\/b> <a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/consent-management\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Consent management<\/span><\/a><span style=\"font-weight: 400;\"> + <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/tcpa-list-validation\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">TCPA list validation<\/span><\/a><\/p>\n<h3><b>Make It Easy To Opt Out<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The TCPA requires that customers can easily opt out of your SMS marketing program. The accepted method of unsubscribing is to respond to a text with <\/span><b>&#8220;STOP.&#8221;<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Since April 2025, FCC rules require businesses to accept opt-out requests through <\/span><b>any reasonable method<\/b><span style=\"font-weight: 400;\">, not just keyword replies. This includes email, phone calls, website forms, chatbots, or even in-person requests. Businesses must process opt-out requests within <\/span><b>10 business days<\/b><span style=\"font-weight: 400;\"> and may send a single confirmation message (within 5 minutes, with no promotional content) to clarify which types of messages the consumer wants to stop receiving.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The rule also covers wording. A reply of &#8220;stop,&#8221; &#8220;quit,&#8221; &#8220;end,&#8221; &#8220;revoke,&#8221; &#8220;opt out,&#8221; &#8220;cancel,&#8221; or &#8220;unsubscribe&#8221; is always a valid opt-out. Any other reply counts too if a reasonable person would read it as a request to stop, so &#8220;please stop texting me&#8221; and &#8220;take me off your list&#8221; are opt-outs in law.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Keyword matching can miss those. In Bloomreach\u2019s mobile messaging app, a <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/keyword-auto-responses\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">keyword auto-response<\/span><\/a><span style=\"font-weight: 400;\"> blocks the number and records the consent change the moment a message starts with a configured opt-out keyword. A reply that puts the keyword mid-sentence (&#8220;I want to STOP getting these&#8221;) needs a second layer. A <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/keyword-auto-response-best-practices\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">scenario that scans incoming messages<\/span><\/a><span style=\"font-weight: 400;\"> looks for opt-out phrases anywhere in the text, revokes consent, and sends the confirmation. Your legal team decides which phrases count; the platform enforces the list you give it.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It&#8217;s good practice to have easily accessible terms and conditions and periodically remind recipients of how to opt out so they aren&#8217;t frustrated or confused by the process.<\/span><\/p>\n<p><b>Bloomreach solution:<\/b> <a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/consent-management\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Consent management<\/span><\/a><span style=\"font-weight: 400;\"> and <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/keyword-auto-responses\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">keyword opt-outs<\/span><\/a><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.bloomreach.com\/wp-content\/uploads\/2024\/05\/tcpa_opt-in.jpg\" alt=\"Example of opt-out messaging in SMS marketing\" \/><\/p>\n<h3><b>Send Time Restrictions (Silent Hours)<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The TCPA stipulates that text messages may not be sent before 8 a.m. or after 9 p.m. in the recipient&#8217;s time zone. Certain states are more restrictive:<\/span><\/p>\n<table>\n<thead>\n<tr>\n<th>\n<p><span style=\"font-weight: 400;\">Jurisdiction<\/span><\/p>\n<\/th>\n<th>\n<p><span style=\"font-weight: 400;\">Permitted window (recipient&#8217;s local time)<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\n<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\n<p><span style=\"font-weight: 400;\">Federal (TCPA)<\/span><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">8 a.m. to 9 p.m.<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><a href=\"https:\/\/www.flsenate.gov\/Session\/Bill\/2021\/1120\/Analyses\/2021s01120.rc.PDF\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Florida<\/span><\/a><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">8 a.m. to 8 p.m.<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><a href=\"https:\/\/webserver1.lsb.state.ok.us\/cf_pdf\/2021-22%20ENR\/hB\/HB3168%20ENR.PDF\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Oklahoma<\/span><\/a><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">8 a.m. to 8 p.m.<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><a href=\"https:\/\/lawfilesext.leg.wa.gov\/biennium\/2021-22\/Pdf\/Bills\/Session%20Laws\/House\/1497-S.SL.pdf?q=20220525151557\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Washington<\/span><\/a><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">8 a.m. to 8 p.m.<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><a href=\"https:\/\/www.dwt.com\/blogs\/broadband-advisor\/2023\/05\/telemarketing-tcpa-maryland-florida\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Maryland<\/span><\/a><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">8 a.m. to 8 p.m.<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/texas-senate-bill-140\"><span style=\"font-weight: 400;\">Texas<\/span><\/a><\/p>\n<\/td>\n<td>\n<p><span style=\"font-weight: 400;\">9 a.m. to 9 p.m. Monday to Saturday, noon to 9 p.m. Sunday<\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400;\">Oklahoma and Maryland also cap solicitations at three per 24 hours on the same subject. <\/span><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/texas-senate-bill-140\"><span style=\"font-weight: 400;\">Texas SB 140<\/span><\/a><span style=\"font-weight: 400;\">, which took effect in September 2025, extended the state&#8217;s telemarketing rules to text messages.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">To avoid risk, send texts between 9 a.m. and 8 p.m. and ensure time zones are respected.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Quiet hours are also where much of the recent litigation sits. Since early 2025, plaintiffs have filed class actions over marketing texts sent outside 8 a.m. to 9 p.m. to people who had opted in. An industry group asked the FCC in March 2025 to rule that the window doesn&#8217;t apply to consented texts, and that petition is still open. One federal district court <\/span><a href=\"https:\/\/www.nixonpeabody.com\/insights\/alerts\/2026\/05\/13\/a-loud-decision-on-tcpa-quiet-hours\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">agreed with the defense<\/span><\/a><span style=\"font-weight: 400;\"> in April 2026, but that ruling binds no one else. Until the FCC or an appeals court settles it, apply the window to every marketing text, consented or not.<\/span><\/p>\n<p><b>Bloomreach solution:<\/b> <a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/silent-hours\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Silent hours<\/span><\/a><\/p>\n<h3><b>Identification Requirements<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The TCPA requires the sender to provide their name, the name of the company they&#8217;re communicating on behalf of, and a telephone number or address which can be used to contact them again. This information should appear in your first message to new subscribers.<\/span><\/p>\n<p><b>Bloomreach solution:<\/b> <a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/sms-campaigns#brand-name\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Brand name<\/span><\/a><\/p>\n<h3><b>Message Frequency Guidelines<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The TCPA does not set strict limits on SMS frequency, but excessive messaging can be perceived as harassment and increases compliance risk. Most brands follow a general guideline of 1-2 promotional messages per week. Carrier policies, which are guidelines rather than law, add further restrictions:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Abandoned cart messages should be limited to <\/span><b>one message per unique cart event<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Abandoned cart messages should be sent <\/span><b>within 48 hours<\/b><span style=\"font-weight: 400;\"> of the event<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Offering subscribers the ability to customize their message frequency (weekly, monthly, or promotional-only) reduces opt-outs and builds trust.<\/span><\/p>\n<p><b>Bloomreach solution:<\/b> <a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/frequency-policy\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Frequency policy<\/span><\/a><\/p>\n<h3><b>Record-Keeping Requirements<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Maintaining detailed records of consent is your strongest defense in a TCPA complaint or lawsuit. Businesses should track:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>When and how consent was obtained<\/b><span style=\"font-weight: 400;\"> (exact date, time, and method)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>The exact language of the consent agreement<\/b><span style=\"font-weight: 400;\"> shown to the consumer<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>The contact details of the recipient<\/b><span style=\"font-weight: 400;\"> (phone number tied to consent)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Opt-out requests and processing dates<\/b><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Retain these records for at least <\/span><b>five years<\/b><span style=\"font-weight: 400;\">. Courts and regulators expect businesses to produce documented proof of consent when challenged.<\/span><\/p>\n<h3><b>Internal Do Not Call (DNC) List<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The TCPA requires callers and senders to maintain an internal do-not-call database of consumers who have asked not to be called or texted.<\/span><\/p>\n<p><b>Bloomreach solution:<\/b> <a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/consent-management\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Consent management<\/span><\/a><span style=\"font-weight: 400;\"> and <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/keyword-auto-responses\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">keyword opt-outs<\/span><\/a><\/p>\n<h3><b>National Do Not Call Registry<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Marketers are required by the TCPA to suppress phone numbers on the <\/span><a href=\"https:\/\/www.donotcall.gov\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">National Do Not Call Registry<\/span><\/a><span style=\"font-weight: 400;\">. Some states maintain their own DNC lists as well, separate from the federal list.<\/span><\/p>\n<p><b>Bloomreach solution:<\/b> <a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/tcpa-list-validation\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">TCPA list validation<\/span><\/a><\/p>\n<h2><b>What Are the Penalties for Violating TCPA Regulations?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">TCPA violations carry serious financial consequences:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>$500 per violation<\/b><span style=\"font-weight: 400;\"> for standard infractions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>$1,500 per willful violation<\/b><span style=\"font-weight: 400;\"> (treble damages)<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Do Not Call violations can also draw civil penalties from the Federal Trade Commission of up to <\/span><a href=\"https:\/\/www.ftc.gov\/business-guidance\/resources\/complying-telemarketing-sales-rule\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">$53,088 per violation<\/span><\/a><span style=\"font-weight: 400;\"> under its Telemarketing Sales Rule.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">There is no cap on statutory damages, so repeat violations can result in millions of dollars in penalties. TCPA violations are frequently pursued as class-action lawsuits, which compound the cost quickly.<\/span><\/p>\n<h3><b>Recent TCPA SMS Settlements<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Recent settlements illustrate the financial stakes of non-compliance:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Clover Network (2024):<\/b><span style=\"font-weight: 400;\"> up to $15 million for marketing texts sent to numbers on the National Do Not Call Registry<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Zales Jewelers (2025):<\/b> <a href=\"https:\/\/www.classaction.org\/news\/7.5m+-zales-settlement-ends-class-action-lawsuit-over-alleged-spam-texts\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">$7.5 million<\/span><\/a><span style=\"font-weight: 400;\"> for marketing texts to Do Not Call registrants who had never given Zales their number<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>DSW \/ Designer Brands (2025):<\/b> <a href=\"https:\/\/topclassactions.com\/lawsuit-settlements\/closed-settlements\/4-42m-dsw-tcpa-class-action-settlement\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">$4.43 million<\/span><\/a><span style=\"font-weight: 400;\"> for continuing to send marketing texts after consumers replied STOP<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Cash App (2025):<\/b> <a href=\"https:\/\/www.bottomstextsettlement.com\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">$12.5 million<\/span><\/a><span style=\"font-weight: 400;\"> for referral texts sent to Washington residents without clear consent, brought under Washington&#8217;s Commercial Electronic Mail Act rather than the TCPA<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">The pattern across these cases is clear: the largest settlements involve either sending texts without any consent at all or continuing to text after opt-out requests. Both scenarios are preventable with proper compliance infrastructure. The Cash App case adds a second lesson: state laws carry their own damages, so federal compliance alone does not close the risk.<\/span><\/p>\n<h2><b>What Are the Biggest TCPA Risks?<\/b><\/h2>\n<h3><b>Reassigned Numbers<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Nearly 100,000 numbers are reassigned each day. Since consent is associated with the called party and not the phone number, contacting reassigned numbers carries significant TCPA risk.<\/span><\/p>\n<p><b>The FCC&#8217;s <\/b><a href=\"https:\/\/www.fcc.gov\/reassigned-numbers-database\" target=\"_blank\" rel=\"noopener\"><b>Reassigned Numbers Database<\/b><\/a><b> (RND)<\/b><span style=\"font-weight: 400;\"> mitigates this risk. Operational since November 2021, the RND holds carrier reports of permanently disconnected numbers. Businesses can query the RND before sending messages to check whether a number has been disconnected since consent was obtained. A &#8220;No&#8221; response provides an FCC-recognized safe harbor if the database turns out to be wrong. Carriers must wait at least 45 days before reassigning a disconnected number, so checking at least that often keeps your list inside the window.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The RND is administered by <\/span><a href=\"https:\/\/www.reassigned.us\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">SomosGov<\/span><\/a><span style=\"font-weight: 400;\"> and available via subscription.<\/span><\/p>\n<p><b>Bloomreach solution:<\/b><span style=\"font-weight: 400;\"> Our <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/tcpa-list-validation\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">TCPA list validation<\/span><\/a><span style=\"font-weight: 400;\"> feature checks for deactivated and reassigned numbers daily and opts them out automatically. It also excludes known TCPA litigators and flags numbers on national and state DNC lists for you to review against your consent records.<\/span><\/p>\n<h3><b>Private Right of Action<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">TCPA allows individuals to sue brands directly for violations and statutory damages. While individuals can initiate legal action, TCPA violations are often pursued as class-action lawsuits, which compound costs rapidly.<\/span><\/p>\n<h3><b>Personal Liability<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">In certain situations, executives and compliance officers are being targeted personally for litigation stemming from TCPA penalties.<\/span><\/p>\n<h3><b>DNC Violations<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Following the Supreme Court&#8217;s decision in <\/span><a href=\"https:\/\/www.supremecourt.gov\/opinions\/20pdf\/19-511_p86b.pdf\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Facebook v. Duguid<\/span><\/a><span style=\"font-weight: 400;\">, TCPA litigators have turned their focus to alleging DNC violations by organizations. There are different DNC lists (federal, state, and internal), and DNC compliance is taking on renewed importance. Failure to scrub against all applicable lists before sending is one of the most common triggers for TCPA litigation.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">That theory now has a limit in part of the country. In July 2026, the Seventh Circuit held in <\/span><a href=\"https:\/\/www.skadden.com\/insights\/publications\/2026\/07\/7th-circuit-finds-that-the-private-right-of-action\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Steidinger v. Blackstone Medical Services<\/span><\/a><span style=\"font-weight: 400;\"> that a text message is not a &#8220;telephone call&#8221; under the TCPA provision that lets consumers sue over Do Not Call violations. The ruling binds only Illinois, Indiana, and Wisconsin. It leaves the FCC&#8217;s Do Not Call rules for texts, the TCPA&#8217;s consent rules, and state laws in place, so keep scrubbing.<\/span><\/p>\n<h2><b>TCPA Exemptions<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Certain types of messages are exempt from full TCPA consent requirements:<\/span><\/p>\n<p><b>Emergency messages<\/b><span style=\"font-weight: 400;\"> are fully exempt. Severe weather alerts, public safety warnings, school lockdown notifications, and medical emergencies can be sent without prior consent.<\/span><\/p>\n<p><b>Healthcare messages<\/b><span style=\"font-weight: 400;\"> under HIPAA may be sent with prior express consent (not written). This includes appointment confirmations, prescription notifications, pre-operative instructions, and lab result notifications. These messages cannot contain marketing content.<\/span><\/p>\n<p><b>Non-commercial messages<\/b><span style=\"font-weight: 400;\"> from nonprofits, political organizations, and charitable entities often fall outside TCPA marketing rules. However, if the message contains any commercial promotion, standard TCPA rules apply.<\/span><\/p>\n<p><b>Informational\/transactional messages<\/b><span style=\"font-weight: 400;\"> require prior express consent (not written) when they are purely informational. Order confirmations, shipping updates, and account alerts fall into this category, as long as they contain no promotional content.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If you believe your messages may qualify for an exemption, consult your legal team. Exemptions are nuanced, and misclassifying a promotional message as informational can result in violations.<\/span><\/p>\n<h2><b>What Is the CTIA?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The <\/span><b>CTIA (Cellular Telecommunications Industry Association)<\/b><span style=\"font-weight: 400;\"> is a trade association that represents all sectors of wireless communications. The CTIA has established messaging guidelines to help companies stay compliant with local and federal SMS regulations.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Unlike the TCPA, <\/span><a href=\"https:\/\/www.ctia.org\/the-wireless-industry\/industry-commitments\/messaging-interoperability-sms-mms\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">the CTIA messaging guidelines<\/span><\/a><span style=\"font-weight: 400;\"> are principles and best practices that rely on voluntary compliance, not legal enforcement. You won&#8217;t be fined for failing to follow them. However, carriers reserve the right to shut down short codes and block senders that violate these guidelines. While not legal requirements, they should not be treated as suggestions.<\/span><\/p>\n<h3><b>SHAFT Content Restrictions<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The CTIA&#8217;s SHAFT guidelines specify what type of content is restricted in marketing text messages. SHAFT stands for <\/span><b>Sex, Hate, Alcohol, Firearms, and Tobacco<\/b><span style=\"font-weight: 400;\"> (including CBD).<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Content regarding controlled substances and adult content must be age-gated<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Depictions or endorsements of violence or hate are prohibited<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">No inappropriate or sexual content<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Profanity or hate speech is not allowed<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Endorsements of illegal or illicit drugs are forbidden<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Products that are federally legal (such as alcohol) can be marketed via SMS as long as age-gating is in place, requiring recipients to confirm they are at least 21 years old before receiving messages.<\/span><\/p>\n<h2><b>What Changed: TCPA Updates for 2025-2026<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The TCPA regulatory landscape has shifted significantly since mid-2024. If your SMS compliance practices haven&#8217;t been updated recently, review these developments with your legal team.<\/span><\/p>\n<h3><b>January 2025: One-to-One Consent Rule Vacated<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">In December 2023, the FCC adopted a rule requiring that consent be specific to a single identified seller (closing the &#8220;lead generator loophole&#8221;). On January 24, 2025, days before it was due to take effect, the 11th Circuit Court of Appeals vacated the rule in <\/span><i><span style=\"font-weight: 400;\">Insurance Marketing Coalition v. FCC<\/span><\/i><span style=\"font-weight: 400;\">, finding that the FCC&#8217;s one-to-one and topic restrictions conflicted with the TCPA&#8217;s statutory text. The FCC formally removed it from its rules in August 2025.<\/span><\/p>\n<p><b>Current status:<\/b><span style=\"font-weight: 400;\"> The one-to-one consent rule is no longer in effect. Businesses follow the pre-2023 TCPA definition of prior express written consent, which does not mandate seller-specific approvals. Lead generators can continue obtaining consent for multiple sellers via a single form, provided the consent is clear and the consumer understands what they are agreeing to.<\/span><\/p>\n<h3><b>April 2025: New FCC Opt-Out Rules<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The FCC&#8217;s updated consent revocation rules took effect on April 11, 2025, with several key changes:<\/span><\/p>\n<p><b>Expanded opt-out methods.<\/b><span style=\"font-weight: 400;\"> Consumers can now revoke consent through any reasonable method, not just keyword replies. Businesses must accept opt-outs via text (&#8220;STOP,&#8221; &#8220;quit,&#8221; &#8220;end,&#8221; &#8220;revoke,&#8221; &#8220;opt out,&#8221; &#8220;cancel,&#8221; &#8220;unsubscribe&#8221;), email, phone calls, website forms, chatbots, or in-person requests. Consumers may also respond in the language in which they received the communication.<\/span><\/p>\n<p><b>10-business-day processing window.<\/b><span style=\"font-weight: 400;\"> Businesses must honor opt-out requests within 10 business days, down from the previous 30-day standard.<\/span><\/p>\n<p><b>Single clarification message.<\/b><span style=\"font-weight: 400;\"> You may send one clarification text within 5 minutes of receiving a revocation request to confirm which message types the consumer wants to stop. This message cannot contain any promotional content. If the consumer doesn&#8217;t respond, the opt-out applies to all automated messages from your brand.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">A related &#8220;revoke-all&#8221; provision, which would make an opt-out from one type of message apply to every automated call and text from the sender on unrelated matters, has not taken effect. The FCC delayed it to April 2026 and then, in January 2026, to <\/span><a href=\"https:\/\/www.bhfs.com\/insight\/fcc-extends-compliance-deadline-for-revoke-all-rule\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">January 31, 2027<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<h3><b>June 2025: Courts No Longer Bound by the FCC&#8217;s Reading<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">In <\/span><i><span style=\"font-weight: 400;\">McLaughlin Chiropractic v. McKesson<\/span><\/i><span style=\"font-weight: 400;\"> (June 20, 2025), the Supreme Court held that federal district courts do not have to follow the FCC&#8217;s interpretation of the TCPA in private lawsuits. Judges now read the statute themselves. Combined with the Supreme Court&#8217;s 2024 <\/span><i><span style=\"font-weight: 400;\">Loper Bright<\/span><\/i><span style=\"font-weight: 400;\"> ruling, which ended judicial deference to agency interpretations, this is why courts have started to split on questions the FCC had settled, including the two rulings below.<\/span><\/p>\n<h3>September 2025: Texas SB 140<\/h3>\n<p><span style=\"font-weight: 400;\">Texas Senate Bill 140 imposed additional requirements on automated text messages sent to Texas residents, including stricter quiet-hour restrictions (9 a.m. to 9 p.m. local time, noon to 9 p.m. on Sundays) and enhanced penalties for violations. A November 2025 settlement clarified that businesses running genuine opt-in SMS programs are effectively exempt from Chapter 302&#8217;s telemarketing registration and bonding requirements. Read our <\/span><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/texas-senate-bill-140\"><span style=\"font-weight: 400;\">detailed breakdown of Texas SB 140<\/span><\/a><span style=\"font-weight: 400;\"> for full compliance guidance.<\/span><\/p>\n<h3>February 2026: Fifth Circuit Decision on Written Consent<\/h3>\n<p><span style=\"font-weight: 400;\">In <\/span><i><span style=\"font-weight: 400;\">Bradford v. Sovereign Pest Control<\/span><\/i><span style=\"font-weight: 400;\"> (February 25, 2026), the Fifth Circuit Court of Appeals ruled that the TCPA requires only &#8220;prior express consent&#8221; for automated telemarketing calls, not &#8220;prior express <\/span><b>written<\/b><span style=\"font-weight: 400;\"> consent&#8221; as the FCC&#8217;s regulations require. The court found that the FCC&#8217;s regulation adding the &#8220;written&#8221; requirement exceeded the statutory text. The case involved prerecorded calls, not texts.<\/span><\/p>\n<p><b>What this means for marketers:<\/b><span style=\"font-weight: 400;\"> In the Fifth Circuit (Texas, Louisiana, Mississippi), oral consent may now suffice for TCPA compliance. However, this only applies in those three states, and the court did not rule on text messages specifically. Other circuits and the FCC&#8217;s own rules still mandate written consent. Oral consent is also significantly harder to document and prove in litigation.<\/span><\/p>\n<p><b>Our recommendation:<\/b><span style=\"font-weight: 400;\"> Continue obtaining written consent for all SMS marketing nationwide. Written consent remains the safest practice and provides the strongest legal defense regardless of jurisdiction.<\/span><\/p>\n<h3><b>July 2026: Seventh Circuit on Texts and Do Not Call Claims<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The Seventh Circuit&#8217;s <\/span><i><span style=\"font-weight: 400;\">Steidinger<\/span><\/i><span style=\"font-weight: 400;\"> ruling (July 14, 2026) held that texts are not &#8220;telephone calls&#8221; for private Do Not Call lawsuits. It is the first federal appeals court to decide the question, it applies only in Illinois, Indiana, and Wisconsin, and it does not touch the consent rules that govern marketing texts nationwide.<\/span><\/p>\n<h3>September 2026: FCC Updates the Opt-Out Rules<\/h3>\n<p><span style=\"font-weight: 400;\">On September 30, 2026, the FCC adopted a<\/span><a href=\"https:\/\/www.fcc.gov\/document\/fcc-votes-give-consumers-more-choice-calls-they-receive-0\" target=\"_blank\" rel=\"noopener\"> <span style=\"font-weight: 400;\">Report and Order<\/span><\/a><span style=\"font-weight: 400;\"> updating its TCPA consent-revocation rules. The order was released October 1.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The FCC made two key changes:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Informational opt-outs can be category-specific.<\/b><span style=\"font-weight: 400;\"> A consumer can opt out of a particular category of informational calls or texts \u2014 such as payment reminders \u2014 without automatically opting out of other communications they still want. This change is aimed at informational messages; it should not be read as permission to continue marketing texts after a consumer has opted out of marketing.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Senders can designate an exclusive opt-out method.<\/b><span style=\"font-weight: 400;\"> A sender may designate one or more of these methods, as long as it clearly and conspicuously discloses them in the call or text:<\/span>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">An automated, interactive voice or key-press opt-out mechanism<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">A reply to an incoming text using standardized opt-out words<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">A website or telephone number the sender provides for opt-out requests<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">For text messages, a disclosed reply-text method does not mean a brand can honor only the word \u201cSTOP.\u201d The FCC\u2019s order says senders must still recognize the standardized opt-out words covered by the rules \u2014 not just one chosen keyword.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The changes will take effect <\/span><b>30 days after publication in the Federal Register.<\/b><span style=\"font-weight: 400;\"> As of October 2, the FCC had adopted and released the order, but the final effective date had not yet been announced.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">For marketers, the practical takeaway is straightforward: keep honoring standard reply-text opt-outs, make your designated opt-out method clear in every relevant message, and maintain a process for separating informational preferences from marketing opt-outs. Review the final implementation approach with your legal team before changing an existing opt-out flow.<\/span><\/p>\n<h3><b>Mobile OS Changes Affecting SMS Delivery<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">While not regulatory changes, recent updates from Apple and Google affect how SMS marketing messages are delivered and received:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Apple iOS 26<\/b><span style=\"font-weight: 400;\"> introduces expanded message filtering that can send messages from unknown senders to a separate folder, potentially reducing visibility of welcome and confirmation texts.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/android-google-messages-how-they-affect-sms\"><b>Android Google Messages updates<\/b><\/a><span style=\"font-weight: 400;\"> add link warnings, inbox filters, and in-thread unsubscribe buttons that make opting out easier.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">These changes reinforce the importance of clear opt-in flows, branded sender IDs, and high-value message content. Encourage subscribers to save your number as a contact during onboarding.<\/span><\/p>\n<h2><b>How To Stay TCPA and CTIA Compliant With Bloomreach<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Compliance starts with the decisions your brand makes: how you collect consent, which messages count as marketing, and how you handle opt-outs. Under the TCPA, those decisions belong to the brand that sends the message.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The right platform makes those rules much easier to follow. Bloomreach\u2019s mobile messaging app applies your compliance rules automatically for every send, ensuring your messaging program:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Validates consent before each message goes out<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Holds sends that would land outside the silent hours you configure<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Applies your opt-out keywords as soon as a reply arrives<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Records every consent change with a timestamp, so you have documentation if you&#8217;re ever challenged<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Here&#8217;s what every SMS marketer should do to stay compliant, and how Bloomreach helps at each step:<\/span><\/p>\n<h3><b>Capture Consent With Compliant Sign-Up Units<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">There are multiple ways your customers can join your SMS marketing program. Some sign up via on-site pop-ups while others give consent during checkout.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Regardless of the method, your opt-in process must properly inform customers that their phone number will be used for marketing purposes, that they can opt out at any time, and that you&#8217;ll never share their information. You should also provide links to your terms of service and privacy policy.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Bloomreach guides marketers through the setup of these compliance requirements. You can build the ideal sign-up forms for your <\/span><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/everything-you-need-to-create-the-best-sms-marketing-campaigns\"><span style=\"font-weight: 400;\">SMS marketing initiatives<\/span><\/a><span style=\"font-weight: 400;\"> and include all the necessary information to maintain compliance.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If you want to collect both email and SMS consent simultaneously, you must capture clear and unambiguous consent for each program as a separate opt-in. Subscribers cannot enter both phone and email information on the same screen with a single submission button, as SMS consent may be misinterpreted as forced. Separate consent categories also mean an email unsubscribe doesn&#8217;t switch off SMS, or the other way round. With Bloomreach, you can implement our <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/sms-sign-up-units\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">multi-step sign-up units<\/span><\/a><span style=\"font-weight: 400;\"> to grow both your email and SMS lists quickly and compliantly.<\/span><\/p>\n<h3><b style=\"font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, 'Noto Sans', sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji';\">Consent Language Examples<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Your opt-in language must be specific and transparent. Here are examples of compliant consent language for different scenarios:<\/span><\/p>\n<p><b>Web form opt-in:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">&#8220;[By checking this box\/By submitting this form] and providing your phone number, you agree to receive recurring automated marketing messages, including cart reminders, at the phone number provided, even if that number is on a state or national do not call registry. Consent is not a condition of purchase. Reply STOP to unsubscribe. Reply HELP for help. Message frequency varies. Msg &amp; data rates may apply. View our Privacy Policy and Terms of Service.&#8221;<\/span><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.bloomreach.com\/wp-content\/uploads\/2024\/05\/tcpa_opt-in-form.png\" alt=\"Example of TCPA-compliant consent for SMS marketing\" \/><\/p>\n<p><b>Double opt-in confirmation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">&#8220;[Brand Name]: Reply YES to receive automated marketing messages and cart reminders. Msg frequency varies. Msg &amp; data rates may apply. Reply HELP for help. Reply STOP to unsubscribe.&#8221;<\/span><\/p>\n<p><b>In-store or text-to-join:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">&#8220;Text JOIN to [short code] to receive exclusive offers from [Brand Name]. By texting JOIN, you consent to receive automated marketing texts. Consent is not required for purchase. Msg &amp; data rates may apply. Reply STOP to opt out.&#8221;<\/span><\/p>\n<h3><b style=\"font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, 'Noto Sans', sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji';\">Build Your Lists Quickly and Compliantly With Keywords<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Keywords are a great way to increase your subscriber count through external sources such as social networks (Instagram stories, Facebook ads) or posters in brick-and-mortar shops (text to join). Be sure to use the required compliance language and provide a link to your terms of service and privacy policy.<\/span><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.bloomreach.com\/wp-content\/uploads\/2024\/05\/tcpa_keywords.jpg\" alt=\"Example of using other keywords to sign up for SMS marketing\" \/><\/p>\n<p><span style=\"font-weight: 400;\">Bloomreach collects phone numbers by combining <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/consent-management\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">consent management<\/span><\/a><span style=\"font-weight: 400;\"> and <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/web-layers\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">weblayers<\/span><\/a><span style=\"font-weight: 400;\">. We provide templates drafted with TCPA and CTIA regulations in mind. You can find these templates in the platform with the prefix <\/span><i><span style=\"font-weight: 400;\">TCPA_CTIA.<\/span><\/i><\/p>\n<h3><b>Remove Customers Who Have Opted Out<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Under the April 2025 opt-out rules, you must honor opt-out requests from <\/span><b>any reasonable channel<\/b><span style=\"font-weight: 400;\"> within 10 business days. When a customer replies with &#8220;STOP&#8221; or a similar keyword, your brand needs to respond immediately.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">When a reply starts with one of your configured opt-out keywords, Bloomreach blocks the number from further messages straight away, records the consent rejection on the matching customer profiles, and sends your confirmation. You can set up multiple <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/keyword-auto-responses\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">keywords to revoke consent<\/span><\/a><span style=\"font-weight: 400;\"> (up to 100 per configuration) and add a scenario that catches opt-out phrases elsewhere in a message, so subscribers can leave in their own words.<\/span><\/p>\n<h3><b>Meet CTIA Guidelines for Long Codes and Short Codes<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The TCPA doesn&#8217;t regulate the provisioning of short codes, long codes, or toll-free numbers, although how these numbers are used must comply with TCPA requirements.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The CTIA reserves the right to shut down phone numbers for violations of the TCPA or CTIA <\/span><a href=\"https:\/\/www.ctia.org\/the-wireless-industry\/industry-commitments\/messaging-interoperability-sms-mms\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">messaging principles and best practices<\/span><\/a><span style=\"font-weight: 400;\">. All numbers must be registered, and each sender&#8217;s phone number collection processes must be vetted for compliance.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">For standard 10-digit long codes, that registration is 10DLC: you register your brand and each messaging campaign with The Campaign Registry, and since February 1, 2025, US carriers have blocked unregistered 10DLC traffic. Toll-free numbers go through a separate verification. Carriers review your opt-in flow and sample messages as part of approval, so the consent work above is also what gets you approved.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Bloomreach partners with leading SMS providers like <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/sinch-sms\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Sinch<\/span><\/a><span style=\"font-weight: 400;\"> and <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/infobip-sms\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Infobip<\/span><\/a><span style=\"font-weight: 400;\"> to manage this process and help you get the green light before you start sending.<\/span><\/p>\n<p><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/a-guide-to-sms-short-codes\"><span style=\"font-weight: 400;\">Short codes<\/span><\/a><span style=\"font-weight: 400;\"> (five-to-six-digit numbers that texts are sent from) are considered the &#8220;gold standard&#8221; for SMS senders. While they come with a cost (around $500 per month), the rigorous approval process ensures you meet the highest compliance standards. Short-code senders are given higher messaging throughput and are prioritized by carriers for better deliverability.<\/span><\/p>\n<h3><b>Disclose Data Rates and Carrier Fees<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">According to the CTIA guidelines, you must make customers aware that data rates and carrier fees may apply. It&#8217;s usually as simple as including <\/span><b>&#8220;Msg &amp; data rates may apply&#8221;<\/b><span style=\"font-weight: 400;\"> in your opt-in language.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">See an example of the default opt-in message flow:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>CUSTOMER:<\/b><span style=\"font-weight: 400;\"> [Enters phone number via a TCPA-compliant sign-up unit]<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>BRAND:<\/b> <i><span style=\"font-weight: 400;\">{{brand_name}}: Reply YES to receive automated marketing messages and cart reminders.<\/span><\/i><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>CUSTOMER:<\/b> <i><span style=\"font-weight: 400;\">YES<\/span><\/i><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>BRAND:<\/b> <i><span style=\"font-weight: 400;\">{{brand_name}}: Confirmed! Msg frequency varies. Msg &amp; data rates may apply. Reply HELP for help. Reply STOP to unsubscribe.<\/span><\/i><\/li>\n<\/ul>\n<h3><b style=\"font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, 'Noto Sans', sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji';\">Respect Send Time Restrictions (Quiet Hours)<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Marketers should only send messages during TCPA-compliant timeframes, taking into account state-specific restrictions and local time zones. For nationwide campaigns, adjust for time zone differences: a text sent at 9 a.m. Eastern Time may still fall within quiet hours for recipients on the West Coast.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Bloomreach gives you the ability to define and control <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/silent-hours\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">silent hours<\/span><\/a><span style=\"font-weight: 400;\"> to pause campaigns until it is safe to send again. Silent hours can follow each customer&#8217;s own time zone, with a default zone as the fallback when a profile has none. Bloomreach also supports <\/span><a href=\"https:\/\/www.bloomreach.com\/en\/blog\/sms-automation-tools\"><span style=\"font-weight: 400;\">AI-powered optimal send times<\/span><\/a><span style=\"font-weight: 400;\"> that maximize engagement while staying within compliant windows.<\/span><\/p>\n<h3><b style=\"font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, 'Noto Sans', sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji';\">Send Relevant Content<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Make sure that the content you send is relevant, aligned with your brand, and delivers on the promises you made when convincing customers to subscribe. Always provide value and do not send messages just for the sake of sending them.<\/span><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.bloomreach.com\/wp-content\/uploads\/2024\/05\/tcpa_order-confirmation.jpg\" alt=\"Example of relevant SMS messaging to stay TCPA-compliant\" \/><\/p>\n<h3><b>Remove Deactivated Numbers<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Consent is tied to the owner of a phone number, <\/span><b>not the phone number itself<\/b><span style=\"font-weight: 400;\">. Prior written consent becomes invalid if the customer who gave you consent no longer uses that phone number because it was deactivated or swapped.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">When a person terminates their cellular plan, gets a new phone number, or changes carriers, they need to be removed from your SMS marketing program. Ignoring this process leads to spam complaints, carrier filtering, and legal action.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Use the <\/span><a href=\"https:\/\/www.reassigned.us\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">FCC&#8217;s Reassigned Numbers Database<\/span><\/a><span style=\"font-weight: 400;\"> to check whether numbers in your list have been reassigned. Bloomreach helps you automatically identify and remove deactivated numbers using our <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/tcpa-list-validation\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">TCPA list validation<\/span><\/a><span style=\"font-weight: 400;\"> feature, which runs the reassigned-number check daily and also suppresses known TCPA litigators.<\/span><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.bloomreach.com\/wp-content\/uploads\/2024\/05\/tcpa_abandoned-cart.jpg\" alt=\"Example of TCPA-compliant abandoned cart messaging\" \/><\/p>\n<p>Any abandoned cart messages (e.g., shopping cart reminders) should:<\/p>\n<ul>\n<li>Be limited to only one message per unique abandoned cart event<\/li>\n<li>Be sent within 48 hours of the unique abandoned cart<\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">You can easily control the frequency of your SMS campaigns using the <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/frequency-policy\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">frequency policy<\/span><\/a><span style=\"font-weight: 400;\"> feature.<\/span><\/p>\n<h2><b>boohooMAN Drives 25x ROI With Compliant SMS<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Compliance doesn&#8217;t mean sacrificing performance. UK fashion brand <\/span><a href=\"https:\/\/www.bloomreach.com\/en\/case-studies\/boohooman\"><span style=\"font-weight: 400;\">boohooMAN<\/span><\/a><span style=\"font-weight: 400;\"> used Bloomreach to move SMS from one-off, unsegmented blasts to personalized campaigns built on compliantly collected customer data.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The results: a <\/span><b>5x overall ROI from SMS<\/b><span style=\"font-weight: 400;\"> and a <\/span><b>25x ROI from an SMS birthday flow<\/b><span style=\"font-weight: 400;\"> sent to customers who weren&#8217;t opted in to email \u2014 proving that consented, well-targeted SMS drives real revenue.<\/span><\/p>\n<h2><b>SMS Compliance Quick-Reference Checklist<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Use this checklist to verify your SMS program meets TCPA and CTIA requirements:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Consent captured:<\/b><span style=\"font-weight: 400;\"> Prior express written consent obtained for all marketing messages<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Consent documented:<\/b><span style=\"font-weight: 400;\"> Records include timestamp, method, and exact language shown<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <b>Messages classified:<\/b> Each automated text sorted as transactional or promotional, with no promotional content in transactional texts<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Opt-out available:<\/b><span style=\"font-weight: 400;\"> &#8220;STOP&#8221; keyword and multiple opt-out channels supported<\/span><\/li>\n<li aria-level=\"1\">[ ] <b>Plain-language opt-outs caught:<\/b><span style=\"font-weight: 400;\"> Replies like &#8220;please stop texting me&#8221; detected, not just keywords at the start<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Opt-outs processed promptly:<\/b><span style=\"font-weight: 400;\"> Within 10 business days (aim for real-time)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Silent hours respected:<\/b><span style=\"font-weight: 400;\"> Messages sent between 9 a.m. and 8 p.m. local time (a conservative window; the federal rule is 8 a.m. to 9 p.m.)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Sender identified:<\/b><span style=\"font-weight: 400;\"> Business name included in every message<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>DNC lists scrubbed:<\/b><span style=\"font-weight: 400;\"> Federal, state, and internal DNC lists checked before sending<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Reassigned numbers checked:<\/b><span style=\"font-weight: 400;\"> RND queried at least every 45 days<\/span><\/li>\n<li aria-level=\"1\">[ ] <b>Numbers registered:<\/b><span style=\"font-weight: 400;\"> 10DLC brand and campaign registration or toll-free verification complete<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Frequency controlled:<\/b><span style=\"font-weight: 400;\"> No excessive messaging; abandoned cart limited to 1 per event within 48 hours<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Data rates disclosed:<\/b><span style=\"font-weight: 400;\"> &#8220;Msg &amp; data rates may apply&#8221; included in opt-in language<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>SHAFT compliant:<\/b><span style=\"font-weight: 400;\"> No restricted content; age-gating for applicable products<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">[ ] <\/span><b>Records retained:<\/b><span style=\"font-weight: 400;\"> Consent records kept for at least 5 years<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\">[ ] <b style=\"font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, 'Noto Sans', sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji';\">State laws reviewed:<\/b><span style=\"font-weight: 400;\"> Texas SB 140, Florida, Oklahoma, Washington, and California requirements addressed<\/span><\/li>\n<\/ul>\n<h2><b>Stay Compliant With Bloomreach<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">TCPA compliance is non-negotiable, and the rules keep changing. Bloomreach gives you the controls and the audit trail in one place: <\/span><a href=\"https:\/\/documentation.bloomreach.com\/engagement\/docs\/tcpa-list-validation\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">TCPA list validation<\/span><\/a><span style=\"font-weight: 400;\"> screens for deactivated numbers, reassigned numbers, and known litigators and flags DNC registrants, while consent management, silent hours, frequency policies, and opt-out keywords apply your rules to every send.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">See how <\/span><a href=\"https:\/\/www.bloomreach.com\/en\/products\/marketing-automation\/mobile-messaging\"><span style=\"font-weight: 400;\">Bloomreach\u2019s mobile messaging app<\/span><\/a><span style=\"font-weight: 400;\"> keeps your SMS marketing compliant and high-performing.<\/span><\/p>\n\n<div id=\"faq-block-v1block_0f7cec8d07705f3a9ac7b17b0b59b893\" class=\"faq-section-v1-container exclude_from_toc\">\n    <h3 class=\"section-title\">Frequently Asked Questions<\/h3>\n\n        <div\n        class=\"wd-faq-block-acf align wp-block-acf-faq-section-v1\" id=\"faq-block-v1block_0f7cec8d07705f3a9ac7b17b0b59b893\"    >\n    \n        <div class=\"faq-section-v1-acf__innerblocks\">\n<div id=\"faq-section-v1-single-itemblock_f8407e51d6c501353d5286059b9db390\" class=\"faq-section-v1-single-item-container\">\n    <div class=\"title-section\">\n        <p class=\"item-title\">Does the TCPA apply to text messages?<\/p>\n        <span class=\"item-button\">\n            <svg width=\"18\" height=\"10\" viewBox=\"0 0 18 10\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n            <g>\n            <path\n                    d=\"M9.00004 9.22C8.72864 9.22 8.47352 9.11415 8.2815 8.92281L1.00718 1.64917C0.910834 1.55282 0.85791 1.42526 0.85791 1.28888C0.85791 1.15318 0.910834 1.02494 1.00718 0.929271C1.10353 0.832923 1.23109 0.779999 1.36679 0.779999C1.5025 0.779999 1.63073 0.832923 1.7264 0.929271L9.00004 8.20223L16.2737 0.929271C16.37 0.832923 16.4976 0.779999 16.6333 0.779999C16.769 0.779999 16.8972 0.832923 16.9929 0.929271C17.0893 1.02562 17.1422 1.15318 17.1422 1.28888C17.1422 1.42458 17.0893 1.55282 16.9929 1.64849L9.71927 8.92213C9.52793 9.11415 9.27213 9.22 9.00004 9.22Z\"\n                    fill=\"#019ACE\"\/>\n            <\/g>\n            <\/svg>\n        <\/span>\n    <\/div>\n\n    <div class=\"item-content\">\n        <div class=\"content-inner\">\n            <p>Yes. The TCPA applies to all telephone solicitations, including SMS and MMS messages. Any marketing text message sent using an automatic dialing system or to a mobile phone number requires prior express written consent from the recipient.\r\n<\/p>\n        <\/div>\n    <\/div>\n<\/div>\n\n\n<div id=\"faq-section-v1-single-itemblock_802cf0cb756cd979a645afb51623d39d\" class=\"faq-section-v1-single-item-container\">\n    <div class=\"title-section\">\n        <p class=\"item-title\">What are the penalties for TCPA violations?<\/p>\n        <span class=\"item-button\">\n            <svg width=\"18\" height=\"10\" viewBox=\"0 0 18 10\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n            <g>\n            <path\n                    d=\"M9.00004 9.22C8.72864 9.22 8.47352 9.11415 8.2815 8.92281L1.00718 1.64917C0.910834 1.55282 0.85791 1.42526 0.85791 1.28888C0.85791 1.15318 0.910834 1.02494 1.00718 0.929271C1.10353 0.832923 1.23109 0.779999 1.36679 0.779999C1.5025 0.779999 1.63073 0.832923 1.7264 0.929271L9.00004 8.20223L16.2737 0.929271C16.37 0.832923 16.4976 0.779999 16.6333 0.779999C16.769 0.779999 16.8972 0.832923 16.9929 0.929271C17.0893 1.02562 17.1422 1.15318 17.1422 1.28888C17.1422 1.42458 17.0893 1.55282 16.9929 1.64849L9.71927 8.92213C9.52793 9.11415 9.27213 9.22 9.00004 9.22Z\"\n                    fill=\"#019ACE\"\/>\n            <\/g>\n            <\/svg>\n        <\/span>\n    <\/div>\n\n    <div class=\"item-content\">\n        <div class=\"content-inner\">\n            <p>Standard TCPA violations carry a penalty of $500 per message. Willful violations can result in $1,500 per message (treble damages). DNC violations can reach up to $43,792 per violation. There is no cap on total damages, meaning large-scale SMS campaigns that violate the TCPA can result in multi-million dollar settlements.\r\n<\/p>\n        <\/div>\n    <\/div>\n<\/div>\n\n\n<div id=\"faq-section-v1-single-itemblock_f59d11141c6d568ef6b646b493777d42\" class=\"faq-section-v1-single-item-container\">\n    <div class=\"title-section\">\n        <p class=\"item-title\">Do transactional messages require consent?<\/p>\n        <span class=\"item-button\">\n            <svg width=\"18\" height=\"10\" viewBox=\"0 0 18 10\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n            <g>\n            <path\n                    d=\"M9.00004 9.22C8.72864 9.22 8.47352 9.11415 8.2815 8.92281L1.00718 1.64917C0.910834 1.55282 0.85791 1.42526 0.85791 1.28888C0.85791 1.15318 0.910834 1.02494 1.00718 0.929271C1.10353 0.832923 1.23109 0.779999 1.36679 0.779999C1.5025 0.779999 1.63073 0.832923 1.7264 0.929271L9.00004 8.20223L16.2737 0.929271C16.37 0.832923 16.4976 0.779999 16.6333 0.779999C16.769 0.779999 16.8972 0.832923 16.9929 0.929271C17.0893 1.02562 17.1422 1.15318 17.1422 1.28888C17.1422 1.42458 17.0893 1.55282 16.9929 1.64849L9.71927 8.92213C9.52793 9.11415 9.27213 9.22 9.00004 9.22Z\"\n                    fill=\"#019ACE\"\/>\n            <\/g>\n            <\/svg>\n        <\/span>\n    <\/div>\n\n    <div class=\"item-content\">\n        <div class=\"content-inner\">\n            <p>Transactional messages (order confirmations, shipping updates, appointment reminders) require prior express consent, which can be oral or written. This is a lower standard than the prior express written consent required for promotional messages. However, if a transactional message includes any promotional content, it may be reclassified as promotional, requiring the higher consent standard.\r\n<\/p>\n        <\/div>\n    <\/div>\n<\/div>\n\n\n<div id=\"faq-section-v1-single-itemblock_c7de12692ba23575f2862ca7aff76480\" class=\"faq-section-v1-single-item-container\">\n    <div class=\"title-section\">\n        <p class=\"item-title\">How quickly must opt-out requests be processed?<\/p>\n        <span class=\"item-button\">\n            <svg width=\"18\" height=\"10\" viewBox=\"0 0 18 10\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n            <g>\n            <path\n                    d=\"M9.00004 9.22C8.72864 9.22 8.47352 9.11415 8.2815 8.92281L1.00718 1.64917C0.910834 1.55282 0.85791 1.42526 0.85791 1.28888C0.85791 1.15318 0.910834 1.02494 1.00718 0.929271C1.10353 0.832923 1.23109 0.779999 1.36679 0.779999C1.5025 0.779999 1.63073 0.832923 1.7264 0.929271L9.00004 8.20223L16.2737 0.929271C16.37 0.832923 16.4976 0.779999 16.6333 0.779999C16.769 0.779999 16.8972 0.832923 16.9929 0.929271C17.0893 1.02562 17.1422 1.15318 17.1422 1.28888C17.1422 1.42458 17.0893 1.55282 16.9929 1.64849L9.71927 8.92213C9.52793 9.11415 9.27213 9.22 9.00004 9.22Z\"\n                    fill=\"#019ACE\"\/>\n            <\/g>\n            <\/svg>\n        <\/span>\n    <\/div>\n\n    <div class=\"item-content\">\n        <div class=\"content-inner\">\n            <p>Under the FCC&#8217;s April 2025 rules, businesses must process opt-out requests within 10 business days. Best practice is to process them in real time. After receiving an opt-out, you may send a single confirmation message within 5 minutes (with no promotional content), but no further marketing messages.\r\n<\/p>\n        <\/div>\n    <\/div>\n<\/div>\n\n\n<div id=\"faq-section-v1-single-itemblock_c52721c33ada5eaf55a69cbcb76a606e\" class=\"faq-section-v1-single-item-container\">\n    <div class=\"title-section\">\n        <p class=\"item-title\">What is the difference between TCPA and CTIA?<\/p>\n        <span class=\"item-button\">\n            <svg width=\"18\" height=\"10\" viewBox=\"0 0 18 10\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n            <g>\n            <path\n                    d=\"M9.00004 9.22C8.72864 9.22 8.47352 9.11415 8.2815 8.92281L1.00718 1.64917C0.910834 1.55282 0.85791 1.42526 0.85791 1.28888C0.85791 1.15318 0.910834 1.02494 1.00718 0.929271C1.10353 0.832923 1.23109 0.779999 1.36679 0.779999C1.5025 0.779999 1.63073 0.832923 1.7264 0.929271L9.00004 8.20223L16.2737 0.929271C16.37 0.832923 16.4976 0.779999 16.6333 0.779999C16.769 0.779999 16.8972 0.832923 16.9929 0.929271C17.0893 1.02562 17.1422 1.15318 17.1422 1.28888C17.1422 1.42458 17.0893 1.55282 16.9929 1.64849L9.71927 8.92213C9.52793 9.11415 9.27213 9.22 9.00004 9.22Z\"\n                    fill=\"#019ACE\"\/>\n            <\/g>\n            <\/svg>\n        <\/span>\n    <\/div>\n\n    <div class=\"item-content\">\n        <div class=\"content-inner\">\n            <p>The TCPA is a federal law enforced by the FCC with legally binding requirements and penalties. The CTIA is a wireless industry trade association that publishes voluntary best-practice guidelines. While CTIA guidelines are not legally enforceable, carriers can shut down short codes and block senders that violate them. Following both TCPA rules and CTIA guidelines provides the strongest compliance posture.\r\n<\/p>\n        <\/div>\n    <\/div>\n<\/div>\n\n\n<div id=\"faq-section-v1-single-itemblock_9415a3ee7adf70b7e9cb40d4d860336f\" class=\"faq-section-v1-single-item-container\">\n    <div class=\"title-section\">\n        <p class=\"item-title\">What is the CTIA&#8217;s SHAFT policy?<\/p>\n        <span class=\"item-button\">\n            <svg width=\"18\" height=\"10\" viewBox=\"0 0 18 10\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n            <g>\n            <path\n                    d=\"M9.00004 9.22C8.72864 9.22 8.47352 9.11415 8.2815 8.92281L1.00718 1.64917C0.910834 1.55282 0.85791 1.42526 0.85791 1.28888C0.85791 1.15318 0.910834 1.02494 1.00718 0.929271C1.10353 0.832923 1.23109 0.779999 1.36679 0.779999C1.5025 0.779999 1.63073 0.832923 1.7264 0.929271L9.00004 8.20223L16.2737 0.929271C16.37 0.832923 16.4976 0.779999 16.6333 0.779999C16.769 0.779999 16.8972 0.832923 16.9929 0.929271C17.0893 1.02562 17.1422 1.15318 17.1422 1.28888C17.1422 1.42458 17.0893 1.55282 16.9929 1.64849L9.71927 8.92213C9.52793 9.11415 9.27213 9.22 9.00004 9.22Z\"\n                    fill=\"#019ACE\"\/>\n            <\/g>\n            <\/svg>\n        <\/span>\n    <\/div>\n\n    <div class=\"item-content\">\n        <div class=\"content-inner\">\n            <p>SHAFT stands for Sex, Hate, Alcohol, Firearms, and Tobacco (including CBD). The CTIA restricts these content categories in SMS marketing. Content involving federally legal products (like alcohol) may be permitted with age-gating that confirms recipients are at least 21 years old.\r\n<\/p>\n        <\/div>\n    <\/div>\n<\/div>\n\n<\/div>\n\n        <\/div>\n    \n            <script type=\"application\/ld+json\">\n        {\n            \"@context\": \"https:\/\/schema.org\",\n            \"@type\": \"FAQPage\",\n            \"mainEntity\": [\n                                {\n                    \"@type\": \"Question\",\n                    \"name\": \"Does the TCPA apply to text messages?\",\n                    \"acceptedAnswer\": {\n                        \"@type\": \"Answer\",\n                        \"text\": \"Yes. The TCPA applies to all telephone solicitations, including SMS and MMS messages. Any marketing text message sent using an automatic dialing system or to a mobile phone number requires prior express written consent from the recipient.\n\"\n                    }\n                },\n                                {\n                    \"@type\": \"Question\",\n                    \"name\": \"What are the penalties for TCPA violations?\",\n                    \"acceptedAnswer\": {\n                        \"@type\": \"Answer\",\n                        \"text\": \"Standard TCPA violations carry a penalty of $500 per message. Willful violations can result in $1,500 per message (treble damages). DNC violations can reach up to $43,792 per violation. There is no cap on total damages, meaning large-scale SMS campaigns that violate the TCPA can result in multi-million dollar settlements.\n\"\n                    }\n                },\n                                {\n                    \"@type\": \"Question\",\n                    \"name\": \"Do transactional messages require consent?\",\n                    \"acceptedAnswer\": {\n                        \"@type\": \"Answer\",\n                        \"text\": \"Transactional messages (order confirmations, shipping updates, appointment reminders) require prior express consent, which can be oral or written. This is a lower standard than the prior express written consent required for promotional messages. However, if a transactional message includes any promotional content, it may be reclassified as promotional, requiring the higher consent standard.\n\"\n                    }\n                },\n                                {\n                    \"@type\": \"Question\",\n                    \"name\": \"How quickly must opt-out requests be processed?\",\n                    \"acceptedAnswer\": {\n                        \"@type\": \"Answer\",\n                        \"text\": \"Under the FCC&#039;s April 2025 rules, businesses must process opt-out requests within 10 business days. Best practice is to process them in real time. After receiving an opt-out, you may send a single confirmation message within 5 minutes (with no promotional content), but no further marketing messages.\n\"\n                    }\n                },\n                                {\n                    \"@type\": \"Question\",\n                    \"name\": \"What is the difference between TCPA and CTIA?\",\n                    \"acceptedAnswer\": {\n                        \"@type\": \"Answer\",\n                        \"text\": \"The TCPA is a federal law enforced by the FCC with legally binding requirements and penalties. The CTIA is a wireless industry trade association that publishes voluntary best-practice guidelines. While CTIA guidelines are not legally enforceable, carriers can shut down short codes and block senders that violate them. Following both TCPA rules and CTIA guidelines provides the strongest compliance posture.\n\"\n                    }\n                },\n                                {\n                    \"@type\": \"Question\",\n                    \"name\": \"What is the CTIA&#039;s SHAFT policy?\",\n                    \"acceptedAnswer\": {\n                        \"@type\": \"Answer\",\n                        \"text\": \"SHAFT stands for Sex, Hate, Alcohol, Firearms, and Tobacco (including CBD). The CTIA restricts these content categories in SMS marketing. Content involving federally legal products (like alcohol) may be permitted with age-gating that confirms recipients are at least 21 years old.\n\"\n                    }\n                }\n                            ]\n        }\n        <\/script>\n        <\/div>\n","protected":false},"excerpt":{"rendered":"<p>Disclaimer: The information in this post is for informational purposes only. Please contact your legal team to obtain advice with respect to any particular issues or concerns regarding TCPA compliance. What changed in 2026: Quiet hours are a litigation target. Class actions over opted-in texts sent outside 8 a.m. to 9 p.m. have run since [&hellip;]<\/p>\n","protected":false},"author":157,"featured_media":20330,"template":"","ew-regions":[],"ew-solutions":[],"ew-industries":[],"library_type":[513],"library_blog_tag":[357,455,365,449],"industry":[],"channel":[269],"topic":[287,284],"class_list":["post-22820","library","type-library","status-publish","has-post-thumbnail","hentry","library_type-blog","library_blog_tag-best-practices","library_blog_tag-commerce-experience","library_blog_tag-marketing-automation","library_blog_tag-privacy-and-security","channel-sms-mms","topic-customer-data","topic-retention-loyalty"],"acf":{"library_blog_banner_content":"","library_blog_banner_cta1_text":"","library_blog_banner_cta1_href":"","library_blog_banner_cta1_new_tab":false,"library_blog_banner_cta2_text":"","library_blog_banner_cta2_href":"","library_blog_banner_cta2_new_tab":false,"library_blog_banner_bg_color":"#EAF7FE","library_blog_banner_cta_text_color":"#FFF","library_blog_banner_cta_bg_color":"#019ACE","library_blog_banner_cta2_text_color":"#000","library_blog_banner_cta2_bg_color":"#FFF","library_blog_chatgpt_content":"","library_blog_chatgpt_cta_href":"","library_blog_chatgpt_cta_text":"Ask ChatGPT"},"_links":{"self":[{"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/library\/22820","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/library"}],"about":[{"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/types\/library"}],"author":[{"embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/users\/157"}],"version-history":[{"count":4,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/library\/22820\/revisions"}],"predecessor-version":[{"id":96891,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/library\/22820\/revisions\/96891"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/media\/20330"}],"wp:attachment":[{"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/media?parent=22820"}],"wp:term":[{"taxonomy":"ew_regions","embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/ew-regions?post=22820"},{"taxonomy":"ew_solutions","embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/ew-solutions?post=22820"},{"taxonomy":"ew_industries","embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/ew-industries?post=22820"},{"taxonomy":"library_type","embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/library_type?post=22820"},{"taxonomy":"library_blog_tag","embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/library_blog_tag?post=22820"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/industry?post=22820"},{"taxonomy":"channel","embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/channel?post=22820"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.bloomreach.com\/en\/wp-json\/wp\/v2\/topic?post=22820"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}