Can someone in Canada text someone in the US?

Yes, It's Legal — But the Recipient's Rules Apply

Texting across the border is as easy as tapping send — but the moment that text carries a commercial purpose, the legal ground shifts beneath you. The short answer to whether someone in Canada can text someone in the US is yes, and it happens millions of times a day. The longer answer depends entirely on why you're texting.

The governing principle is simple: the recipient's jurisdiction sets the rules. According to cross-border SMS compliance analysis, commercial text messages between Canada and the US fall under two distinct frameworks — Canada's CASL and the US TCPA — and a Canadian business texting a US recipient must comply with US rules, not just Canadian ones.

Those rules diverge in ways that catch Canadian senders off guard. The two frameworks differ across consent standards, quiet hours, and enforcement mechanisms:

• Consent: US marketing texts require prior express written consent — a higher bar than the prior express consent needed for informational messages.
• Quiet hours: Canada allows commercial texts from 9am–9pm local time; the US permits them from 8am–9pm in the recipient's time zone — not the sender's.
• Opt-outs: Since April 11, 2025, the FCC's Opt-Out Rule requires businesses to honor consent revocation via any reasonable method within 10 business days.
• Enforcement: The US pairs FCC and carrier enforcement with a private right of action; Canada relies on the CRTC and Competition Bureau.

The stakes explain why this matters. TCPA statutory damages run $500–$1,500 per violating message, with no requirement for the recipient to prove actual injury, according to TCPA legal analysis. Willfulness pushes each violation to the $1,500 ceiling, and a single non-compliant campaign blasted to thousands of recipients can generate multi-million-dollar liability — recent TCPA class actions have reached hundreds of millions of dollars.

For a company like GrowthPros, operating from Halifax while delivering consent-recorded leads and five-minute AI follow-up to US recipients, this is not theoretical. Every SMS crossing the border is TCPA-governed, which is why each delivered lead carries its full consent trail — disclosure text, timestamp, IP address, and the named contacting party — and why opt-outs are honored immediately and permanently.

The practical takeaway: your Canadian address doesn't shield you. If the phone you're texting rings in Ohio, the TCPA applies.

The Two Frameworks: What CASL Covers vs. What the TCPA Demands

A text message crossing the Canada–US border doesn't get to pick a side. Commercial SMS between the two countries is governed by two distinct frameworks — CASL in Canada and the TCPA in the US — and the operative rule is that businesses must comply with the rules of the recipient's jurisdiction. For a Canadian company texting US customers, that means the TCPA is the framework that matters most.

CASL treats all commercial text messages as "commercial electronic messages" (CEMs), which triggers a specific set of obligations under Canada's anti-spam regime:

• Express consent before sending, with double opt-in recommended as best practice
• Clear sender identification in every message
• Opt-out support in both English and French — "STOP" and "ARRÊT" — acted on immediately
• Quiet hours restricting commercial texts to 9am–9pm local time

Enforcement sits with the CRTC, the Competition Bureau, and the Canadian Telecommunications Association. If your operation is based in Halifax but your recipients are in Houston, however, these Canadian rules are largely the floor you build on — not the standard you're judged by.

The TCPA, enacted in 1991, applies directly to text messages and draws a sharp line between two consent standards. Prior express consent (PEC) covers informational and transactional texts and can be given verbally, on a form, or via a website. Prior express written consent (PEWC) is required for all promotional and marketing messages — a materially higher bar.

US quiet hours run 8am–9pm in the recipient's local time zone, not the sender's, which forces time-zone-aware logic for any nationally distributed list. All commercial texts must also be two-way, enabling recipients to opt out and obtain support by texting STOP and HELP. The stakes are real: statutory damages run $500–$1,500 per violation, with no requirement to prove actual injury, and a single non-compliant campaign to thousands of recipients can generate multi-million dollar liability.

Two developments changed the US compliance picture this year. First, the FCC's Opt-Out Rule took effect April 11, 2025, requiring businesses to honor consent revocation via any reasonable method within 10 business days — with a rebuttable presumption of reasonableness on the business. Second, the Eleventh Circuit vacated the FCC's one-to-one consent rule days before its January 27, 2025 effective date, and the FCC formally removed it on July 14, 2025, restoring PEWC as the operative baseline per the FCC's own policy record.

For cross-border operators like GrowthPros, the practical takeaway is that PEWC plus documented consent records — timestamp, disclosure language, and source — remain the defensible standard, since records must be retained for at least four years to align with the TCPA statute of limitations.

Where Cross-Border Senders Actually Get Into Trouble

Most Canadian businesses texting US recipients don't get burned by missing a federal rule change — they get burned by sloppy opt-out handling, missing consent records, and unregistered carrier traffic. As one industry analysis puts it, programs chasing the last proposed federal rule are missing where the real enforcement risk now lives: documentation, opt-out speed, and carrier registration.

The April 2025 Opt-Out Rule is the biggest practical shift. Under it, consumers can revoke consent via any reasonable method — text, email, voicemail, even in-person — and businesses can no longer specify an exclusive opt-out channel, according to BCLP's legal analysis. If a consumer uses a non-standard method, there's a rebuttable presumption it was reasonable — meaning the burden falls on the business to prove otherwise.

The mechanics matter:

• Honor revocation requests within 10 business days, per the FCC's implementation.
• Any clarification message must go out within five minutes of the request, be sent only once, and contain zero marketing content.
• Retain consent records — timestamp, exact disclosure language, source, and phone number — for at least four years, aligning with the TCPA statute of limitations.

That documentation requirement is why lead vendors like GrowthPros attach a consent trail to every delivered lead. With TCPA statutory damages of $500–$1,500 per violation and no requirement for plaintiffs to prove actual injury, one non-compliant campaign to a large list can escalate quickly — recent class actions have reached hundreds of millions of dollars, per compliance research.

Carrier rules add a layer that operates independently of law. US campaigns must be registered with mobile carriers via The Campaign Registry, and unregistered 10DLC traffic gets throttled or blocked regardless of how legally compliant it is. Shared short codes are banned outright — each brand needs a dedicated code.

Finally, two FCC developments matter for cross-border senders specifically. The FCC is proposing fees or bonds to deter illegal communications originating abroad — directly relevant to Canadian-origin traffic — and it has already declared AI-generated voices "artificial" under the TCPA, with proposed rules requiring disclosure and affirmative consent. Any Canadian operation running AI-driven voice and SMS follow-up on US leads, as GrowthPros does within its five-minute speed-to-lead window, sits squarely in the path of both.

A Compliance Playbook for Texting US Leads from Canada

Knowing the rules is table stakes; the winners operationalize them. The gap between a compliant cross-border texting program and a multi-million-dollar TCPA class action isn't knowledge — it's process.

Step one: treat every US-bound text as TCPA-governed. Cross-border commercial SMS must comply with the recipient's jurisdiction, not the sender's, so a message leaving Halifax for a lead in Dallas lives under US rules, not Canadian ones (per cross-border compliance guidance). That means prior express written consent for marketing content, two-way messaging with STOP/HELP support, and quiet hours of 8am–9pm in the recipient's local time — not yours.

Step two: capture four-element consent on every lead. A defensible consent record needs the timestamp, the exact disclosure language shown at opt-in, the channel or source of consent, and the phone number with campaign identifier (compliance analysts note these four elements are what survives a deposition). Retain records for at least four years, aligned with the TCPA statute of limitations. With statutory damages of $500–$1,500 per violation, documentation isn't paperwork — it's your legal defense.

Step three: exceed the opt-out floor. Since April 2025, consumers may revoke consent through any reasonable method, and the burden falls on the business to prove otherwise. The law gives you 10 business days; treat that as a ceiling, not a target. Honor opt-outs immediately and permanently across SMS, voice, and email — and if you send a clarification message, it must go out within five minutes, once, with zero marketing content.

Your implementation checklist:

• Register all US-bound traffic with The Campaign Registry — unregistered 10DLC traffic gets throttled or blocked regardless of legal compliance.
• Apply time-zone-aware quiet hours: 8am–9pm recipient-local in the US, 9am–9pm in Canada.
• DNC-scrub every list before first outbound contact.
• Monitor state mini-TCPA laws in Florida, Texas, Oklahoma, Connecticut, California, and Virginia — federal law sets the floor, not the ceiling.

This is exactly how GrowthPros operates: every delivered lead carries its consent trail — disclosure text, timestamp, IP address, and named contacting party — attached, not promised. Lists are DNC-scrubbed before any outbound touch, opt-outs are honored immediately and permanently across channels, and AI speed-to-lead follow-up runs inside the recipient's quiet hours, not the sender's convenience.

The takeaway for any US business buying leads: demand this standard from your vendor. If a lead arrives without a consent record you could produce in court, you own the exposure, not them. Ask whether opt-outs propagate across SMS, voice, and email instantly. Ask whether the five-minute follow-up window respects the recipient's time zone. A vendor that can't answer in specifics is selling you a liability with a phone number attached.