TCPA and Telemarketing Rules · September 28, 2026 · GrowthPros

Does the TCPA apply to text messages?

Yes — the TCPA applies to texts. Learn consent rules, opt-out requirements, $500–$1,500 per-message fines, and how to keep SMS marketing compliant in 2025.

Flat illustration of a smartphone with an SMS bubble and compliance shield icons in lime green accents, with the headline Texts Count.

Key Facts

Why SMS Marketing Falls Under TCPA Despite the Law’s Age

The Telephone Consumer Protection Act was signed in 1991 — years before most Americans had ever sent a text message. Yet today, that same law governs every promotional SMS your business sends, and the consequences of ignoring it are measured in millions, not warnings.

The Federal Communications Commission has long interpreted SMS messages as "calls" under the TCPA, treating texts as functionally equivalent to voice calls for regulatory purposes, as regulatory analyses consistently confirm. This interpretation has held firm despite the obvious technological gap, and courts have repeatedly upheld it in litigation.

For marketing texts specifically, the bar is high: businesses need prior express written consent, not just an existing customer relationship. As legal experts at BCLP explain, consent requirements are message-type specific — transactional messages need only prior express consent, but promotional SMS demands the written, documented variety.

TCPA statutory damages run from $500 per message for standard violations to $1,500 per message for willful or knowing violations. There is no cap on aggregate liability in class actions, which is where the numbers turn frightening.

Consider the exposure: a single campaign of 100,000 messages sent without proper consent could exceed $150 million in aggregate damages, according to compliance research. And plaintiffs' attorneys are paying attention — TCPA class actions filed through mid-2025 were up nearly 95% year-over-year.

The precedent is well established:

  • Steve Madden settled for $10 million after sending over 200,000 unsolicited promotional texts (case documentation)
  • Pizza Hut franchisees paid $6 million over roughly 13,000 unsolicited texts after seven years of litigation
  • Capital One paid $75.5 million for using automated dialers without consent, per enforcement records

Here's the tension: SMS open rates reach 98%, compared to roughly 20% for email — which is exactly why speed-to-lead strategies lean on texting. But that effectiveness cuts both ways when consent isn't airtight.

This is why GrowthPros attaches a consent record to every lead it delivers — disclosure text, timestamp, IP address, and the named contacting party — so clients can prove where consent originated. The burden of proof sits entirely with the business, and a lead without a documented consent trail is a liability, not an asset.

The regulatory direction is tightening, too. The FCC's one-to-one consent rule, scheduled for January 2026, will require each sender to obtain brand-specific consent directly from consumers, closing the lead-generator loophole where one consent covered many downstream buyers, as industry analysis notes. Businesses buying leads should demand that documentation now — before the law forces the issue.

A single text message sent without the right consent can cost $500 — or $1,500 if the violation is willful — and those damages stack with no cap in class actions, where TCPA filings through mid-2025 were up nearly 95% year-over-year. That makes the TCPA's three core requirements — consent, opt-out handling, and timing — non-negotiable for any business texting leads or customers.

Consent: know which type your message needs. The TCPA draws a hard line between message types. Marketing and promotional texts require prior express written consent, while transactional or informational messages only need prior express consent, which can be verbal or written, per legal analysis from BCLP. The distinction matters for opt-outs too: opting out of an informational message stops all future non-emergency calls and texts, while opting out of marketing only stops marketing.

Opt-out: the rules got broader in April 2025. Since April 11, 2025, businesses must honor revocation requests made through "any reasonable manner" — email, voicemail, even informal language — not just keyword replies like "STOP," as covered in Infobip's compliance guidance. Non-prescribed opt-out methods carry a rebuttable presumption of reasonableness, meaning the burden falls on the business to prove a request was unreasonable. You then have ten business days to process the revocation, with a five-minute window to send a clarification message after an opt-out.

Timing and recordkeeping: the operational guardrails.

  • Texts are restricted to 8am–9pm local recipient time under the TCPA, though some state mini-TCPA laws tighten this to 8am–8pm.
  • Several states cap frequency at no more than 3 messages per 24-hour period per recipient.
  • Retain consent documentation for at least four years to cover the TCPA statute of limitations; the FTC has extended telemarketing recordkeeping to five years.

Consent records should be granular: disclosure text, timestamp, IP address, and the named contacting party. This is why GrowthPros attaches a full consent trail to every lead it delivers rather than treating consent as a checkbox — when a dispute arises, the record either exists or it doesn't. Businesses that can't produce documentation for every message in a campaign face exposure that scales fast, as enforcement settlements like Capital One's $75.5 million payout make clear.

How GrowthPros Ensures TCPA-Compliant Lead Delivery and Follow-Up

GrowthPros turns TCPA compliance into a competitive advantage by engineering consent, speed, and opt-out precision into every lead delivery. Each lead comes with a verified consent record—disclosure text, timestamp, IP address, and the named contacting party—ensuring prior express written consent is documented for marketing texts as required under TCPA jurisdiction. This aligns with FCC interpretations treating SMS as calls subject to the same consent rules, even though the law predates widespread texting.

Lists are scrubbed against the National Do Not Call Registry before any outbound contact, and opt-outs are honored immediately and permanently across SMS, voice, and email. GrowthPros’ multi-channel AI follow-up system initiates contact within five minutes of lead delivery—voice, SMS, and email—qualifying intent and booking calls while staying within TCPA’s 8am–9pm local time window. Research shows contacting a lead within five minutes makes engagement roughly 100x more likely than at thirty minutes, and 78% of buyers choose the first responder.

To address evolving opt-out rules effective April 11, 2025, GrowthPros processes revocation requests through “any reasonable method”—email, voicemail, or informal language—within the ten-business-day requirement, with internal escalation to ensure timely compliance. The system also enforces state-specific mini-TCPA variations, such as Florida’s 3-message-per-24-hour cap and Virginia’s upcoming 10-year opt-out record retention. By embedding consent-tracking and dynamic opt-out processing into its lead workflow, GrowthPros reduces litigation risk while delivering higher-quality, faster-responding leads—turning regulatory adherence into measurable performance.

To explore how TCPA-compliant lead delivery can improve your contact rates and lead quality, book a free 15-minute qualification call at GrowthPros.marketing. There’s no obligation—just an honest conversation about fit and process.

Frequently Asked Questions

Does the TCPA really apply to text messages if the law was written in 1991?
Yes. The FCC has long interpreted SMS messages as "calls" under the TCPA, treating texts as functionally equivalent to voice calls, and courts have repeatedly upheld that interpretation in litigation, as regulatory analyses confirm. Every promotional text your business sends falls under the law regardless of when it was written.
What kind of consent do I need before sending marketing texts?
Marketing and promotional texts require prior express written consent — an existing customer relationship isn't enough — while transactional or informational texts only need prior express consent, which can be verbal or written, per legal analysis from BCLP. The burden of proof sits entirely with the business, so consent must be documented, not assumed.
How much could a TCPA violation over text messages actually cost my business?
Statutory damages run $500 per message for standard violations and $1,500 per message for willful or knowing ones, with no cap on aggregate liability in class actions — a 100,000-message campaign sent without proper consent could exceed $150 million in damages, according to compliance research. Real settlements back this up: Steve Madden paid $10 million for 200,000+ unsolicited texts and Capital One paid $75.5 million for using automated dialers without consent.
Do customers have to text "STOP" to opt out, or are there other ways now?
Since April 11, 2025, businesses must honor revocation requests made through "any reasonable manner" — email, voicemail, even informal language — not just keyword replies like "STOP," per BCLP's legal analysis. Non-keyword opt-outs carry a rebuttable presumption of reasonableness, meaning your business has to prove a request was unreasonable, and you have ten business days to process it.
What are the rules on when and how often I can text leads?
Texts are restricted to 8am–9pm local recipient time under the TCPA, though some state mini-TCPA laws tighten this to 8am–8pm, and several states cap frequency at no more than 3 messages per 24-hour period per recipient. If you buy leads across multiple states, you need state-specific protocols — not a one-size-fits-all schedule.
I buy leads from a lead generator — does their consent cover my business?
Not for much longer. The FCC's one-to-one consent rule, scheduled for January 2026, requires each sender to obtain brand-specific consent directly from consumers, closing the lead-generator loophole where one consent covered many downstream buyers, as industry analysis notes. Demand documented consent records now — that's why GrowthPros attaches disclosure text, timestamp, IP address, and the named contacting party to every lead it delivers.

The Bottom Line: Texting Works — When the Paper Trail Does

So yes — the TCPA applies to text messages, and the stakes are anything but theoretical. With $500 to $1,500 in statutory damages per message, no cap on class-action liability, and filings up nearly 95% year-over-year, a single consent gap in one campaign can turn into an eight-figure settlement, as Steve Madden and Capital One learned the hard way. The rules are tightening, too: April 2025 expanded opt-out methods to "any reasonable manner," and the FCC's one-to-one consent rule arrives in January 2026, closing the lead-generator loophole for good. The practical takeaway is simple — demand documented consent for every lead you buy, honor opt-outs across every channel, and keep granular records for at least four years. That's exactly why GrowthPros attaches a full consent trail to every lead it delivers: disclosure text, timestamp, IP address, and the named contacting party. SMS still earns its 98% open rate — but only when compliance is built in, not bolted on. Want leads that come with the paperwork already attached? Book a free 15-minute qualification call at GrowthPros.marketing and see what compliant lead delivery looks like.

This article is general information, not legal or financial advice. Benchmark figures are directional industry data, not guarantees of results.

Start

More booked calls. Not more form fills.

Tell us your niche and your goal. We will show you realistic volume, exclusivity options, and what follow-up looks like on a live call — no pressure, no 40-page deck.