
TCPA and Telemarketing Rules · September 28, 2026 · GrowthPros
What are illegal text messages?
Learn what makes text messages illegal under the TCPA, the $500–$1,500 per-message penalties, and how documented consent protects your business from FCC...

Key Facts
- Unsolicited marketing texts can trigger TCPA fines of $500–$1,500 per violation according to ActiveProspect
- The FCC treats text messages as telephone calls subject to TCPA requirements per FCC enforcement priorities
- Prior express written consent must be explicit, documented, and retained — implied consent is insufficient per ActiveProspect guidance
- Opt-out requests must be processed within 10 business days, with one confirmation text allowed within 5 minutes per ActiveProspect
- The FCC formally repealed its one-to-one consent rule in July 2025 after the Eleventh Circuit vacated it per FCC order
- In the Seventh Circuit's 2026 Steidinger ruling, texts are not 'telephone calls' under one TCPA provision per Holland & Knight
- 84% of consumers reported opting in to business texts in a 2025 survey per ActiveProspect
The Hidden Risk in Your SMS Marketing: Illegal Texts and TCPA Penalties
The Hidden Risk in Your SMS Marketing: Illegal Texts and TCPA Penalties
A single unsolicited marketing text can trigger a TCPA violation, exposing businesses to fines of $500 to $1,500 per message — a cost that escalates rapidly in class action scenarios. Under the TCPA, as interpreted by the FCC, texts are treated as telephone calls, meaning promotional SMS sent without prior express written consent is unlawful, especially when delivered via autodialer or AI voice technology. This framework exists to protect consumers from unwanted communications, with the FCC identifying robotexts as a top enforcement priority alongside robocalls and Caller ID spoofing.
For lead buyers, the risk intensifies when consent documentation is missing or unclear. The FCC requires that consent for marketing texts be explicit, in writing, and thoroughly documented — implied consent is insufficient. GrowthPros addresses this by attaching a consent record to every lead, including disclosure text, timestamp, IP address, and the named contacting party, ensuring compliance at the point of delivery. Despite legal shifts — such as the FCC’s 2025 repeal of the one-to-one consent rule following the Eleventh Circuit’s decision and the Seventh Circuit’s 2026 ruling that texts are not “telephone calls” under one TCPA provision — the safest compliance stance remains treating SMS like calls under the TCPA. This means verifying consent before scaling outreach, honoring opt-outs within 10 business days, and limiting confirmation texts to non-promotional messages within five minutes of opt-out. Ignoring these requirements invites not only regulatory penalties but also significant litigation risk, making consent-verified leads not just a best practice but a financial necessity.
Why Consent Documentation Is Non-Negotiable: What the FCC and Courts Actually Require
When a TCPA lawsuit lands, the defendant's entire defense often comes down to one question: can you prove the consumer agreed in writing? Under the FCC's enforcement framework, text messages are treated as telephone calls subject to the TCPA, which means unsolicited promotional texts without prior express written consent are unlawful — and per compliance guidance, "there are no shortcuts" (FCC Enforcement Bureau; ActiveProspect).
What counts as valid documentation? A defensible consent record captures the exact disclosure language shown before opt-in — including notice that automated messages may be sent, that consent is not a condition of purchase, expected message frequency, and applicable carrier rates — plus the method, date, and time of consent (ActiveProspect). Best practice adds the consumer's IP address and the named contacting party, so the record ties a specific person to a specific seller at a specific moment. Verbal agreement and implied consent fall short for marketing texts: consent must be explicit, in writing, and retained.
The stakes justify the rigor. TCPA penalties run $500–$1,500 per violation, with exposure to multi-million-dollar class actions (ActiveProspect). A single campaign to thousands of numbers without a paper trail can compound into seven-figure liability fast.
Recent legal shifts make documentation even more important, not less. The FCC's 2023 "one-to-one consent" rule — requiring consent to be given to a single specific seller — was vacated by the Eleventh Circuit in Insurance Marketing Coalition v. FCC and formally repealed in July 2025 (FCC). Businesses may now rely on a single consumer consent to authorize multiple sellers, provided the consent is "clear and unmistakable" (Consumer Finance Insights). Meanwhile, the Seventh Circuit's 2026 Steidinger ruling held that texts are not "telephone calls" under one do-not-call provision — but texts sent via autodialer or prerecorded voice can still create liability under other TCPA provisions, and FCC enforcement authority remains intact (Holland & Knight).
For lead buyers, the practical takeaway is simple: don't assume consent — verify before you scale (ActiveProspect). Shared marketplace leads often arrive with murky consent trails, which is why GrowthPros attaches a full consent record — disclosure text, timestamp, IP address, and named contacting party — to every lead delivered, with lists DNC-scrubbed before any outbound contact. Whatever direction the courts take next, documented consent is the position that holds up either way.
If you're buying leads or reviving a dormant opted-in list, book a free 15-minute qualification call and we'll walk you through exactly what a compliant consent trail looks like — no commitment, no invented numbers.
How GrowthPros Eliminates TCPA Risk: Consent-Recorded Leads with Verified Compliance
Most businesses don't lose TCPA lawsuits because they texted the wrong people — they lose because they can't prove the person said yes. With penalties running $500–$1,500 per violation and class actions stacking those numbers into millions, the question every lead buyer should ask is simple: does my lead come with evidence of consent, or just a phone number?
GrowthPros treats consent documentation as part of the lead itself, not a legal afterthought. Every lead delivered carries a full consent record: the disclosure text shown, a timestamp, the IP address, and the named contacting party. That mirrors the compliance guidance that prior express written consent — with retained records of method, date, and exact language — is the only valid basis for commercial texts.
The process happens before you ever see the lead:
- Consent recorded at capture — disclosure text, timestamp, IP, and contacting party attached to every lead before delivery.
- DNC-scrubbed pre-contact — lists are scrubbed against the Do Not Call Registry before any outbound touch.
- Opt-outs honored immediately and permanently across SMS, voice, and email — well inside the 10-business-day processing window regulators expect.
- Reactivation campaigns target only pre-existing, opted-in relationships — never cold lists.
The legal ground is shifting. The FCC formally removed its one-to-one consent rule after the Eleventh Circuit vacated it, and the Seventh Circuit's Steidinger ruling has opened a circuit split on whether texts count as calls under one TCPA provision. But legal analysts consistently warn that texts sent via autodialer or artificial voice can still create liability under other provisions.
That's why GrowthPros built its pipeline to the strictest reading, not the loosest. Even as the FCC's own enforcement priorities still treat texts as calls subject to TCPA rules, the safest position — treat SMS like calls and document everything — is exactly how these leads are sourced and delivered.
Compliance doesn't have to slow you down. Every lead, freshly sourced or reactivated from a dormant opted-in list, gets AI voice, SMS, and email follow-up inside a five-minute window — 24/7. Contacting a lead within five minutes makes contact roughly 100x more likely than waiting thirty, and about 78% of buyers choose whoever responds first.
The result: leads land in your CRM with a consent trail attached, followed up fast, and scrubbed clean. Compliance becomes a differentiator backed by process — not promises. Book a 15-minute qualification call to see consent-recorded leads for your niche, or submit the get-started funnel and get a same-business-day review.
Frequently Asked Questions
What makes a text message illegal?
A marketing text becomes illegal under the Telephone Consumer Protection Act (TCPA) when it's sent without prior express written consent — especially via autodialer or AI/prerecorded voice. The FCC treats texts as telephone calls subject to TCPA rules, and per compliance guidance, "there are no shortcuts" — implied consent doesn't count for marketing texts. FCC Enforcement Bureau
How much can illegal texts actually cost my business?
TCPA penalties run $500–$1,500 per violation, and those numbers compound fast — a single campaign to thousands of numbers without documented consent can stack into seven-figure class action liability. This is why most businesses lose TCPA lawsuits not because they texted the wrong people, but because they can't prove the person said yes.
Did the FCC's one-to-one consent rule repeal make texting leads easier?
Partially. The FCC formally removed its one-to-one consent rule in July 2025 after the Eleventh Circuit vacated it, so a single consumer consent can now authorize multiple sellers — but the consent must still be "clear and unmistakable." Consumer Finance Insights notes the FCC's decision not to appeal confirms this interpretation.
Didn't a court rule that texts aren't 'telephone calls' under the TCPA?
The Seventh Circuit's 2026 Steidinger ruling held that texts aren't "telephone calls" under one specific do-not-call provision — but texts sent via autodialer or artificial voice can still create liability under other TCPA provisions, and FCC enforcement authority remains intact. The ruling only binds the Seventh Circuit, and a circuit split or Supreme Court review is possible, so the safest stance is still treating SMS like calls.
What does valid consent documentation for a text campaign look like?
A defensible consent record captures the exact disclosure language shown before opt-in (automated messages notice, consent not a condition of purchase, message frequency, carrier rates) plus the method, date, and time of consent. Best practice adds the consumer's IP address and the named contacting party — which is exactly what GrowthPros attaches to every lead delivered. ActiveProspect
How fast do I have to honor opt-out requests from text messages?
Opt-out requests must be processed within 10 business days, and you're allowed one confirmation text within 5 minutes of the opt-out — but it can't contain any promotional offers. ActiveProspect's compliance guidance recommends honoring opt-outs immediately and permanently across all channels to stay safely inside the regulatory window.
The Bottom Line: Documented Consent Is Your Only Real Defense
Illegal text messages are unsolicited marketing texts sent without prior express written consent — and with penalties of $500–$1,500 per violation stacking into multi-million-dollar class actions, one undocumented campaign can wipe out a marketing budget. The legal ground keeps shifting: the FCC repealed its one-to-one consent rule in 2025, and a 2026 circuit ruling questioned whether texts are always "calls" — yet the safest position remains treating SMS like calls under the TCPA, as the FCC's own enforcement priorities still do. That means verifying consent before you scale, honoring opt-outs fast, and never buying leads with murky consent trails. GrowthPros builds this into the product itself: every lead arrives with a consent record — disclosure text, timestamp, IP address, and named contacting party — DNC-scrubbed before delivery and followed up inside five minutes. Your next step is simple: audit where your current leads come from and whether you could prove consent if a lawsuit landed tomorrow. If you can't, book a free 15-minute qualification call or submit the get-started funnel — we'll show you what a compliant consent trail looks like for your niche. No commitment, no invented numbers.
This article is general information, not legal or financial advice. Benchmark figures are directional industry data, not guarantees of results.