Are text messages covered under the TCPA?
Yes, texts are 'calls' under TCPA. Learn 2025-2026 rules: consent tiers, opt-outs, 10DLC registration, and penalties up to $1,500/message. Protect your ...

Are text messages covered under the TCPA?
Key Facts
- Yes — the FCC treats every text as a 'call' under the TCPA, a 1991 law written before SMS even existed per its longstanding policy.
- TCPA violations cost $500 per text, $1,500 if willful, with no cap on total liability according to compliance analysis.
- A single unwanted text is enough to sue in federal class action, per the Eleventh Circuit's 2023 Drazen v. Pinto ruling which overturned prior precedent.
- TCPA class actions through mid-2025 were up nearly 95% year-over-year per recent compliance data.
- Since April 2025, consumers can revoke consent 'in any reasonable manner' — even telling a cashier — and businesses must honor it within 10 business days per legal guidance on the new rules.
- 100,000 non-consensual marketing texts could exceed $150 million in class-action exposure per a recent compliance guide.
- Since February 2025, carriers block all unregistered 10DLC text traffic at the network level according to compliance analysis.
Yes, Texts Are 'Calls' — and That Changes Everything
The FCC has long treated SMS and MMS as "calls" under the TCPA, so every texting rule that applies to robocalls applies to your marketing texts. A 1991 law written before text messaging existed now governs every message you send today because the agency interprets the statute to cover any automated communication to a wireless number. The practical result: texts are equivalent to calls for TCPA purposes as a matter of longstanding policy.
That interpretation carries real teeth. Statutory damages run $500 per message for a standard violation and up to $1,500 per message if the conduct is willful, with no cap on aggregate liability. A recent compliance guide notes that 100,000 non-consensual messages could exceed $150 million in class-action exposure. The Eleventh Circuit's 2023 Drazen v. Pinto ruling made the stakes even clearer: a single unwanted text is enough to establish standing for a federal class action, overturning prior precedent and aligning with most circuits.
Regulation is tightening, not loosening. Three changes matter most for anyone sending marketing texts:
- Prior express written consent is required for every marketing text; transactional messages that slip in promotional content get reclassified as marketing.
- Consumers can revoke consent "in any reasonable manner" — including texting STOP, emailing, or telling a cashier — and businesses must honor it within 10 business days.
- The one-to-one consent rule taking effect in 2026 bars sharing consent across brands or buying it from third-party lead generators.
Carrier enforcement has teeth too. Since February 2025, unregistered 10DLC traffic is blocked at the network level, and the DNC Registry now explicitly applies to texts. TCPA class actions filed through mid-2025 were up nearly 95% year-over-year, and roughly a dozen states layer stricter "mini-TCPA" laws on top of the federal floor.
When Worqd helps clients build lead-generation systems that include SMS follow-up, compliance isn't a checkbox — it's baked into the consent capture, opt-out handling, and sender registration from day one. The cost of getting it wrong scales with every message sent.
The Two Consent Tiers Every Texter Must Know
If you text customers, the consent you collected determines whether you're compliant or exposed. The TCPA splits texting into two tiers, and mixing them up is one of the most common — and most expensive — mistakes businesses make.
The first tier covers marketing and promotional texts. These require prior express written consent before you send anything, according to legal guidance on the TCPA's 2025 rules. A checkbox, a signed web form, a documented agreement — written consent means exactly that.
The second tier covers transactional and informational texts tied to an existing relationship — appointment reminders, order updates, service notifications. These need only prior express consent, and businesses do not need written consent to send informational communications. The bar is lower because the recipient already has a relationship with you.
Here's the trap: the moment a "transactional" message contains any promotional content, it gets reclassified as marketing. A shipping confirmation with "while you're at it, check out our sale" is no longer transactional — it's a marketing text that needed written consent you never got. Keep promotional language out of operational messages entirely.
The stakes for getting this wrong are real. Statutory damages run $500 per message, or $1,500 per message for willful violations, with no cap on total liability. And since the Eleventh Circuit's 2023 Drazen v. Pinto ruling, even a single unwanted text can establish standing for a federal class action.
The consent framework also just got tighter. The FCC's one-to-one consent rule, taking effect in January 2026, closes the lead-generator loophole that let one website's checkbox authorize texts from dozens of unrelated brands. Under the new rules, web pages seeking consent from multiple sellers must obtain consent separately for each seller — consent can no longer be shared across brands or sold to third parties.
For anyone running lead generation or follow-up campaigns, that rule has a practical consequence: audit where your consent actually came from. If a lead vendor is handing you contacts who clicked one box covering "up to 40 partners," those texts are a liability, not an asset. This is why we at Worqd treat consent capture as part of the outreach plan itself — permission-aware, personalized follow-up rather than a template blast — and why you should verify any partner's consent practices before they ever touch your list.
Quick reference for the two tiers:
- Marketing texts: prior express written consent required, no exceptions.
- Transactional texts: prior express consent is enough, tied to an existing relationship.
- Mixed messages: any promotional content reclassifies the whole message as marketing.
- Consent sharing: under the one-to-one rule, consent belongs to one sender only — it can't be sold or transferred.
Get the tier right before the first message goes out, not after the complaint arrives.
What One Unwanted Text Can Cost You
One text message. That's all it takes — not to win a customer, but to land you in federal court. If you use SMS for lead generation or follow-up, the math behind TCPA violations deserves your full attention.
The TCPA sets statutory damages at $500 per message for a standard violation, rising to $1,500 when the violation is willful or knowing — and there is no cap on aggregate liability. Text someone whose number sits in the National Do Not Call Registry without permission, and a single message can cost up to $43,792 under the FCC's framework. These numbers scale fast, and courts don't care that your intentions were good.
The exposure math is sobering. A blast to 1,000 recipients who never consented puts you at $500,000–$1.5 million in statutory damages. Scale that to 100,000 messages and liability can exceed $150 million in a class action. And plaintiffs' lawyers know it: TCPA class actions filed through mid-2025 were up nearly 95% year-over-year.
The Drazen v. Pinto ruling made things harder for defendants. In July 2023, the Eleventh Circuit held that a single unwanted text is a concrete injury sufficient to establish Article III standing — overturning its own 2019 precedent. Notably, roughly 7% of the proposed class in that case had received just one text. One message, full class-action standing.
Here's what that means in practice:
- A "small" campaign can still trigger a class action — volume is not the threshold.
- Every non-consensual message compounds liability with no ceiling.
- State mini-TCPA laws in places like Florida, Texas, and Connecticut stack additional penalties on top of federal exposure.
- AI-generated messages are covered too, per the FCC's February 2024 ruling on AI voices.
This is why compliance vetting belongs in your growth conversations, not after them. If a partner runs outreach or database reactivation for you, the liability follows your brand. Before launching any SMS campaign, ask hard questions about how consent is captured, how opt-outs are honored, and whether the partner treats permission-aware outreach as a design principle rather than an afterthought. At Worqd, we treat that discipline as non-negotiable — a template blast is the opposite of what we build.
The cheapest TCPA lawsuit is the one that never gets filed. Verify consent practices before the first message goes out, because after that, every text is a number in someone's damages calculation.
The 2025–2026 Rulebook: Opt-Outs, Registration, and Quiet Hours
The regulatory floor for text messaging has risen sharply. Since February 2025, carriers have blocked all unregistered 10DLC traffic, making campaign registration a hard prerequisite for delivery. The FCC's December 2023 Order reaffirmed its longstanding policy that texts are equivalent to calls for TCPA purposes, so every marketing message now carries the same statutory exposure as a robocall — $500 to $1,500 per message with no aggregate cap.
- Opt-outs must be honored "in any reasonable manner" — including words like STOP, QUIT, END, REVOKE, OPT-OUT, CANCEL, or UNSUBSCRIBE — and processed within 10 business days
- Quiet hours are locked to 8 a.m.–9 p.m. in the recipient's local time zone
- The National Do-Not-Call Registry now explicitly applies to texts, requiring prior express invitation or permission before messaging numbers on the list
- AI-generated messages fall under the same consent and disclosure rules under a February 2024 FCC declaratory ruling
- One-to-one consent takes effect in January 2026, closing the lead-generator loophole by requiring separate consent for each sender
State "mini-TCPA" laws layer additional requirements on top — Connecticut allows up to $20,000 per violation, Florida caps marketing texts at three per 24 hours, and Virginia mandates 10-year opt-out record retention. With TCPA class actions up nearly 95% year-over-year through mid-2025 and the Eleventh Circuit's Drazen v. Pinto ruling confirming that a single unwanted text establishes standing for a federal class action, the cost of non-compliance compounds fast.
When Worqd evaluates a client's outreach stack, we verify that consent is captured per-sender, opt-out logic works across every channel a consumer might use, and quiet-hour enforcement is baked into the sending engine — not bolted on as an afterthought. The rules are settled; the only variable is whether your provider treats compliance as a feature or a checkbox.
How to Audit a Partner's Texting Compliance Before You Sign
Signing with the wrong outreach partner can put your business on the hook for every text they send on your behalf — and the numbers behind that risk are steep. Statutory damages run $500 to $1,500 per message with no cap on aggregate liability, and TCPA class actions filed through mid-2025 were up nearly 95% year-over-year, according to compliance analysis from Infobip. A single unwanted text is enough to establish standing for a federal class action, thanks to the Eleventh Circuit's 2023 Drazen v. Pinto ruling.
Before you sign anything, walk every prospective partner through a compliance audit. Here is the checklist worth using.
1. Per-sender consent capture. Under the FCC's one-to-one consent rule, consent cannot be shared across brands or sold to third parties. Web pages seeking consent from multiple sellers must obtain it separately for each seller, closing the old lead-generator loophole. Ask exactly how and where consent is captured for your brand specifically.
2. Four-year consent records. The TCPA statute of limitations is four years, so legal advisors recommend retaining consent records for that full period. A partner who cannot produce timestamped proof of consent on demand is a partner who cannot defend you in court.
3. Fast opt-out handling across every channel. Since April 11, 2025, consumers can revoke consent "in any reasonable manner" — STOP, QUIT, END, REVOKE, email, voicemail, even telling a cashier — and businesses can no longer prescribe an exclusive opt-out method. Revocation must be honored within 10 business days, with a non-promotional confirmation text sent within five minutes, per BCLP's analysis of the new rules.
4. 10DLC registration and sending discipline. Carriers have blocked unregistered 10DLC traffic since February 2025, and texts must stay within 8am–9pm in the recipient's local time. Confirm your partner handles brand and campaign registration and respects quiet hours.
5. State-law awareness. Roughly a dozen states — including Texas, Florida, Virginia, Connecticut, and Arizona — layer stricter "mini-TCPA" rules on top of federal law, and the stricter standard wins. A partner should apply the strictest standard based on each recipient's state.
A partner worth signing will answer these questions without hesitation. This is why Worqd builds permission-aware outreach into every follow-up flow — explicit consent captured up front, opt-outs honored immediately, and no template blasts to people who never asked to hear from you. If a prospective partner hesitates on any item above, treat that hesitation as your answer.
Frequently Asked Questions
Are text messages actually covered under the TCPA, or just phone calls?
What kind of consent do I need before texting customers?
How much can one unwanted text message actually cost my business?
Can I buy leads from a vendor and text them under their consent?
How do the new opt-out rules work — is texting STOP enough?
What should I check before hiring a partner to run SMS follow-up for me?
The Rules Are Settled — Is Your Outreach?
Yes, text messages are covered under the TCPA — treated as calls, with all the exposure that implies. Marketing texts demand prior express written consent, transactional messages can't carry a whiff of promotion, opt-outs must be honored through any reasonable channel within 10 business days, and the one-to-one consent rule closes the lead-generator loophole for good. The cost of ignoring any of this is steep: $500 to $1,500 per message with no cap on total liability, and a single unwanted text is enough to establish class-action standing. Your next step is simple: audit where your consent comes from, how opt-outs are handled, and whether any partner texting on your behalf can answer those questions without hesitation. At Worqd, permission-aware follow-up is built into every campaign from day one — because fast follow-up only works when it's also clean follow-up. If you'd like a second set of eyes on your outreach before the next send goes out, book a free growth call and we'll walk through it together.
Want help putting this into action?
Book a Growth Call