The Core Confusion: Why TCPA Boundaries Are Misunderstood

Most businesses treat every text message and phone call as a TCPA minefield — and end up over-complying, over-spending, and slowing down legitimate customer communication in the process. The reality is that the TCPA's boundaries are narrower than the fear around them suggests.

The confusion starts with the law's core structure. According to BCLP's analysis of the FCC's opt-out rules, businesses do not need prior express written consent to send informational communications — that heightened standard applies only to marketing texts, marketing robocalls, and fax advertisements. Yet compliance teams routinely apply marketing-grade consent requirements to routine service messages, burning time and legal budget on communications the law treats very differently.

The informational-versus-marketing distinction is the single most important carve-out in TCPA compliance. Messages that fall on the informational side need only implied consent, not the formal written agreement marketing requires:

• Transaction updates tied to an existing purchase or account
• Prescription order notifications from pharmacies
• Utility service messages related to a customer's existing service
• Emergency communications, which sit outside standard revocation obligations entirely

Regulators keep reinforcing this boundary. In a June 2025 Declaratory Ruling, the FCC confirmed that when a consumer hands a utility their phone number, they implicitly consent to non-telemarketing communications because those messages are "closely related to the utility service." The same logic underpins how courts and regulators view transactional messaging across industries.

The asymmetry goes further than most businesses realize. BCLP's analysis notes that if a customer revokes consent in response to a marketing message, the business may continue sending informational communications. Only a revocation tied to an informational message requires stopping all future non-emergency calls and texts. In other words, a customer saying "STOP" to a promotional text does not silence your appointment reminders — and treating it as if it does can actively damage the customer relationship.

So why does the over-assumption persist? Partly because the stakes are real: TCPA statutory damages run $500 to $1,500 per violation, per class member, with no requirement to prove actual injury, per the same legal analysis. When a single misclassified campaign can carry that exposure, caution feels rational. But blanket caution has its own cost — delayed follow-up, suppressed service messaging, and compliance review cycles that stall revenue-generating communication.

The smarter approach is segmentation, not suppression. Teams that tag and separate informational from marketing messages inside their follow-up systems can move fast where the law allows and apply strict consent discipline only where it's required. This is the same principle Worqd applies when building follow-up paths for clients: fast response where it's permitted, permission-aware outreach where it's not — one system that knows the difference rather than one rule that flattens everything.

Understanding where TCPA coverage ends isn't about finding loopholes. It's about spending compliance effort where the risk actually lives — and communicating freely, and legally, everywhere else.

The Text-Message Gap: What the Seventh Circuit Just Changed

For decades, "do-not-call" meant exactly that — calls. In July 2026, a federal appeals court in Chicago confirmed the gap is real: texts don't count.

In Steidinger v. Blackstone Medical Services (No. 25-2398, 7th Cir., July 14, 2026), the Seventh Circuit held that text messages are not "telephone calls" under TCPA Section 227(c)(5). The ruling eliminates the private do-not-call cause of action for unwanted marketing texts across Illinois, Indiana, and Wisconsin — even when the consumer is on the National Do Not Call Registry or has texted "STOP," according to legal analysis from Holland & Knight.

The reasoning is textual. Congress passed the TCPA in 1991, when a "telephone call" meant a voice-based communication. The court also noted that Congress deliberately used the narrow term "telephone call" in Section 227(c)(5), while using the broader "telephone solicitation" — defined to include "call or message" — elsewhere in the statute. That contrast signaled intent.

This holding directly conflicts with the FCC's 2024 decision to extend National Do Not Call Registry protections to text messages. It's also the first circuit ruling on the issue since the Supreme Court's 2025 McLaughlin decision, which requires courts to give agency interpretations only "appropriate respect" rather than full deference. A circuit split or Supreme Court review remains possible, so the issue is unsettled outside the Seventh Circuit.

Critically, the ruling is narrow. It eliminates only the private right of action under 227(c)(5) — not broader text-message liability. Businesses still face exposure through:

• Section 227(b) autodialer claims — texts sent using autodialer technology can still create liability under Section 227(b)(3)
• State laws — the Florida Telephone Solicitation Act, for example, may independently cover unwanted texts
• FCC enforcement — the agency can still pursue violations under other provisions of 227(c)

The practical takeaway: don't mistake Steidinger for a green light on texting. Statutory damages of $500–$1,500 per violation still apply to autodialer-based texts, per BCLP's analysis of the TCPA's opt-out framework. Any text-based outreach program should assume texts remain legally risky, even in Seventh Circuit states.

This is also why compliance discipline matters more than jurisdictional fine print. At Worqd, our follow-up and lead-handling work is built around explicit consent and honoring opt-outs — treating every channel as covered, even where courts have carved out gaps. When you're evaluating a growth partner, ask how they handle consent, revocation, and channel-specific rules before the first campaign launches. The gap in the law is real, but relying on it is a strategy that expires the moment a circuit split reaches the Supreme Court.

Emergency and Utility Carve-Outs: Communications That Bypass Standard Rules

Not every message a business sends lives under the same consent rules. The FCC recognizes two categories — emergency communications and non-telemarketing utility messages — that operate on entirely different revocation logic than your marketing outreach.

Start with emergencies. The opt-out rule that took effect on April 11, 2025 requires businesses to discontinue "all future non-emergency calls and texts" after a revocation — and that wording is deliberate. According to legal analysis of the new opt-out rules, emergency communications are treated differently from ordinary calls and texts and fall outside standard revocation obligations. If a fraud alert or safety message needs to reach someone, a prior "STOP" doesn't block it the way it would block a promotional text.

Utility messages work differently still. In a June 9, 2025 Declaratory Ruling (DA-25-496), the FCC confirmed that when a consumer gives a utility their phone number, they provide prior express consent to receive non-telemarketing communications — no written opt-in required. The reasoning: these messages are "closely related to the utility service," per the FCC's consumer policy guidance. Outage notices and billing alerts ride on implied consent, not marketing permission.

The revocation logic diverges too. Under the opt-out framework, a consumer who revokes consent in response to a marketing message can still receive informational communications — only a revocation tied to an informational message triggers cessation of everything non-emergency. That asymmetry matters when you're deciding what your follow-up systems should send after someone opts out.

For businesses evaluating outreach partners, this is exactly where compliance practices separate the careful from the careless. The same follow-up engine that books calls for Worqd clients has to know the difference between a marketing message and a service message — because TCPA statutory damages run $500 to $1,500 per violation, with no requirement to prove actual injury. Treating every text identically is how those lawsuits start.

Two practical takeaways:

• Tag and separate informational messages from marketing messages in your follow-up systems, so a marketing opt-out doesn't accidentally kill service communications — or vice versa.
• Don't assume emergency or utility carve-outs extend to lead-generation outreach; the FCC closed the lead generator loophole in December 2023, and AI-generated voices count as "artificial" under the TCPA.
• Watch the global revocation rule, now effective January 31, 2027 — the FCC is weighing narrowly tailored exceptions for healthcare, financial, and fraud-alert communications, which could reshape these carve-outs further.

The carve-outs are real, but they're narrow. If your outreach, fast follow-up, or pipeline recovery touches consumers at all, assume the standard rules apply — and verify anything that seems too good to be true. If you want a second pair of eyes on how your lead-handling path handles consent and opt-outs, book a growth call and we'll walk through it with you.

Rulemaking Limits: Where Courts and the FCC Have Pulled Back

The TCPA's boundaries aren't fixed — they're actively shrinking. Two recent rollbacks show courts and the FCC itself pulling back the agency's reach, and both matter if you're evaluating how a provider handles your outreach.

The clearest example is the One-to-One Consent Rule. The FCC designed it to require consent for each individual seller rather than blanket consent shared across lead-generation lists. But in January 2025, the Eleventh Circuit vacated the rule entirely in Insurance Marketing Coalition Ltd. v. FCC, finding the agency had overstepped its statutory authority. The FCC then repealed the rule in July 2025 (DA-25-621) — a rare case of a court directly checking agency scope, and the agency accepting it.

The second rollback is still unfolding. The global revocation rule (47 CFR § 64.1200(a)(10)) would force a single opt-out to apply company-wide, across all unrelated robocalls and robotexts. Its timeline tells the story:

• Originally set to take effect April 11, 2025, alongside the broader Opt-Out Rule
• Delayed to April 11, 2026 after the FCC found businesses would face significant compliance hardship — larger institutions juggling separate calling systems, smaller businesses needing manual changes
• Extended again to January 31, 2027, with the FCC weighing narrow exceptions for healthcare providers, financial institutions, and fraud-alert communications

According to Hunton Andrews Kurth's analysis, any modifications will likely be "narrowly tailored," similar to existing TCPA exceptions. In other words, the rule's final perimeter is still being drawn — and it's trending smaller.

The judicial pressure isn't limited to rulemaking. In Steidinger v. Blackstone Medical Services (7th Cir., July 14, 2026), the Seventh Circuit held that text messages are not "telephone calls" under Section 227(c)(5), eliminating the private do-not-call cause of action for unwanted marketing texts in Illinois, Indiana, and Wisconsin. It's the first circuit ruling on the issue since the Supreme Court's 2025 McLaughlin decision stripped FCC interpretations of Chevron-style deference.

Still, contracting boundaries are not a free pass. The Steidinger ruling leaves Section 227(b) autodialer claims, state laws like Florida's, and FCC enforcement fully intact. Statutory damages still run $500 to $1,500 per violation with no proof of injury required. And the FCC has moved the other direction elsewhere — closing the lead generator loophole in December 2023 and confirming AI-generated voices count as "artificial" under the TCPA.

This is why compliance practices belong in your provider vetting. At Worqd, outreach is built as personalized, permission-aware communication with explicit consent captured up front — designed for the rules as they exist, not as a court might someday reshape them. A partner who tracks these shifts protects your pipeline; one who doesn't becomes your liability.

What Remains Firmly Covered — And What to Do Next

The exclusions get the headlines, but the core of the TCPA has never been broader. Before planning around the gaps, it pays to know exactly where the rules still bite — and what to do about it.

Several categories remain firmly inside TCPA jurisdiction. The FCC closed the "lead generator loophole" in December 2023 (FCC-23-107), pulling lead-generation calls squarely under the rules. In February 2024, it confirmed that AI-generated voices are explicitly "artificial" under the statute (FCC-24-17). Robocalls, robotexts sent via autodialer, and fax advertisements all remain covered as well.

The stakes are not abstract. Statutory damages run $500 to $1,500 per violation, per class member, with no requirement to prove actual injury. A single unconsented campaign can multiply into seven-figure exposure fast.

Here are five steps to keep your outreach on the right side of the line:

• Segment informational from marketing messages in your systems. Informational texts don't require prior express written consent and may continue even after a marketing-consent revocation — but only if they're clearly tagged and separated.
• Don't rely on Steidinger outside the Seventh Circuit. The texts-aren't-calls holding binds only Illinois, Indiana, and Wisconsin, and autodialer claims under Section 227(b), state laws like Florida's, and FCC enforcement all still apply everywhere.
• Honor every reasonable opt-out method — "STOP," "QUIT," "END," "REVOKE," "OPT-OUT," "CANCEL," "UNSUBSCRIBE," or any other reasonable request — within 10 business days, and keep documentation for at least four years.
• Track the global revocation deadline of January 31, 2027. The FCC is weighing narrowly tailored exceptions for healthcare, financial, and fraud-alert communications, so the final scope may still shift.
• Treat all lead-gen and AI voice outreach as TCPA-covered. Assume consent discipline applies from the first touch.

That last point matters more than most businesses realize. The Steidinger ruling eliminated only one private cause of action in three states — it did nothing to weaken autodialer liability, and a circuit split or Supreme Court review remains possible. Building a follow-up program on a narrow, contested ruling is a bet, not a strategy.

The safer play is designing outreach that assumes coverage everywhere. At Worqd, that's exactly how AI SDR follow-up and lead reactivation programs are built: permission-aware from the first message, with explicit consent captured before contact and opt-outs honored across every channel. When your systems treat compliance as the default rather than the exception, the shifting boundaries of TCPA case law stop being a threat and start being a moat against less disciplined competitors.