Text messaging gets a 45% response rate. Phone calls get 8%. Email gets 2%.

Those numbers are why every sales team wants to text their leads. And they're also why TCPA plaintiffs' attorneys love lead buyers who text without understanding the rules. A single non-compliant text campaign to 1,000 leads creates $500,000 to $1,500,000 in statutory exposure — per campaign, per plaintiff.

I've been in the lead industry for over 20 years, and I've watched text messaging go from a gray area to the most heavily regulated communication channel in sales. The rules are clear now. The enforcement is aggressive. And the good news is that compliance isn't difficult — it just requires knowing what the rules actually are and building your processes around them from day one.

This guide covers every aspect of compliant text message follow-up for internet leads: TCPA requirements, consent standards, 10DLC registration, opt-in and opt-out mechanics, compliant templates, common mistakes, and how to integrate texting into a multi-channel follow-up strategy.

Disclaimer: This is educational guidance, not legal advice. Consult a TCPA attorney for guidance specific to your business and state.

The Legal Framework: What Governs Text Messages to Leads

Text messages are regulated at three levels, and you need to comply with all of them simultaneously.

Level 1: Federal Law (TCPA)

The Telephone Consumer Protection Act treats text messages as "calls" under federal law. Every SMS or MMS you send to a lead is subject to TCPA requirements. This was established in the FCC's 2015 Declaratory Ruling and has been upheld consistently since.

Key implications:

• Every text is a "call" under the statute — the same penalties apply
• $500 per violation for standard violations, $1,500 per willful violation
• Federal DNC violations carry penalties up to $43,280 per violation under FCC enforcement
• Consent requirements differ based on the type of message (informational vs. marketing)
• Auto-dialer rules apply to texts sent through automated platforms

Level 2: Carrier Policies (10DLC, A2P)

Wireless carriers — T-Mobile, AT&T, Verizon — enforce their own policies on business text messaging that are often stricter than federal law. These aren't laws, but violating them means your messages don't get delivered. Practically speaking, they're just as binding.

Level 3: State Laws (Mini-TCPA Statutes)

At least 15 states have their own telemarketing and text messaging laws, many stricter than federal TCPA. Florida, Washington, Oklahoma, and Maryland have particularly aggressive state-level SMS regulations.

You must comply with the strictest applicable standard — which is usually the carrier requirement for consent and the state law for penalties.

Consent Requirements for Texting Leads

This is where most lead buyers get it wrong. The consent standard depends on what kind of message you're sending and how you're sending it.

Prior Express Written Consent: Required for Marketing Texts

If you're sending a marketing text — meaning the message promotes a product, service, or offer — you need prior express written consent from the recipient. Period.

This applies whether you're:

• Texting from a personal cell phone
• Using an automated SMS platform
• Sending through a CRM like GoHighLevel, Close, or HubSpot
• Using AI-generated text messages

What qualifies as prior express written consent:

1. A clear and conspicuous disclosure that the consumer will receive marketing texts
2. The consumer's signature (electronic signatures count — clicking "Submit" on a web form qualifies)
3. The disclosure must identify the specific seller or sellers who will be texting
4. The disclosure must state that consent is not a condition of purchase
5. The disclosure must include the phone number that will receive the texts

For lead buyers, this consent is typically captured on the original lead generation form. When you buy a lead — whether fresh or aged — you're relying on the consent that was captured at the point of opt-in. This is why lead source quality matters enormously for compliance.

The FCC 1:1 Consent Rule: Vacated, Not Active

If you've heard that the FCC now requires consent to be limited to a single seller, here's the update: the FCC's 1:1 consent rule was vacated by the 11th Circuit Court of Appeals in January 2025. It never took effect.

The court found the FCC exceeded its statutory authority by redefining "prior express consent" beyond what Congress intended. Under current law, a consumer can grant written consent to multiple identified sellers on a single form, as long as the disclosure is clear about who will contact them.

However — and this is important — wireless carriers still enforce their own consent standards. T-Mobile, AT&T, and Verizon effectively require one-to-one opt-in for A2P (application-to-person) SMS traffic through their 10DLC registration process. So while federal law doesn't mandate 1:1 consent, the carrier ecosystem functionally does for text messages.

Practical takeaway: Treat every text campaign as if 1:1 consent is required. Not because the law demands it, but because the carriers do — and because leads with clear, single-seller consent convert better and carry less litigation risk.

Prior Express Consent (Not Written): Informational Texts

If you're sending a purely informational text — an appointment confirmation, a status update, a delivery notification — you need prior express consent but not necessarily written consent. The consumer providing their phone number in connection with a transaction can constitute express consent for informational messages.

But be careful: the moment your "informational" text includes a promotional element — "Your appointment is confirmed! Ask about our 15% discount" — it becomes a marketing message requiring written consent.

10DLC Registration: Non-Negotiable for Business Texting

10DLC (10-Digit Long Code) is the carrier-mandated registration system for businesses sending application-to-person (A2P) text messages from standard 10-digit phone numbers.

If you're texting leads from a business phone number through any platform — CRM, dialer, SMS service — you must be registered. Unregistered traffic is filtered, throttled, and increasingly blocked entirely.

Registration Steps

Step 1: Register your brand with The Campaign Registry (TCR)

TCR is the central authority that carriers use to verify businesses sending text messages. Your registration includes:

• Legal business name and EIN
• Business address and website
• Industry vertical
• Contact information
• Business type (sole proprietor, LLC, corporation)

Step 2: Register your campaign(s)

Each use case needs a separate campaign registration:

• Lead follow-up (marketing)
• Appointment reminders (informational)
• Customer service (conversational)

You must describe your opt-in flow, message content, and frequency for each campaign.

Step 3: Get carrier approval

T-Mobile, AT&T, and Verizon review your registration and assign a trust score. Higher trust scores mean higher throughput (messages per second) and better deliverability.

Trust scores are based on:

• Business size and history
• Opt-in flow quality
• Content compliance
• Prior complaint rates

10DLC Costs

What Happens Without 10DLC

• Messages filtered silently — you think they sent, but leads never receive them
• Delivery rates drop to 20–40% on unregistered numbers
• Carrier may block your number entirely
• Platform providers (Twilio, Bandwidth) may suspend your account

Most CRM platforms — GoHighLevel, Close, HubSpot — handle 10DLC registration through their interface. If yours doesn't, you'll need to register directly through your telephony provider.

Opt-In Requirements: Building a Compliant Foundation

What a Compliant Opt-In Looks Like

For lead buyers, the opt-in happens on the lead generation form before you ever see the lead. Here's what a compliant opt-in flow includes:

On the form:

• Clear disclosure: "By submitting this form, you consent to receive marketing text messages from [Company Name] at the phone number provided. Message and data rates may apply. Message frequency varies. Reply STOP to opt out."
• The disclosure must be near the submit button and clearly visible
• The consumer must take an affirmative action (checking a box, clicking submit)
• Pre-checked consent boxes are not sufficient for marketing texts

Sample compliant disclosure language:

By clicking "Get My Quote," I consent to receive marketing calls, texts, and emails from [Company Name] at the number and email provided, including by automated means. Consent is not required to purchase. Message and data rates may apply. Reply STOP to cancel texts at any time. [Privacy Policy] [Terms of Service]

Verifying Consent When Buying Leads

When you purchase leads from a vendor, you're inheriting the consent that was captured at the point of opt-in. Before you text a single lead, you need to verify:

1. Does the vendor provide consent documentation? Reputable vendors can show you the form language, timestamp, and IP address associated with each opt-in.
2. Does the consent language cover text messaging specifically? "Consent to be contacted" is not sufficient. The disclosure must specifically mention text messages or SMS.
3. Does the consent identify your company? Under current law (post-11th Circuit ruling), the consent can cover multiple identified sellers — but your company must be named or clearly described.
4. Is the consent timestamped? You need to be able to demonstrate when the consumer opted in if challenged.

If your vendor can't provide this documentation, reconsider buying from them. The cheapest lead is the one that doesn't generate a lawsuit.

For guidance on vetting lead sources, see our guide on how to evaluate a lead vendor.

Opt-Out Requirements: The Rules Are Strict

Opt-out compliance is where the FCC's consent revocation rules (effective April 2025) have the biggest impact on text messaging. These rules survived the 11th Circuit challenge and are active law.

Universal Opt-Out Keywords

Consumers can opt out of text messages by replying with any of these keywords:

• STOP
• QUIT
• END
• CANCEL
• UNSUBSCRIBE

Your system must recognize all of these and immediately cease text messages to that number.

Reasonable Opt-Out Methods

The FCC's 2025 consent revocation rule requires that consumers can revoke consent through any "reasonable means." For text messaging, this includes:

• Replying STOP (or any standard keyword)
• Calling your business and asking to be removed
• Emailing a request
• Submitting a form on your website
• Telling your sales rep verbally

If a lead texts back "please don't text me anymore" — that's a valid opt-out even though it's not a keyword. Your team needs to be trained to recognize natural-language opt-outs and process them immediately.

Processing Timeline

Once an opt-out is received:

• Text messages must stop within the same business day — no "final confirmation" texts, no "are you sure?" messages
• The only permitted response is a single confirmation: "You have been unsubscribed. No further messages will be sent."
• The opt-out applies to the channel used. A text opt-out stops texts. It does not necessarily opt them out of phone calls or emails (though best practice is to flag the lead across all channels).
• Record the opt-out with timestamp and method for your compliance records

Internal Suppression List

Maintain your own internal suppression list — separate from the National DNC list. This list should include:

• Every phone number that has sent a STOP or opt-out keyword
• Every phone number where the person verbally requested no more texts
• Every phone number associated with a complaint
• Date and method of each opt-out

Scrub your outbound text lists against this suppression list before every campaign. No exceptions.

DNC Scrubbing for Text Campaigns

Text messages are subject to the same Do Not Call requirements as phone calls. The National DNC Registry applies.

Key Requirements

• Scrub against the National DNC list before texting — every new batch of leads
• Re-scrub every 31 days — not quarterly, not "periodically," every 31 days
• Maintain your internal DNC list in addition to the federal list
• State DNC lists apply in states that maintain them (not all do)

The 31-day scrubbing requirement catches many teams off-guard. If you bought leads in January and are still texting them in March without re-scrubbing, you're non-compliant — even if the leads were clean when you first scrubbed them.

For a comprehensive guide to DNC compliance for lead buyers, see our aged leads DNC compliance guide.

Compliant Text Message Templates

Here are templates that follow TCPA requirements, carrier best practices, and actually get responses. Each template assumes you have valid prior express written consent.

Initial Contact (Day 1)

Template 1: The Warm Intro

Hi [First Name], this is [Your Name] with [Company]. You recently requested information about [product/service]. I'd love to help — is now a good time to chat? Reply STOP to opt out.

Template 2: The Value Lead

[First Name], it's [Your Name] at [Company]. I see you were looking into [product/service]. I've helped [number] people in [state] find the right option. Want me to send over some information? Reply STOP to opt out.

Follow-Up (Day 2–3)

Template 3: The Check-In

Hi [First Name], just following up on my message about [product/service]. Happy to answer any questions when you have a minute. — [Your Name], [Company]. Reply STOP to opt out.

Aged Lead Reactivation (30+ Days)

Template 4: The Acknowledging Opener

[First Name], I know it's been a while since you looked into [product/service]. A lot has changed in the market. Worth a quick conversation? — [Your Name] at [Company]. Reply STOP to opt out.

Template 5: The New Information Hook

Hi [First Name], [Your Name] with [Company]. New [rates/options/programs] just became available for [state] residents. Want me to check if you qualify? Reply STOP to opt out.

Appointment Confirmation (Informational)

Template 6: The Confirmation

Confirmed: Your call with [Your Name] at [Company] is set for [Day] at [Time]. Reply YES to confirm or call [number] to reschedule. Reply STOP to opt out of texts.

Key Compliance Elements in Every Template

Every outbound marketing text should include:

1. Your name and company name — carrier requirement and trust builder
2. Context for why you're reaching out — references their original inquiry
3. Opt-out language — "Reply STOP to opt out" on every message
4. No deceptive content — don't pretend to have an existing relationship that doesn't exist

Common Text Messaging Compliance Mistakes

These are the violations I see most often. Every one of them has generated lawsuits.

Mistake 1: Texting Without Verified Written Consent

"I bought the lead, so I can text them" is not how consent works. You need verified prior express written consent that specifically covers text messaging. If the original lead form only mentioned "phone calls" or "being contacted," you don't have text consent.

Fix: Verify that your lead vendor's opt-in language specifically includes text/SMS consent. Get a copy of the form and keep it on file.

Mistake 2: No Opt-Out Mechanism

Every marketing text must include opt-out instructions. Every. Single. One. Not just the first message in a sequence — every message.

Fix: Include "Reply STOP to opt out" (or equivalent) in every outbound text. Configure your platform to automatically process STOP replies.

Mistake 3: Ignoring Natural-Language Opt-Outs

A lead texts back "don't text me" or "not interested please stop." If your system only watches for the keyword STOP, this lead keeps getting messages. Under the FCC's 2025 consent revocation rules, that's a violation.

Fix: Train your team to recognize and process any opt-out request, regardless of wording. Configure AI or keyword filters to catch common variations.

Mistake 4: Texting Before 8 AM or After 9 PM

The TCPA restricts marketing communications to 8 AM – 9 PM in the recipient's local time zone. If you're in California texting a lead in New York at 6:30 PM Pacific, it's 9:30 PM Eastern — that's a violation.

Fix: Always reference the recipient's time zone. Most CRM platforms can handle this automatically. If yours can't, build time-zone checks into your workflow.

Mistake 5: Sending from Unregistered Numbers

Texting from an unregistered 10-digit number means poor deliverability and potential carrier blocking. It also suggests to regulators that you're not taking compliance seriously.

Fix: Complete 10DLC registration before sending a single text. Budget 2–4 weeks for the registration and approval process.

Mistake 6: Buying "Textable" Lead Lists Without Consent Verification

Some vendors sell lead lists marketed as "textable" or "SMS-ready." Unless those leads have documented, timestamped prior express written consent specifically covering text messaging from your company, they're not compliant — no matter what the vendor claims.

Fix: Request the actual opt-in form language and consent documentation. If the vendor can't produce it, walk away.

Mistake 7: Failing to Scrub DNC Every 31 Days

Many teams scrub leads at purchase and never again. The National DNC list is updated regularly, and consumers can add their numbers at any time. Federal rules require scrubbing every 31 days for any numbers you continue to contact.

Fix: Set a calendar reminder. Build it into your monthly lead maintenance process. This applies to texts and calls equally.

Multi-Channel Strategy: SMS + Calls + Email

Text messaging is most effective as part of an integrated follow-up cadence — not as a standalone channel. Here's how the three channels work together.

The Optimal Sequence for Internet Leads

This cadence gives you 9 touchpoints across 3 channels in the first week — without overwhelming the lead on any single channel.

Why Multi-Channel Outperforms Single-Channel

Data from lead management platforms consistently shows:

• Phone only: 8–12% contact rate
• Phone + text: 22–30% contact rate
• Phone + text + email: 35–45% contact rate

Each channel reaches people at different moments. Some leads screen calls but read texts immediately. Some don't check texts but respond to email. Some only answer their phone. Using all three channels dramatically increases the odds of making contact.

Channel-Specific Consent Considerations

Each channel has its own consent requirements:

The bottom line: for an automated multi-channel follow-up system hitting leads with calls, texts, and emails, you need prior express written consent that covers all three channels. Most well-designed lead forms capture this.

For a detailed multi-channel follow-up cadence, see our aged lead follow-up cadence guide.

Building a Compliant Text Messaging Operation: Checklist

Use this as your implementation checklist. Don't send your first text until you can check every box.

Before You Start

• [ ] Verify lead vendor provides consent documentation covering text/SMS
• [ ] Complete 10DLC brand registration
• [ ] Register your SMS campaign(s) with carrier-approved use cases
• [ ] Configure automatic STOP/opt-out keyword processing
• [ ] Set up internal suppression list management
• [ ] Scrub lead list against National DNC registry
• [ ] Verify time-zone handling in your SMS platform
• [ ] Review and comply with state-specific SMS laws in your target states

Ongoing Operations

• [ ] Include opt-out language in every outbound marketing text
• [ ] Process opt-outs same day — no exceptions
• [ ] Re-scrub leads against DNC every 31 days
• [ ] Monitor complaint rates (keep below 0.3% to maintain carrier trust)
• [ ] Log all consent records with timestamps
• [ ] Train team on natural-language opt-out recognition
• [ ] Audit text templates quarterly for compliance
• [ ] Document your compliance program (written policy)

Record Keeping

• [ ] Retain consent records for 5+ years
• [ ] Log every opt-out with date, time, and method
• [ ] Keep copies of all text message templates used
• [ ] Document your DNC scrubbing dates and results
• [ ] Save 10DLC registration confirmations

TCPA Compliance and Aged Leads

Aged leads present unique compliance considerations for text messaging.

The Consent Chain

When you buy aged leads, you're buying leads where consent was captured weeks, months, or even a year or more ago. The consent is still valid — there's no expiration on TCPA consent — but the chain of documentation matters.

Make sure your vendor can provide:

• The original form language (including text/SMS consent disclosure)
• Timestamp and IP address of the opt-in
• Evidence the form was compliant at the time of capture

Aged Lead Text Strategy

For leads 30+ days old, adjust your text approach:

1. Acknowledge the time gap. Don't pretend the inquiry just happened. "I know it's been a while since you looked into this" is honest and builds trust.
2. Lead with new value. Rates change. Programs change. Markets change. Give them a reason to re-engage.
3. Lower the ask. Don't push for an appointment in the first text. Ask if they're still interested. Let them re-qualify themselves.
4. Be prepared for more opt-outs. Aged leads have higher opt-out rates — that's expected and healthy. An opt-out is better than a complaint.

For detailed TCPA compliance guidance for lead buyers, see our TCPA compliance guide.

Key Takeaways

1. Written consent is required for marketing texts — no exceptions, regardless of whether you're using automation or manually texting.
2. 10DLC registration is mandatory for business text messaging. Without it, your messages won't be delivered.
3. Include opt-out language in every text and process opt-outs immediately.
4. Scrub DNC every 31 days — not quarterly, not when you remember.
5. The FCC's 1:1 consent rule was vacated and never took effect, but carrier policies functionally require similar standards for SMS.
6. Multi-channel follow-up (phone + text + email) dramatically outperforms text-only strategies.
7. Document everything — consent records, opt-out logs, DNC scrubbing dates, compliance policies.

Text messaging is the highest-impact follow-up channel available to lead buyers. Used compliantly, it can double or triple your contact rates. Used carelessly, it can generate six-figure lawsuits. The difference is following the rules outlined in this guide.

Disclaimer: This is educational guidance, not legal advice. Consult a TCPA attorney for guidance specific to your business and state.