TCPA / A2P 10DLC Compliance Checklist

Required by TCPA. Consent must be 'clear and conspicuous' — a pre-checked box is not consent.

Include: program name, frequency (e.g. '4 msg/mo'), 'Msg & data rates may apply', STOP/HELP info, link to terms + privacy.

Send a 'Reply YES to confirm' first message. Some carriers and US states (Florida, Oklahoma) require this. Improves engagement.

Required for all US A2P messaging since 2023. Done through your SMS provider (Postscript, Attentive, Twilio).

Unregistered long codes are heavily filtered post-2023. Toll-free (verified) or dedicated short code for higher deliverability.

Reply STOP / END / CANCEL / UNSUBSCRIBE / QUIT must auto-unsubscribe and send confirmation. Carriers enforce.

Reply HELP must auto-send brand name + support contact + opt-out instructions.

Marketing SMS outside 8am-9pm in the recipient's timezone is illegal. Most ESPs handle this automatically — confirm yours does.

TCPA fines often hinge on whether you can prove explicit consent. Store IP, timestamp, opt-in source URL per subscriber.

TCPA fines are $500-$1,500 per text. Class actions are common. Have a documented process to respond to FCC and BBB complaints.