Text message consent rules for a small business
When a small business may text customers, and what consent each kind of text needs.
Business texts from an unregistered US local number are blocked before they reach the customer. This guide takes a small business through the brand form, the campaign form and the website pages reviewers check, with wording you can copy.
Updated 29 October 2026, about 10 minutes to read
The short answer
A2P 10DLC registration tells the US carriers who is texting and why. Your texting provider sends two forms to The Campaign Registry: the brand, with your legal name, tax number and address exactly as the IRS has them, and the campaign, with what you send, sample texts and how people agree. The usual reasons for rejection are a name that does not match the tax records, a privacy policy without the right sentence and an opt-in nobody can see.
A2P means application to person: texts sent by software rather than typed on a phone. 10DLC means an ordinary ten-digit local number. If your business texts customers from its own local number through a phone system, a texting app, a CRM or a missed-call text-back service, that number needs an A2P 10DLC registration. Texts from an unregistered number are blocked, and the only sign may be an error code in your provider's logs.
You do not need it when:
Registration does not promise delivery. It tells the carriers who you are, which means less filtering, but texts that stray from what you registered can still be blocked.
Work in this order. Each step depends on the one before, and skipping the first two is the quickest way to a rejection.
You do not deal with the registry yourself. Your provider, whether that is Twilio, a business phone system such as RingCentral or a texting tool, sends your details to The Campaign Registry, the central register the US carriers use to check business texting, and shows you the status of each step.
The brand is your business. The registry checks it against public records, so the details must match those records, not what is painted on your van.
If the EIN letter is lost, the IRS can send a replacement confirmation. Copy the name from it character for character: "Brightwater Plumbing, LLC" and "Brightwater Plumbing LLC" are different names to the computer doing the check.
With an EIN you register a standard or a low-volume standard brand. Twilio suggests low-volume standard for small senders, which fits a clinic, a salon or a trade business sending replies and reminders. Registration carries one-off fees for the brand and the campaign review, and a monthly fee for each campaign. They are set by the registry and the carriers and passed on by your provider, so ask for the current list before you start.
There is a separate route for people who run a business under their own Social Security number and have no EIN: the sole proprietor brand. It is simpler, and it comes with limits:
If your business has an EIN, you cannot use the sole proprietor route, even if you work alone. Twilio's guidance says applications from businesses with a tax number on that route are rejected. Register a low-volume standard brand with the exact legal name from your EIN letter instead.
The reverse mistake happens too: a sole trader with no EIN fills in the standard form with a Social Security number, or with the EIN of a business they have closed. Neither passes.
The test is simple. If the IRS issued the business an EIN and it is still in use, you are a standard brand. If you file under your own Social Security number and nothing else, you are a sole proprietor brand.
The campaign is what you text and why. First pick the use case. For a small business the usual choices are:
Then write the description. Vague ones fail: Twilio gives "This campaign sends messages to customers" as an example of one that was rejected. Say who sends, who receives, what the texts are about and how people come to get them. For a two-van plumbing firm:
"Brightwater Plumbing LLC texts customers who call us, book a job on our website or tick the text box on our enquiry form. We send a reply when we miss a call, confirmation of the visit time, a reminder the day before, the engineer's arrival time and answers to the customer's questions. We do not send marketing texts."
If you plan to send offers later, decide now. Offers sent on a campaign registered only for reminders break the registration, so register what you will really send, and collect a separate consent for offers.
The campaign form asks for sample messages. Write the texts you will really send, with your business name in each and the opt-out line in at least one. Use brackets for the parts that change:
The reviewer compares the samples with the description and the use case. A sample that mentions a discount, in a campaign that says it sends no marketing, is the kind of mismatch they catch.
The form may also ask what you send when someone replies HELP or STOP:
The message flow field, sometimes called the call to action, tells the reviewer exactly how a customer agrees to texts. Reviewers follow it themselves, so it must describe something they can see. Wherever people agree, the wording should show:
On a website form the text box must be unticked and optional, so the customer can send the form without agreeing to texts. Wording to start from, with "Terms" and "Privacy" as links:
"I agree to receive texts from Brightwater Plumbing about my enquiry and bookings, such as replies, visit confirmations and reminders. Message frequency varies. Msg and data rates may apply. Reply STOP to opt out, HELP for help. See our Terms and Privacy."
For other routes, give the reviewer the evidence:
Missed-call text-back needs care, because a caller has not ticked anything and reviewers dislike consent that is only implied. Describe the flow exactly, say it in your phone greeting ("If we miss your call, we will text you back from this number") and give the website form as the written route as well. The rules behind each kind of text are in text message consent rules.
Reviewers open your website, and Twilio lists website problems among the common reasons for rejection. Check it against this list first:
The privacy policy needs one sentence that carriers look for. Twilio's guidance asks for a plain statement that mobile numbers given for texts are never shared with or sold to third parties or lead generators for marketing. You can still use the companies that send your texts for you. Wording to copy:
"We do not sell or share mobile numbers or text message consent with third parties or affiliates for their marketing. We share numbers only with the service providers who send our texts, and only for that purpose."
The terms need a short section on texting: what you send, how often, that message and data rates may apply, how to get help and how to stop, with a contact address. If your site lacks these pages, what a privacy policy needs covers the rest of the privacy page, and what a small business website needs the rest of the site.
The same forms come out differently depending on what you text:
If you are unsure which use case fits, describe the texts plainly and ask your provider before you submit. Changing the use case later means a new campaign.
A rejection comes with a reason from your provider. Match it to the list below, fix every point you can find rather than only the one named, and resubmit once. Each round goes back into the review queue.
If a careful fix is rejected again, ask your provider's support to read the reviewer's note with you before the next attempt.
Approval covers what you registered. To keep it:
If your number is an office landline, it has to take texts before any of this matters: texting from your business landline covers the options.
You can do this yourself with your provider's forms. The work is in the details: the exact legal name, a public opt-in page and a privacy policy with the right sentence. Gather those before you start and the forms themselves are quick.
For clients on its missed-call text-back and reminders, GGSites handles the US carrier registration and builds the texts as part of its automation work, with replies landing where your team already reads messages. If reminders are the main job, check first whether your booking tool already sends them from its own number: booking automation explains how to decide which tool sends what.
The brand check is automatic and often finishes within minutes. The campaign is reviewed by people, so it takes longer, depending on the queue and on how complete your forms are. A rejection sends it back into the queue, so fix the website and the wording before the first submission, and register well before you need to send.
Yes, as a sole proprietor brand, if you run the business under your own Social Security number. You get one campaign and one number, lower daily limits and a code sent to your own mobile to confirm. If the business has an EIN, that route is closed: register a low-volume standard brand with the legal name on your IRS letter.
Yes. There are one-off fees for the brand and for the campaign review, and a monthly fee for each campaign, set by the registry and the carriers and passed on by your provider. Your provider can give you the current list. Each text is still charged as before, on top of these fees.
Yes, if the reminders come from your own business number through software. They fit the account notifications use case, and the brand, website and opt-in rules are the same as for any other campaign. If your booking tool sends reminders from its own number, the tool handles registration and you need none.
10DLC registration covers ordinary local numbers. Toll-free numbers go through toll-free verification instead: a separate form about your business, your texts and your opt-in, and unverified toll-free numbers are blocked from texting US phones too. Text from the number customers already call, so their replies come back to it.
Each provider registers the numbers it sends from. If your phone system texts from your main number and a separate tool sends reminders from another of your numbers, expect two registrations. Sending all business texts through one provider keeps it to one, and keeps every STOP reply in one place.