SMS Marketing for Small Businesses: Rules and Best Practices

Text messages get read. That’s exactly why SMS marketing is so tempting for small businesses, and why it’s so tightly regulated. A text lands on the most personal device your customer owns, right next to messages from family. Send one they didn’t ask for, and you’re not just annoying them. You could be facing a lawsuit.

Done right, though, texting is one of the most direct ways to reach customers who want to hear from you: flash sales, appointment openings, order updates and last-minute news. This guide covers the consent rules under the Telephone Consumer Protection Act (TCPA), the carrier registration you’ll need and the messaging habits that keep subscribers happy.

This is general information, not legal advice. Texting laws change often, so check current rules or ask an attorney before you launch.

Why SMS marketing is different from email

Email and SMS both go to people on your list, but the rules and expectations differ sharply.

The biggest difference is legal risk. Under the TCPA, individuals can sue. The statute provides $500 in damages per violation, and a court can increase that to up to 3 times the amount for willful or knowing violations. When every text to every subscriber counts separately, numbers add up fast.

The TCPA consent rules you need to know

The TCPA is enforced by the FCC, with detailed rules in 47 CFR 64.1200. For marketing texts sent with automated tools, which covers almost every SMS marketing platform, the safest standard is prior express written consent.

Under the FCC’s rule, prior express written consent means a written agreement, signed by the person (electronic signatures count, such as checking a box on a web form), that:

• Clearly authorizes your business to send marketing texts to a specific phone number.
• States that the person isn’t required to agree as a condition of buying anything.

In practice, your opt-in should include:

• Your business name.
• What kind of messages they’ll get (for example, promotions and offers).
• How often you’ll text (for example, up to 4 messages a month).
• That message and data rates may apply.
• How to opt out (reply STOP) and get help (reply HELP).
• That consent isn’t a condition of purchase.
• A link to your terms and privacy policy.

Example opt-in language: “Yes, send me texts from Maple Street Bakery about specials and events at the number above. Up to 4 msgs/month. Msg and data rates may apply. Reply STOP to cancel, HELP for help. Consent isn’t a condition of purchase. See Terms and Privacy.”

Keep a record of every consent: the phone number, date and time, the exact wording shown and how it was collected. If a complaint ever arrives, that record is your defense.

What about the one-to-one consent rule?

You may have heard about an FCC rule requiring consent to be given to one seller at a time. The Eleventh Circuit vacated that rule in January 2025 in Insurance Marketing Coalition v. FCC, and the FCC later removed it. If you collect consent on your own website for your own business, it didn’t change much anyway: get consent directly, for your brand only.

Key takeaway: Never text marketing messages to a number just because you have it. A phone number given to book an appointment or complete a purchase is not consent to marketing texts. Get a separate, clear opt-in.

Opt-outs, quiet hours and other rules

• Honor opt-outs fast. Under the FCC’s revocation rules, which took effect in April 2025, people can revoke consent by any reasonable means, and you must honor the request within a reasonable time not exceeding 10 business days. Process STOP replies immediately, and treat plain-language replies like “unsubscribe,” “cancel” or “no more texts” the same way.
• Watch for rule changes. The FCC has delayed and revised the part of its revocation rules covering how far an opt-out reaches across different message types, and this part may keep changing. Check the current rule on fcc.gov before you rely on a narrow interpretation. The simplest approach: when someone opts out, stop all marketing texts to them.
• Respect calling hours. The FCC’s rules bar telephone solicitations before 8 a.m. or after 9 p.m. in the recipient’s local time. Many businesses use a narrower window to be safe.
• Check the National Do Not Call Registry. Valid written consent generally covers numbers on the registry, but without it, marketing messages to registered numbers are a problem.
• Know your state’s rules. Some states have their own telemarketing laws covering texts. Florida’s Telephone Solicitation Act, for example, was amended in 2023 to give senders 15 days to stop texting after a recipient asks before a lawsuit can proceed. Other states add their own consent rules or quiet hours.
• Send a single confirmation. A one-time reply confirming an opt-out is generally allowed, as long as it contains no marketing.

Register your number with the carriers

US wireless carriers require businesses to register before sending application-to-person texts. If you text from a regular 10-digit number, that means A2P 10DLC registration through The Campaign Registry. Your business is registered as a “brand,” and each use case (marketing, appointment reminders, account alerts) is a “campaign.”

You’ll usually register through your texting platform, not directly with The Campaign Registry. Expect to provide:

• Your legal business name, EIN and address.
• A description of the messages you’ll send.
• Sample messages.
• Your opt-in method and opt-in wording.
• Your opt-out and HELP responses.

Unregistered or poorly described campaigns may face filtering, blocked messages or extra fees. Alternatives include toll-free numbers (which need verification) and short codes (5 or 6-digit numbers, more expensive, suited to high volume).

CTIA, the wireless industry association, publishes Messaging Principles and Best Practices that carriers use to judge campaigns. Following them, especially on consent and opt-out, helps your messages get delivered.

Messages customers actually welcome

Legal compliance gets you permission. Useful messages keep it. Keep each text to one clear point, and identify your business in every message, since people don’t always save your number.

Habits that keep opt-outs low:

• Text less than you email. Start with 2 to 4 messages a month, and state that frequency in your opt-in.
• Make every text worth reading. If it wouldn’t be worth a phone buzz, send it by email instead.
• Use links carefully. Use your own branded domain where possible. Generic link shorteners can look like scams, and customers are increasingly wary of scam texts.
• Time it right. Send when people can act, such as lunchtime for a lunch special.
• Segment. Send the back-in-stock text only to people who asked.

Transactional texts vs marketing texts

Order confirmations, shipping updates and appointment reminders are generally treated differently from promotions, but the line blurs quickly. Adding “and get 10% off your next visit!” to a reminder makes it marketing. Keep the 2 types separate, register them as separate campaigns and get marketing consent before mixing in promotions.

Clinics and healthcare practices have extra rules. See our guides to HIPAA-compliant texting and reducing patient no-shows with reminders.

Where to start: a 7-step launch plan

1. Choose a texting platform that supports 10DLC registration, consent records, STOP handling and quiet-hour sending. Many email platforms also offer SMS add-ons; our email marketing cost guide explains how those are priced.
2. Write your opt-in language with all the disclosures above.
3. Publish SMS terms and a privacy policy that explain what you send and how you use phone numbers.
4. Register your brand and campaign through your platform.
5. Build your list the right way: website forms, checkout opt-in checkboxes (not pre-checked), keyword sign-ups like “Text JOIN to…” and in-store signs.
6. Set up automation: welcome text, opt-out confirmation and a few triggered messages. Our guide to marketing automation covers where SMS fits.
7. Launch small, then review monthly: opt-out rate, clicks, redemptions and complaints.

Compliance checklist

Conclusion

SMS marketing rewards businesses that treat a phone number as a privilege. Get clear written consent, register your number, identify yourself in every message, make opting out effortless and send only texts worth a buzz in someone’s pocket. Do that, and texting becomes a reliable channel for timely offers and updates, without the legal headaches.

Sources

• 47 U.S. Code § 227 (Cornell LII) — TCPA private right of action and statutory damages
• 47 CFR § 64.1200 (Cornell LII) — prior express written consent definition, calling hours and 10-business-day revocation rule
• CTIA Messaging Principles and Best Practices (May 2023) — carrier consent and opt-out expectations
• Twilio Docs: A2P 10DLC registration quickstart — brand and campaign registration process
• Florida Laws of 2023, Chapter 2023-150 — Florida Telephone Solicitation Act amendment and 15-day text opt-out provision