SMS Has Two Failure Layers And Most Brands Watch Only One

Why SMS Carries More Legal Risk

The difference between email and SMS risk is structural rather than cultural, and it comes down to who can sue you.

Email marketing in the US is governed principally by rules enforced by regulators. SMS marketing falls under the Telephone Consumer Protection Act at 47 U.S.C. 227, which provides a private right of action. Individual recipients can sue, and where many recipients received the same non-compliant message, they can do so collectively.

The operational rules sit at 47 CFR 64.1200, which is worth having open if you are reviewing your own program, and the National Do Not Call Registry now extends to text messages, so scrubbing against it belongs in your process.

The practical consequence is that SMS compliance is not primarily about avoiding regulator attention. It is about not creating a documented list of identically situated plaintiffs.

What The Damages Actually Are

Figures circulate here that are technically arithmetic rather than observed outcomes, and the distinction matters for how you weigh them.

The statute provides for damages of $500 per violation, rising to $1,500 for wilful or knowing violations, with no aggregate cap. Multiply that by a recipient count and you get numbers that sound existential.

You will see this presented as, for example, a single non-compliant campaign to ten thousand contacts carrying exposure of five to fifteen million dollars. That is the multiplication performed correctly, and it is not a prediction. Real cases settle, classes get certified or do not, defences exist, and outcomes vary enormously.

Reporting also indicates TCPA class action filings rose sharply through 2025, with one source citing an increase of nearly 95 percent year over year through mid-2025. That figure comes from a vendor selling compliance tooling, so treat the precise number carefully while noting that litigation volume in this area is not decreasing.

The reasonable posture is neither panic nor dismissal. SMS is a channel where the cost of getting consent wrong is disproportionate to the revenue of any single send, which argues for building the consent mechanics carefully once rather than iterating on them casually.

The Rule That Went Away

An unusual entry in a year of tightening rules, because this one loosened, and brands that prepared for it may be operating under a standard that no longer exists.

The FCC adopted a one-to-one consent rule requiring that consent be given to a single identified seller and relate to a logically associated topic. It was scheduled to take effect in January 2025. On 24 January 2025, in Insurance Marketing Coalition v. FCC, the Eleventh Circuit vacated it, holding that the FCC had exceeded its statutory authority.

The court's reasoning is worth understanding because it explains why the rule is unlikely to return in the same form. Because prior express consent is undefined in the statute, the court read it in its ordinary sense: a consumer need only clearly and unmistakably state beforehand that they are willing to receive the message. The one-to-one and topical-association requirements changed that ordinary meaning, which the agency lacked authority to do.

Reporting indicates the FCC subsequently deleted the vacated language and reinstated the prior prior-express-written-consent standard around August and September 2025, and that multi-seller consent accordingly remains lawful at the federal level.

The Delay Sequence Nobody Reports Correctly

Search this topic and you will find three different dates for the same provision, presented as though each article's date is the answer. They are describing successive stages of one sequence.

So an article citing April 2025 is describing the general revocation rules, one citing April 2026 is describing the original waiver, and one citing January 2027 is describing the extension. All three can be accurate about different things, and none of them individually tells you where matters stand.

The practical position for an ecommerce brand is simpler than the timeline suggests. The general revocation obligations are live now and have been since April 2025. The deferred provision concerns cross-channel and cross-business-unit scope, which the waiver requests indicate was driven by large institutions with many separate communication streams.

Given the direction of travel, treating an opt-out as applying broadly rather than narrowly is the safer default regardless of the deferral. It is also what customers expect, and defending a narrow reading in front of a jury is not a position worth engineering toward.

Revocation Is The Part That Tightened

While one rule was vacated, this one arrived and it is the change most likely to make an existing program non-compliant.

Since April 2025, consumers may revoke consent at any time through any reasonable method, covering both marketing and informational messages, and businesses must honor and process reasonable revocation requests within 10 business days.

Read that carefully. Any reasonable method. Not a STOP reply in the SMS channel.

Route three is where most brands are exposed. A customer emails support saying stop texting me, the agent replies helpfully, and nothing propagates to the SMS platform because no process connects the two systems. The opt-out was valid, it was received, and messages continue.

Reporting also indicates a single confirmation message after a revocation request is permitted where clarification of scope is genuinely needed. One message. Not a retention sequence.

The fix is procedural rather than technical: every customer-facing channel needs a route to suppress a phone number, and support agents need to know it exists and to use it.

Quiet Hours And State Laws

Timing rules that sound trivial and produce a specific, avoidable failure.

Marketing messages are restricted to daytime hours, commonly described as 8am to 9pm in the recipient's local time. The emphasis is the whole point: a nine in the morning send scheduled from an East Coast office reaches West Coast subscribers at six.

Platforms increasingly offer timezone-aware sending, and it is not always on by default. Check rather than assume, because a scheduled campaign that violated quiet hours across a whole timezone is a single mistake affecting every recipient in it.

State law then layers on top. Sources report differing counts of states with mini-TCPA statutes, one saying at least twelve and another fifteen including California, Florida, Texas, New York, Virginia and Washington. The range rather than the exact figure is what matters: enough states to make a national program subject to a patchwork.

Content restrictions also apply through carrier rules rather than law, commonly summarized as SHAFT, covering sex, hate, alcohol, firearms and tobacco. Brands in adjacent categories, including some supplements and wellness products, encounter filtering here even where nothing they sell is restricted.

The Carrier Layer

The second failure layer, entirely separate from the law, and the one that silently destroys campaign performance.

Application-to-person messaging over standard ten-digit numbers requires brand and campaign registration, known as A2P 10DLC. Carriers use that registration to assign throughput and trust. Unregistered or poorly registered traffic gets throttled or blocked.

That is the same shape of problem as authentication failure in email and a different mechanism entirely. In both cases the sending system reports success while the message never arrives, which means your own analytics cannot tell you the channel is broken.

The diagnostic is indirect because no error is surfaced. Watch for click and conversion rates falling while reported delivery stays flat, engagement dropping sharply on one carrier's numbers, or reply volume collapsing. Any of those with unchanged reported delivery suggests filtering rather than audience fatigue.

Registration is therefore not paperwork to complete eventually. It is the precondition for the channel functioning at all, and it should be finished before any campaign runs at scale rather than after volume reveals a problem.

What Gets You Filtered

Content and behavior signals carriers act on, most of which are habits rather than violations.

• Public URL shorteners. Shared shortener domains carry other senders' reputations. Use a branded link domain instead.
• All caps and excessive punctuation. Reads as spam to a filter regardless of intent.
• SHAFT-adjacent language even where the product is not restricted. Wellness and supplement copy trips this regularly.
• Sudden volume increases. Going from low volume to a large campaign without ramping looks like a compromised sender.
• High opt-out or complaint rates, which feed carrier trust scoring the same way they feed email reputation.
• Mismatched registration. Campaign use cases registered as one thing and used for another.

The branded link domain point is worth acting on immediately if you have not. It is a small configuration change, it removes a shared reputation dependency you do not control, and it improves click-through because recipients can see where the link goes.

The ramp point catches seasonal brands specifically. A program that sends modestly all year and then triples volume for a holiday campaign is doing exactly what a compromised account does, and the filtering arrives at the worst possible moment.

Cadence And Fatigue

The performance question, and SMS behaves differently from email in a way that matters commercially.

An unwanted email is ignored. An unwanted text interrupts, arriving in the same notification stream as messages from family. That intimacy is why engagement is high, and it is why tolerance for frequency is much lower.

The consequence is that over-sending does not merely produce diminishing returns; it produces opt-outs, and opt-outs on SMS are permanent in a way email unsubscribes often are not, because re-acquiring consent requires the whole written-consent process again.

Practical implications for cadence:

• Treat each send as spending a finite resource. The question is not whether a message would perform, it is whether it justifies the subscribers it costs.
• Reserve broadcast sends for genuine events. Launches, meaningful promotions, and time-sensitive information rather than filling a calendar slot.
• Let triggered flows carry the volume. Abandonment, shipping updates, and replenishment reminders are welcome because they are relevant to something the recipient did.
• Watch opt-out rate per send as your primary health metric, not click rate. Click rate tells you a message worked; opt-out rate tells you what it cost.

The economics follow from list size being hard to rebuild. An email list can be regrown with a signup form. An SMS list requires documented consent for every number, which makes each subscriber materially more expensive to replace and each unnecessary send more costly than it appears.

Where SMS Genuinely Wins

The channel earns its place in a narrow set of cases, and running it outside them is where brands get into trouble.

Time-sensitive information. A flash sale ending, a restock on a waitlisted item, an appointment reminder. Anything where the value decays within hours suits a channel read within minutes.

Transactional and shipping updates. Genuinely useful, low complaint risk, and they maintain the relationship without spending goodwill.

Cart and browse abandonment. Immediacy helps here more than in most flows, and the message is obviously connected to an action the recipient just took.

Replenishment for consumables. A reminder timed to when the product runs out is a service rather than an interruption, which is why it sustains higher frequency than promotional sending. Our guide to subscription and recurring revenue covers the timing logic.

Where SMS loses is long-form content, education, browsing-oriented merchandising, and anything a customer might want to save or refer back to. Those are email's territory, and pushing them into SMS costs subscribers for a message that would have performed better elsewhere.

Segmentation That Protects The Channel

Segmentation on SMS is a preservation strategy rather than an optimization one, which reframes how to use it.

1. Segment by purchase recency first. Recent buyers tolerate more contact. Long-dormant subscribers opt out at higher rates and are the ones to send to least.
2. Suppress the disengaged rather than re-engaging them. A subscriber who has ignored the last ten messages is an opt-out or a complaint waiting to happen.
3. Split by product interest so relevance carries frequency. A message about a category someone actually buys costs fewer subscribers than a general promotion.
4. Respect channel preference. A customer engaging heavily with email and never with SMS has told you something. Reduce SMS to them rather than sending both.
5. Cap total contacts across channels. Your subscriber does not experience email and SMS as separate programs, so a frequency cap that ignores the other channel is not a cap.

Point five is the one most brands miss because the two channels are usually managed by different tools and sometimes different people. A customer receiving four emails and three texts in a week has received seven interruptions, and neither system knows it.

Building a combined view is genuinely useful beyond compliance, since it also improves the email program. Our work on customer lifetime value covers valuing a subscriber properly, which is what makes the cost of an unnecessary send visible.

Whether You Should Run SMS At All

A question worth asking honestly, because the answer is not automatically yes.

SMS costs per message rather than per thousand, carries legal exposure email does not, requires carrier registration, and demands a consent process meaningfully more rigorous than an email signup. Against that it delivers attention no other channel matches.

The case is strongest for brands with consumable or replenishable products, genuine time-sensitivity in their offers, an existing engaged customer base, and the operational discipline to send rarely. It is weakest for considered-purchase categories with long cycles, brands whose promotions are not genuinely urgent, and teams without a process for handling opt-outs arriving through other channels.

For a good number of brands the right answer is a small, carefully consented SMS program carrying only transactional messages and genuine urgency, with everything else in email. That is less exciting than a full multi-channel retention stack and it protects both the list and the balance sheet.

We sell email marketing services and not SMS services, so weigh that recommendation accordingly. It is also what we would tell a brand that had no relationship with us, and the reasoning is in the paragraph above rather than in our service list.

If You Do Nothing Else

Check two things this week. First, whether an opt-out arriving by email or through support actually suppresses the phone number, or whether it stops at the person who received it. Second, whether your click rate has been falling while reported delivery stayed flat, which is the signature of carrier filtering rather than audience fatigue.

Those two checks cover the highest-consequence legal failure and the highest-consequence performance failure, and neither requires a project to answer.