The Short Answer: Yes — and the Law Treats Texts Like Calls

The short answer is yes — unsolicited marketing texts are illegal. The FCC explicitly treats text messages as phone calls under the Telephone Consumer Protection Act, which means the same do-not-call rules and consent requirements apply. For businesses, that means prior express written consent is the only thing that separates a legal text from a violation.

Violations carry statutory damages of $500–$1,500 per text, and consumers can sue directly without proving actual harm. A June 2026 federal ruling in Pero v. Brown-Daub Chevrolet confirmed that consumers on the National Do Not Call Registry can sue over spam texts, holding that an unwanted marketing text qualifies as a "call" under the TCPA. The plaintiff received eight unwanted marketing texts after an employee allegedly overrode her opt-out request — a detail that made the case. Six federal circuits now support this "text = call" interpretation.

The law applies extraterritorially — any business texting U.S. customers, even from outside the country, falls under the TCPA. That matters for companies like CallMyLeads, a Canadian-operated service serving U.S. home-services, dental, and legal clients. Our model only texts leads who submitted a form, ad, chat, or booking request with explicit consent collected in the booking flow — the compliant opposite of unsolicited outreach.

Key compliance lines every business should know:

• Marketing texts require prior express written consent; informational texts (reminders, alerts) need only prior express consent
• Opt-outs must be honored through "any reasonable means" within 10 business days — not just "STOP" keywords
• Quiet hours are 8 AM–9 PM in the recipient's time zone
• Carriers flag opt-out rates above 2% as unhealthy and can suspend sending capability

The enforcement stakes are real: DSW paid $4.42 million in March 2025, Wells Fargo paid $17.85 million, and Uber settled for $20 million. CallMyLeads handles A2P 10DLC registration, immediate automatic opt-outs, and quiet-hours compliance so clients don't have to navigate it alone.

What's at Risk: Real Penalties and Where Businesses Get Sued

These aren't theoretical fines — real companies have paid millions for texting the wrong people. And the biggest risk isn't sending the first text. It's what happens after someone asks you to stop.

The numbers tell the story. Shoe retailer DSW paid $4.42 million in March 2025 for unwanted marketing texts that violated the TCPA, according to recent TCPA enforcement reporting. Wells Fargo settled for $17.85 million in 2019 over unsolicited texts and calls to non-customers. Uber paid $20 million back in 2017 for the same basic mistake.

Each violation carries statutory damages of $500 per text — and up to $1,500 per willful or knowing violation. Multiply that by a follow-up sequence of a few dozen texts, and a single mishandled lead can turn into a five-figure lawsuit.

Where does that liability actually come from? Look at the Pero case, decided by a federal court in June 2026. The plaintiff opted out of texts from a car dealership, then received eight more unwanted marketing texts anyway. An employee had allegedly overridden her opt-out request — and that override became the heart of the case. Her number had been on the National Do Not Call Registry since 2021.

The court's ruling made clear that a text message counts as a "call" under the TCPA, so DNC-registered consumers can sue over spam texts. Six federal circuits now support that interpretation. In other words: one person on your team deciding a lead "seems interested" and texting them anyway can put your business in court.

The rules tightened further on April 11, 2025. Under the updated TCPA requirements, businesses must honor opt-outs made through any reasonable means — not just the word "STOP" — and process them within 10 business days, down from 30. Texts can only go out during quiet hours of 8 AM to 9 PM in the customer's time zone, and any opt-out confirmation must be a single message with no promotional content.

For businesses doing lead follow-up by text, this is the exposure that matters most. A salesperson manually managing follow-ups can miss an opt-out buried in a reply, send one text too many, or text at 9:15 PM. Carriers add pressure on top of the law: they track 11 opt-out keywords and flag opt-out rates above 2% as unhealthy, which can get your sending blocked entirely.

That's why opt-out handling can't depend on a human remembering. CallMyLeads honors opt-outs immediately and automatically — no one on your team can override them — and texts only go out within legal quiet hours. When every lead gets a fast reply but every "stop" gets instant respect, you get the speed without the lawsuit.

The lesson from DSW, Wells Fargo, and Uber is simple: consent gets you in the door, but opt-out handling decides whether you stay out of court.

Consent Done Right: The Line Between Legal and Illegal Texting

Consent is the single line that separates a legal marketing text from a $1,500 mistake — and most businesses get the details wrong. Under the TCPA, marketing texts require prior express written consent, with violations carrying statutory damages of $500 per message, up to $1,500 for willful or knowing violations, per legal compliance analysis.

Valid written consent is more flexible than it sounds. The E-SIGN Act recognizes electronic signatures — website forms, email, text message, and telephone keypress all count. What doesn't count is a pre-checked box: the consumer must take an affirmative action. Your disclosure must also state that consent is not a condition of purchase, and voice recordings alone are no longer sufficient under recent court rulings.

Transactional texts live under a lighter standard. Appointment reminders, fraud alerts, and opt-out confirmations require only "prior express consent" — but they must contain no promotional content. The moment you tack a discount offer onto a reminder, you've crossed into marketing territory and the written-consent bar applies.

One rule needs careful handling: the FCC's 2024 one-to-one consent rule, which would have required lead generators to obtain consent for each individual seller, was struck down by the Eleventh Circuit Court of Appeals. But vacatur doesn't make bundled consent safe. The practical takeaway from both analyses: get consent per brand, clearly identified at opt-in. A checklist for staying on the right side:

• Collect affirmative, per-brand consent at the moment of opt-in — no pre-checked boxes.
• Keep transactional messages strictly informational, or get written consent first.
• Honor opt-outs made through any reasonable means within 10 business days, per rules effective April 11, 2025.
• Send only during quiet hours — 8 AM to 9 PM in the customer's time zone.

Opt-out handling deserves special attention. In the recent Pero ruling, liability centered on eight unwanted texts sent after a consumer's opt-out request was allegedly overridden — her number had been on the Do Not Call Registry since 2021. Even valid prior consent evaporates the moment someone says stop.

This is why responding to your own inbound leads is the compliant opposite of cold texting. When a homeowner fills out your form, clicks your ad, or requests a booking, they've reached out to you first — and a fast, consented reply to that person bears no resemblance to blasting purchased lists. CallMyLeads' model is built on exactly this: every response goes to a lead who initiated contact, with explicit consent collected in the booking flow and opt-outs honored immediately and automatically, so no human error can override a stop request.

Consent done right isn't a legal hurdle — it's the foundation of texting that actually converts. The leads who gave you permission are the ones who want to hear back.

The Second Layer: Carrier Rules That Can Shut You Down

Even if your texting is perfectly legal under the TCPA, carriers can still block your messages before they reach a single customer. That's the second layer of enforcement most businesses never see coming — and it operates entirely outside the courts.

Since early 2021, major US carriers including AT&T, T-Mobile, and Verizon have required A2P 10DLC registration for any business sending application-to-person texts over standard 10-digit phone numbers. According to industry guidance on 10DLC, the system is managed by The Campaign Registry and was built explicitly to combat illegal robo-texting and spam. No registration means your messages get filtered or blocked, full stop.

Registration is not a one-time checkbox. As carrier compliance documentation explains, carriers continuously monitor SMS traffic after approval — filtering or blocking non-compliant messages and suspending sending capability for repeat offenders. Message content, sender identification, opt-out clarity, and promotional tone are all evaluated on an ongoing basis.

The metrics carriers watch are specific. An opt-out rate above 2% of total incoming messages is flagged as "unhealthy" traffic under A2P compliance standards — a signal that recipients didn't want your texts in the first place. That threshold matters because it ties carrier enforcement directly back to consent quality: bad lists produce bad numbers, and bad numbers get you shut down.

Carriers also track a defined set of opt-out keywords across your traffic. The 11 keywords monitored include:

• STOP, STOPALL, and END
• REVOKE and OPTOUT
• UNSUBSCRIBE and CANCEL
• QUIT
• ARRETT, ARRET, and ARRETE (French-language variants)

Every one of these must trigger an immediate, automatic stop. That aligns with the legal side too — TCPA rules effective April 2025 require honoring opt-outs made through "any reasonable means" and processing them within 10 business days. Carrier systems expect it to happen faster than that: instantly, without human involvement.

This is where manual processes fail. In the federal case covered earlier, the plaintiff received 8 marketing texts after an employee allegedly overrode her opt-out — a human mistake that turned into litigation. Carriers design their monitoring to catch exactly this kind of failure at scale.

The practical takeaway: compliance is ongoing, not one-time. Registration gets you in the door, but every message you send afterward is scored against carrier standards. This is why CallMyLeads builds the carrier layer into its done-for-you setup — business texting is registered under A2P 10DLC rules, opt-outs are honored immediately and automatically with no human override, and known spam numbers are screened before they waste your team's time. Your follow-up texts keep delivering because the infrastructure underneath them stays healthy.

Legal compliance keeps you out of court. Carrier compliance keeps your messages delivered. You need both — and the second one never stops watching.

How Compliant Lead Follow-Up Actually Works in Practice

Knowing the law is one thing. Building a follow-up process that obeys it at 9 PM on a Saturday — when a rushed employee might cut corners — is another. Compliant lead follow-up works when the rules are baked into the system itself, not left to memory.

The legal requirements translate directly into operational practices. Marketing texts demand prior express written consent, collected through an affirmative action like an unchecked box in a form — never a pre-checked one. Opt-outs must be honored through any reasonable means, and under rules effective April 11, 2025, processed within 10 business days. Messages must respect quiet hours of 8 AM to 9 PM in the recipient's time zone. And every business text must travel over registered A2P 10DLC channels, which carriers monitor continuously.

A working compliant setup looks like this:

• Consent at the point of capture — the booking flow or lead form collects explicit written consent before any text goes out, with disclosure that consent isn't a condition of purchase.
• Registered A2P 10DLC texting — mandatory since 2021 for major carriers, with traffic monitored and opt-out rates above 2% flagged as unhealthy.
• Automatic opt-out honoring — the system processes a STOP instantly, and no employee can override it.
• Quiet-hours observance — messages send only between 8 AM and 9 PM in the customer's time zone.
• Owned leads only — responses go to people who contacted your business, never to purchased or shared lists.

That third point deserves emphasis, because it's where companies get sued. In a June 2026 federal ruling, a plaintiff received 8 marketing texts after an employee allegedly overrode her opt-out — and that override sat at the center of the case. When a human can reverse an opt-out, eventually one will. The safest design removes the option entirely.

This is the model CallMyLeads builds into its AI lead response system. When a call is missed or a new lead arrives from a form, ad, or chat, the system texts back in seconds — but only because consent was collected in the booking flow, and only over registered A2P 10DLC channels. Opt-outs are honored immediately and automatically, quiet hours are observed, and the system responds exclusively to each client's own inbound leads rather than purchased lists. Even the one-to-one consent debate points this direction: although the Eleventh Circuit struck down the FCC's one-to-one consent rule, per-brand consent at opt-in remains the safe practice — which is exactly what responding to your own leads delivers.

The carrier layer reinforces the same discipline. Registration approval doesn't end scrutiny; carriers keep watching message content, sender identification, and opt-out clarity, and repeated non-compliance can suspend sending capability altogether.

The practical takeaway: speed and compliance aren't in tension. Instant text-backs to missed calls work because the lead asked to hear from you, consented in writing, and can leave the conversation with one word. Fast follow-up is only an asset when the foundation underneath it is lawful — otherwise every quick reply is a $500 to $1,500 liability waiting for a plaintiff's attorney.