Yes, the TCPA Covers Texts — And the Penalties Prove It

The FCC has treated text messages as regulated calls under the TCPA for years, and the January 2024 Final Rule made it explicit: National Do-Not-Call Registry protections now extend to texts. That rule also closed the "lead generator loophole" by requiring comparison-shopping sites to obtain consent one seller at a time, reinforcing that the same consent standards governing phone calls apply to every marketing message sent via SMS.

The financial stakes are severe. Statutory damages run $500–$1,500 per violating text with no aggregate cap, and DNC Registry violations can reach up to $43,792 per message. A 100,000-message campaign sent without proper consent could create exposure exceeding $150 million in a class action. TCPA class actions were up nearly 95% year-over-year through mid-2025, signaling that plaintiffs' firms are aggressively testing the boundaries of text-message liability.

Real settlements prove the risk isn't theoretical:

• Capital One paid $75.5 million in 2014 over automated dialers used without consent
• Florida Pizza Hut franchises paid $6 million after a seven-year fight over roughly 13,000 promotional texts
• Steve Madden paid $10 million for 200,000+ texts sent by a third-party vendor without consent
• DSW Shoe Warehouse paid over $4.4 million for allegedly texting consumers who had opted out

The legal landscape shifted in 2025–2026. The Supreme Court's McLaughlin v. McKesson decision removed deference to FCC interpretations, and the Seventh Circuit ruled in Steidinger v. Blackstone Medical Services that texts are not "telephone calls" under the TCPA's do-not-call private right of action — a decision limited to three states and one statutory subsection. Meanwhile, state mini-TCPA laws in Florida, Texas, Connecticut, Arizona, and Virginia impose stricter rules that remain enforceable regardless of federal court splits.

The consensus across regulators and defense counsel: treat marketing texts as fully TCPA-regulated. CallMyLeads builds every outbound flow — from new-lead response to nurture sequences — on prior express written consent, real-time opt-out honoring, quiet-hours enforcement, and 10DLC registration so your speed-to-lead never becomes a compliance liability.

The Legal Ground Is Shifting: The 2025–2026 Court Split Explained

For three decades, the answer to "does the TCPA cover texts?" was a simple yes. In 2025 and 2026, that certainty cracked — and businesses now face a genuine court split that changes how they should think about risk.

The first break came on June 20, 2025, when the Supreme Court decided McLaughlin Chiropractic Associates v. McKesson Corp. According to TermsFeed's TCPA analysis, the ruling means district courts no longer have to defer to FCC interpretations of the TCPA in private lawsuits. In plain terms: the FCC said texts are calls for years, but judges are now free to read the 1991 statute themselves.

They immediately started disagreeing. The same legal review documents two conflicting 2025 rulings: Wilson v. Medvidi, Inc. (California, October 2025) held that texts qualify as calls, while Jones v. Blackstone (Illinois, July 2025) held the TCPA's private right of action applies only to telephone calls. A December 2025 National Law Review article described the issue as "set for appellate review and not yet settled."

Then came the first appellate word. In August 2026, the Seventh Circuit ruled in Steidinger v. Blackstone Medical Services that text messages are not "telephone calls" under the TCPA's do-not-call private right of action (§ 227(c)(5)). As WilmerHale's analysis of the decision explains, the court's reasoning rested on history: the first text message wasn't sent until 1992 — a year after the TCPA passed — and Congress itself wrote "telephone call or message" elsewhere in the statute, showing it treated the two as different things.

Before anyone relaxes, the ruling's limits matter enormously:

• It covers only § 227(c)(5) — the do-not-call private right of action — not the consent requirements for marketing texts under other provisions.
• It binds only Illinois, Indiana, and Wisconsin. Everywhere else, the question stays open.
• The FCC's own rules still stand: its January 2024 Final Rule codified that Do-Not-Call Registry protections extend to text messages.
• State mini-TCPA laws fill the gap. Florida law defines a "telephonic sales call" to include text messages, and New York law covers "electronic messaging text" — both enforceable regardless of what federal courts decide.

This is why every credible source lands on the same advice: comply fully anyway. WilmerHale's attorneys note that companies with nationwide texting operations "will likely need to keep their compliance structures in place" and should "expect continued ambiguity." The math explains why. Statutory damages run $500 to $1,500 per violating message with no aggregate cap, and Infobip's compliance research reports TCPA class actions rose nearly 95% year-over-year through mid-2025. Betting a national campaign on one circuit's reading of a 1991 statute is a bad trade.

The practical takeaway for any business running outbound text follow-up: collect prior express written consent, honor opt-outs instantly, respect quiet hours, and keep records. It's the posture we build into every lead response workflow at CallMyLeads — consent captured at booking, opt-outs processed automatically — because in a shifting legal landscape, documented compliance is the only stable ground.

Consent Rules: What You Need Before You Hit Send

Before any text leaves your system, the law wants to know one thing: what kind of consent do you have? The answer depends entirely on what your message says — and getting it wrong costs $500 to $1,500 per violating message, with no cap on total damages.

Any text that promotes your business — offers, discounts, upsells, win-back campaigns — requires prior express written consent before you send it. Under 47 CFR § 64.1200(a)(2), this is the highest consent bar in the TCPA, and it applies to every marketing text, not just bulk blasts.

Valid written consent isn't a signature alone. Your opt-in disclosure must spell out exactly what the consumer is agreeing to:

• Your business name and the purpose of the messages
• Expected message frequency
• A "message and data rates may apply" notice
• HELP and STOP instructions, plus a link to terms and conditions
• An unchecked consent box — pre-checked boxes are invalid

Two more rules trip up businesses constantly. Consent cannot be a condition of purchase, and your disclosure must say so explicitly. And keyword-only opt-ins — "Text SAVE to 54321" — are legally shaky, because numerous TCPA lawsuits argue that replying with a campaign keyword is not full consent to ongoing marketing.

Appointment reminders, delivery updates, account alerts, and password resets qualify as informational. These need only prior express consent, which can be oral or implied when a customer knowingly hands you their number — say, on an intake form or booking request.

That lower bar disappears the moment you add a sales pitch. A single discount code inside a transactional message reclassifies it as marketing, triggering the written-consent requirement retroactively. "Your appointment is confirmed — and here's 10% off your next visit" is a marketing text, full stop.

The math is brutal. A 100,000-message campaign sent without proper consent could create exposure exceeding $150 million in a class action — and TCPA class actions were up nearly 95% year-over-year through mid-2025. Real companies have paid real money: Steve Madden settled for $10 million over 200,000 texts sent by a third-party vendor, and DSW paid over $4.4 million for allegedly texting people who had already opted out.

Documentation is your defense. Detailed, accurate consent records — who opted in, when, how, and under what disclosure language — are what separate a defensible campaign from a settlement.

This is why consent has to be built into the lead flow itself, not bolted on later. At CallMyLeads, the booking flow collects explicit consent upfront, opt-outs are honored immediately and automatically, and business texting runs under registered A2P 10DLC rules — so fast follow-up never turns into a legal liability. Speed wins the lead; consent keeps the win.

Opt-Outs, Quiet Hours, and State Laws: The Rules That Catch Businesses

Even if a court someday decides texts aren't "calls," the rules that actually trip businesses up day to day haven't gone anywhere. Opt-out handling, quiet hours, list scrubbing, and a patchwork of state laws keep working regardless of how the federal courts split.

The FCC's opt-out rules that took effect April 11, 2025 changed how revocation works. Under the new FCC requirements, consumers can revoke consent "in any reasonable manner" — not just by texting STOP — and businesses must honor it within 10 business days. You get one post-revocation clarification message, sent within 5 minutes, with no marketing content. Revocation also crosses mediums: replying STOP to a text blocks your automated calls too. DSW paid over $4.4 million for allegedly texting consumers who had already opted out — a settlement that closed in July 2025.

Quiet hours are simpler but easy to violate at scale: no texts before 8 am or after 9 pm in the recipient's local time zone. For a business running follow-up across time zones, that means checking each contact's location, not your own clock. List hygiene matters too — scrub against the National Do Not Call Registry, state registries, and the Reassigned Number Database, since DNC violations can run up to $43,792 per message.

The state layer is where nationwide campaigns get expensive. Roughly a dozen mini-TCPA laws impose stricter rules that remain enforceable regardless of federal court splits:

• Florida caps messages at 3 per 24 hours per recipient and gives a 15-day safe harbor after opt-out
• Texas expanded its law to SMS with a new private right of action in September 2025
• Virginia will require opt-out records retained for 10 years starting January 2026
• Connecticut allows penalties up to $20,000 per violation; Arizona fines up to $1,000 per unsolicited text to DNC-registered numbers

The practical takeaway from compliance analysts: apply the strictest standard that applies to any given contact based on their state of residence. That's exactly why automated response systems like CallMyLeads build quiet-hours enforcement and immediate opt-out honoring into every plan — the rules vary too much to manage by hand. If a lead texts back "cancel" at 9:30 pm on a Saturday, the system stops, full stop, without anyone on your team having to catch it.

One more thing worth knowing: keep consent and opt-out records for at least four years to cover the TCPA statute of limitations — and longer for Virginia contacts. Documentation is your strongest defense when a complaint lands.

How to Text Leads Fast Without the Legal Risk

Texting a new lead within minutes can double your chances of winning the job — but one wrong text can cost $500 to $1,500 per message, with no cap on total damages. The fix isn't to slow down. It's to build compliance into the process so speed and legality run on the same track.

Here's the checklist that keeps fast lead texting on the right side of the rules:

• Collect written consent at every capture point. Marketing texts require prior express written consent, and opt-in checkboxes can't be pre-checked. The disclosure must name your business, state the purpose and frequency, and include STOP/HELP instructions. Keyword opt-ins like "Text SAVE to 54321" have drawn lawsuits, so use a proper consent flow.
• Scrub your lists before every send. Check contacts against the National DNC Registry, state registries, and the Reassigned Number Database — especially for consent older than 30 days.
• Enforce quiet hours. No texts before 8 am or after 9 pm in the recipient's local time zone, and watch for stricter state rules.
• Honor opt-outs immediately. Under the FCC's April 2025 rule, consumers can revoke consent "in any reasonable manner" — not just by texting STOP — and you get only one brief clarification message afterward.
• Keep records for at least four years. Detailed consent and opt-out records are your strongest defense in a TCPA dispute, and Virginia will require ten years of opt-out records starting January 2026.

Two more steps matter just as much. First, apply the strictest state standard for each contact — about a dozen states including Florida, Texas, and Connecticut have their own text-message laws with penalties up to $20,000 per violation, and those laws stay enforceable no matter how federal courts rule. Second, register your texting under A2P 10DLC with The Campaign Registry; since February 2025, carriers block unregistered traffic outright, so skipping registration means your messages never arrive at all.

Why go through all this when courts are split on whether texts even count as "calls"? Because the risk math hasn't changed. TCPA class actions were up nearly 95% year-over-year through mid-2025, and legal analysts still recommend treating marketing texts as fully TCPA-regulated regardless of the ongoing litigation. A single noncompliant campaign of 100,000 messages could carry exposure exceeding $150 million.

The practical challenge is that this checklist collides with speed-to-lead. Manual consent capture, scrubbing, and quiet-hour enforcement take time that new leads don't give you. That's where CallMyLeads fits: consent is collected in the booking flow, opt-outs are honored immediately and automatically, and every first response goes out in seconds — fast enough to win the lead, structured to stay inside the rules.

Speed wins jobs. Compliance keeps you in business. You don't have to choose between them.