Why Texting Leads Without Proper Consent Can Cost You Millions

The average TCPA judgment exceeds $6 million, and that number should stop any lead-driven business cold. Speed-to-lead only works if the outreach is legal; a single misstep with automated texts can trigger class-action exposure that dwarfs the value of every lead in your pipeline.

Many operators assume an existing customer relationship covers them. It does not. Implied consent from a prior business relationship is insufficient for automated SMS marketing campaigns under the TCPA. The law draws a hard line: informational messages like appointment reminders may rely on implied consent when the number was provided in the normal course of business, but any marketing or promotional text requires prior express written consent with five specific elements — including a clear disclosure that consent is not a condition of purchase and that automated technology will be used.

For home-service, dental, and med-spa teams that live on fast text follow-up, this distinction is the difference between a booked job and a legal liability. Consent attaches to the person, not the phone number, so a reassigned number invalidates any prior agreement. Revocation can happen at any time, in any reasonable manner, and must be honored immediately. Records need to be retained for at least five years after the last message sent on that consent.

• Written agreement with the consumer's signature (electronic signatures count under E-SIGN)
• Clear authorization for autodialed or prerecorded marketing messages
• The specific telephone number to be called
• Disclosure that consent is not a condition of purchase
• Disclosure that automated technology will be used

CallMyLeads builds compliant consent collection into every booking flow so the first text is already backed by a defensible record. When leads come in from forms, ads, chat, or missed calls, the system captures the required disclosures before any automated outreach fires — protecting the speed advantage without exposing the business.

The Two Levels of Consent Under the TCPA — and Which One Your Texts Need

Not all consent is created equal — and under the TCPA, texting a customer with the wrong kind of consent can cost you millions. The law recognizes two distinct consent standards, and which one your messages need depends entirely on what you're sending.

"Prior express consent" covers informational messages — appointment confirmations, delivery updates, service notifications. According to FCC guidance, this consent can even be implied when a customer knowingly provides their phone number in the normal course of business, as long as your messages "closely relate" to why they gave you the number.

So if a customer books an HVAC appointment and shares their number, you can text a confirmation without a signed form. What you cannot do is use that same number for promotional campaigns. Legal analysis of the TCPA is clear: implied consent from an existing business relationship is insufficient for automated SMS marketing.

Marketing texts — offers, promotions, telemarketing — demand "prior express written consent." The FCC defines this as a written agreement that clearly authorizes the caller to deliver advertisements or telemarketing messages using an automatic telephone dialing system or an artificial pre-recorded voice.

The FCC requires five specific elements in that written agreement:

• A written agreement bearing the signature of the person being contacted
• Clear authorization to deliver advertisements or telemarketing messages via autodialer or prerecorded voice
• The specific telephone number to be called
• Clear disclosure that consent is not a condition of purchase
• Clear disclosure that the person authorizes telemarketing using automated technology

Here's the practical relief: "written" doesn't mean paper. The FCC has held that consent can be collected via email, text, recorded calls, or website forms — and a button press affirming agreement qualifies as an electronic signature under E-SIGN. A checkbox on your booking form, paired with compliant disclosure language, satisfies the signature requirement.

This matters for any business running automated text follow-up. Services like CallMyLeads build consent collection into the booking flow, but the underlying legal responsibility — capturing all five elements and keeping records for at least five years after last reliance on that consent — sits with your business.

The stakes are real: the average TCPA judgment exceeds $6 million. Getting the consent level right before your first marketing text goes out is far cheaper than learning the difference in court.

The Consent Traps That Catch Business Owners Off Guard

You can do everything else right and still get sued. The TCPA is full of traps that don't look like traps — rules that catch growing businesses months or years after they started texting customers.

The first trap: consent attaches to the person, not the phone number. If a customer gives you their number, then gives it up and the carrier reassigns it to someone else, your consent no longer covers the new owner. Businesses that send marketing texts in significant volumes need a strategy for detecting reassigned numbers, because texting a reassigned number counts as texting someone who never agreed to hear from you, according to compliance guidance citing FCC rulings.

The second trap: customers can revoke consent at any time, in any reasonable manner. The TCPA doesn't spell out how revocation works, but the FCC has ruled that consumers can pull their consent whenever they want and however they want — a text, an email, a comment to your receptionist. Companies should also treat internal Do Not Call requests as consent revocations and clarify whether an opt-out applies to one program or all communications, per FCC guidance. "Any reasonable manner" means you can't require customers to jump through hoops to opt out.

The third trap: opt-outs must be honored immediately. When someone replies STOP, the messages have to stop — not next week, not after the next campaign cycle. This is why CallMyLeads honors opt-outs immediately and automatically across every follow-up sequence, so a nurture campaign never keeps texting someone who has already said no.

The stakes are not small. The average TCPA judgment exceeds $6 million, which is why consent records should be kept for at least five years after you last relied on them. Timestamps, the method of agreement, and the specific number consented to are what defend you if a claim comes later.

To stay on the right side of these rules, your consent language should cover all the FCC-required elements up front. A practitioner example of compliant language looks like this:

• "By checking the box and clicking SUBMIT below, you agree that we may call you at the number you entered above with reminders, offers and other info, including possibly using automated technology, text and recorded messages."
• "Consent is not a condition of purchase."
• "Reply STOP to opt out of text messaging. Standard rates apply."

Notice what that language does: it names the number, discloses automated technology, makes clear that buying is not required, and tells people how to opt out. Every element covers one of the traps. Build it into your forms from day one — including booking flows — and the consent traps stay traps you never step in.

How to Collect and Track Consent the Right Way

Getting consent right isn't just about avoiding fines — it's about building a system that protects your business and respects your customers. The TCPA requires prior express written consent for any marketing text, and that consent must include five specific elements: a written agreement with the recipient's signature, clear authorization for automated messages, the specific phone number being consented to, disclosure that consent isn't a condition of purchase, and disclosure that automated technology will be used. A button press on a digital form qualifies as a valid electronic signature under E-SIGN. The average TCPA judgment exceeds $6 million, making compliance a financial imperative.

• Build consent capture directly into every form and booking flow with all five FCC-required elements present
• Retain detailed records — timestamps, method of agreement, and the exact number consented — for at least 5 years after last reliance
• Monitor for reassigned numbers since consent attaches to the person, not the phone number
• Honor STOP requests instantly and treat any revocation as binding across all communication channels
• Clarify whether opt-outs apply to specific programs or all communications from your business

Implied consent from an existing business relationship doesn't cover marketing texts — it only applies to closely related service messages like appointment confirmations. CallMyLeads bakes explicit consent collection into its booking flow so every lead that books has already provided compliant written consent, and opt-outs are processed automatically under A2P 10DLC carrier rules. That means your team never has to guess whether a number is safe to text — the system handles the compliance layer while you focus on the conversation.