The $1,500-Per-Text Mistake: Why Consent Language Can Sink Your Business

Express Written Approval Defined: What the Law Actually Requires

Strip away the jargon, and express written approval comes down to one thing: a signed, written agreement that says yes before a single marketing text goes out. Without it, every promotional message you send carries statutory damages of $500 to $1,500 per text — with no cap on total exposure.

The legal definition lives in 47 CFR § 64.1200(f)(9). Under the TCPA, "prior express written consent" means an agreement, in writing, bearing the signature of the person called, that clearly authorizes the seller to deliver advertisements or telemarketing messages. Three elements must all be present: it must be written, it must be signed, and it must clearly authorize marketing messages from your business specifically.

Not every text requires the same level of consent. Marketing and promotional texts sent through automated technology require prior express written consent. Informational texts — appointment reminders, fraud alerts, opt-out confirmations — require only the lesser "prior express consent" standard, provided they contain no promotional content.

This distinction matters for any business running follow-up campaigns. An appointment reminder sits on the informational side, but the moment you add a promotional offer, the message jumps into the written-consent tier. That's why services like CallMyLeads build explicit consent collection directly into the booking flow and keep reminder messages strictly informational.

"Written" doesn't mean pen and paper. Electronic or digital signatures recognized under the E-SIGN Act satisfy the requirement, so consent collected through website forms, email, text messages, telephone keypress, or QR codes all qualify. One thing that does not qualify: a pre-ticked checkbox. If the customer didn't take the action of ticking the box themselves, there's no "express" action — and no valid consent.

A valid opt-in isn't just a signature — it's a signature alongside specific disclosures. Compliance guidance from ActiveProspect and legal resources consistently identify these elements:

• An unchecked checkbox or equivalent affirmative action by the consumer
• Message frequency disclosure (e.g., "up to 4 msgs/month")
• "Msg & data rates may apply" language
• STOP opt-out and HELP instructions
• A clear statement that consent is not a condition of purchase

Getting this right isn't academic. TCPA class action filings spiked 283% in September 2025, with 224 class actions in a single month. And while a February 2026 Fifth Circuit ruling held that oral consent may suffice within that circuit, the decision applies only there — other circuits and state telemarketing laws may still require written consent. For any business texting customers nationwide, documented written consent remains the safest compliance position — and the one carriers still expect to see.

The Rules Are Shifting — But Written Consent Is Still Your Safest Bet

If you're waiting for the law to settle before tightening your consent practices, stop — because the legal ground is moving in two directions at once, and the safe lane hasn't changed.

In February 2026, the Fifth Circuit ruled in Bradford v. Sovereign Pest Control of TX that the TCPA requires only "prior express consent," which can be given orally or even demonstrated by conduct — invalidating the FCC's 2012 written-consent rule within that circuit. But as Holland & Knight's analysis notes, the ruling applies only within the Fifth Circuit, and other circuits and state telemarketing statutes may still demand written consent. Even the winning side's takeaway comes with a warning: oral consent must be "carefully documented and independently verifiable to withstand future scrutiny."

Meanwhile, the FCC's one-to-one consent rule was vacated by the Eleventh Circuit — yet carriers and reviewers still expect consent documented per brand as of 2026. And states are moving the opposite direction from deregulation:

• Texas SB 140 (effective September 2025) classifies texts as telephone solicitations, with penalties up to $1,500 per violation and treble damages for willful violations.
• Virginia SB 1339 requires opt-outs to be honored for at least 10 years, with fines of $500–$5,000 per violation.
• TCPA class action filings spiked 283% in September 2025 alone — 224 class actions in a single month, per TextBolt's compliance analysis.

This is why experts remain uniform despite the legal flux. ActiveProspect's position is blunt: "When it comes to commercial text messages, there are no shortcuts – prior express written consent is the only way to go." A signed, logged, timestamped record wins in every circuit, under every state law, no matter how the courts rule next.

Then there's the carrier layer, which operates independently of the courts entirely. 10DLC registration requires your exact opt-in language — plus 2–5 sample messages including your business name and STOP language — and missing opt-in language is one of the most common reasons campaigns get rejected or delayed. Since February 1, 2025, carriers block 100% of unregistered A2P traffic, according to 101VOICE's 10DLC guide.

But here's the critical distinction: registration fixes deliverability, not consent. A fully registered campaign that texts without consent remains fully exposed to TCPA liability — $500 to $1,500 per message, with no cap on total exposure. Registration gets your messages delivered; consent is what keeps delivered messages from becoming evidence.

This is exactly why CallMyLeads builds consent into the plumbing rather than bolting it on after. The booking flow collects explicit consent at the point of capture, opt-outs are honored immediately and automatically, and every campaign runs under registered A2P 10DLC. When a lead fills out your form at 9 p.m. and gets a text back in seconds, that speed only works because the consent foundation was laid first.

The courts may keep arguing about what the TCPA's text requires. Your documentation shouldn't be part of that argument.

How to Collect and Document Consent the Right Way

Getting consent right isn't a paperwork exercise — it's the difference between a compliant text program and a $1,500-per-message liability. The FCC requires prior express written consent for every marketing text sent via automated technology, and that consent must be documented, verifiable, and collected through an affirmative action by the consumer. Pre-ticked checkboxes fail this test because the customer hasn't made an "express" action — the business made it for them.

FCC and E-SIGN guidance confirms acceptable collection methods include website forms, telephone keypress, QR codes, unchecked checkboxes, point-of-sale signature pads, and paper forms. Each opt-in must disclose the business name, message frequency, that msg & data rates may apply, STOP and HELP instructions, and that consent is not a condition of purchase. A compliant example: "By checking this box and clicking 'Submit,' you agree to receive automated marketing text messages from [Company Name] at the phone number provided. Consent is not a condition of purchase. Msg & data rates may apply. Reply STOP to unsubscribe."

• Use unchecked checkboxes only — never pre-ticked
• Capture the exact consent language shown to the consumer
• Log collection method, date, time, and IP or session ID
• Retain records for at least four years
• Add double opt-in (confirmation text requiring "YES") for a stronger posture

Compliance experts recommend storing independent proof such as session replays or TrustedForm certificates alongside the consent record. This documentation also feeds 10DLC registration, which requires the exact opt-in language and sample messages including STOP language. Missing opt-in language is one of the most common reasons campaigns get rejected or delayed.

The April 2025 Opt-Out Rule tightened revocation requirements: consumers can now revoke consent "in any reasonable manner," and businesses must honor it within ten business days — no exclusive opt-out channels allowed. One clarification text may be sent within five minutes, but it must contain zero marketing content. CallMyLeads builds immediate, automatic opt-out honoring into every text flow, treating revocation as a compliance feature, not an afterthought. BCLP notes that opting out of even an informational message stops all future non-emergency communications, including marketing — so opt-out handling must be airtight across every campaign type.

Speed and Compliance Can Coexist: Texting Leads Fast Without the Legal Risk

Every lead you text back in under ten seconds can feel like a legal gamble — but it doesn't have to. Speed and compliance aren't opposites; the fastest responders win the job precisely because their texting is set up correctly from the first message.

Here's why speed matters so much: the lead that gets a reply first usually wins, and interest fades fast. Meanwhile, TCPA class action filings spiked 283% in September 2025 alone, with 224 class actions filed in a single month, according to compliance tracking data. Penalties run $500–$1,500 per violating message, so a sloppy texting habit can erase an entire month's ad spend.

The good news is that the two-tier consent standard makes fast lead response easier than you might think. Informational texts — appointment reminders, follow-ups, booking confirmations — require only the lesser "prior express consent" standard, as long as they contain no promotional content, per legal guidance on SMS marketing consent. The moment you add a discount or pitch, you've crossed into the written-consent tier.

A compliant fast-response system covers four basics:

• Consent captured in the booking flow — an unchecked checkbox with full disclosures (message frequency, STOP instructions, "consent is not a condition of purchase") collects explicit consent at the moment a lead raises their hand.
• Informational-only reminder and follow-up texts — confirmations, reminders, and next-step messages that stay free of promotional content.
• Immediate, automatic opt-out honoring — since April 2025, consumers can revoke consent "in any reasonable manner," and the burden falls on the business to prove otherwise, per the FCC's opt-out rules.
• Spam screening — known spam numbers filtered before they waste your team's time or your budget.

When all four run automatically, speed stops being a risk and becomes a weapon. Your competitor's office manager sees the form fill at 9 a.m.; your system already texted back in seconds, answered questions, and booked the appointment — with the consent record to prove it was all aboveboard.

This is exactly how CallMyLeads works: consent collected in the booking flow, registered business texting under US carrier rules, opt-outs honored instantly, and spam screened before it costs you a dime. You get first replies in seconds, 24/7/365, with every lead tracked from source to booked appointment.

Stop paying for leads you never get to talk to. Book a free ~15-minute scoping call and see how every new lead gets answered in seconds — legally, automatically, and around the clock.