Introduction

According to industry research, there is no federal numeric threshold for SMS harassment under the TCPA—only one noncompliant text can trigger legal liability. This reality underscores the critical importance of compliance in modern communication strategies. The stakes are high: statutory damages range from $500 to $1,500 per violation, with no requirement to prove actual harm .

The TCPA’s framework hinges on prior express written consent, not text volume. Businesses must secure explicit authorization before sending marketing messages, as each unconsented text constitutes a standalone violation. This principle extends to post-revocation messaging: after a consumer opts out, only one clarification text—within five minutes—may be sent, with no marketing content .

While federal law lacks a numeric harassment threshold, state regulations impose specific limits. Florida and Oklahoma restrict commercial texts to three per subject matter within any 24-hour window . Other states, like Connecticut and Texas, enforce strict timing rules and penalties up to $20,000 per infraction. These variations demand careful navigation for multi-location organizations.

• Statutory damages: $500–$1,500 per violation, per class member
• Post-revocation: One clarification text within 5 minutes, no marketing content
• Florida/Oklahoma: 3 texts per 24-hour period for the same subject

My AI Call Center prioritizes list discipline to mitigate risk, ensuring all campaigns use approved, permissioned, or reviewed contact lists. This approach aligns with the FCC’s April 11, 2025, consent-revocation rules, which require businesses to honor opt-outs within 10 business days . By emphasizing transparency and compliance, the service helps clients avoid the financial and reputational fallout seen in cases like DSW’s $4.42 million settlement for unwanted marketing SMS .

Understanding these nuances is essential for organizations leveraging outbound communication. Whether managing lead qualification calls or customer retention efforts, adherence to evolving regulations remains non-negotiable.

Key Concepts

Navigating the legal landscape of text message communication can be treacherous for businesses. Federal telecom law, particularly the Telephone Consumer Protection Act (TCPA), does not specify a numeric threshold for how many texts constitute harassment. Instead, liability is assessed per message, making each nonconsented or noncompliant text a potential legal risk. Understanding these key concepts is crucial for compliance and maintaining customer trust.

At the federal level, there is no specific number of texts that defines harassment. Liability attaches per message, meaning even one nonconsented text can trigger legal consequences. Statutory damages for TCPA violations can range from $500 to $1,500 per violation, without the need to prove actual injury. This per-message liability framework underscores the importance of obtaining prior express written consent before sending any marketing text messages. According to a recent analysis, this framework means businesses must meticulously document and verify consent to avoid hefty penalties.

Consent is the cornerstone of TCPA compliance. Each unconsented text message is considered a violation, regardless of the number sent. This legal threshold emphasizes the importance of obtaining clear, documented consent from recipients. For businesses, this means ensuring that every text message campaign is backed by valid consent records. My AI Call Center, for instance, adheres to this principle by using only approved, permissioned, or reviewed contact lists.

Post-revocation texting is tightly regulated. After a consumer opts out, businesses are allowed to send only one clarification text within five minutes, and this message must contain no marketing content. Any further texting after an opt-out request is treated as a willful violation, which can escalate penalties to the maximum of $1,500 per message. This stringent post-revocation rule highlights the necessity for immediate and accurate opt-out processing.

State laws add further complexity. For example, Florida and Oklahoma prohibit more than three texts regarding the same subject matter within any rolling 24-hour period. This numeric limit provides a concrete guideline for businesses operating in these states. Moreover, these states enforce specific quiet hours, further restricting when texts can be sent.

To ensure compliance, businesses should consider the following best practices:

• Obtain and document prior express written consent before sending any marketing texts.
• Honor opt-out requests immediately and respectfully, adhering to the post-revocation texting rules.
• Retain consent records for at least 4-5 years to safeguard against potential legal challenges.
• Stay informed about state-specific regulations that may impose additional numeric and timing limits.
• Implement robust systems for monitoring and managing text message campaigns to ensure compliance at every step.

In the rapidly evolving landscape of telecom regulations, staying informed and compliant is paramount. Businesses must prioritize obtaining valid consent, adhering to post-revocation rules, and respecting state-specific regulations to mitigate legal risks and build customer trust. This approach not only ensures compliance but also fosters a positive customer experience, which is essential for long-term success.

Best Practices

Navigating the regulatory landscape of text message marketing can be daunting, especially with the risk of crossing into harassment territory. Understanding and adhering to best practices is crucial for maintaining compliance and avoiding hefty penalties. The Telephone Consumer Protection Act (TCPA) does not set a specific numeric threshold for what constitutes harassment via text messages. Instead, liability attaches per message, meaning even one nonconsented or noncompliant text can create legal issues.

Businesses must prioritize obtaining prior express written consent before sending any marketing texts. Each unconsented text is considered a violation, and the potential penalties are severe. Statutory damages can range from $500 to $1,500 per violation, with no requirement to prove actual injury. For instance, DSW faced a $4.42 million settlement in March 2025 for sending unwanted marketing texts. Even non-marketing texts must adhere to strict guidelines. For example, under the TCPA, if a consumer opts out of receiving messages, businesses can send only one clarification text within five minutes, and it must contain no marketing content. Violations of this rule are treated as willful and can result in penalties up to $1,500 per message.

Compliance requires meticulous documentation and adherence to state-specific regulations. For example, Florida and Oklahoma prohibit more than three texts regarding the same subject matter within any rolling 24-hour period. This state-level regulation is particularly relevant for multi-location organizations, such as clinics and franchises, which often operate across different jurisdictions. My AI Call Center, with its focus on approved, permissioned, or reviewed contact lists, ensures that all campaigns are compliant with these regulations.

To protect themselves, businesses should:

• Frame their texting strategy around obtaining and documenting clear consent, rather than relying on text counts.
• Implement robust systems to honor opt-out requests immediately, ensuring no follow-up texts are sent after a STOP request.
• Retain consent records for at least four to five years, aligning with the TCPA's statute of limitations and best practices for documentation.
• Regularly review and update their compliance practices to align with the latest federal and state regulations.
• Conduct thorough reviews of contact lists before launching any campaign, ensuring all contacts have given explicit consent.

Businesses should also stay informed about key compliance dates and regulatory changes. The FCC's consent-revocation rules took effect on April 11, 2025, and the one-to-one consent rule is set to take effect on either January 27, 2025, or January 26, 2026, depending on the source. These dates underscore the importance of staying current with regulatory updates. Additionally, businesses must honor quiet hours and other state-specific restrictions to avoid penalties. For example, Texas allows penalties up to $5,000 per noncompliant text, highlighting the need for strict adherence to state laws.

By adhering to these best practices, businesses can mitigate the risk of noncompliance and build a robust texting strategy. My AI Call Center's managed outbound calling service supports this approach by ensuring that all campaigns are run against approved, permissioned, or reviewed contact lists, with clear consent records checked before launch. This disciplined approach to list management and compliance is essential for running effective and lawful texting campaigns.

Implementation

Knowing the rules is one thing; building daily operations around them is where most organizations stumble. Since the TCPA attaches liability per message — with statutory damages of $500 to $1,500 per violation and no proof of injury required, according to BCLP's legal analysis — implementation means engineering consent and frequency controls into every campaign, not counting texts and hoping you stay under a line.

Start with consent verification before anything launches. A credit union compliance briefing notes the burden of proving valid consent falls on the sender, so document who consented, when, and for what. This is exactly why My AI Call Center reviews list source and consent records before any campaign runs, and declines bought lists lacking clear permission documentation.

Next, build frequency caps into your messaging logic. Florida and Oklahoma prohibit more than three texts on the same subject matter within any rolling 24-hour period, per Purdue Global Law School's compliance overview, so multi-state operations need per-state rules, not one national setting.

Your opt-out workflow needs similar precision:

• Honor STOP and REVOKE immediately — texting after an opt-out is treated as a willful violation, raising penalties to $1,500 per message.
• Allow only one post-revocation clarification text, sent within five minutes, with no marketing content.
• Complete revocation processing within 10 business days, the window the FCC's April 11, 2025 rules established.
• Log every opt-out into a do-not-contact record that carries across all campaigns — Virginia retains opted-out numbers for 10 years.

Consent records deserve retention discipline too. Recommendations range from four years (matching the TCPA statute of limitations) to five years, and as one telecom compliance guide observes, courts have ruled against businesses that had valid consent but could not prove it when challenged. Keep the longer window.

Finally, respect quiet hours by recipient's local time — 8 AM to 9 PM federally, but stricter in states like Florida, where the window closes at 8 PM. Campaigns that route outcomes back into your CRM with disposition codes and opt-out logs make audit readiness routine rather than a scramble. Structure, documentation, and immediate opt-out handling are the whole game.

Conclusion

So how many texts equal harassment? The honest answer is that one nonconsented text is already a violation — the law counts messages, not patience. There is no magic number of texts that tips a campaign from "persistent" into "harassing" under federal telecom law. Liability attaches per message, with statutory damages of $500–$1,500 per violation, and consumers need not prove any actual injury to bring a claim, according to legal analysis of the FCC's 2025 opt-out rules.

The only concrete numeric thresholds appear at the state level. Florida and Oklahoma cap commercial texts at three per subject matter within any rolling 24-hour period, while Connecticut penalties can reach $20,000 per infraction and Texas allows up to $5,000 per noncompliant text, as Purdue Global Law School's compliance review explains. Multi-location businesses operating across state lines need to track each state's limits, quiet hours, and registration rules — not just the federal 8 AM–9 PM window.

The stakes scale fast. DSW paid $4.42 million in March 2025 over unwanted marketing SMS, and Wells Fargo and Uber settled TCPA claims for $17.85 million and $20 million respectively, per reporting on recent enforcement actions. A single noncompliant blast can expose a business to multimillion-dollar liability because there is no total cap on TCPA damages.

Your next steps are straightforward:

• Audit every contact list for documented, prior express written consent — the burden of proving consent falls on you, and courts have ruled against businesses that had consent but could not produce records when challenged, as telecom compliance guidance notes.
• Retain consent records for at least four to five years; sources vary, and the longer period is the safer one.
• Honor opt-outs immediately. After a STOP request, only one clarification text — sent within five minutes, with no marketing content — is permitted, and texting after STOP is treated as a willful violation carrying penalties up to $1,500 per message.
• Map state-specific rules for every location you text, including quiet hours and per-message caps.
• Get legal guidance before launch; campaign requirements vary by location, industry, contact type, and consent status.

Consent discipline is exactly why My AI Call Center checks list sources and consent records before any campaign launches, and declines bought lists without clear permission records. If you want structured outbound campaigns run only against approved, permissioned, or reviewed contact lists — starting at 9¢ per connected minute — plan your campaign and get a full quote before anything goes live.