What are the TCPA restrictions on text messages?
Key Facts
- TCPA violations cost $500–$1,500 per text, per recipient, with no proof of actual injury required per BCLP's legal analysis.
- Marketing texts require prior express written consent with nine FCC-mandated disclosure elements, separately signed according to ActiveProspect's TCPA guide.
- Since April 11, 2025, businesses must honor opt-out requests within 10 business days, down from 30 per Nixon Peabody.
- The FCC's February 2024 ruling confirmed AI-generated voices are artificial voices, requiring prior express consent per the FCC.
- Consumers can revoke consent in any reasonable manner — texting STOP, emailing, or telling a cashier in person per BCLP.
- Businesses get one clarification message after an opt-out — only within 5 minutes, with zero marketing content per regulatory guidance.
- Consent documentation must be retained at least 4 years to match the TCPA statute of limitations per industry research.
The Consent Framework: Marketing vs. Informational Texts
The difference between a marketing text and an informational one isn't just semantic — it determines whether you need a signed agreement with nine FCC-mandated disclosures or a simple opt-in. Marketing texts using prerecorded or artificial voice technology require prior express written consent, while informational texts need only regular express consent, often presumed from an existing relationship like giving your bank your number for account alerts (ActiveProspect).
The FCC's nine disclosure elements for express written consent must be conspicuously presented and separately signed — a standard many businesses miss. Misclassifying a campaign as informational when it carries marketing intent exposes you to $500–$1,500 per violation, with no requirement to prove actual harm (BCLP). A four-year statute of limitations means documentation must be retained long after a campaign ends (ActiveProspect).
- Marketing texts: express written consent with nine FCC disclosures, separate signature
- Informational texts: regular express consent, often presumed from existing relationship
- AI-generated voices: treated as artificial voices, requiring prior express consent per FCC February 2024 ruling (FCC)
- Opt-out of informational messages stops all non-emergency communications; marketing opt-out stops only marketing (BCLP)
My AI Call Center scopes every campaign by message type before launch, verifying list source and consent records against the correct standard. The consent review step checks whether contacts are approved, permissioned, or reviewed — and flags bought lists without clear permission records before any spend occurs. Opt-outs are logged and honored immediately across all campaigns, with STOP and REVOKE keywords recognized per the FCC's 2025 Opt-Out Rule (Nixon Peabody).
The 2025 Opt-Out Rule: 10-Day Deadline & Any Reasonable Method
A customer texts "STOP" at 9 p.m. on a Friday. Under the FCC's Opt-Out Rule, which took effect April 11, 2025, that single word now carries the full weight of federal law — and the clock starts immediately.
The rule's biggest change is speed. Businesses must now honor revocation requests within 10 business days, down from the previous 30-day window, according to legal analysis from Nixon Peabody. In practice, waiting the full ten days is risky; immediate processing is the safer standard.
The rule's second shift is breadth. Consumers can revoke consent "in any reasonable manner" — by texting STOP, calling, emailing, or even telling a cashier in person, per BCLP's breakdown of the rule. Businesses can no longer funnel opt-outs through a single exclusive channel. If a method seems questionable, the burden falls on the business to prove it was unreasonable — not on the consumer to prove it was valid.
The FCC explicitly recognizes these keywords as valid revocation methods:
- STOP
- QUIT
- REVOKE
- OPT OUT
- CANCEL, UNSUBSCRIBE, and END
As TCPA attorney Eric J. Troutman puts it in ActiveProspect's TCPA guide: "If the message is clear, it counts. The burden is now on you to prove otherwise."
One narrow allowance softens the rule. Businesses may send a single clarification message — but only within 5 minutes of the revocation request, and it cannot contain any marketing content, according to BCLP. Use it to confirm the opt-out was received or ask which message types the consumer wants stopped.
The scope of an opt-out also depends on message type. Revoking marketing messages stops marketing only, while revoking informational texts requires ceasing all non-emergency communications. One piece is delayed: the FCC's Limited Waiver postpones the universal revocation requirement — treating one opt-out as covering all message types — until April 11, 2026, per Nixon Peabody.
The stakes are real. TCPA violations carry statutory damages of $500–$1,500 per violation with no need to prove actual injury, and documentation should be retained for at least four years to match the statute of limitations. This is why managed campaign providers like My AI Call Center log and honor opt-outs immediately and carry DNC requests across every campaign — compliance is cheaper than the alternative.
AI-Generated Voices Are Artificial Voices Under the TCPA
The FCC’s February 2024 Declaratory Ruling confirmed that AI-generated voices fall under the TCPA’s definition of “artificial or prerecorded voice,” making any outbound call or text-to-speech message using such technology subject to prior express consent requirements. This ruling directly impacts businesses using AI voice technology for customer outreach, as deploying these tools without proper consent now constitutes a TCPA violation. For My AI Call Center, this validation reinforces our existing compliance framework, which treats all AI-generated voices as artificial voices requiring verified consent before any campaign begins.
Under this ruling, prior express consent is mandatory for any AI voice interaction, whether delivered via call or text-to-speech format, and must meet the FCC’s nine disclosure elements for express written consent when the communication is marketing in nature. Informational AI voice messages still require regular express consent, but the burden remains on the business to prove consent was obtained and properly documented. Failure to comply risks statutory damages of $500–$1,500 per violation, per recipient, with no need to prove actual harm — a significant exposure for any organization scaling outreach through automated voice systems.
To align with the FCC’s guidance, businesses must implement rigorous consent verification processes before launching any AI voice campaign, including reviewing opt-in records, confirming disclosure adequacy, and ensuring revocation mechanisms are honored in any reasonable form within 10 business days. My AI Call Center integrates these requirements into every campaign launch by auditing list sources and consent records upfront, declining lists without clear permission, and logging opt-outs immediately upon receipt — steps that not only meet federal standards but also prepare clients for evolving state-level TCPA adaptations. This proactive approach ensures that AI-driven outreach remains both effective and legally sound.
The Steidinger Ruling & Why It Doesn't Lower Your Risk
The July 2026 Seventh Circuit decision in Steidinger v. Blackstone Medical Services held that text messages are not "telephone calls" under Section 227(c)(5) of the TCPA, which bars private do-not-call lawsuits for unwanted texts in Illinois, Indiana, and Wisconsin. This ruling has led some businesses to believe their texting compliance obligations have diminished, but that interpretation overlooks critical nuances that keep risk levels high. The decision explicitly leaves Section 227(b) autodialer liability intact, meaning businesses using automatic telephone dialing systems to send texts still face significant exposure. Additionally, the FCC’s enforcement authority under the TCPA remains fully operational, and private plaintiffs can still pursue claims under state mini-TCPA statutes.
Despite the Seventh Circuit’s narrowing of private rights of action for texts, compliance posture must not relax because multiple overlapping legal frameworks continue to apply. A circuit split exists with the Ninth Circuit reaching the opposite conclusion in Howard v. Republican National Committee, signaling ongoing judicial uncertainty that the Supreme Court may eventually resolve. More immediately, state-level mini-TCPA laws in Florida, Oklahoma, New York, Washington, California, Texas, and Virginia impose independent restrictions on text messaging that are unaffected by federal appellate rulings. These state laws often feature broader definitions of autodialers, stricter consent requirements, and shorter opt-out processing windows than the federal TCPA. For example, Washington and California prohibit unsolicited texts regardless of the technology used, while New York requires an opt-out opportunity within three seconds of a call or text initiation. Businesses must retain opt-out and consent documentation for at least four years to align with the TCPA statute of limitations, a requirement that applies equally to calling and texting campaigns.
My AI Call Center continues to treat all outbound communications—whether voice or text—as requiring prior express consent when using AI-generated voices or automated systems, in line with the FCC’s February 2024 confirmation that AI voices constitute "artificial voices" under the TCPA. The company’s process includes rigorous list and consent review before campaign launch, immediate logging and honoring of keyword opt-outs like STOP and REVOKE, and maintenance of DNC logs that feed into client records. These practices ensure compliance not only with federal TCPA provisions but also with the patchwork of state laws that govern text messaging. Given that TCPA violations carry statutory damages of $500–$1,500 per violation per class member with no need to prove actual injury, maintaining a disciplined compliance posture is not just prudent—it’s essential for avoiding costly litigation across multiple jurisdictions. The FCC’s stance on AI technologies reinforces that consent requirements apply regardless of whether the voice is human or machine-generated, further underscoring why businesses should not interpret the Steidinger ruling as a green light for relaxed texting practices.
Operational Checklist: Consent Verification, Opt-Out Logging & Documentation Retention
Operational Checklist: Consent Verification, Opt-Out Logging & Documentation Retention
Before launching any text message campaign, verify consent records and list source to ensure compliance with TCPA requirements. Marketing texts using artificial voice technology require prior express written consent, which the FCC defines as including nine specific disclosure elements, while informational texts only need regular express consent that can be reasonably inferred from the relationship. Industry research confirms that failing to distinguish between these consent types risks violations carrying $500–$1,500 per incident. My AI Call Center reviews list provenance and consent documentation during campaign setup, flagging lists without clear permission records before any outreach begins.
Scope campaigns by message type from the outset, as opt-out handling differs significantly between marketing and informational texts. Revoking consent for informational messages requires stopping all non-emergency communications, whereas a marketing opt-out only affects promotional content — a distinction critical under the FCC’s Limited Waiver delaying universal revocation until April 11, 2026. Legal analysis notes that businesses must honor revocation requests made “in any reasonable manner” within 10 business days, including STOP/REVOKE keywords, calls, emails, or in-person statements. My AI Call Center logs opt-outs immediately across all channels and honors them in real time, aligning with the FCC’s recognized keywords and the burden shifting to businesses to prove a method was unreasonable.
Retain all consent and opt-out documentation for at least four years to match the TCPA statute of limitations, a period during which claims can be filed without proof of actual injury. Regulatory guidance emphasizes that thorough recordkeeping is essential for demonstrating compliance during audits or litigation. Finally, check state-specific rules for every contact’s location, as laws in Florida, New York, Washington, California, and others impose additional restrictions — such as New York’s 3-second opt-out opportunity or Florida’s broad autodialer definition — that layer atop federal TCPA requirements. This location-based diligence ensures campaigns remain compliant across jurisdictions, especially for multi-state organizations using managed calling services.