9 SMS Compliance Mistakes That Get Service Businesses Suspended in 2026 (TCPA + A2P 10DLC)

Last updated: 2026-06-22 · Based on current FCC TCPA rulings and CTIA messaging principles.

Why did my SMS campaign get suspended? (Short answer)

If your texts stopped going through or your campaign got rejected, it is almost always one of nine things: (1) no prior express consent, (2) a marketing offer inside a transactional message, (3) unregistered 10DLC traffic, (4) no "Reply STOP" on the first message, (5) sending outside the 8am to 9pm quiet hours window in the customer's timezone, (6) ignoring a STOP reply, (7) a purchased or scraped phone list, (8) a brand name that does not match your registered A2P brand, or (9) no consent records on file. Each one carries either a per-text statutory penalty or a 24-hour carrier suspension. Most service business owners are doing at least two of these without realizing it.

Penalty cheat sheet

#	Mistake	Typical penalty	Who enforces
1	No prior express consent	$500 to $1,500 per text	FCC + private lawsuits (TCPA)
2	Marketing inside a transactional message	Campaign rejection or full suspension	Carriers + TCR
3	Unregistered 10DLC traffic	Filtering, throttling, number blocked	T-Mobile, AT&T, Verizon
4	No "Reply STOP" on first message	Sample rejection, campaign denied	CTIA + carriers
5	Texting outside 8am to 9pm local	$500 to $1,500 per text	FCC + class action plaintiffs
6	Ignoring STOP / UNSUBSCRIBE	$1,500 per willful violation	FCC + private lawsuits
7	Purchased or scraped phone list	Instant suspension on first report	Carriers + TCPA plaintiffs
8	Brand name mismatch	Campaign rejected, traffic blocked	TCR + carriers
9	No consent records on file	Indefensible in court, defaults likely	Courts (TCPA suits)

Long version, one at a time.

1. Can I text my customers without their explicit consent?

The rule: Under the FCC's TCPA rules, you need prior express written consent for marketing texts, and prior express consent for informational texts. The intake form a customer signed to book the job covers transactional updates for that job. It does not cover marketing, promos, or seasonal re-engagement. Those need a separate, clear opt-in.

The consequence: TCPA statutory damages are $500 per text, trebled to $1,500 per willful violation. Multiply by a few hundred customers and you have six-figure exposure on a small business. Serial plaintiffs scan for exactly this pattern.

The fix: Separate transactional consent (implicit when someone hands you their number to book) from marketing consent (a non-pre-checked checkbox agreeing to promotional texts). Log timestamp, IP, and exact wording. See our SMS template guide.

2. Can I include a special offer inside a service update text?

The rule: If a message has even one marketing line in it, the whole message is marketing under TCPA, full stop. "Your repair is ready for pickup. Refer a friend and get $20 off" is a marketing message, not a service update.

The consequence: This is the number-one cause of A2P 10DLC sample message rejection, per Twilio's A2P 10DLC documentation. Your campaign gets denied, or if you snuck the messages past registration, the carrier flags the live traffic and suspends the campaign within 24 hours. T-Mobile is the strictest. You lose all messaging until you re-register a marketing campaign, which takes 1 to 3 weeks.

The fix: Keep transactional clean. Ship marketing through a separate, marketing-registered campaign with a separate opt-in flow. If you are on FixyFlow, the registered A2P campaign covers customer job notifications only; promotional content has to go through a different channel (email, a marketing-registered SMS tool, or a manually sent broadcast you have separate consent for).

3. Do I really need to register 10DLC if I am only sending a few texts?

The rule: The CTIA Messaging Principles require any application-to-person (A2P) traffic on a long code to be registered through The Campaign Registry. That includes a single business texting a single customer about an appointment, if the message is sent via software.

The consequence: Since 2023, T-Mobile has been actively filtering unregistered A2P traffic. Delivery rates on unregistered numbers crash from 95%+ down to 30 to 50%. You will not get a notice. You will just stop reaching customers. Heavy unregistered patterns get the number flagged and rate-limited, sometimes blocked entirely.

The fix: Register your brand with TCR (~$4/month) and a campaign (~$15/month), or use a platform that bundles registration. See our full 10DLC registration guide for the step-by-step.

4. Do I have to include "Reply STOP" on every message?

The rule: CTIA requires opt-out language ("Reply STOP to unsubscribe" or equivalent) on the first message of every campaign, and on every marketing message thereafter. Transactional messages do not strictly require it on every send, but the first message must always include it.

The consequence: Missing STOP language is one of the most common reasons sample messages get rejected during 10DLC campaign review. Your campaign sits in review purgatory until you fix it and resubmit, which can take another week. If live traffic is missing it, the carrier can suspend on report.

The fix: Put "Reply STOP to opt out" on the first message of every conversation. Most SMS platforms (FixyFlow included) auto-append this on the first text in a thread. Verify yours actually does.

5. What are the TCPA quiet hours and do they apply to service businesses?

The rule: TCPA forbids calling or texting before 8:00 AM or after 9:00 PM in the recipient's local timezone. If your business is in Eastern but the customer is in Pacific, you go off the customer's clock, not yours. Yes, this applies to service businesses. Yes, even for transactional messages, the safe practice is to honor it.

The consequence: $500 to $1,500 per text in statutory damages. Quiet-hours violations are an easy class action target because the timestamp is on every message; plaintiffs do not need to prove much beyond "you sent this at 10:47 PM."

The fix: Set a hard send window in your texting tool. Store the customer's area code or explicit timezone, and queue messages instead of sending them after hours. If a job genuinely needs an after-hours alert (locksmith, roadside, plumbing emergency where the customer is the one calling you), document the inbound trigger.

6. What happens if I keep texting someone after they reply STOP?

The rule: Per the FCC, STOP, UNSUBSCRIBE, CANCEL, END, and QUIT (case-insensitive) must all be honored. The opt-out must be processed within a reasonable time, typically interpreted as immediately for software-driven sending. As of the FCC's 2024 robotext rule update, you must allow the consumer to revoke consent in any reasonable way and process it without delay.

The consequence: $1,500 per ignored stop under willful TCPA violation. This is the cleanest plaintiff case there is, because the carrier logs prove both the STOP reply and the subsequent message.

The fix: Use a platform with automated STOP handling. Every legitimate A2P platform processes STOP at the carrier level, so the message never even reaches your app. If you are running your own Twilio integration, you still need to honor it inside your business logic; do not assume Twilio caught it. Audit your opt-out list monthly.

7. Is it legal to text people on a phone list I bought?

The rule: No. Purchased lists by definition lack prior express consent from the recipient. Scraped lists (pulled from public directories, Google Maps, social media bios) are equally non-consensual. CTIA prohibits it explicitly, the FCC treats it as a TCPA violation, and every carrier blocks it the moment they spot the pattern.

The consequence: Carriers flag purchased-list patterns within hours, usually by detecting high spam-report rates from recipients. The number gets suspended instantly on first report. TCPA exposure stacks per recipient: a 5,000-name list can generate $2.5M to $7.5M in statutory damages if a class forms.

The fix: Build your own list. Past customers who handed you their number for a job, opt-ins from your website, referrals who explicitly subscribe. Slow, but the only legal source.

8. Why is my A2P campaign rejected for "brand mismatch"?

The rule: When you register your brand with TCR, you supply the legal entity name and the public-facing name customers will see in your messages. Carriers cross-check the "from" identity in actual message content against the registered brand. If your sample messages say "Hi from John at Acme Plumbing" but your registered brand is "Smith Holdings LLC," carriers reject the campaign for misrepresentation.

The consequence: Campaign rejection during review, or post-launch suspension if you registered with one brand and started sending under another. Re-registration takes 1 to 3 weeks. T-Mobile is the harshest on this and can fine the messaging provider, who then passes the cost to you.

The fix: Register the brand under the name customers actually see. If you operate as a DBA, register the DBA. Match the brand in your campaign description, your sample messages, and the message body verbatim. Update TCR if you rebrand.

9. How long do I need to keep SMS consent records?

The rule: TCPA puts the burden of proof on you, the sender, to demonstrate consent. The federal statute of limitations is 4 years, and some state mini-TCPA laws (Florida, Oklahoma, Washington) extend or have their own consent record requirements. The practical retention floor is 4 years from the date of the last message sent under that consent.

The consequence: Without records, you cannot defend a complaint. Plaintiffs and the FCC assume no consent existed. Default judgments and settlements are typical, even when you actually had consent and just cannot prove it.

The fix: For every opt-in, store: the timestamp, the source (which form, which page URL), the IP address, the exact wording the customer agreed to, and the channel of the consent. Keep it for at least 4 years after the last contact. Most platforms log this automatically; verify yours does and that the export is on demand.

The non-obvious lesson

Most service businesses get suspended not from malice, but from treating SMS like email. Email is soft enforcement: a bad send hurts sender reputation. SMS is hard: a bad send gets your number killed in 24 hours and can generate per-text damages that bankrupt the business.

Pick a tool that handles A2P registration, STOP processing, and quiet-hours windowing for you. Keep transactional and marketing on separate campaigns. Log every consent. If you do not know whether something counts as marketing, assume it does. The cost of being wrong is asymmetric.

For the registration side, see our 10DLC for Small Business guide. For SMS that actually gets read once you are compliant, see the tools comparison and the cost of poor communication on reviews.

FAQ

What is the per-text TCPA fine in 2026?

Statutory damages are $500 per text for a violation, trebled to $1,500 per text if the court finds the violation was willful or knowing. There is no cap; damages multiply by every text sent in violation.

Does the TCPA apply to small businesses?

Yes. The TCPA applies to any sender, regardless of size. A solo operator texting from a personal cell to customers about commercial matters is subject to it. The FCC and class action plaintiffs both pursue small businesses, sometimes more aggressively because they settle faster.

Can my A2P 10DLC campaign get suspended without warning?

Yes. Carriers (T-Mobile in particular) suspend campaigns within 24 hours when sample messages do not match registered traffic, when spam reports spike, or when STOP is ignored. You typically get a notification through your messaging provider after the fact, not before.

Do quiet hours apply to appointment reminders?

The safe answer is yes. The TCPA quiet-hours rule (8am to 9pm in the recipient's local timezone) was written for marketing, but courts have applied it broadly. Schedule transactional reminders inside the window unless the customer asked you to text at a specific time.

Is "Reply STOP to opt out" required on every single text?

Required on the first message of every campaign, and on every marketing message. Not strictly required on every transactional follow-up, but including it on the first message of each new thread is the safe default and what most platforms do automatically.

What is the difference between A2P 10DLC suspension and a TCPA fine?

10DLC suspension is a carrier action: your messages stop being delivered, usually within 24 hours, and your campaign needs to be re-registered. TCPA fines are statutory damages awarded in court or by the FCC: $500 to $1,500 per text, paid to plaintiffs or the government. You can get both at the same time for the same violation.

How do I know if my SMS tool is compliant?

Ask your provider: (1) Is my brand registered with The Campaign Registry, (2) which campaigns am I registered under and what are the registered use cases, (3) is STOP processed at the carrier level, (4) do you enforce quiet hours by recipient timezone, and (5) can I export my consent records on demand. If they cannot answer all five clearly, switch.