Why the TCPA Rules Just Got Harder to Ignore

The regulatory landscape for text messaging has shifted dramatically, making compliance non-negotiable for US service businesses. Penalties now range from $500 to $1,500 per violation, and class action lawsuits can multiply that exposure rapidly. With new federal rules and a growing patchwork of state Mini-TCPAs, DIY texting carries unprecedented risk.

The FCC’s Opt-Out Rule, effective April 11, 2025, requires businesses to honor consumer revocation requests within 10 business days and accept opt-outs via any reasonable method—text, email, voicemail, or verbal statement. This replaces older, more flexible timelines and creates administrative demands for tracking which message type triggered an opt-out due to asymmetric revocation scope. Meanwhile, the One-to-One Consent Rule, in effect since January 27, 2025, mandates prior express written consent for only one identified seller at a time, eliminating blanket consent loopholes and placing the burden of proof squarely on the texter.

These changes intersect with evolving state-level regulations, where Florida’s Mini-TCPA has inspired similar laws in Oklahoma, New York, Michigan, and others, often imposing stricter quiet-hour rules and consent standards. Even as the Seventh Circuit ruled in July 2026 that texts aren’t “telephone calls” under TCPA Section 227(c)(5) in Illinois, Indiana, and Wisconsin—limiting private lawsuits there—other TCPA provisions and state laws still apply, creating a complex, jurisdiction-dependent compliance maze.

For businesses running reactivation or retention campaigns, this means every text must be backed by verifiable consent, processed opt-outs in real time, and aligned with both federal and state requirements. CallMyCustomers builds these safeguards into every campaign, from list scrubbing to message approval, so clients can re-engage past customers without gambling on regulatory gray zones. The cost of getting it wrong isn’t just financial—it’s reputational. In today’s environment, compliance isn’t a checkbox; it’s the foundation of trust.

• Implement flexible opt-out systems that process requests within 10 business days
• Maintain detailed consent records for at least four years
• Obtain prior express written consent for only one identified seller at a time

The Three Big Rule Changes Every Text Campaign Must Know

The TCPA landscape shifted dramatically between January 2025 and mid-2026, and text campaigns that haven't adapted are carrying real legal risk. Here are the three changes that matter most, plus what's still coming down the pike.

The FCC's new revocation rules took effect April 11, 2025, and they fundamentally change how quickly you must honor opt-outs. Businesses now have just 10 business days to process a revocation request — down from the previous 30-day window — and, per TCPAWorld's Eric Troutman, the burden is entirely on businesses to prove a revocation method was unreasonable.

You also can't funnel opt-outs through a single designated channel. BCLP's analysis notes that revocation via any reasonable method — text, email, phone, voicemail, even verbal statements — must be accepted. The FCC did establish seven per se revocation terms, per Hunton attorneys: "stop," "quit," "end," "revoke," "opt out," "cancel," and "unsubscribe."

One practical relief: businesses get a 5-minute window after a revocation request to send one clarification message. And because revocation scope can be asymmetric — a consumer may opt out of texts but not calls — campaigns must track which message type triggered each opt-out.

Effective January 27, 2025, prior express written consent must identify one seller at a time — closing the lead generator loophole that bundled consent across dozens of brands. According to America's Credit Unions, the burden of proving valid consent falls on the caller or texter, not the lead generator website.

Note: the Eleventh Circuit struck down the FCC's underlying 2024 rule, but compliance experts still advise against bundling consent across multiple sellers. For permission-based campaigns like the reactivation outreach CallMyCustomers runs, this is largely good news — consent collected directly from your own customers, one business at a time, is exactly what the rule rewards.

In Steidinger v. Blackstone Medical Services, the Seventh Circuit held that text messages are not "telephone calls" under TCPA Section 227(c(5), blocking private lawsuits over marketing texts in Illinois, Indiana, and Wisconsin. BakerHostetler called it "one of the most significant TCPA decisions in years."

Don't celebrate too hard, though. The Ninth Circuit reached the opposite conclusion, creating a circuit split, and other TCPA provisions — plus state laws — still apply. Penalties remain $500–$1,500 per violation.

Two more developments deserve a spot on your compliance calendar:

• The universal opt-out rule, which would apply a single revocation across all message types, has been delayed until April 11, 2026 — giving businesses extra runway to prepare.
• State-level Mini-TCPA laws are proliferating, with Florida's statute serving as a model and Oklahoma, New York, Michigan, Washington, California, Maryland, Virginia, and Texas enacting or proposing stricter telemarketing restrictions.
• Financial industry associations have requested a pause on the Opt-Out Rule until April 11, 2026, citing implementation challenges — a signal of how demanding the new requirements are.

The practical takeaway: keep consent records for at least four years (the TCPA statute of limitations), honor opt-outs immediately rather than waiting out the 10-day window, and treat every state you text into as its own compliance jurisdiction.

What Compliant Text Marketing Looks Like in Practice

Knowing the rules is one thing; running a text campaign that survives them is another. With penalties running $500–$1,500 per violation and class actions adding up fast, the gap between "mostly compliant" and "actually compliant" is where businesses get hurt.

Start with opt-outs. Since the FCC's Opt-Out Rule took effect April 11, 2025, you must honor revocation requests within 10 business days and accept them via any reasonable method — text, email, phone, even social media, according to legal analysis from BCLP. The FCC recognizes seven per se revocation terms — "stop," "quit," "end," "revoke," "opt out," "cancel," and "unsubscribe" — but you can't designate an exclusive opt-out channel, per Hunton's compliance guidance.

Next, protect your paper trail. The TCPA carries a four-year statute of limitations, so compliance experts recommend retaining consent records for at least four years — when consent was obtained, the exact language used, and the recipient's contact details. That documentation is your strongest defense in a dispute.

Here's the practical checklist:

• Honor quiet hours: no texts before 8 a.m. or after 9 p.m. in the recipient's local time zone.
• Register your business traffic under 10DLC requirements through a Campaign Service Provider, since carrier standards for A2P messaging are tied directly to TCPA compliance.
• Scrub lists against the National Do Not Call Registry, state registries, and the Reassigned Number Database before every campaign.
• Follow the One-to-One Consent Rule in effect since January 27, 2025 — consent applies to one identified seller at a time, not bundled brands.
• Keep an internal do-not-contact list and honor opt-outs immediately, not just within the legal window.

Finally, the foundation: only text real customers who gave explicit consent. Purchased or scraped lists fail the One-to-One Consent Rule's burden of proof, which falls on the sender, not the lead generator. This is exactly why permission-based reactivation — like the campaigns CallMyCustomers runs from a business's own customer list, with every message approved by the owner first — sits on the safe side of the line. When your list is people who already know your business and opted in, most of these rules become habits rather than hurdles.

Staying Compliant Without Stalling Your Repeat-Revenue Engine

None of this means your reactivation, win-back, and reminder campaigns have to slow down. The new TCPA rules raise the bar on how you message past customers — not whether you can. With $500–$1,500 in statutory damages available per violation and class action exposure on top, the businesses that win are the ones that build compliance into the campaign itself rather than treating it as an afterthought.

Start with what the rules actually demand. Under the FCC's Opt-Out Rule effective April 11, 2025, you must honor revocation requests within 10 business days and accept opt-outs via any reasonable means — text, email, a verbal statement, even a reply to a campaign message. The FCC has also designated seven per se revocation terms, including "stop," "cancel," and "unsubscribe," according to Hunton's compliance guidance.

For a busy owner, that translates into a short checklist:

• Honor every opt-out immediately — don't wait out the 10-business-day window.
• Keep consent records for at least four years, since detailed consent documentation is your strongest defense in a dispute.
• Text only between 8 a.m. and 9 p.m. in the recipient's local time zone.
• Scrub lists against the Do Not Call Registry and the Reassigned Number Database before each campaign wave.
• Register your numbers under 10DLC requirements so your messages actually deliver.

The One-to-One Consent Rule adds another layer: as of January 27, 2025, consent must name one identified seller at a time, and the burden of proving valid consent falls on the business sending the message — not on whoever collected the contact. That's exactly why working from a list of real, known customers is the safest foundation for any repeat-revenue campaign.

This is where a done-for-you approach earns its keep. CallMyCustomers runs reactivation, win-back, and reminder campaigns from your existing customer list — no purchased leads, no blanket consent — with the owner approving every script, offer, and message before anything goes out. Opt-outs are honored immediately, replies route into your booking process, and the compliance mechanics (record-keeping, list hygiene, quiet-hours timing) are handled for you rather than added to your plate.

And if a Seventh Circuit ruling later limits some private text-message lawsuits in a few states, don't relax — the decision created a circuit split with the Ninth Circuit, and other TCPA provisions and state mini-TCPA laws still apply nationwide.

Compliance and momentum aren't a trade-off. Want to know what your list can produce under the new rules? Get a free list review — we'll show you your rate, setup, and campaign potential before you spend a dollar. Turn past customers, old quotes, and inactive members into booked work — approved by you, run by us.