The 72-Hour Rule Doesn't Exist (Here's Where the Confusion Comes From)

Here's the uncomfortable truth: the 72-hour rule you searched for doesn't exist. No TCPA provision, no FCC order, and no CTIA guideline contains a "72-hour rule" governing texting consent or outreach timing. If someone told you to wait 72 hours after collecting a phone number before texting a customer, they were quoting a myth, not a regulation.

There is one legitimate 72-hour figure in the business texting world, and it's almost certainly the source of the confusion. When a business registers a 10DLC campaign with The Campaign Registry, approval typically takes around 24–72 hours with proper setup.

That's an administrative carrier timeline — how long it takes AT&T, T-Mobile, or Verizon to green-light your campaign — not a rule about when you may text a customer. As of February 2025, all A2P 10DLC traffic must be registered, and carriers block unregistered business SMS entirely. Someone likely heard "you can't text for 72 hours" during onboarding and repeated it until it morphed into a consent rule.

The real timing requirements look nothing like a 72-hour window. The actual numbers regulators and carriers enforce include:

• 10 business days — the maximum time to honor a consent revocation under the FCC's opt-out rules that took effect April 11, 2025, per BCLP's legal analysis
• 5 minutes — the window to send a one-time clarification message after a revocation request
• Quiet hours — the FTC cites 8 a.m.–9 p.m. as the general guideline for contact, with stricter state variations like Texas's 9 p.m.–9 a.m. restriction

Notice what's missing: any waiting period between consent and first contact. Once you have valid, documented consent, the clock that matters is response speed, not a delay. In fact, research on 1.25 million leads found firms responding within an hour were roughly 7x more likely to qualify the lead — 60x more likely than those waiting a day.

Following a fabricated rule gives you false comfort while the real rules carry real penalties. TCPA statutory damages run $500–$1,500 per violation with no need to prove actual injury, TCPA litigation filings rose 95% in 2025, and recent settlements have exceeded $4 million.

Even post-2026 court rulings haven't loosened the core requirement — Holland & Knight notes companies must still demonstrate "clear, direct and unequivocal consent" from the contacted party. That's why CallMyCustomers builds every campaign from documented customer lists with opt-outs honored immediately, rather than relying on timing folklore. Consent is the compliance gate — not the calendar.

The Texting Rules That Actually Apply to Your Business

If you've been searching for a "72-hour rule" to govern your business texting, here's the honest answer: no such rule exists in the TCPA, FCC, or CTIA frameworks. What actually exists is a documented set of consent, opt-out, and timing rules — and they matter far more than a mythical deadline.

Consent comes first, not timing. Under CTIA guidelines, a missed phone call does not constitute consent to text — implied consent applies only when the consumer initiates the exchange, according to compliance analysis of missed-call text-back practices. Klaviyo's SMS compliance guide is equally direct: don't text anyone who hasn't explicitly opted in, and keep that consent separate from other channels.

The stakes are real. TCPA statutory damages run $500–$1,500 per violation with no need to prove actual injury, per BCLP's legal analysis. TCPA litigation filings rose 95% in 2025, and recent compliance reporting notes settlements exceeding $4 million.

The FCC's opt-out rules, effective April 11, 2025, changed the revocation landscape:

• Consumers may revoke consent "in any reasonable manner" — businesses can no longer dictate an exclusive opt-out method.
• Revocation must be honored within 10 business days of receipt.
• Businesses may send one clarification message, but only within 5 minutes of the revocation request.
• Revocation crosses mediums — a STOP text can also revoke robocall consent.

Quiet hours add another layer. The FTC cites 8 a.m.–9 p.m. as the general guideline for contact windows, but states impose stricter rules — Texas restricts sending from 9 p.m. to 9 a.m., Monday through Saturday, per Omnisend's regulations guide.

Even where courts have narrowed requirements — the Fifth Circuit's Bradford v. Sovereign Pest Control ruling held TCPA consent may be oral or written — Holland & Knight's analysis is clear: companies must still demonstrate "clear, direct and unequivocal consent."

This is why the compliance gate is consent, not a clock. Services like CallMyCustomers build reactivation campaigns exclusively from lists of real customers, with every message approved by the owner and opt-outs honored immediately — because permission, not a 72-hour window, is what keeps outreach legal. If you want to know what your customer list can safely produce, a free list review tells you before you send a single text.

Why Getting This Wrong Is Expensive — and Getting More Expensive

A single non-compliant text message can cost more than an entire year of marketing budget. And the price of getting consent wrong isn't static — it's climbing fast, in courtrooms and on carrier networks alike.

The financial exposure is straightforward and brutal. The TCPA carries statutory damages of $500 to $1,500 per violation, with no requirement that the recipient prove any actual injury, according to BCLP's legal analysis. A list of 1,000 contacts texted without proper consent could theoretically generate six or seven figures in liability. That's not a hypothetical scenario anymore — TCPA litigation filings rose 95% in 2025.

The settlements confirm the trend is real, not theoretical:

• Athena Bitcoin Inc. agreed to a $4.5 million settlement in 2026
• Designer Brands Inc. settled for $4.4 million in 2025
• Geaslin v. Colony Ridge produced a $1,994,123 judgment in 2025

The legal ground is also shifting under businesses' feet. In February 2026, the Fifth Circuit rejected the FCC's "prior express written consent" rule in Bradford v. Sovereign Pest Control, holding that the TCPA requires only "prior express consent," which may be oral or written. But Holland & Knight cautions that companies must still demonstrate "clear, direct and unequivocal consent" — and the ruling only binds the Fifth Circuit. Meanwhile, the FCC's global revocation rule, which would let a single opt-out cancel consent across affiliated brands, is now delayed until January 31, 2027.

Even if you never see a courtroom, there's a second enforcement layer: the carriers themselves. As of February 1, 2025, all A2P 10DLC traffic must be registered through The Campaign Registry — AT&T, T-Mobile, and Verizon simply block unregistered business SMS, per Telgorithm's registration guide. Registration itself takes roughly 24–72 hours for campaigns, and 2026 enforcement is stricter: campaigns can be audited post-approval and monitored for "drift content" that doesn't match what was registered.

This is why permission-first outreach matters more than speed. Services like CallMyCustomers work only from lists of real customers with documented consent, honoring opt-outs immediately — because in this environment, the safest list is one where every message was invited and approved.

The Timing Rule That Actually Matters: Response Speed

Forget the three-day wait. The timing rule that actually moves revenue is measured in minutes, not days — and the data behind it is remarkably consistent.

According to consumer survey data from EZ Texting, roughly 70% of consumers expect a business to respond within an hour of reaching out. Meanwhile, 87% of US mobile owners check a new text within 15 minutes. Your customers aren't patient, and they don't need to be — the next business is one search away.

The payoff for speed is dramatic. A Harvard Business Review analysis of 1.25 million leads found that firms contacting prospects within an hour were nearly 7 times more likely to qualify the lead — and 60 times more likely than firms that waited a full day. The window doesn't just shrink over time; it effectively closes.

Here's where it gets uncomfortable for most service businesses: Hiya's State of the Call research, covering more than 12,000 consumers, found that 86% of calls from unknown numbers go unanswered globally. People don't pick up — but they do text back, and texting (46%) has now passed phone calls (43%) as the preferred way to hear from a business.

That gap between "calls missed" and "texts answered" is exactly where revenue leaks out. A practical fast-response setup typically includes:

• An instant text-back when a call goes unanswered, so the conversation starts while intent is still hot
• A same-hour follow-up standard for every inbound inquiry, voicemail, or form fill
• Replies routed directly into your booking process, not a generic inbox
• Fast re-engagement of known customers — old quotes, lapsed appointments, seasonal reminders — where consent already exists

One caveat matters here: fast is not the same as free rein. Under CTIA guidelines, a missed call from a consumer does not by itself constitute consent to send marketing texts — implied consent applies when the consumer initiates the text exchange, and explicit opt-in remains the gold standard for promotional outreach, as Klaviyo's SMS compliance guide makes clear.

This is why the strongest position combines both: instant response mechanics for inbound interest, plus a permissioned list of real past customers for proactive campaigns. That second group — people who already know your business — is where response speed and consent align naturally. CallMyCustomers builds campaigns around exactly this: missed-call text-back that fires instantly, and follow-up outreach to your own customer list with every message approved by you before it sends.

The 72-hour rule may be a myth, but the one-hour expectation is very real. Businesses that treat response time as a competitive weapon — rather than an administrative afterthought — are the ones converting inquiries their competitors never even knew they lost.

How to Text Past Customers Safely: A Permission-First Checklist

Texting past customers is one of the highest-return moves a service business can make — but only when every message sits on a documented foundation of consent. With TCPA litigation filings up 95% in 2025 and statutory damages running $500–$1,500 per violation, "we meant well" is not a defense.

Here is the permission-first checklist CallMyCustomers runs before any campaign goes live.

1. Start with a list of real customers — nothing else. Purchased lists, scraped numbers, and "they called us once" records are not consent. Under CTIA guidelines, even a missed phone call does not constitute consent to text; implied consent only applies when the customer initiates the exchange. Your list should contain people who actually did business with you and agreed to hear from you.

2. Collect explicit consent in the booking flow. Consent should be optional, separate from other channels, and clearly documented. As Klaviyo's compliance guidance puts it plainly: don't text anyone who hasn't explicitly opted in. A checkbox at booking — unticked by default, with clear language — creates the paper trail that protects you later.

3. Honor opt-outs immediately. Since the FCC's Opt-Out Rule took effect April 11, 2025, customers can revoke consent "in any reasonable manner" — you can no longer dictate a single opt-out method. Revocation requests must be honored as soon as practicable and within no more than 10 business days, with any clarification message sent within a 5-minute window. Best practice: process opt-outs the moment they arrive, not within the legal maximum.

4. Register your campaign properly. As of February 1, 2025, all A2P 10DLC traffic must be registered through The Campaign Registry, and AT&T, T-Mobile, and Verizon block unregistered business SMS outright. Approval typically takes 24–72 hours with proper setup — and as MessageIQ warns, carriers and reviewers still expect consent documented per brand, even after the one-to-one consent rule was vacated.

5. Have a human approve every message before it sends. Automation handles scale; people handle judgment. Every script, offer, and text should get an owner's sign-off before a single message goes out — and replies should route straight into your booking process so a real person continues the conversation.

Your pre-send checklist:

• Every contact is a real customer with documented, explicit consent
• Opt-out requests are processed immediately, across all channels
• Campaign is registered and approved under A2P 10DLC
• Send times respect quiet hours (generally 8 a.m.–9 p.m.)
• A human has reviewed and approved the exact message copy

The safest first step costs nothing: a free list review. Before you spend a dollar or send a text, CallMyCustomers will review and segment your list — by recency, old quotes, and expiring memberships — and show you exactly what it can produce. You approve everything; nothing sends without your sign-off.