Business owner submitting texting registration

Speed 10DLC Compliance: Get Brand Approval in 2–5 Business Days

If your business sends automated or application originated texts to U.S. phone numbers, you must register for A2P 10DLC. That means registering your Brand first, then registering each Campaign through your SMS provider. Skip it, and carriers will simply block your messages. Start now by confirming your EIN and privacy policy are ready, drafting real opt-in language and sample messages, and contacting your SMS provider to begin brand registration through The Campaign Registry.

TL;DR:

  • Proper registration requires accurate company details, a functional website, a clear privacy policy, and documented opt-in methods that match your actual messaging practices.
  • Automated texts for appointment reminders, marketing, or verification codes count as A2P messaging, and sharing a number for both personal and automated use may require separate campaigns and numbers.
  • Registration must be done in sequence, with your provider submitting your Brand first, followed by detailed and honest Campaign descriptions, sample messages, and opt-in evidence for verification.
  • Campaign rejection often results from vague opt-in descriptions, mismatched sample messages, or links that include shorteners; fix these issues and resubmit with honest, precise information.
  • After approval, maintain compliance by promptly honoring opt-out requests, monitoring complaint rates, and keeping your privacy policy and campaign descriptions current to avoid future rejection or suspension.
Talkroute
Keep Business Texting Connected
Talkroute helps small businesses manage calls, texts, voicemail, and team communications from existing devices, wherever work takes place.

Table of Contents

Quick 10DLC Compliance Checklist: What To Gather Before You Start

Reviewers at The Campaign Registry (TCR) move fast when your paperwork matches your public-facing business. Gather this before you touch the registration form:

  • Your EIN or Tax ID, exactly as it appears on IRS records
  • Legal company name and physical business address (no P.O. boxes)
  • A working website URL that actually loads and describes your business
  • A public, linkable privacy policy that mentions SMS data use
  • A brand contact email and phone number
  • Authorized representative name, title, and mobile number for two-factor verification

Opt-in evidence matters just as much as the business fields. Save the exact checkbox copy from your signup form, a screenshot of your keyword opt-in flow (like texting “JOIN” to a number), and if you collect consent verbally, a script your staff actually reads. Timestamp these records and host the screenshots somewhere you can retrieve them fast, because maintaining a visible privacy policy that discloses SMS usage and message frequency is one of the most common things TCR checks during review.

A few special cases trip people up. Sole proprietors need to register under the correct entity type, not default to “sole proprietor” just because it feels simpler. Charities and political campaigns face extra vetting. And certain content categories, think firearms, cannabis, or debt collection, get flagged for restricted-use review regardless of how clean your paperwork is.

Pro Tip: Register your EIN-holding entity as the actual brand type it is. Businesses that mistakenly register as sole proprietors despite having an EIN often get stuck with punitive throughput limits or outright rejection.

Who Actually Needs 10DLC Registration?

Any U.S. business or platform sending application-generated texts, known as A2P (application-to-person) messaging, over a standard 10-digit long code number needs to register. This is different from P2P (person-to-person) texting, where a human types and sends each message individually from a phone. A2P covers appointment reminders, marketing blasts, two-factor authentication codes, delivery alerts, and any text triggered by software rather than a person’s thumbs.

The scope is broad. It’s not just retailers blasting promo codes. Registration requirements apply to:

  • Small businesses texting customers about appointments or orders
  • SaaS platforms sending verification codes or account alerts
  • Independent software vendors (ISVs) whose apps text on behalf of clients
  • Nonprofits and political campaigns sending fundraising or outreach texts

One nuance that catches people off guard: a single phone number used for both personal calls and automated marketing texts creates a mixed-use problem. Carriers and TCR expect a clean separation, so if your main business line handles live calls and automated texts, you may need a dedicated number and campaign for the automated portion. Businesses running multiple use cases, say, appointment reminders and marketing promotions, generally need separate campaigns even if they share one brand registration.

How To Register: Brand First, Campaign Second

Registration happens in a strict order, and reversing it, or rushing it, is the fastest way to create delays. Here’s the sequence your SMS provider (called a CSP, or Campaign Service Provider, and sometimes a DCA, or Direct Connect Aggregator) will walk you through.

  1. Your provider submits your Brand to TCR. You don’t file directly with The Campaign Registry yourself. Your CSP, which for most SMBs is your texting platform, submits your business identity on your behalf. This step establishes who you are.
  2. TCR verifies your business identity. Reviewers cross-check your EIN, legal name, and address against official business records. They’ll often visit your website to confirm it’s live and matches what you submitted, and Microsoft’s own 10DLC documentation notes that companies outside major public business databases face more frequent vetting, which slows things down if your online presence is thin.
  3. Once your Brand is approved, you submit a Campaign. This is where you describe exactly what you’re sending, to whom, and how you got permission.
  4. You detail your message flow and opt-in method. This includes how customers agree to receive texts, whether that’s a website checkbox, a keyword text, or a verbal script at checkout.
  5. You submit 2 to 5 sample messages representing exactly what subscribers will actually receive, along with your opt-out and help instructions.
  6. You disclose whether your messages include links, and if so, what kind. Shortened or masked URLs raise red flags during review.
  7. TCR and the carriers approve, or reject with feedback, and your provider passes that outcome back to you.

The single biggest thing to understand here: honesty and precision beat polish. TCR isn’t grading your marketing copy. Reviewers are checking that what you say you’ll send matches what you actually send, word for word in spirit if not verbatim. Registering both a Brand and a Campaign is what allows carriers to reduce filtering on your traffic, so vague or generic campaign descriptions accomplish the opposite of what you want.

Pro Tip: Write your campaign description like you’re explaining your texting program to a stranger who’s never seen your business. “We text order confirmations and shipping updates to customers who opt in at checkout” passes. “We send promotional messages” gets flagged.

If you’re still deciding what type of number fits your business, it helps to understand how 10DLC compares to short codes before you commit to a registration path, since switching later means starting the campaign process over.

Sample Opt-In Language and Messages That Pass Review

TCR checks a specific set of fields against your actual practices, and mismatches here are the number one reason campaigns bounce back for revision. Reviewers compare your stated opt-in method against your website, your sample messages against your declared use case, and your opt-out language against CTIA’s messaging standards for consent and unsubscribe handling.

Here’s opt-in copy that has cleared review for real SMB campaigns:

  • Checkbox text: “By checking this box, I agree to receive text messages from [Business Name] regarding appointment reminders and promotions. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe, HELP for help.”
  • Keyword opt-in: “Text JOIN to [number] to receive appointment reminders from [Business Name]. Msg & data rates may apply. Reply STOP to cancel.”
  • Verbal consent script: “Can I text you appointment reminders and occasional promotions at this number? You can reply STOP anytime to opt out.”

Sample messages need to mirror what subscribers will actually get, word for word in tone:

Marketing: “Hey [Name]! Reply STOP to unsubscribe, HELP for help.”

Appointment reminder: “[Business Name]: Your appointment is tomorrow at 2:00 PM. Reply C to confirm or call us to reschedule. STOP to opt out.”

2FA verification: “Your [Business Name] verification code is 482913. This code expires in 10 minutes. Do not share this code.”

None of these use link shorteners. That’s deliberate, since vague or disguised links are one of the most common causes of campaign rejection. If your business needs a checklist to standardize consent collection across your team, a structured SMS consent process keeps every opt-in defensible if a carrier or the FCC ever asks for proof.

What To Expect After You Submit

Brand registration typically clears in 2 to 5 business days, assuming your business details match public records cleanly. Campaign approval is less predictable, ranging from a few business days to several weeks depending on your use case, whether additional vetting applies, and how many resubmissions you need.

Fees come in a few flavors, and they change periodically, so confirm current rates with your CSP or on TCR’s own site rather than trusting an old blog post:

  • A one-time brand registration fee
  • A recurring campaign fee, billed monthly per campaign
  • Resubmission fees if your campaign gets rejected and you refile
  • Optional or required vetting fees for higher-trust brand tiers

Trust scores are where the real long-term stakes live. TCR assigns your brand a trust score based on verification depth and ongoing behavior, and that score is cumulative, meaning consistent good behavior, low opt-out rates, and no spam complaints, gradually increases how many messages per second (MPS) you’re allowed to send. A brand with a low trust score might be capped at a handful of messages per second. A well-vetted, clean-record brand can send at dramatically higher throughput. Sloppy registration doesn’t just risk rejection. It caps your growth for months afterward.

Common Rejection Reasons and How To Fix Them

Most rejections trace back to a small handful of preventable mistakes, and fixing them is usually faster than people expect.

  1. Vague opt-in descriptions. Writing “customers opt in on our website” without specifying how, is the single most common cause of campaign rejection. Fix it by quoting your exact checkbox text or keyword flow in the campaign form, and attach a screenshot if the platform allows it.
  2. Missing or thin privacy policy. If your privacy policy doesn’t explicitly mention SMS, message frequency, or that you don’t sell phone numbers to third parties, add a dedicated section covering all three before resubmitting.
  3. Sample messages that don’t match your use case. If you registered as “customer service” but your samples read like flash sale promos, reviewers will reject it. Rewrite samples to reflect exactly what you’re building the campaign for.
  4. Link shorteners or broken URLs. Replace shortened links with your full, branded domain, and test every link before submitting.

If a campaign gets rejected for something beyond a simple wording fix, some use cases require formal vetting, an added verification layer that can unlock higher trust scores once completed. Resubmission carries its own fee each time, so it pays to fix everything flagged in the rejection notice in one pass rather than patching one issue and resubmitting repeatedly.

Staying Compliant After You’re Approved

Approval isn’t the finish line. Carriers and TCR keep watching your behavior, and the habits that got you approved need to become permanent operating procedure.

Honor opt-out requests immediately, and keep a log showing exactly when each one was processed. If a customer texts STOP and you send them another marketing message a week later because your system didn’t catch it, that’s a compliance failure and a potential TCPA exposure point, not just an annoyance.

Watch your complaint and opt-out rates like a dashboard metric, because they are one. A sudden spike after a campaign launch is an early warning sign that your messaging drifted from what you registered, and it can quietly erode your trust score before you notice the throughput drop. Keep your website and privacy policy current too. If you rebrand, change your consent language, or add a new use case, update your public pages first, then update your campaign registration to match. TCR does periodic re-verification, and a stale website that no longer matches your filed campaign description is an easy flag.

Content categories tied to alcohol, gambling, firearms, or debt collection typically need dedicated vetting or restricted-use approval, and skipping that step, even after your main campaign is live, risks suspension.

Pro Tip: Set a quarterly reminder to re-read your own campaign registration against your current messaging practice. Businesses evolve their offers faster than they update their TCR filings, and that gap is where compliance quietly breaks down.

Staying Compliant After You're Approved — overview diagram

How Talkroute Helps SMBs Meet 10DLC Requirements

Registration is only half the job. You also need a messaging platform built to keep your program compliant day to day, which is where the right texting setup matters. Some business texting platforms offer features designed to work alongside your 10DLC registration, providing a dedicated business number, message history you can pull up as opt-out evidence, and number management that keeps personal and automated traffic properly separated.

For SMBs weighing their options, understanding how different texting platforms handle deliverability and consent tracking makes the registration process less of a guessing game. And if you’re still unsure whether your content fits within carrier guidelines, reviewing what not to send in a business text before you draft your campaign samples saves a rejection cycle later. Texting remains one of the highest-engagement channels available to small businesses, which is exactly why getting the compliance layer right protects the customer relationship you’re building through it.

Author’s Perspective: Do This Now

The real risk isn’t a slow approval. It’s carriers silently blocking every text you send while you assume your program is running fine. That silence costs you customer trust and opens the door to TCPA exposure if your consent records are thin. The fix is boring but effective: register your Brand, register your Campaign with honest sample messages, and keep your opt-out logs clean. Businesses that treat this as a one-time form to fill out are the ones who get flagged during re-verification. Treat it as an ongoing habit instead.

— Paul

Get Compliant Texting Built Into Your Phone System

Registering for 10DLC solves the carrier side of compliance. Some platforms offer operational features that give you one place where your business number, text threads, and call handling integrate instead of being scattered across separate tools. That matters most for SMBs juggling appointment reminders, order updates, and customer calls without a dedicated compliance team watching every channel.

Talkroute

Talkroute’s texting features let you keep a searchable record of every message sent and received, which doubles as your evidence trail if a carrier or a customer ever questions consent. Pair that with organized call forwarding and routing so your team never misses the calls that come in alongside your texts. If you’re comparing phone systems as part of this registration process anyway, Talkroute’s checklist for comparing business phone systems is a practical next step, or start a trial directly to see how number management and messaging work together in one dashboard.

Sources

FAQ

What Does It Mean To Be In Compliance With 10DLC Regulations?

It means your business has a registered Brand and Campaign with The Campaign Registry, your opt-in methods match what you filed, and you honor opt-outs immediately. Carriers use this registration data to decide whether to deliver your messages at all.

Is 10DLC Registration Required?

Yes. As of February 2025, major carriers including AT&T, T-Mobile, and Verizon block unregistered A2P traffic entirely rather than just throttling it, so registration isn’t optional for any business sending automated texts to U.S. numbers.

What Are the Requirements for A2P 10DLC Compliance?

You need a verified business identity (EIN, legal name, address, website), a documented opt-in method, sample messages matching your actual use case, and clear opt-out handling. Registration happens in two stages: Brand first, then Campaign.

How Much Does 10DLC Cost?

Costs include a one-time brand registration fee, a recurring monthly campaign fee, and possible resubmission or vetting fees if your campaign gets rejected. Exact amounts vary by provider and campaign type, so confirm current rates directly with your CSP or TCR.

How Long Does 10DLC Approval Take?

Brand approval typically takes 2 to 5 business days, while campaign approval ranges from a few days to several weeks depending on use case complexity and whether additional vetting is required.

Stephanie

Stephanie is the Marketing Director at Talkroute and has been featured in Forbes, Inc, and Entrepreneur as a leading authority on business and telecommunications.

Stephanie is also the chief editor and contributing author for the Talkroute blog helping more than 200k entrepreneurs to start, run, and grow their businesses.