A2P 10DLC Registration and SMS Compliance: The Complete Guide for 2026

Your text messages aren’t being filtered. They’re being blocked entirely. As of February 2025, every major US carrier  AT&T, T-Mobile, and Verizon  stopped delivering unregistered A2P business SMS. Not throttled, not delayed: blocked. If your business sends automated texts and you haven’t completed 10DLC registration, your messages aren’t reaching anyone.

10DLC Registration Support: Protect Your Deliverability

10DLC registration SMS compliance is the mandatory process that lets carriers verify your business and approve your messaging use cases before your texts go out. This guide covers what 10DLC actually is, who needs it, how to register correctly, why campaigns get rejected, and what ongoing compliance looks like after you’re approved. Message IQ handles this registration process for HubSpot teams during onboarding  but whether you use Message IQ or any other SMS platform, understanding the framework

What Is A2P 10DLC?

A2P stands for Application-to-Person. It describes any text message sent from a software application to a person’s mobile phone  as opposed to P2P (Person-to-Person) messaging between two individuals. Every automated business text is A2P: appointment reminders, lead follow-ups, order notifications, marketing campaigns, two-way CRM-triggered messages.

10DLC stands for 10-Digit Long Code. These are standard local-looking phone numbers (like 415-555-0182) that businesses use to send A2P messages. Before 10DLC existed, businesses either used short codes (5–6 digit numbers costing $500–$1,000/month) or sent from unvetted 10-digit numbers alongside personal texting traffic  which created the spam problem carriers needed to solve.

The Campaign Registry (TCR) is the centralized system carriers use to vet A2P senders. Businesses register their brand (who they are) and their campaigns (what they’re texting about and why) through TCR. Carriers use that verified data to allow, throttle, or block your messages.

Who Needs 10DLC Registration?

Any US business sending automated text messages from a standard 10-digit number needs to be registered. The scope is broader than most people expect:

• Sales and marketing teams sending automated follow-up sequences, lead nurture texts, or promotional campaigns
• Customer service teams sending appointment reminders, order status updates, or support confirmations
• Businesses running two-way SMS conversations triggered by CRM events even if the messages feel conversational
• Small businesses sending a handful of automated texts per month volume doesn’t exempt you
• Teams using any SMS platform (Twilio, Message IQ, Salesmsg, SimpleTexting, etc.) to send from a 10-digit number

The only alternative to 10DLC for US business texting is a short code (expensive, slow to provision) or a toll-free number (a different registration process through individual carrier portals, typically 3–6 weeks, and generally a better fit for high-volume one-way sends). If you’re using a local-looking 10-digit number for any automated business texting, 10DLC registration applies.

The Three Parties in the 10DLC System

Most businesses try to register directly with TCR and get confused when they can’t. The system doesn’t work that way. There are three parties involved and understanding their roles prevents a lot of wasted time.

Party	Role	What you interact with
TCR (The Campaign Registry)	Vets and approves brands and campaigns on behalf of carriers	Indirectly through your CSP
CSP (Campaign Service Provider)	Your SMS platform (Message IQ, Twilio, etc.) that submits registration on your behalf	Directly your platform’s onboarding flow
Carriers (AT&T, T-Mobile, Verizon)	Enforce registration and control message delivery based on TCR data	Indirectly they receive TCR data

You register through your CSP your SMS platform. Your CSP submits your brand and campaign data to TCR. TCR reviews and either approves or rejects. Carriers pull that approval data and use it to decide whether your messages deliver. If your CSP has strong relationships with Downstream Connectivity Aggregators (DCAs) the intermediaries between TCR and carriers your campaign approvals come faster.

This matters when choosing an SMS platform. A provider with established DCA relationships and clean compliance history gets campaigns approved faster than one without. Message IQ’s registration process is built by Integrate IQ, HubSpot Diamond Solutions Partners, with compliance tooling that walks HubSpot teams through every required step.

Trust Score and Message Throughput: What Determines Your Sending Speed

Brand registration doesn’t just get you approved or rejected. It also assigns your business a standing that controls how fast you can send. Understanding this upfront saves a second round of guesswork after you’re already live.

Every brand lands in one of three identity states: Unverified (usually caused by a business name or EIN mismatch, and it blocks all 10DLC messaging until fixed), Verified (the baseline needed to register campaigns), or Vetted Verified (Verified plus a third-party review that unlocks higher throughput).

If your business isn’t on the Russell 3000 index, you’re automatically capped at a lower throughput tier unless you complete third-party vetting. Standard vetting is an automated review, similar to a credit check, run by Aegis Mobile or WMC Global and typically costs around $40. Enhanced vetting is a manual, deeper review usually pursued only if you’re unhappy with your Standard vetting score.

Your resulting Trust Score (0-100) maps to a Message Class on AT&T (A through F) and a Tier on T-Mobile (Low, High, Top). Higher scores unlock significantly more messages per second. The table below shows the general pattern:

Vetting Status	Typical Trust Score	What It Unlocks
Unverified	N/A (blocked)	No 10DLC messaging until brand details are corrected
Verified (no vetting)	Not scored	Lowest throughput tier (AT&T Class E/F, T-Mobile Low)
Verified + Standard vetting	0-100 score assigned	Mid-to-high throughput depending on score
Verified + Russell 3000	Automatic top tier	Highest throughput (AT&T Class A/B, T-Mobile Top)

Authentication+ Verification for Public Companies

If your business is publicly traded, there’s now an extra verification layer on top of standard or Russell 3000 vetting, called Authentication+. It adds a $12.50 fee and requires additional documentation to confirm the brand’s public-company status directly with TCR, rather than relying on Russell 3000 index matching alone. It doesn’t replace Standard or Enhanced vetting; it stacks on top of whichever tier you already qualify for. Most small and mid-sized HubSpot teams will never encounter this requirement, but if your business is public or a subsidiary of one, confirm with your CSP whether Authentication+ applies before you submit

If your Trust Score comes back lower than expected, the most common cause is a data mismatch: your registered address, legal name, or EIN doesn’t exactly match official records. Fixing the mismatch and resubmitting is usually faster and cheaper than paying for Enhanced vetting.

Step-by-Step: How 10DLC Registration Works

Step 1: Brand Registration

Brand registration tells the carriers who you are. Your SMS platform walks you through a form that captures:

• Legal business name must match your EIN/tax documents exactly, character for character
• EIN (Employer Identification Number) sole proprietors without an EIN use a different sole prop registration path
• Business address and website URL the website must be live, working, and contain a visible privacy policy
• Industry vertical and business type
• Contact information for the business

Brand registration typically takes 2–5 business days. The one-time fee runs roughly $4 for sole proprietors and $48+ for standard brands (including secondary vetting fees that some carriers require). Once your brand is approved, you move to campaign registration.

Reseller ID: When You’re Registering on Behalf of Another Business

If you’re registering a brand or campaign on behalf of a different legal entity — an agency handling 10DLC for clients, for example — TCR requires a Reseller ID on that registration. This has been mandatory since January 2025, and it’s strictly enforced: once a reseller ID is attached to a registration, it generally can’t be changed afterward. This mostly matters for agencies and CSPs, not for a single HubSpot team registering its own brand. If you’re registering under your own business name for your own SMS sending, Message IQ handles this classification automatically during onboarding and you won’t need to do anything extra.

Step 2: Campaign Registration

A campaign in 10DLC terms is a messaging use case a specific category of texts you’ll send and the opt-in method you use to collect consent. You register a separate campaign for each distinct use case. Common examples:

• Marketing promotional texts, announcements, offers sent to opted-in subscribers
• Customer care service updates, support confirmations, account notifications
• 2FA / OTP one-time passcodes for account authentication
• Appointment reminders scheduling and confirmation messages
• Mixed / conversational two-way business conversations not fitting a single narrow category

Campaign registration requires:

• A clear description of what you’re texting and why (specific, not vague carriers reject vague descriptions)
• Your opt-in method how contacts agreed to receive texts from you, with exact form language or keyword example
• 2–5 sample messages that represent actual content you’ll send
• Confirmation of opt-out handling how STOP requests are managed
• Your website URL where the opt-in occurs

Campaign approval can take anywhere from a few days to 4 weeks depending on your CSP’s DCA relationships and whether your submission passes first review without issues.

Step 3: Number Assignment

Once your brand and campaign are approved, your SMS platform assigns your 10-digit number to the approved campaign. From that point forward, messages sent from that number under that campaign use case are cleared for delivery by carriers.

One number can be linked to one campaign. If you run multiple distinct use cases, you typically need multiple numbers or a special mixed-use campaign approval, depending on your CSP’s setup.

How to Document Opt-In Consent

Carriers and plaintiffs’ attorneys both ask the same question after the fact: how did this person agree to receive texts? A registered campaign only protects you if the consent behind it is documented, not just true.

• Website form opt-in: an unchecked checkbox with disclosure language such as “I agree to receive text messages from [Company]. Msg & data rates may apply. Reply STOP to opt out.”
• SMS keyword opt-in: a contact texts a word like JOIN to your number, creating a timestamped consent record.
• Verbal consent script: for phone or in-person signups, a consistent line such as “May I send you text reminders? Msg & data rates may apply, reply STOP anytime to opt out.”
• Terms of Service clause: a dedicated SMS section covering consent, frequency, and opt-out instructions.

Whichever method you use, log the timestamp, the method, and the exact language the contact agreed to. That three-field record is what a carrier re-vetting cycle or a TCPA inquiry will ask you to produce.

What Carriers and Reviewers Check

Campaign reviewers evaluate five things. Getting all five right on the first submission is the difference between a 3-day approval and a 3-week rejection cycle.

1. Business legitimacy. Your brand name, website, and EIN need to be consistent and verifiable. A website with placeholder text, missing About or Contact pages, or broken links reads as a non-legitimate business. Reviewers check that your website looks like a real operating company.

2. Opt-in clarity. This is where most campaigns fail. Reviewers want to see exactly how contacts opted in the specific form, the exact checkbox language, or the keyword they texted. Vague opt-in descriptions like ‘users opted in on our site’ get rejected. What passes: ‘Users enter their phone number at [URL] and check a box that reads: I agree to receive text messages from [Company Name]. Message and data rates may apply. Reply STOP to unsubscribe.’

3. Privacy policy. Your website must have a working privacy policy that’s easy to find (linked in the footer or main navigation). It must specifically address how you collect and use mobile phone numbers, and must state that SMS opt-in data and consent are not shared with third parties for their marketing purposes.

4. Sample message quality. Sample messages must match the use case you registered, include your business name, and include opt-out language (Reply STOP to unsubscribe). Don’t include URLs that resolve to different domains than your registered website. Don’t use link shorteners like bit.ly carriers flag them.

5. Content category compliance. Certain content falls under what carriers call SHAFT (Sex, Hate, Alcohol, Firearms, Tobacco), plus a broader restricted list: cannabis, payday loans, gambling, adult content, third-party lead generation, and multi-level marketing. If your business touches any of these categories, your campaign needs special handling or may not be registerable under standard 10DLC at all.

Most Common Rejection Reasons and How to Fix Them

This is the section most compliance guides skip. Campaign rejections are common, and TCR only tells you the first problem it finds meaning you can fix one issue, resubmit and get rejected again for something else. Fix all of these before your first submission.

Rejection Reason	What Went Wrong	Fix
Vague opt-in description	Said ‘users opted in on website’ with no specifics	Include the exact form URL, exact checkbox language, exact opt-out instruction shown to users
Missing or unfindable privacy policy	Policy exists but isn’t linked in footer/nav, or doesn’t mention SMS	Add footer link to privacy policy; add clause specifically about SMS opt-in data handling and third-party sharing prohibition
Sample messages don’t match use case	Registered as ‘appointment reminders’ but samples include promotional offers	Rewrite samples to strictly match registered use case; one use case per campaign
URL mismatch	Links in sample messages go to different domain than registered website	Use only your registered domain in samples; no link shorteners
Brand name doesn’t match EIN records	Legal name on registration doesn’t exactly match tax documents	Use your exact legal business name as it appears on your EIN no abbreviations, no DBA variations
No opt-out language in sample messages	Samples don’t include ‘Reply STOP to unsubscribe’ or equivalent	Add STOP instruction to every sample message; carriers require it
Website not live or incomplete	Site under construction, placeholder text, or broken pages	Launch a complete site with About, Contact, and Privacy Policy pages before submitting

If your campaign gets rejected, fix every item in this table not just the one listed in the rejection code. TCR typically stops at the first problem it finds. If you only fix that one issue and resubmit, you’re likely to get rejected again for the next item on the list.

Since March 23, 2026, TCR replaced its older generic rejection reasons with granular error codes that name the exact problem instead of a vague category. A few you’ll actually encounter: code 30886 covers a campaign description that doesn’t match the registered use case or includes disallowed content (loan marketing, third-party debt collection, gambling, cryptocurrency, credit repair); code 30882 flags a Terms and Conditions mismatch; code 30898 flags excessive EIN reuse across too many brands. If you registered before March 2026 and get flagged during a re-vetting cycle, expect one of these specific codes rather than the older generic rejection language — and treat the code as a direct pointer to the fix, not just a label.

10DLC Registration Costs and Timeline

Cost Item	Typical Amount	Notes
Sole prop brand registration	~$4 one-time	For businesses without an EIN
Standard brand registration	~$48+ one-time	Includes secondary vetting fee; required for most businesses
Campaign registration	~$15–17 one-time	Per campaign use case; charged even if rejected
Monthly campaign fee	~$10/month per campaign	Recurring; passed through by most platforms
Carrier surcharges	$0.003–$0.005 per SMS	AT&T, T-Mobile, Verizon all charge pass-through fees per message
Brand approval timeline	2–5 business days	Faster with a CSP with strong DCA relationships
Campaign approval timeline	3 days to 4 weeks	Depends on submission quality and CSP DCA tier

The campaign registration fee applies even if your campaign is rejected. This is why getting your submission right the first time matters financially. Some platforms bundle these fees into their plan pricing; others pass them through as line items. Check how your SMS platform handles this before submitting.

Ongoing Compliance After Registration

Registration is not a one-time checkbox. Carriers monitor active campaigns and can throttle or suspend them for ongoing violations. Most businesses that pass initial registration create problems for themselves in the months that follow.

Send only what you registered for. If your campaign is registered as ‘appointment reminders,’ send appointment reminders. Sending promotional offers from that same number violates your approved use case and can trigger carrier filtering or campaign suspension. Different use cases need separate campaigns on separate numbers.

Honor opt-outs within the same message cycle. When a contact texts STOP, they must be removed from all future automated sends on that campaign immediately. Continuing to text someone who opted out is a TCPA violation on top of a carrier compliance issue. Message IQ handles opt-out processing automatically and logs it to the HubSpot contact record.

Don’t import unvetted contact lists. Texting a purchased list, a scraped list, or contacts who never opted in to receive texts from your business creates opt-out spikes. High opt-out rates signal spam behavior to carriers and can get your campaign suspended even if the initial registration was clean.

Keep your website and privacy policy current. If your registered website URL changes, goes down, or removes the privacy policy, your campaign can be flagged during a re-vetting cycle. Carriers periodically re-verify registered brands.

Watch your trust score. TCR assigns a trust score based on your brand verification, sending behavior, and opt-out rates (see the Trust Score section above for how the scoring tiers work). Higher trust scores unlock higher message throughput scores between 75 and 100 allow significantly more messages per second than lower scores. A clean compliance record compounds over time.

TCPA Fines and State SMS Laws to Watch in 2026

10DLC registration and TCPA compliance are separate requirements that both apply at once. Registration is about whether carriers deliver your message. TCPA is about whether you were legally allowed to send it, and it carries its own financial exposure that a compliant registration does nothing to reduce.

TCPA statutory damages run $500 to $1,500 per message, with no cap on total class-action liability. A single campaign sent to 10,000 non-consenting contacts can create theoretical exposure in the millions. Separately, National Do Not Call Registry violations carry fines up to $43,792 per call or text.

On top of federal law, several states have added their own layers in 2025 and 2026. Virginia’s SB 1339 requires businesses to honor a STOP or UNSUBSCRIBE reply for at least 10 years, with fines of $500 to $5,000 per violation. Texas SB 140, effective September 2025, classifies marketing texts as telephone solicitations and lets consumers sue directly, with penalties up to $1,500 per violation and treble damages for willful violations.

Where the FCC’s One-to-One Consent Rule Actually Stands

You’ll see plenty of guides claiming the FCC’s one-to-one consent rule, which would have required each business to collect its own separate consent rather than relying on shared lead-generation forms, “took effect” in January 2026. That’s out of date. The rule was vacated by the 11th Circuit, so there’s currently no live federal one-to-one consent requirement in force. That doesn’t make shared-consent lead lists safe: carriers and TCR reviewers have moved toward one-to-one consent expectations on their own, independent of whether a federal rule is in effect, and plaintiffs’ attorneys are still litigating consent quality under existing TCPA law. Document consent per brand regardless of the rule’s federal status.

10DLC registration doesn’t satisfy these requirements on its own. Consent documentation, opt-out handling, and state-specific rules sit alongside carrier registration as a separate compliance track. For the full breakdown of TCPA and state SMS law requirements, see our guides on SMS marketing laws and avoiding TCPA and CAN-SPAM fines.

How Message IQ Handles 10DLC for HubSpot Teams

10DLC registration is the part of business SMS setup that most teams dread because the requirements are technical, the rejection feedback is vague, and a mistake costs both time and money. Message IQ removes that friction for HubSpot users by walking through the entire registration process during onboarding.

• Brand registration is handled inside the Message IQ onboarding flow you provide your business details, Message IQ submits to TCR through its CSP relationship
• Campaign registration guidance covers which use case to select, how to write a compliant opt-in description, and what sample messages need to include
• Opt-out management runs automatically STOP replies remove contacts from future sends and log the opt-out to their HubSpot contact record so no one gets accidentally re-enrolled
• Compliance runs in the background once registered, your HubSpot SMS workflows fire through the approved campaign channel without your team managing carrier rules manually

Once registration clears, you add Message IQ from the HubSpot App Marketplace and SMS becomes a native workflow action inside HubSpot. Enrollment triggers, deal stage changes, form submissions, contact property updates any event that fires a HubSpot workflow can now fire a compliant two-way SMS. Every thread logs to the contact timeline. Replies land in a shared team inbox.

Plans start at $49/month. The compliance infrastructure 10DLC registration support, opt-out management, TCPA-aware tooling is part of the platform, not an add-on.

Frequently Asked Questions

What happens if I send business SMS without 10DLC registration?

Since February 2025, all major US carriers AT&T, T-Mobile, and Verizon block unregistered A2P traffic from 10-digit numbers outright. Your messages don’t get delivered. They don’t sit in a filter or arrive late they simply don’t reach the recipient. There’s no grace period in 2026. If you’re sending now without registration, your campaigns are failing silently.

Do I need a separate 10DLC registration for each SMS use case?

Yes. Each distinct messaging use case requires its own campaign registration. If you send appointment reminders and promotional marketing texts, those are two separate campaigns ideally on separate numbers. Mixing use cases on a single registered campaign is a common reason for post-approval filtering and suspension.

Can I use my existing business phone number for 10DLC?

If your existing number is a standard 10-digit US number, it can be registered under 10DLC but the process depends on your SMS platform and whether they support porting and registering existing numbers. Some platforms provision new numbers that you then register. Check with your CSP before assuming your existing number can be used as-is.

How long does 10DLC approval take?

Brand registration typically takes 2–5 business days. Campaign approval ranges from 3 business days to 4 weeks depending on your CSP’s DCA tier, how clean your submission is, and current TCR review volume. Getting the submission right the first time opt-in language, privacy policy, sample messages, website is the most reliable way to land in the faster approval window.

What is a trust score and how does it affect my sending?

TCR assigns each registered brand a trust score based on business verification completeness, sending behavior, opt-out rates, and time in the system. Trust scores between 75 and 100 allow up to 225 messages per second through some carriers. Lower scores reduce throughput significantly. A clean compliance history builds your trust score over time high opt-out rates, spam complaints, or sending outside your registered use case erode it.

What is SHAFT content and why does it matter for 10DLC?

SHAFT is carrier shorthand for Sex, Hate, Alcohol, Firearms, and Tobacco, the content categories carriers restrict or block regardless of consent status. If your business touches any SHAFT category, expect additional vetting requirements and confirm eligibility with your CSP before registering.

Does Message IQ handle 10DLC registration for me?

Yes. Message IQ walks HubSpot teams through brand and campaign registration during onboarding, provides guidance on compliant opt-in language and sample message requirements, and manages opt-out handling automatically inside the platform. Once approved, your HubSpot SMS workflows run through the registered campaign channel without manual compliance management from your team.

Do I need to worry about the FCC’s one-to-one consent rule?

Not as a live federal requirement right now — the rule was vacated by the 11th Circuit, so it isn’t currently in force. That said, don’t treat this as a green light for shared or purchased consent lists. Carriers and TCR reviewers increasingly expect one-to-one consent regardless of the rule’s federal status, and existing TCPA law still exposes you to per-message statutory damages for weak consent. Document consent per brand as if the rule were active.

Get Compliant and Start Texting From HubSpot

Unregistered business SMS is a dead channel in 2026. Getting registered takes a week or less when the submission is done right. Message IQ handles the registration process for HubSpot teams during onboarding no wrestling with TCR forms, no guessing what opt-in language passes review. Once you’re approved, every SMS workflow you build in HubSpot fires through a compliant, carrier-vetted channel. Two-way by default, opt-out managed automatically, timeline-logged on every contact record. Plans starting at $49/month.

Start your Message IQ setup and get your 10DLC registration underway

Book a Free Consultation