Why compliance actually matters to an independent shop
Two reasons:
- TCPA (Telephone Consumer Protection Act) violations are expensive. $500–$1,500 per message, per recipient, and class-action lawsuits are common. A single enthusiastic promotional blast to 2,000 customers without proper consent can end a business.
- Carrier filtering is even more common. You may never get sued and still lose 40% of your message deliverability because you're sending promotional content from an unregistered number.
Most shops worry about (1) and get hurt by (2). This guide covers both.
The three frameworks you need to know
- TCPA — US federal law. Governs consent. Applies to anyone sending promotional SMS to a US number. Full text at the FCC's TCPA resource page.
- CAN-SPAM — US federal law. Governs commercial email. Applies if you send marketing emails. The FTC CAN-SPAM compliance guide is the canonical reference.
- A2P 10DLC — Carrier rules, not law. Governs registration of 10-digit numbers used for application-to-person messaging. Since 2023, unregistered traffic is heavily filtered and surcharged. See the CTIA Messaging Principles and Best Practices for the carrier guidelines.
TCPA in practice. The shop owner's cheat sheet
Transactional messages (don't require opt-in, generally):
- Appointment confirmations
- Appointment reminders
- "Your car is ready" notifications
- Estimate approval links
- Invoice/payment receipts
- Post-service thank-you messages
- Review requests (gray area. Lean conservative)
Promotional messages (require prior express written consent):
- "20% off oil changes this weekend!"
- "We're open Saturdays now. Come by!"
- Win-back campaigns that include offers
- Any message primarily designed to drive new business rather than service an existing engagement
The line gets blurry. The safe rule: if you're offering a discount or soliciting new work, get explicit consent.
How to get TCPA-compliant consent
Two methods:
- At the counter / on your booking form. Include a checkbox or sentence: "By providing your phone number, you agree to receive transactional and promotional text messages from [Shop Name]. Message and data rates may apply. Reply STOP to opt out."
- Double opt-in for promotional lists. Customer provides number, receives a text asking them to reply YES to subscribe. Keep a record of the YES.
Keep consent records for at least 4 years. If a dispute arises, the burden is on you to prove consent.
A2P 10DLC — what it is and why you can't skip it
Since 2023, US carriers (Verizon, AT&T, T-Mobile) require any 10-digit number used to send application-to-person messages (automated messages sent from software, not from a human phone) to be registered under A2P 10DLC. This registration includes:
- Brand registration. Verifies your business is real (EIN, legal name, address).
- Campaign registration. Declares what types of messages you'll send.
- Trust score. Determines how many messages per second you can send.
What happens if you skip it: your messages still send, but carrier filters silently block 30–50% of them, and you pay per-message unregistered surcharges. You won't know which messages failed unless you check delivery receipts obsessively.
Any legitimate SMS platform (Twilio, MessageBird, Bandwidth, and CRMs built on top of them) will handle A2P 10DLC registration for you. It takes 1–3 weeks for approval.
Message content rules
Carriers also filter based on content. Flagged content types:
- Shortened URLs (bit.ly, tinyurl, etc.) — heavily filtered. Use your own domain.
- Explicit financial promotions — "Get $500 fast!" triggers filters.
- Gambling, firearms, adult content — outright blocked on most carriers regardless of registration. Not relevant for most shops but worth knowing.
- Repeated symbols / ALL CAPS — "!!!" and "URGENT!!!" look like spam to filters.
Write like a human. Don't shout. Don't use sketchy link shorteners.
Required elements in every promotional SMS
- Shop name identifying the sender
- Clear opt-out ("Reply STOP to opt out")
- Frequency disclosure on first promotional message ("Msgs 2–4x/month")
- "Msg & data rates may apply" on first promotional message
Transactional messages don't strictly need the frequency/rates language, but every message should respect STOP when it comes in. Not honoring STOP is a fast path to a TCPA class action.
Record-keeping requirements
Keep records of:
- Consent. When it was given, how (form, text, in person), and what they consented to.
- Message history. What was sent, when, to whom.
- Opt-outs. When a STOP was received and how it was processed.
A good SMS platform stores all of this automatically. A shop texting from a personal cell phone stores none of it.
Common shop-owner mistakes
- Buying a list and blasting it. Illegal. Easy to prove. Lawsuits follow.
- Texting customers who asked you to stop. Violates TCPA, easily proven from the carrier logs.
- Sending promotional content from a transactional-registered campaign. Violates carrier rules, your trust score drops.
- Using an advisor's personal cell phone. No consent tracking, no opt-out processing, no compliance audit trail.
The safe setup
- Register your number under A2P 10DLC. Your SMS platform handles this.
- Include consent language on every form where a customer provides a phone number.
- Keep transactional and promotional messages separate. Use separate campaigns on your platform if possible.
- Always honor STOP requests immediately.
- Keep records.
Do these five and your TCPA and carrier-compliance risk drops to nearly zero.
How Pitlane handles this
Pitlane runs on a fully A2P 10DLC-registered SMS infrastructure. Transactional and promotional campaigns are tracked separately. Opt-outs are honored automatically and synced across every channel. Consent timestamps are stored on the contact record. You don't have to think about compliance. It's built in.