10DLC Explained: How Small Businesses Text Customers Legally
BookIt Team · June 7, 2026 · 7 min read
If you have ever sent a text to a customer from a regular 10-digit phone number — the kind that starts with an area code — you have used what the industry calls a long code. For years, businesses used those numbers freely with no registration required. That era is over. Today, if you want to reliably send SMS messages to customers in the United States, you need to register under a program called 10DLC. This guide explains what that means, why it matters, and how to stay on the right side of the rules without becoming a telecom expert.
What Is 10DLC and Where Did It Come From?
10DLC stands for 10-digit long code — it is the technical name for a standard US phone number used for business messaging. The "long code" distinction matters because the industry also has short codes (5- or 6-digit numbers used by large brands) and toll-free numbers, each with their own rules.
In 2021, the major US carriers — AT&T, T-Mobile, and Verizon — began requiring that any business sending SMS over a standard 10-digit number register through The Campaign Registry (TCR), an industry clearinghouse. The reason was spam. Long codes had become a favorite tool for scammers, and carriers were getting pressure to clean up their networks. 10DLC registration lets a legitimate business prove to carriers who they are and what they are texting about, so their messages receive favorable delivery treatment instead of being flagged as spam.
What Happens If You Text Without It?
Skipping 10DLC registration is not technically illegal on its own — but it puts every message you send at serious risk. Carriers run automated spam filters on all unregistered traffic. In practice, that means:
- Messages get silently filtered or blocked before they reach the recipient. Your customer never sees the appointment confirmation, and you have no idea it happened.
- Throughput is severely throttled on unregistered numbers, so even messages that do get through may arrive late or out of order.
- Carriers may impose penalties on messaging providers who pass unregistered traffic, and those costs often flow back to the sender.
- Your number can be blacklisted, meaning you would have to start over with a new number and a new registration.
Beyond carrier-level enforcement, business texting in the US is also governed by the Telephone Consumer Protection Act (TCPA) and CTIA guidelines. Violating consent rules under TCPA can expose a business to significant legal liability. Registration alone is not enough — you also need to follow the consent rules covered below.
Consent, STOP, and HELP: The Rules That Actually Protect You
10DLC registration proves your business exists. But staying compliant day-to-day comes down to three things: getting consent, honoring opt-outs, and responding to help requests.
Express consent means a customer has affirmatively agreed to receive texts from your business before you send the first message. This is not a pre-checked box or fine print buried in a form. It is a clear, unambiguous action — texting your business number to book an appointment, checking a box on a booking form that says "I agree to receive SMS updates," or replying YES to a confirmation message. Consent must be specific to your business and to the type of messages you plan to send.
STOP handling is non-negotiable. Any time a customer replies STOP (or UNSUBSCRIBE, CANCEL, END, or QUIT), you must immediately cease sending them messages. CTIA requires this to be honored within seconds, not hours.
HELP handling means that if a customer replies HELP, your system must send back contact information or a brief description of the service. It is a carrier requirement, not optional.
Businesses are also required to maintain a consent ledger — a record of when each contact opted in, what they consented to, and any opt-out events. If a dispute arises, that record is your evidence.
Brand and Campaign Registration: What You Actually Have to File
10DLC compliance has two layers of registration at TCR.
Brand registration establishes who you are. You submit your business name, EIN (or equivalent tax ID), address, and website. TCR verifies this against public data sources and assigns your brand a trust score. Higher trust scores unlock higher message throughput. Brand registration is typically a one-time fee of roughly $4.
Campaign registration describes what you are going to text about. Each use case — appointment reminders, customer service, marketing — is a separate campaign. You specify the message type, provide sample messages, and confirm your opt-in method. Carriers review campaigns before approving them for delivery, which typically takes a few days to a couple of weeks depending on the carrier.
Campaign registration carries its own fees: typically around $15 to register the campaign plus a one-time vetting fee of approximately $40, and then ongoing monthly campaign fees of roughly $1.50–$10 per month depending on use case. These amounts are set by TCR and the carriers, not by the businesses using the system, so treat all figures as approximate.
How BookIt Handles All of This for You
Most small business owners did not sign up to become telecom compliance specialists. The good news is that when you use BookIt, you do not have to be one.
When you add the AI receptionist on the $49/mo plan, BookIt provisions a dedicated 10-digit number registered under a pre-approved 10DLC campaign. Your business information gets filed with TCR through our existing brand registration, and your number is associated with a compliant messaging campaign before a single customer message is sent. You do not touch TCR directly.
The compliance layer runs automatically underneath every conversation:
- Consent ledger — Every opt-in event is timestamped and stored. When a customer texts your BookIt number to book an appointment, that is the consent event, and it is logged automatically.
- Double opt-in for owner-initiated messages — If you want to text a customer who has not contacted you first (for example, a recall reminder or a promotional message), BookIt sends a consent confirmation before the campaign message goes out, satisfying the express consent requirement.
- STOP and HELP handling — Both keywords are recognized and acted on instantly. STOP removes the contact from all future messages and logs the opt-out. HELP returns your business name and a support contact. Both happen without any action on your part.
- Opt-out suppression — Once someone opts out, BookIt will never send them another message, even if their number appears on a future import or booking. The suppression list is permanent unless the customer re-opts in themselves.
The result is that your business can text customers for appointment confirmations, reminders, follow-ups, and AI-handled replies without worrying about carrier filtering or compliance exposure. The system is built around the rules so you stay inside them by default.
The Bottom Line for Small Business Owners
10DLC is not going away, and the enforcement posture from carriers has been getting stricter every year, not looser. If you are texting customers today on an unregistered number, your messages are at risk of being filtered — and you may not know it is happening until a customer tells you they never received a confirmation.
The path forward is straightforward: register your brand and campaign, collect consent before texting, honor every STOP request immediately, and keep a record of it all. If that sounds like a lot to manage on top of actually running your business, that is exactly why BookIt exists.
Ready to stop missing calls? Get started free — a live booking page, no credit card. $49/mo adds the AI receptionist and a dedicated number. Or view pricing.