TCPA and 10DLC Compliance for Real Estate Texting

How do I comply with TCPA regulations in real estate SMS marketing?

Short answer: scrub every list against the National Do Not Call Registry and a litigator list before sending, identify yourself and the property in the first message, send only between 8am and 9pm in the recipient's time zone, honour every opt-out within ten business days (in practice, instantly), keep records of all of it, and send through a platform that has registered your traffic with the carriers. Do that and you have removed most of the risk. Skip any one of them and you are gambling with $500 to $1,500 per message.

The longer answer matters because real estate investor texting sits in a legal grey zone that agent-focused guides never address. An agent texting her own past clients has consent. An investor texting a skip-traced list of absentee owners does not. Everything below is written for the second situation.

The Four Layers of Rules

Investors tend to think of “compliance” as one thing. It is four separate things, enforced by four separate parties, and a campaign can be fine on one and dead on another.

The carrier layer is the one that bites most investors first, because it fails silently. Your platform says “sent”, the carrier drops the message, and your reply rate quietly falls off a cliff.

What Changed in 2025

Three things, and two of them are good news for investors.

• The one-to-one consent rule died. The FCC's rule requiring consent to name each individual seller was struck down by the Eleventh Circuit in January 2025 and formally withdrawn by the FCC in September 2025. It mostly affected lead-gen sites that sell one form submission to many buyers, which is relevant if you buy PPC leads from a third party.
• The revocation rule took effect on 11 April 2025. A consumer can now revoke consent by any reasonable means — a text reply saying “stop”, but equally “no thanks”, “wrong number”, “don't text me” or a voicemail. You have ten business days to honour it across every channel. Platforms that only recognise the word STOP are now a liability.
• Texas joined the mini-TCPA states. Senate Bill 140, effective 1 September 2025, pulled text messages into Texas's telemarketing law, with a private right of action under the Deceptive Trade Practices Act and treble damages for wilful violations. Whether a “we buy houses” text counts as a solicitation to purchase under the registration chapter is a question for your attorney; the do-not-call chapters apply regardless.

The Consent Problem Nobody Wants to Say Out Loud

Cold SMS to a purchased or skip-traced list has no prior express consent. The whole investor SMS industry rests on one legal argument: since the Supreme Court's Facebook v. Duguid decision in 2021, a system that does not generate random or sequential numbers is not an “autodialer”, so the TCPA's consent requirement for autodialed texts does not apply. That is why investor platforms are built around a human pressing send on each message rather than a true blast.

That argument has held up reasonably well. But it does nothing for the Do Not Call rules, which the FCC has confirmed cover texts and which do not depend on how the message was sent. And it does nothing for the carriers, whose policies simply prohibit unsolicited marketing to people who did not opt in, whatever the law says.

So the honest position is this: cold investor SMS is defensible if you scrub properly, respect opt-outs, and stay inside the carriers' tolerance. It is not “compliant” in the way a double-opt-in newsletter is compliant, and anyone selling you a platform that claims otherwise is selling.

10DLC: What the Carriers Actually Require

10DLC stands for 10-digit long code — ordinary local numbers used for business messaging. Since 2023, US carriers require that any business traffic on these numbers be registered through The Campaign Registry: your brand (the legal entity, with an EIN) and your campaign (the use case and sample messages). Unregistered traffic is filtered or blocked outright, and T-Mobile in particular fines the platform for violations, which the platform passes on to you.

What this means in practice for an investor:

• You need a registered legal entity. An LLC with an EIN is the normal route; a sole proprietor registration exists but has much lower throughput.
• Your campaign use case has to be approved. Cold outreach to purchased lists is not an approved use case, which is why platforms word the registration carefully and why your sample messages and your real messages need to match.
• Throughput is capped by your trust score. New brands get low daily limits per number; that is why serious senders rotate across many numbers and why volume ramps over weeks, not days.
• Carriers run content filters regardless of registration. Links in the first message, URL shorteners, all-caps, dollar signs and the words most spam uses will get you filtered even on a registered campaign.

The Pre-Send Checklist

This is what runs on every client campaign before a single message goes out. None of it is optional.

• DNC scrub against the National Do Not Call Registry, re-run at least every 31 days. The subscription costs a few hundred dollars a year for a handful of area codes; it is the cheapest insurance in the business.
• Litigator scrub against a known-TCPA-plaintiff list. A small group of professional litigants generate a disproportionate share of suits; their numbers are known and removable.
• State scrub — Florida, Oklahoma, Washington and now Texas get either excluded from cold campaigns or run under stricter rules with counsel's sign-off. Several clients simply do not text Florida.
• Internal suppression list — every previous opt-out, wrong number, deceased and “do not contact” across all campaigns and all platforms you have ever used, merged and applied. Switching platforms does not reset this.
• Quiet hours by recipient time zone, 8am to 9pm, with the phone's area code as the fallback when the property address and the number disagree. Florida and a few others are narrower on certain days; the platform should handle this, but check.
• Identification in the first message — your real first name and the specific property. Carriers and courts both treat anonymous messages as spam.
• No links, no shorteners, no images in cold messages. They tank deliverability and make the message look like phishing.
• Opt-out handling that reads intent, not keywords. “Stop”, “no”, “not interested”, “wrong person” and “leave me alone” are all revocations now. A human reviewing replies catches these; a keyword filter does not.
• Records. Scrub dates and sources, the list vendor, every sent message, every reply, every opt-out with a timestamp. If you are ever sued, this file is your defence; without it, you have none.

Where Investors Actually Get Sued

Looking across the cases that reach the news, the pattern is boring and consistent. It is almost never the one-off message to a stranger. It is:

• Continuing to text after the person asked you to stop — usually because the reply was “please don't contact me” rather than the word STOP, and nobody read it.
• Texting numbers on the DNC list because the list was never scrubbed, or was scrubbed once a year ago.
• Texting at 7am because the campaign was scheduled in the sender's time zone, not the recipient's.
• A professional litigator who was on a list that should have been cleaned.

Every one of those is a process failure, not a legal subtlety. Which is the point: compliance in this business is mostly operational discipline, and the investors who get in trouble are the ones who treated it as a one-time setup rather than a weekly routine.

What This Costs

Done properly, compliance adds roughly 10 to 15 percent to the cost of an SMS campaign: the DNC subscription, the litigator-list service, the human time reading replies, and the deliverability hit from excluding the strict states. Against the alternative — a single demand letter can cost more than a year of campaigns — it is not a close call.

If you want the full picture of what an investor SMS campaign costs and returns, the scripts and cost-per-lead guide has the numbers from 23 million sends.