Comprehensive SMS Compliance: Statutory Obligations & Carrier Mandates

The legal landscape of Application-to-Person (A2P) messaging is governed by a hierarchy of federal statutes and industry standards. Failure to adhere to these protocols exposes an entity to statutory damages under the Telephone Consumer Protection Act (TCPA), which provides for private rights of action ranging from $500 to $1,500 per unauthorized message.

Program Snapshot for Carrier & Messaging Provider Review

This section is provided in plain language for carrier vetting, A2P 10DLC and toll-free verification reviews, and prospective clients evaluating the GoFlux Marketing messaging program. It supplements the statutory analysis below with the specific operational disclosures that carriers and aggregators expect to find on a public-facing website. All items are also reflected in the GoFlux Privacy Policy and Messaging Terms (SMS).

Brand and Use Case

Legal entity: GoFlux Marketing. Brand contact: (888) 338-9816, onboarding@gofluxmarketing.com, support@gofluxmarketing.com. GoFlux Marketing operates Application-to-Person (A2P) SMS and MMS programs on behalf of itself and its client brands. Use cases include marketing and promotional messaging to consenting subscribers, customer-care responses, account and order notifications, appointment and service reminders, and one-time passcodes where applicable. Each client brand is registered as a separate brand and campaign within The Campaign Registry (TCR) and within the messaging provider's trust and verification programs for 10DLC, with toll-free numbers verified through applicable toll-free verification processes where toll-free routing is used.

How Phone Numbers Are Collected

Mobile numbers are collected only with the consumer's prior express written consent, captured through one or more of the following channels: a web form on a GoFlux Marketing or client website, a checkout flow on a client e-commerce site, an in-store point-of-sale opt-in, or an inbound text-to-join keyword to a published number. Consent is granted to a single legal entity (GoFlux Marketing or the named client brand) on a one-to-one basis as required by 47 C.F.R. § 64.1200 and FCC 23-107; phone numbers and consent records are not shared, sold, rented, transferred, or otherwise disclosed to third parties or affiliates for their own marketing purposes.

Sample Call-To-Action (CTA)

A representative web-form CTA, displayed in clear and conspicuous typography next to the phone-number field with an unchecked checkbox, reads:

"By providing your phone number and checking this box, you agree to receive recurring marketing text messages from GoFlux Marketing at the number provided. Consent is not a condition of any purchase. Message frequency varies, approximately 4–8 msgs/month. Message and data rates may apply. Reply HELP for help, STOP to cancel. See our Privacy Policy and Messaging Terms."

Sample Marketing Message

A representative outbound marketing message reads:

"GoFlux Marketing: Your saved cart is waiting. Complete checkout today: example.com/cart. Msg & data rates may apply. Reply HELP for help, STOP to cancel."

Message Frequency

Marketing message frequency is approximately 4–8 messages per month per subscriber and varies based on the program, promotions, and the subscriber's lifecycle stage. Transactional messages (order confirmations, shipping updates, appointment reminders, one-time passcodes) are sent only as required by the underlying transaction or service.

Carrier Charges

Message and data rates may apply. GoFlux Marketing does not charge subscribers to receive messages; however, the subscriber's mobile carrier may apply standard message and data rates depending on the subscriber's plan.

HELP Keyword Response

When a subscriber texts HELP, the program returns the following automated response:

"GoFlux Marketing: For help, contact support@gofluxmarketing.com or call (888) 338-9816. Msg & data rates may apply. Reply STOP to cancel."

STOP Keyword Response (Opt-Out)

Subscribers may opt out at any time by replying STOP, UNSUBSCRIBE, CANCEL, END, or QUIT to any message. Opt-outs are processed immediately and the subscriber receives a single, non-marketing confirmation:

"GoFlux Marketing: You are unsubscribed and will receive no further messages. Reply HELP for help."

No additional marketing messages are sent to a number after opt-out. GoFlux Marketing also accepts opt-out requests received by any reasonable means, including email to support@gofluxmarketing.com or a phone call to (888) 338-9816, consistent with the FCC's 2015 Omnibus Declaratory Ruling.

Consent Is Not a Condition of Purchase

Agreeing to receive SMS marketing from GoFlux Marketing or any client brand is not a condition of any purchase, account creation, or service. A consumer may purchase from any GoFlux Marketing client without providing a mobile number or agreeing to SMS marketing.

Data Sharing

Mobile numbers collected for the SMS program are used solely to deliver the messages the subscriber has consented to receive and to operate, secure, and improve the messaging program. Phone numbers, consent records, and SMS opt-in data are never shared with third parties or affiliates for their own marketing purposes. Limited sharing with service providers (e.g., messaging platform providers, ESPs, customer-data platforms) occurs strictly to operate the program under written agreements that prohibit independent use of the data. Full details are described in the GoFlux Privacy Policy.

Prohibited Content (SHAFT-C)

GoFlux Marketing does not transmit content that violates the CTIA Messaging Principles and Best Practices or the SHAFT-C standard. The program does not send messages relating to Sex, Hate, Alcohol (without age-gating), Firearms, Tobacco/vape products, or Cannabis/CBD products. The program also does not facilitate phishing, fraud, deceptive marketing, illegal goods or services, or any content prohibited by carriers or messaging providers' acceptable use policies.

Supported Mobile Carriers

The program is delivered to mobile subscribers on all major U.S. carriers, including AT&T, T-Mobile, Verizon Wireless, U.S. Cellular, and supported MVNOs and regional carriers. Delivery is not guaranteed in any specific instance and may be affected by carrier filtering, network conditions, device state, or roaming.

Privacy Policy and Messaging Terms

The full Privacy Policy, Terms of Service, and Messaging Terms (SMS) are linked at every point of consent and from every page of the GoFlux Marketing website. The Messaging Terms restate the disclosures above in their authoritative form and are the controlling document for the SMS program.

1. The Doctrine of Express Consent

The cornerstone of SMS legality is the establishment of "Prior Express Written Consent" (PEWC). As defined in 47 C.F.R. § 64.1200, consent must be a clear and conspicuous disclosure that allows the consumer to receive marketing messages delivered via an automated system.

Non-Transferability: Consent is granted to a specific legal entity. Per the FCC Second Report and Order (FCC 23-107), lead generators and aggregators are prohibited from "sharing" consent across multiple "marketing partners." Consent must be obtained on a "one-to-one" basis.

The "Double Opt-In" Standard: While not strictly a federal law, the CTIA Messaging Principles and Best Practices dictate that a confirmation message must be sent immediately upon sign-up, confirming the subscriber’s intent.

2. Mandatory Disclosure Framework

At the point of capture (the "Call to Action" or CTA), the following disclosures must be displayed in a font size and color that is not easily overlooked, ensuring they meet the "clear and conspicuous" standard:

Program Description: A specific name or description of the message campaign.

Message Frequency: A disclosure such as "Message frequency varies" or "Approx. 4 msgs/month."

Carrier Charges: The verbatim phrase: "Message and data rates may apply."

Privacy Policy & Terms: Direct, hyperlinked access to the full Terms of Service and Privacy Policy.

Opt-Out Instructions: Clear instructions on how to terminate the subscription (e.g., "Text STOP to cancel").

3. 10DLC (10-Digit Long Code) & Brand Registration

For A2P traffic, carriers now require registration via The Campaign Registry (TCR). This process involves:

Brand Verification: Validation of the EIN and legal business entity.

Campaign Vetting: A manual review of the use case, message templates, and opt-in workflow.

Vetting Scores: Higher vetting scores, often facilitated by third-party aggregators, permit higher throughput (TPS) and daily volume limits.

4. Revocation of Consent (The "STOP" Command)

The right to revoke consent is absolute. Under the TCPA and affirmed by the FCC's 2015 Omnibus Declaratory Ruling, consumers may revoke consent through "any reasonable means."

"A consumer has a right to revoke consent, using any reasonable method including orally or in writing... callers may not control the way in which consumers choose to revoke their consent." — FCC 15-72

Systems must be programmatically configured to recognize and execute "STOP," "UNSUBSCRIBE," "CANCEL," and "QUIT" keywords with zero latency. A single "confirmation of opt-out" message is permitted but must contain no marketing content.

5. Record Keeping and Burden of Proof

In the event of a demand letter or litigation, the burden of proof regarding consent lies entirely with the sender. Essential documentation includes:

Timestamped Metadata: The IP address, date, and time of the opt-in.

Visual Evidence: A screenshot or session recording (e.g., via TrustedForm or Jornaya) showing the exact UI the user encountered at the time of consent.

Campaign Metadata: A record of the specific Terms and Conditions version active at the time of the user's signature.

Authority Sources for Further Review

Federal Communications Commission (FCC): Consumer Support on Robotexts

Federal Trade Commission (FTC): The Telemarketing Sales Rule (TSR)

U.S. Code: 47 U.S.C. § 227 (The TCPA)