--- title: "SMS Compliance for Insurance Agents: TCPA Opt-In, Consent & DNC Rules" description: "One non-compliant text can cost $500-$1,500 per message in TCPA penalties. Here is how to text clients legally and protect your agency." url: https://unlockedcrm.ai/blog/sms-compliance-insurance-tcpa-opt-in canonical: https://unlockedcrm.ai/blog/sms-compliance-insurance-tcpa-opt-in category: "compliance" published: 2026-03-04 updated: 2026-03-06 author: "Jacob Lock" source: unLocked CRM — AI CRM for insurance agents --- # SMS Compliance for Insurance Agents: TCPA Opt-In, Consent & DNC Rules ## TL;DR TCPA penalties range from $500–$1,500 per non-compliant text. Insurance agents must collect prior express written consent with explicit SMS language, process opt-outs immediately, enforce time-zone-aware sending windows, and register through 10DLC before sending commercial texts. ## Key data points - TCPA violations carry penalties of $500–$1,500 per non-compliant message, with class action settlements regularly exceeding $10 million. - Pre-checked consent checkboxes are not valid under FCC guidance — consent must be affirmatively given. TCPA violations are the single biggest risk in insurance SMS marketing. Individual penalties range from $500 to $1,500 per non-compliant message — and class action lawsuits regularly result in settlements exceeding $10 million for companies that fail to manage consent properly. This is not theoretical. Insurance agencies have been sued for texting leads from purchased lists, failing to honor opt-out requests, and sending messages outside permitted hours. The good news: compliance is straightforward when you build the right systems. ## Understanding TCPA for Insurance Texting The Telephone Consumer Protection Act governs all commercial text messages. For insurance agents, the key requirements are: ### Prior Express Written Consent You must have documented, timestamped evidence that the contact agreed to receive text messages from you — before you send the first text. This means: - A checked checkbox on your website form is NOT sufficient if it is pre-checked - The consent language must specifically mention SMS/text messages - The consent must be separate from general marketing consent - You must retain the consent record indefinitely ### Proper Consent Language Example *"By providing your phone number and checking this box, you consent to receive text messages from [Agency Name] regarding insurance quotes, policy updates, and related information. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time."* ### Opt-Out Processing - Every marketing text must include opt-out instructions (typically "Reply STOP to unsubscribe") - Opt-outs must be processed immediately — within minutes, not days - Once a contact opts out, you cannot send any further marketing texts unless they re-consent - Transactional texts (policy confirmations, claim updates) may continue but should be minimized ### Time-of-Day Restrictions - Texts may only be sent between 8:00 AM and 9:00 PM in the recipient's local time zone - Your CRM must track each contact's time zone and enforce this automatically - If a contact's time zone is unknown, default to the most restrictive applicable zone ## 10DLC Registration The 10DLC (10-Digit Long Code) framework requires businesses to register their brand and messaging campaigns with carriers before sending commercial texts. This is not optional — unregistered numbers face: - Dramatically higher filtering rates (messages silently blocked by carriers) - Lower throughput limits - Risk of number suspension ### Registration Steps 1. Register your brand (business name, EIN, website, vertical) 2. Register each campaign type (marketing, transactional, OTP) 3. Wait for carrier approval (typically 1-5 business days) 4. Begin sending from your registered number A CRM with built-in A2P/10DLC registration simplifies this to a guided setup wizard rather than navigating carrier portals manually. ## Building a Compliant SMS Workflow ### Step 1: Capture Consent at Every Entry Point - Website forms with explicit SMS consent checkbox (unchecked by default) - In-person intake forms with SMS consent section - Phone consent with recorded verbal agreement ### Step 2: Store Consent Records For every contact, your CRM should store: - Date and time of consent - Method of consent (web form, phone, in-person) - Exact consent language presented - IP address (for web forms) ### Step 3: Enforce Rules Automatically - Block texts to contacts without documented consent - Auto-process STOP replies immediately - Enforce time-zone-aware sending windows - Maintain and check DNC lists before every send ### Step 4: Audit Regularly - Monthly review of consent records - Quarterly review of opt-out processing speed - Annual review of consent language against current TCPA guidance ## Common Compliance Mistakes 1. **Texting purchased lead lists** — purchased leads do not come with SMS consent, even if the lead "opted in" to something 2. **Pre-checked consent boxes** — the FCC considers pre-checked boxes as NOT valid consent 3. **Mixing consent types** — email consent does not equal SMS consent 4. **Slow opt-out processing** — must be near-instant, not "within 24 hours" 5. **No time-zone tracking** — sending a text at 9 PM Eastern hits 6 PM Pacific, but 9 PM texts to a Pacific contact at midnight Eastern violates TCPA ## FAQ ### undefined ### undefined ### undefined ## Related - https://unlockedcrm.ai/blog/sms-marketing-insurance-agents-complete-guide - https://unlockedcrm.ai/blog/sms-templates-insurance-agents-ready-to-use - https://unlockedcrm.ai/blog/insurance-a2p-10dlc-registration-guide --- Source: [SMS Compliance for Insurance Agents: TCPA Opt-In, Consent & DNC Rules](https://unlockedcrm.ai/blog/sms-compliance-insurance-tcpa-opt-in) — unLocked CRM, the AI CRM built for insurance agents. Citation permitted with attribution and a link to https://unlockedcrm.ai/blog/sms-compliance-insurance-tcpa-opt-in.