A2P 10DLC Opt-In: What Insurance Agencies Need to Text Legally

A2P 10DLC opt-in is the documented permission a person gives your agency to receive text messages from a standard 10-digit number. Carriers and The Campaign Registry check it when you register a campaign. The FCC and the TCPA require it before you send marketing texts. You need one consent record that satisfies all three: it names your agency, says what the person will get, and can be pulled up on demand.

This guide is for agency owners, sales managers and licensed agents who run a phone floor and want texting that survives a carrier review and a plaintiff’s letter.

TL;DR

• A2P 10DLC is the carrier framework for business texting from local 10-digit numbers. Opt-in is the consent proof you submit during campaign registration and keep afterward.
• Marketing texts need prior express written consent, even when the lead is an existing client. Consent should name your agency, not a long list of sellers.
• Keep a record for every number: the date, the form or keyword, the exact disclosure shown, and the source. Host screenshots at a public URL if reviewers ask.
• Purchased leads and live transfers are the risky spot. Consent has to cover the agency that actually sends the text.
• Honor STOP right away, across every number and tool your team uses.

Table of Contents

• What A2P 10DLC opt-in means
• Why opt-in is both a carrier rule and a legal rule
• What the consent language has to say
• Opt-in methods carriers accept
• Purchased leads and live transfers
• Records to keep and how to show them
• Handling STOP and other opt-outs
• Verification time and fees
• Our perspective
• Keeping consent and texting in one place
• A short launch checklist
• FAQ
• Sources

What A2P 10DLC opt-in means

A2P 10DLC is a system in the United States that lets businesses send application-to-person messages over standard 10-digit long code numbers. The Campaign Registry (TCR) keeps an industry-wide database of the companies and use cases allowed to send to U.S. handsets on those numbers.

Three separate things get mixed up:

Registration is a one-time gate, though it needs upkeep. Opt-in is a record you create for every single contact. A clean campaign approval does not make a bad consent record legal.

One practical limit: registration is currently only available to businesses with a valid EIN. Sole proprietorships cannot register that way. An independent agency operating under an individual’s name needs its business entity in order first.

Why opt-in is both a carrier rule and a legal rule

There are two layers, and they do not always line up.

The carrier layer. Your campaign description has to explain how people opt in. Reviewers read it against your website, your forms and your sample messages. If the story does not match what they see, the campaign gets rejected.

The legal layer. Under the TCPA, insurance agencies need prior express written consent before sending commercial texts, even when an existing business relationship exists. The FCC has also said the National Do-Not-Call Registry’s protections extend to text messages, and that covered marketing robotexts need written consent to one seller at a time.

The insurance wrinkle is state law. The FTC explains that the Telemarketing Sales Rule applies to insurance only to the extent state law does not regulate the conduct, so your state’s insurance rules matter alongside federal ones. Have your compliance counsel confirm which state rules apply to the states where you are licensed.

For the wider picture of what an agent must clear before dialing, see our guide to TCPA compliance for insurance agents and the express written consent playbook.

What the consent language has to say

The FCC’s definition of prior express written consent requires a written agreement that clearly authorizes the seller to deliver telemarketing messages to the specified number. It must also disclose that signing is not a condition of buying property, goods or services.

The FCC’s one-to-one consent rule added that consent must follow a clear and conspicuous disclosure that the consumer will receive robocalls or robotexts from each selected seller. That rule was scheduled to take effect January 27, 2025. Because rules like this are subject to challenge and delay, confirm its current status with counsel. Writing your form so it names one seller, you, is safe under either outcome.

CTIA’s messaging guidance adds what a good opt-in identifies. Per CTIA, that includes:

• The specific organization represented in the first message
• The number or short code the texts come from
• The program or product
• Any applicable fees
• Opt-out and customer-care instructions
• Links to terms and a privacy policy

A form disclosure that covers the bases

Put this next to an unchecked box, near the submit button, in readable type. Adapt the wording with your counsel:

By checking this box and submitting, I agree that [Agency Name] may text me at the number above about insurance quotes and my policy options, including with automated technology. Consent is not a condition of purchasing any goods or services. Message frequency varies. Message and data rates may apply. Reply STOP to cancel or HELP for help. See our [Terms] and [Privacy Policy].

A few rules that save campaigns from rejection:

1. Unchecked box. Do not pre-check it.
2. Your agency’s name only. Not “our partners” or “affiliates.”
3. Separate from other agreements. Do not bury it inside a general terms acceptance.
4. Match the campaign. If the form says quotes, do not send promotions for unrelated products.
5. Link a privacy policy that says mobile numbers are not shared for marketing with third parties.

Opt-in methods carriers accept

The Campaign Registry’s data-capture guidance lists acceptable methods: website entry, mobile webpage buttons, keyword texts, responsive exchanges, on-site signups and IVR. For an insurance floor, those usually look like this:

• Quote request form on your site with the disclosure above.
• Keyword opt-in: a prospect texts a word to your number, and your auto-reply confirms and restates terms.
• Inbound call or IVR: the caller agrees verbally or by keypress, and you keep the recording or log.
• Signed paper or e-signature at an in-person meeting or enrollment event.

For design ideas on signup flows, this piece on growing an opted-in email list covers consent-first capture that translates well to text.

A responsive exchange counts only when the person texted you first. If a lead texts “What are my options?”, you can reply about that. You cannot treat it as permission to start a marketing sequence.

Purchased leads and live transfers

This is where agencies get hurt. Buying a lead does not buy consent to text it. For covered marketing robocalls and robotexts, consent must be for one seller at a time, and the messages must relate to the website where consent was given.

The FCC’s policy reasoning is plain: consent should identify the seller whose messages the person agreed to receive, instead of quietly authorizing a mass distribution of their number. The FTC has gone after the other side of this too. In a complaint it filed in 2023, it alleged that lead-generation sites used deceptive presentations to collect purported consent and sold the leads to telemarketers. Those are allegations, but they show where regulators look.

Before you text a purchased lead, check:

1. Does the stored consent language name your agency, or only a vendor or a generic group?
2. Was the form on a page the person could actually see, and is a timestamped copy available?
3. Does the message you plan to send relate to what the person asked for?
4. Can the seller produce the lead’s IP address, timestamp and page URL?

If any answer is no, call within the rules or do not contact. Live transfers are slightly different. The FCC says its rule does not affect adding a third party to an ongoing live call that is not autodialed or prerecorded. But future covered calls and texts still require consent. A transfer does not hand you a texting license.

On the DNC side, our DNC compliance rules guide and the piece on the reassigned numbers database cover checks that belong in the same workflow.

Records to keep and how to show them

If a carrier, a registry reviewer or a lawyer asks for proof, you have to produce it fast. Agencies should keep records of people consenting and providing their numbers. If your opt-in is not publicly viewable, for example it sits behind a login or lives in a call recording, you can supply hosted screenshots or records at a publicly accessible URL.

For signed forms, industry guidance for agencies says to retain paper or electronic copies and a list of the mobile numbers that opted in. The same guidance strongly advises renewing consent annually, because a previous user’s consent does not carry over when a number moves to a new user.

A workable record per contact:

Store the disclosure version, not just “consented yes.” If you change your form wording in March, you need to prove which wording a March contact saw. Our write-up on court-ready TCPA evidence goes deeper on what holds up.

Handling STOP and other opt-outs

Treat any reasonable revocation as a stop: STOP, QUIT, CANCEL, UNSUBSCRIBE, or a plain “don’t text me.” Do three things:

1. Send one confirmation message that the person is unsubscribed, with no marketing in it.
2. Suppress the number across every campaign, number and tool, not just the one that received the reply.
3. Log the date, channel and wording.

The FCC extended the effective date of the requirement to apply a revocation made in response to one type of message to future messages on unrelated matters to April 11, 2026. Build to that standard now. A person who stops quote texts should not get policy-renewal texts either, unless your counsel confirms a narrower approach is permitted.

The trouble spot is the gap between systems. If your CRM, dialer and a separate texting app each keep their own list, a STOP in one does not reach the others. One suppression list is the fix.

Verification time and fees

Expect brand and campaign review to take anywhere from a day or two to over a week, longer after a rejection. Timelines and fees depend on your messaging provider and the campaign type, and carriers can also charge their own per-message fees. Check your provider’s current published fee schedule before you budget, and do not launch a floor-wide texting push until your campaign shows as approved.

Common rejection causes are all opt-in problems:

• The website has no privacy policy or terms page.
• The campaign description says “customers opt in” without saying where or how.
• Sample messages mention products or brands not covered by the opt-in.
• The consent checkbox is pre-checked or bundled with other terms.
• The brand’s legal name or EIN does not match the registered entity.

Our perspective

We see the same pattern across agency floors. Registration gets treated as the finish line, and the consent record gets treated as paperwork. It is the other way around. Carriers approve a description once. A plaintiff’s attorney or a regulator asks for the consent record on one specific number, months later.

A few convictions we hold:

• One suppression list. Calls, texts and email should all respect the same opt-out and DNC state.
• Consent travels with the contact. The timestamp, source and disclosure version should sit on the contact record, where the agent sees it before texting.
• Purchased leads get a gate. If the consent trail does not name your agency, the lead is not textable.
• Compliance belongs in the workflow. A checklist in a binder does not stop an agent from sending the wrong message at 8 p.m.

That is why RevRing.com builds DNC and litigator checks, calling-hours rules by time zone, TCPA consent records and recording notices into the same platform as the CRM and dialer.

— Marc

Keeping consent and texting in one place

RevRing.com puts two-way texting next to CRM, dialing and compliance checks, so the consent record sits on the same contact the agent is working. You can run fully on RevRing CRM or connect the CRM you already use. Texting is usage-based: outbound SMS is $0.02 per segment and inbound SMS is $0.01 per segment, on top of per-seat plans listed on the pricing page.

If your team is also moving to higher call volume, take a look at the power dialer and how lead routing and the Lead Marketplace fit with a consent-first process.

A short launch checklist

1. Confirm your agency’s legal entity and EIN match your registration.
2. Publish a privacy policy and terms page that mention SMS.
3. Rewrite every quote form with the disclosure and an unchecked box.
4. Describe each opt-in path in your campaign, with screenshots hosted at a public URL.
5. Audit purchased lead sources for consent that names your agency.
6. Set one suppression list across tools, and test STOP end to end.
7. Set a yearly review of consent records and form wording.

For a broader scan, our telesales compliance checklist is a good companion.

FAQ

Do I need opt-in for texts to existing policyholders?

Yes for marketing texts. Industry guidance for agencies says prior express written consent is needed even with an existing business relationship. Purely informational account messages are treated differently, so ask counsel where your line sits.

Is SMS marketing legal in the United States?

Yes, with consent. The FCC says covered marketing robotexts require prior express written consent following a clear disclosure. State rules for insurance can add requirements.

How long does A2P 10DLC verification take?

Usually a few days to a bit over a week for a clean submission, with rejections adding time. Your messaging provider publishes its own review window, so use that as your planning number.

Can a sole proprietor register for A2P 10DLC?

Not through the standard path. Registration is currently limited to businesses with a valid EIN, so form a business entity first.

What if the opt-in is behind a login or on a call?

Provide hosted screenshots or records at a publicly accessible URL so the reviewer can see the consent flow.

Sources

• FCC one-to-one consent order (DOC-408396A1)
• FCC order on revocation effective date (DA-25-312)
• Federal Register: Targeting and Eliminating Unlawful Text Messages, 2024
• Federal Register: prior express written consent definition, 2025
• FTC: Complying with the Telemarketing Sales Rule
• FTC complaint, Middle District of Florida
• The Campaign Registry: Additional Data Capture
• CTIA Messaging Principles and Best Practices
• IIAT memorandum on texting with clients
• A2P 10DLC Campaign Approval Requirements
• 10DLC registration best practices (AWS)