Skip to main content

A2P 10DLC & Toll-Free Verification Opt-In Compliance Checklist

Here’s a simple and actionable checklist based on our provider's current campaign approval requirementsand general industry best practices:

Updated over 3 weeks ago

To simplify your experience and help you through the verification process, Rally Corp offers premade forms, QR codes, and keyword workflows with our widgets to help you stay compliant and get verified quickly and easily. If you need help getting any of these set up or if you have questions, please reach out to [email protected].

📋

Opt-In Flow Requirements

  • Consent must be explicit
    Audience/Contacts must take a clear action to opt in (e.g., checking a box or sending a keyword via SMS).

  • Opt-in checkbox must not be pre-checked
    Consent must be an affirmative action taken by the user.

  • Business/Organization name must be clearly stated
    Especially in the checkbox label or near the phone number field (e.g., “I agree to receive messages from [Organization Name]”).

  • Message purpose must be disclosed
    Include a short description of the message type: updates, alerts, events, marketing/promotional content, etc. (If you are a for-profit business using Rally Corp for marketing purposes, please review this help document to ensure you are compliant and to help with the approval process)

  • Opt-out instructions provided
    Must include a clear line like “Reply STOP to unsubscribe.”

  • Link to Privacy Policy and Terms of Service
    These must be visible and accessible on the same page or within the form.

  • Mobile carrier disclaimer
    Example: “Message and data rates may apply. Message frequency may vary.”

🛡

Privacy Policy Requirements

Ensure your Privacy Policy contains:

  • A section stating SMS messages may be sent to opted-in users

  • Information about how users can opt out (e.g., reply STOP)

  • Statement that no mobile info will be shared with third parties for marketing

  • A note that subcontractors may assist in sending messages, only when necessary

  • Confirmation that opt-in and consent data is never sold or shared


Sample language:

“Text messaging originator opt-in data and consent will not be shared with any third parties. We only use this information to send service-related messages, and it may be processed by service providers solely for operational needs.”

📄

Messaging Content Checklist

  • Brand/business or organization name appears in the first message to the user

  • STOP instruction appears in your first message (and recurring messages if appropriate)

  • No forbidden content types (e.g., SHAFT: sexual content, hate, alcohol, firearms, tobacco—unless properly age-gated and disclosed)

📌

Extra Tips

  • Keep screenshots of your opt-in flow in a publicly accessible link for use during registration.

  • If you use Google Forms or third-party form builders, make sure links don’t require login.

  • Avoid using generic language like “I agree to receive texts” without identifying who they’re from.

  • A/B tested landing pages or forms must also follow all of the above criteria—even if used briefly.

⚠️

Industry Disclaimer

The telecommunications compliance landscape is constantly evolving. What passes review today may not pass 3–4 months from now. However, maintaining a checklist like this and reviewing it quarterly will help your team stay ahead of future changes and keep opt-in flows solid as the rules shift.

Did this answer your question?