Understanding TCR Requirements for A2P 10DLC Messaging

Understanding TCR Requirements for A2P 10DLC Messaging

What is 10DLC?

10DLC (10-Digit Long Code) was introduced to allow businesses to send SMS/MMS messages using standard phone numbers while ensuring compliance with regulations. Originally, SMS was designed for P2P (Person-to-Person) messaging between individuals on mobile carriers. However, with the increasing demand for businesses to send messages via their business numbers, application-based messaging (A2P - Application-to-Person) emerged. To facilitate this, two types of codes were created:
  1. Short Codes: Typically five-digit numbers used for high-volume messaging.
  2. 10DLC: Standard 10-digit numbers that can be used for A2P messaging.
These numbers are not tied to a voice service provider, and they can be assigned by any carrier. However, the open availability of 10DLC introduced concerns about spam and fraudulent messaging. To address this, The Campaign Registry (TCR) was established to regulate and track A2P messages by requiring businesses to register their messaging campaigns.

Why is TCR Registration Required?

The primary goal of TCR is to prevent spam and ensure accountability in A2P messaging. By enforcing registration, TCR allows carriers to track the source of messages and take action against violators. Effective February 3, 2025, all mobile carriers will reject any A2P messages that are not assigned to a registered campaign.

We understand that these requirements can be frustrating, especially for businesses that do not have a website or a dedicated technical team. However, these rules are designed to protect both businesses and consumers from spam and fraud. Below, we break down the specific requirements and how you can comply with minimal hassle.

Key TCR Requirements and Challenges Customers Face:

  1. User Consent: Businesses must obtain explicit consent from recipients before sending SMS messages. This includes informing recipients about:
    1. The type of messages they will receive.
    2. Frequency of messages.
    3. Potential costs.
    4. Opt-out instructions.
    5. How to access more information.
    6. Where they can find online your full Terms & Conditions and Privacy Policy.
  2. Terms & Conditions and Privacy Policy:
    1. A dedicated SMS Terms & Conditions page must be available online.
    2. A Privacy Policy explaining how user data is handled must also be publicly accessible.
    3. A sample Terms & Conditions can be created here.
    4. A sample Terms & Conditions can be created here.
  3. Opt-in and Opt-out Mechanisms:
    1. Businesses must offer a clear way for users to opt-in and opt-out of receiving messages.
    2. Common keywords like START (to opt-in), STOP (to opt-out), and HELP (for assistance) must be supported.
  4. Brand and Campaign Registration:
    1. A Brand includes legal business details such as name, EIN, contact email, phone number, and online presence (website or social media account). The website must be under the same entity’s domain name, SSL encrypted, and not a third-party page. Social media accounts must belong to the company, not an individual employee, and must clearly display the company’s details.
    2. A Campaign outlines the message use case, sample messages, and how compliance requirements are met.
    3. Each brand can have multiple campaigns, with up to 50 phone numbers per campaign.
  5. Message Flow and Consent Collection:
    1. Businesses must detail how they obtain phone numbers and user consent, such as:
      1. Website Forms: An optional checkbox with opt-in details linking to Terms & Conditions.
      2. Verbal Consent: Users explicitly agreeing to receive SMS while on a call or in person.
      3. Email Consent: Users confirming their opt-in via email.
      4. Printed Forms: Customers providing consent through paper forms.
      5. Direct SMS Opt-in: Users sending an initial message to start the conversation.
  6. Message Limits:
    1. TCR enforces daily and per-minute messaging limits based on the campaign type and volume.
Info
You can submit your brand registration for Teklink here: https://form.jotform.com/230784424906157
Idea
You can use this precheck form to see if you meet the TCR requirements: https://forms.skyswitch.com/250133590318148

You must detail to TCR how you collect or obtain phone numbers for sending SMS messages. For each method of number collection, you must explicitly state how consent is obtained from users. This includes detailing whether the consent was gathered via online forms, verbal agreements, email confirmations, or physical sign-up sheets.

If you collect phone numbers through a website form, the form must include an optional checkbox allowing users to opt in to receiving SMS communications. Next to this checkbox, you must separately from any other consent provide a brief description of what they are opting into and a direct link to your full Terms & Conditions and Privacy Policy. This ensures transparency and compliance with TCR regulations. The checkbox must not be pre-checked, and users must actively opt in to receive messages.

Additionally, any web presence used for registration purposes must be under the same business entity's domain name, SSL encrypted, and not a third-party service. Social media accounts used for brand validation must belong to the company itself, not to an individual employee, and must include company details in the profile to meet compliance requirements.

Summary of Key Action Points

  1. Establish an Online Presence: Businesses must have a website under their official entity’s domain name with SSL encryption, or a social media account linked to the company (not an individual employee).
  2. Provide Links to SMS Terms & Conditions and Privacy Policy: These must be publicly accessible on your website or an official company page.
  3. Ensure Compliance for Phone Number Collection:
    1. Any website form collecting phone numbers must include an optional checkbox allowing users to opt in to SMS communications.
    2. The checkbox must not be pre-checked.
    3. A brief description should be provided next to the checkbox with a direct link to the full Terms & Conditions and Privacy Policy.
  4. Define and Submit Your Message Flow:
    1. Detail how phone numbers are obtained (e.g., website, in-person, SMS, email).
    2. Specify how consent is collected and documented.
    3. Provide sample message templates for opt-in, confirmation, and opt-out processes.

Teklink can guide you through the 10DLC registration process, provide sample forms, and assist with filling out the required details. One of the most critical requirements is detailing to TCR how you collect phone numbers and how you obtain consent for each method. If you use website forms to collect numbers, you must include an optional checkbox for users to opt in to SMS communication, along with a brief description and a link to your full Terms & Conditions and Privacy Policy.

We understand that not every business has the resources to implement these changes quickly, especially those without a website or an in-house developer. Teklink can help by providing guidance on setting up a compliant website, ensuring it is SSL encrypted, and making sure it is registered under the same entity’s domain name. We also offer recommendations on how to set up compliant opt-in forms, social media presence, and alternative consent collection methods. Our goal is to minimize the burden and make this transition as seamless as possible for your business.

  1. Website Form: By signing up for texts, you consent to receive SMS/MMS messages from {{company name}} at the number provided. Consent is not a condition of purchase. Message and data rates may apply. Msg frequency varies. Unsubscribe at any time by replying STOP. Reply HELP for help. I acknowledge that I have read and agree to the SMS Terms and to our Privacy Policy.
  2. Verbal Consent: By providing your mobile phone number to {{company name}}, you consent to receive periodic SMS or MMS messages from us, including updates, promotions, and service-related communications. Standard text message rates may apply. Your phone number will not be shared with third parties for marketing or promotional purposes. You can opt-out at any time by replying STOP or contacting our support team. Our full Terms and Privacy Policy can be found on our website.
  3. Example message flow / ways you get the numbers and their consent:
    Users can get our phone numbers because they are listed on our website, print ads, yard signs, business cards, local papers etc. Users can opt-in to receive messages with the following options: SMS: Opt-ins occur when the user sends the first message. and we send a consent request to the customer, asking if they agree to receive messages, and our initial reply will include the footer ‘Reply STOP to opt-out, msg data rates apply, Message frequency varies, Our T&C's can be found on our website.’ Sending a message from user's mobile device that contains the 'START' keyword. Verbal: While on the phone / or at the location with the user, we ask the user to confirm if they wish to opt in to receive text messages from us and to agree to terms and conditions. If the user agrees, we opt them in. Full verbal consent script can be found below. Email: Users can email us to opt in to our text messages and we send them the terms and conditions to agree, if they agree we opt them in. Form: Users will provide their mobile number and consent filling out a paper form at the location or sending it in. Website: The user fills out a form on our website where they can consent to receive messages.

We know these requirements can be frustrating, but they are in place to ensure compliance and prevent issues like message blocking, penalties, or restrictions. Teklink is here to help make this transition as smooth as possible for your business.

The 10DLC Registration Process

The entire registration process typically takes 7-10 business days; it goes fastest when the business is already following the rules that support a clean and applicable messaging campaign and has the documentation ready for campaign registration. 

Pre-registration checklist 
Get ready! Before you begin the campaign registration process, take time to review and gather the required information to ensure a smooth experience. The pre-registration checklist outlines what is acceptable and what is not. Stay informed and ensure compliance by understanding the policies before submitting your registration. Here are some items to consider when registering your brands and campaigns: 

Registration and Verification 

10DLC registration is done in steps: First the brand must be registered and achieve "Verified" status before proceeding with the campaign registration. Then, during the campaign registration, the information will be vetted by the CNP and the DCA. Finally, approval must be granted by the DCA before proceeding to the last step, which is Number Assignment.