SMS MESSAGING COMPLIANCE

A2P 10DLC Registration, Step by Step

SIPNEX ·

If your business texts from a standard 10-digit US number without A2P 10DLC registration, your messages are most likely not arriving. Unregistered A2P traffic from 10DLC numbers is now blocked, not just filtered. Messaging providers stopped carrying it (Twilio, for one, has blocked unregistered 10DLC messages to US numbers since September 1, 2023), and carriers filter or block unregistered A2P traffic that still reaches them.

This guide walks through the complete registration process. SIPNEX is an FCC-licensed carrier that provides SMS and MMS messaging alongside voice. We handle A2P 10DLC registration on behalf of our messaging customers through The Campaign Registry.

This guide also covers financial services senders — banks, lenders, insurers, and fintechs — and telecom resellers, two groups that hit more registration friction than most.

The four steps at a glance:

  1. Register your brand with TCR
  2. Register your messaging campaigns
  3. Associate phone numbers with campaigns
  4. Launch registered, compliant campaigns

What A2P 10DLC is and why it exists

A2P stands for Application-to-Person — messages sent by a business or application to individual consumers. This is distinct from P2P (Person-to-Person) messaging between individuals. Any platform that sends SMS on a business’s behalf — a CRM, a booking system, a dialer — falls on the A2P side of that line. 10DLC stands for 10-Digit Long Code — a standard phone number like (214) 555-1234, as opposed to short codes (5-6 digits like 12345) or toll-free numbers (800/888/etc.).

Before A2P 10DLC, businesses could send text messages from any phone number without registration or oversight. Carriers could not tell legitimate business messages from spam at the network level. The result was aggressive content filtering that blocked spam and legitimate messages alike. Consumers and businesses both got a degraded messaging experience.

T-Mobile, AT&T, and Verizon established the A2P 10DLC framework through The Campaign Registry (TCR). It creates a structured registration and vetting system. Businesses register their brand and their messaging campaigns. Vetting produces a trust score, and that score sets throughput limits. Registered traffic gets preferential routing and higher delivery rates. Unregistered traffic gets blocked.

Step 1: Register your brand with TCR

The first step is brand registration with The Campaign Registry. Your messaging provider (SIPNEX, Twilio, Telnyx, etc.) submits this on your behalf — you do not interact with TCR directly.

Information required for brand registration:

  • Legal business name (must match your EIN registration)
  • DBA (Doing Business As) name if different
  • EIN (Employer Identification Number) — this is mandatory for standard brand vetting
  • Business address
  • Business website URL
  • Business phone number
  • Business email
  • Business type (corporation, LLC, sole proprietorship, non-profit, government)
  • Vertical/industry (healthcare, financial services, retail, political, etc.)

TCR then vets your brand and scores it. That score sets your messaging throughput limits. Vetting checks your EIN against IRS records and verifies your business address. It also checks your website for legitimacy signals and may query other business databases. The process typically takes 1 to 5 business days.

Trust score tiers. TCR assigns a trust score that determines your messaging throughput (messages per second) and daily message limits. Higher scores get higher throughput. The scoring is not fully transparent. Established businesses with a verifiable EIN, an active website, and a clean history usually get enough throughput. Sole proprietorships and new businesses usually get lower trust scores and less throughput.

Brand registration fee: One-time $4.50 fee (raised from $4 on August 1, 2025) collected by TCR through your messaging provider. Optional third-party brand vetting, which can raise your trust score, is a separate charge ($41.50 for standard vetting).

Sole proprietor registration. If you do not have an EIN (sole proprietorship), the registration process is different and more limited. Sole proprietor brands are subject to lower throughput caps and fewer campaign types. If you run a serious messaging operation, incorporate and get an EIN before you register.

Step 2: Register your messaging campaigns

After your brand is registered and vetted, you register individual messaging campaigns. Each campaign represents a specific use case. You might have one campaign for appointment reminders and a separate one for marketing promotions. Most customer engagement programs fall into a handful of standard use-case categories. Picking the right one up front speeds approval.

Information required per campaign:

  • Use case category (marketing, customer care, delivery notifications, appointment reminders, two-factor authentication, polling/surveys, account notifications, etc.)
  • Campaign description (what you are sending and why)
  • Sample messages (2-5 examples of actual messages you will send)
  • Opt-in method (how consumers consent to receive messages — web form, text keyword, point of sale, etc.)
  • Opt-in keywords (e.g., “JOIN,” “YES,” “START”)
  • Opt-out keywords (must include “STOP” at minimum)
  • Help keywords (must include “HELP” at minimum)
  • Opt-in message (the confirmation sent when someone opts in)
  • Opt-out message (the confirmation sent when someone opts out)
  • Help message (the response sent when someone texts HELP)
  • Message volume estimate (daily and monthly expected volume)
  • Whether messages contain embedded links
  • Whether messages contain phone numbers
  • Age-gated content flag (if applicable)

The campaign is then reviewed against carrier policies. Most standard use cases (customer care, appointment reminders, account notifications) are approved quickly — often within 24 hours. Marketing campaigns get extra scrutiny. Campaigns involving cannabis, firearms, alcohol, gambling, or other restricted categories face carrier-specific policies. Some carriers reject them even when the product is legal.

Campaign fees: Two charges apply. A $15 campaign vetting fee is charged per submission, and many providers charge it again on every resubmission after a rejection. The campaign itself then bills monthly: $10 per month for most use cases, with a few use cases priced differently, from $1.50 (low-volume mixed) to $30 (agents and franchises). Campaigns carry a three-month minimum, then renew monthly.

10DLC fees at a glance (as of September 2026):

FeeAmountBilling
Brand registration (TCR)$4.50 (raised from $4 on August 1, 2025)One-time per brand
Brand vetting, standard (optional)$41.50Per vetting
Campaign vetting$15Per submission, including resubmissions at many providers
Campaign registration — most use cases$10 per campaignMonthly, three-month minimum
Campaign registration — other use cases (low-volume mixed, special)$1.50–$30 per campaignMonthly, three-month minimum
Carrier surchargesSet by each carrier, per SMS segment and per MMSPer message

Carrier surcharges apply on top of your messaging provider’s per-message rates, and every provider passes them through. The carriers do not publish them directly and revise them periodically (T-Mobile and AT&T both did in early 2026), so ask your provider for its current, dated surcharge sheet rather than relying on a figure from an article.

Step 3: Associate phone numbers with campaigns

Once your campaign is approved, your messaging provider links your 10DLC phone numbers to the campaign in TCR’s system. A phone number can only be linked to one campaign at a time. If you need to send different types of messages (marketing and transactional), you need separate campaigns with separate phone numbers.

After association, the carriers provision throughput for your numbers based on your brand trust score and campaign type. Higher trust scores and transactional use cases usually get more throughput than lower scores and marketing use cases.

Step 4: Start messaging with compliance

With registration complete, your messages route through carrier networks with registered status. That earns higher throughput limits and less filtering. But registration alone does not make you compliant — you must also follow carrier messaging policies and TCPA requirements.

Required compliance elements:

The opt-in and opt-out rules below, like the HELP keyword and response listed in Step 2, follow the CTIA Messaging Principles and Best Practices (May 2023), the industry guidelines carriers apply to A2P traffic. TCR’s campaign form asks for each of them.

Opt-in: every recipient must have explicitly consented to receive messages from your campaign. Web form opt-ins must include clear disclosure that the consumer will receive text messages. Keyword opt-ins (text JOIN to 12345) must send a confirmation message explaining what they signed up for.

Opt-out: every message must honor STOP requests. When a consumer replies STOP, your system must immediately stop sending to that number and send a confirmation (“You have been unsubscribed. No more messages will be sent.”). Carriers monitor opt-out compliance. Ignore STOP requests and your campaign can be suspended.

Content compliance: do not send messages that violate carrier content policies. Prohibited content includes: illegal products/services, SHAFT content (sex, hate, alcohol, firearms, tobacco) on some carriers, misleading claims, phishing links, and messages that lack clear sender identification. Always include your business name in the message so the recipient knows who is contacting them.

Message frequency: do not exceed your registered throughput limits. If your trust score allows 75 messages per second and you attempt 500, the excess will be queued or dropped. If you keep exceeding limits, carriers may flag your campaign for review.

What happens if you skip registration

The consequences are immediate.

Unregistered A2P traffic from 10DLC numbers is now blocked, not surcharged: providers stopped accepting it, as noted at the top of this guide, and the carriers filter or block unregistered A2P traffic that still reaches them. The older model, in which unregistered senders paid higher surcharges and lived with heavy filtering, no longer applies.

Blocking is not always reported back clearly. Depending on the platform, a filtered message can show as “sent” because the upstream network accepted it, even though it never reached the handset. You think your campaign is working. Your customers think you never contacted them. Track delivery receipts per carrier; that is where the problem shows up.

Toll-free messaging alternative

If you prefer to send messages from toll-free numbers rather than 10DLC numbers, the registration process is different. Toll-free numbers go through a separate toll-free verification process, submitted through your messaging provider, rather than through TCR.

Toll-free verification is usually simpler than 10DLC registration: you provide business information and describe your use case, and the submission is reviewed before the number can send. Once verified, your toll-free number can send messages at carrier-approved throughput rates.

The tradeoff: toll-free per-message rates are usually slightly higher than 10DLC rates. Consumers may also be less likely to recognize or respond to a toll-free sender than a local number. For some use cases (national brands, customer service notifications), toll-free is appropriate. For local marketing or local business messaging, 10DLC with a local area code usually performs better.

10DLC for financial services and telecom providers

The registration steps are the same for every industry, but financial services and telecom senders hit questions the generic guides skip.

Do financial services companies need 10DLC registration?

Yes — registration is required. A financial services company that texts customers from 10-digit local numbers registers like any other business. Brand first, then one campaign per use case, then number association. Transactional campaigns — fraud alerts, account notifications, two-factor authentication — approve quickly. Restricted lending categories face extra carrier scrutiny.

Financial services brands register and vet like any other company. An EIN-verified lender, bank, or insurance agency usually gets a workable trust score. The friction sits at the campaign layer, not the brand layer.

Fintech startups are the exception. A new entity with a short operating history scores low, and a low score means throttled throughput. TCR supports optional external vetting through its approved vetting partners. A successful external vet can raise the trust score and lift the throughput ceiling.

Carriers also draw a hard line inside collections. First-party collection — texting customers about your own receivables — registers under standard use cases. Third-party debt collection, debt relief, and payday lending sit in restricted or prohibited categories. A single carrier can reject those campaigns even though the business itself is legal.

If you operate in a restricted lending category, review each carrier’s messaging code of conduct before writing sample messages. Expect extra vetting on sample messages and opt-in flows.

Here is how common financial services use cases map to campaign types:

Financial services use case10DLC campaign typeApproval friction
Fraud alertsAccount notificationsLow — usually within 24 hours
Two-factor authentication2FALow
Payment reminders (first-party)Customer careLow
Loan or card marketing offersMarketingModerate — extra review
Payday lending, third-party collection, debt reliefSpecial/restrictedHigh — per-carrier rejection risk

Why bank 2FA and fraud-alert texts get blocked

Carriers block unregistered 10DLC traffic whatever it says. At the network level, a one-time passcode looks the same as a phishing text. Without a registered campaign behind it, the network cannot tell a real fraud alert from a scam that fakes one. So unregistered verification codes get filtered just like marketing spam.

Register authentication traffic under the two-factor authentication or account-notification use case — never under marketing. Transactional campaigns approve fastest and draw the least scrutiny. Misfile that traffic under marketing and you invite review and slow delivery.

Time-sensitive alerts are also why the throughput tier matters here. A fraud alert stuck in a queue behind rate limits is a failed fraud alert. A higher trust score buys the per-second headroom that keeps those messages instant.

Holding companies and multi-entity registration

Each legal entity with its own EIN registers as its own TCR brand. A bank holding company cannot pool its subsidiaries’ traffic under one brand. Every subsidiary that sends messages needs its own brand, its own campaigns, and its own number associations.

This is the same rule carriers apply to telecom resellers, covered in the next section. If your corporate family has several sending entities, plan registration per entity — not per group.

One more boundary: 10DLC registration is carrier policy, not law. Completing it does not satisfy TCPA requirements for consent, GLBA privacy duties, or FINRA and SEC record-keeping rules. Those duties apply on top. A registered sender still needs documented consent, privacy safeguards, and message retention where regulators require it.

10DLC for telecom providers and VoIP resellers

If you are a telecom or VoIP provider whose customers send messages, you cannot register one brand and pool everyone’s traffic under it. Carriers require each business actually sending messages to register as its own brand with its own campaigns. Funneling multiple customers through one registration misrepresents the traffic, and carriers treat it as a violation.

The correct structure: register each end customer as a separate brand — TCR supports this through its provider pathways. Link each customer’s numbers to their own campaigns, and pass the registration fees through. SIPNEX handles this registration workflow for VoIP resellers and platform operators as part of our messaging service.

Frequently asked questions

How long does A2P 10DLC registration take?

Brand registration and vetting usually takes 1 to 5 business days. Campaign registration review takes 24 hours to several days depending on the use case. Standard transactional campaigns (appointment reminders, account notifications) are usually approved within 24 hours. Marketing campaigns and campaigns involving sensitive categories may take longer. Phone number association is usually immediate once the campaign is approved. Total end-to-end timeline: 3 to 10 business days for most standard use cases. Your messaging provider submits everything on your behalf. You provide the business information and campaign details, and the provider handles the TCR submissions.

How much does A2P 10DLC registration cost?

Brand registration is a one-time $4.50 TCR fee. Each campaign submission carries a $15 vetting fee, which many providers charge again on resubmission. Campaigns then bill monthly with a three-month minimum: $10 per month for most use cases, and $1.50 to $30 for a handful of other use cases. Optional standard brand vetting, which can raise your trust score, costs $41.50. On top of that, each carrier adds a per-message surcharge on SMS segments and MMS. Carriers revise those periodically, so check your provider’s current surcharge sheet.

Do I need a separate registration for each phone number?

No. You register brands and campaigns, not individual phone numbers. A single campaign can have multiple phone numbers linked to it. However, each phone number can only be linked to one campaign at a time. If you send different types of messages (marketing promotions and appointment reminders), you need separate campaigns with separate phone numbers. Most businesses need 1 brand registration and 1 to 3 campaign registrations. The phone numbers are then linked to the appropriate campaigns.

What if my A2P 10DLC campaign gets rejected?

Campaign rejections usually happen for one of several reasons. The use case may violate a carrier’s content policy — cannabis, firearms, and certain other categories are restricted on some carriers. The sample messages may contain prohibited content or formatting. Or the opt-in method is inadequate, or the campaign description does not clearly explain the messaging purpose.

Your messaging provider can help you read the rejection reason and resubmit. Common fixes: rewrite flagged sample messages, document the opt-in flow in more detail, and show opt-out compliance clearly. Resubmitting is usually possible, but many providers charge the $15 campaign vetting fee again on each resubmission.

Does 10DLC registration make a financial services company TCPA compliant?

No. 10DLC registration is carrier policy — it governs whether your messages get delivered, not whether you had the legal right to send them. TCPA requirements are federal law and apply separately: prior express consent, written consent for marketing, working opt-outs, and records that prove all three.

GLBA privacy duties and FINRA or SEC record-keeping rules also continue to apply on top of registration for the companies they cover.


SIPNEX handles A2P 10DLC registration as part of its messaging service: brand and campaign submissions, number associations, and per-message rates with carrier surcharges itemized separately.

SIPNEX

The carrier built by operators, for operators.

FCC-licensed carrier with its own STIR/SHAKEN SP certificate. Operator-owned. SIP trunks built for operators who dial at volume.