SMS MESSAGING COMPLIANCE

A2P 10DLC Registration 2026: Finserv & Telecom

SIPNEX ·

If your business texts from a standard 10-digit US number without A2P 10DLC registration, your messages are being throttled, filtered, or silently dropped. Every major wireless carrier enforces this. This is not a future requirement. It has been enforced since 2023, and the filtering keeps getting more aggressive. In 2026, unregistered A2P messaging from 10DLC numbers is functionally broken on T-Mobile and increasingly unreliable on AT&T and Verizon.

This guide walks through the complete registration process. SIPNEX is an FCC-licensed carrier that provides SMS and MMS messaging alongside voice. We handle A2P 10DLC registration on behalf of our messaging customers through The Campaign Registry.

This guide also covers 10DLC for finserv — banks, lenders, insurers, and fintechs — and for telecom resellers, the two verticals with the most registration friction.

The four steps at a glance:

  1. Register your brand with TCR
  2. Register your messaging campaigns
  3. Associate phone numbers with campaigns
  4. Launch registered, compliant campaigns

What A2P 10DLC is and why it exists

A2P stands for Application-to-Person — messages sent by a business or application to individual consumers. This is distinct from P2P (Person-to-Person) messaging between individuals. Any platform that sends SMS on a business’s behalf — a CRM, a booking system, a dialer — falls on the A2P side of that line. 10DLC stands for 10-Digit Long Code — a standard phone number like (214) 555-1234, as opposed to short codes (5-6 digits like 12345) or toll-free numbers (800/888/etc.).

Before A2P 10DLC, businesses could send text messages from any phone number without registration or oversight. Carriers could not tell legitimate business messages from spam at the network level. The result was aggressive content filtering that blocked spam and legitimate messages alike. Consumers and businesses both got a degraded messaging experience.

T-Mobile, AT&T, and Verizon established the A2P 10DLC framework through The Campaign Registry (TCR). It creates a structured registration and vetting system. Businesses register their brand and their messaging campaigns. Vetting produces a trust score, and that score sets throughput limits. Registered traffic gets preferential routing and higher delivery rates. Unregistered traffic gets filtered.

Step 1: Register your brand with TCR

The first step is brand registration with The Campaign Registry. Your messaging provider (SIPNEX, Twilio, Telnyx, etc.) submits this on your behalf — you do not interact with TCR directly.

Information required for brand registration:

  • Legal business name (must match your EIN registration)
  • DBA (Doing Business As) name if different
  • EIN (Employer Identification Number) — this is mandatory for standard brand vetting
  • Business address
  • Business website URL
  • Business phone number
  • Business email
  • Business type (corporation, LLC, sole proprietorship, non-profit, government)
  • Vertical/industry (healthcare, financial services, retail, political, etc.)

TCR then vets your brand and scores it. That score sets your messaging throughput limits. Vetting checks your EIN against IRS records and verifies your business address. It also checks your website for legitimacy signals and may query other business databases. The process typically takes 1 to 5 business days.

Trust score tiers. TCR assigns a trust score that determines your messaging throughput (messages per second) and daily message limits. Higher scores get higher throughput. The scoring is not fully transparent. Established businesses with a verifiable EIN, an active website, and a clean history usually get enough throughput. Sole proprietorships and new businesses usually get lower trust scores and less throughput.

Brand registration fee: One-time $4.50 fee (raised from $4 in August 2025) collected by TCR through your messaging provider.

Sole proprietor registration. If you do not have an EIN (sole proprietorship), the registration process is different and more limited. Sole proprietor brands are subject to lower throughput caps and fewer campaign types. If you run a serious messaging operation, incorporate and get an EIN before you register.

Step 2: Register your messaging campaigns

After your brand is registered and vetted, you register individual messaging campaigns. Each campaign represents a specific use case. You might have one campaign for appointment reminders and a separate one for marketing promotions. Most customer engagement programs fall into a handful of standard use-case categories. Picking the right one up front is the biggest factor in fast approval.

Information required per campaign:

  • Use case category (marketing, customer care, delivery notifications, appointment reminders, two-factor authentication, polling/surveys, account notifications, etc.)
  • Campaign description (what you are sending and why)
  • Sample messages (2-5 examples of actual messages you will send)
  • Opt-in method (how consumers consent to receive messages — web form, text keyword, point of sale, etc.)
  • Opt-in keywords (e.g., “JOIN,” “YES,” “START”)
  • Opt-out keywords (must include “STOP” at minimum)
  • Help keywords (must include “HELP” at minimum)
  • Opt-in message (the confirmation sent when someone opts in)
  • Opt-out message (the confirmation sent when someone opts out)
  • Help message (the response sent when someone texts HELP)
  • Message volume estimate (daily and monthly expected volume)
  • Whether messages contain embedded links
  • Whether messages contain phone numbers
  • Age-gated content flag (if applicable)

TCR reviews the campaign registration against carrier policies. Most standard use cases (customer care, appointment reminders, account notifications) are approved quickly — often within 24 hours. Marketing campaigns get extra scrutiny. Campaigns involving cannabis, firearms, alcohol, gambling, or other restricted categories face carrier-specific policies. Some carriers reject them even when the product is legal.

Campaign registration fees: Recurring, billed monthly — typically $10 per month per campaign for standard use cases. Special use cases (like political messaging) run $1.50 to $30 per month, and many providers apply a roughly three-month minimum.

All 10DLC fees at a glance (mid-2026):

FeeAmountBilling
Brand registration (TCR)$4.50 (raised from $4 in August 2025)One-time
Campaign registration — standard~$10 per campaignMonthly
Campaign registration — special use cases$1.50–$30 per campaignMonthly
T-Mobile carrier surcharge$0.0045 per SMS segment / $0.010 per MMSPer message
AT&T carrier surcharge$0.0035 per SMS segment / $0.0090 per MMSPer message
Verizon carrier surcharge$0.0045 per SMS segment / $0.0070 per MMSPer message

Carrier surcharges apply on top of your messaging provider’s per-message rates and are non-negotiable — every provider must collect them.

Step 3: Associate phone numbers with campaigns

Once your campaign is approved, your messaging provider links your 10DLC phone numbers to the campaign in TCR’s system. A phone number can only be linked to one campaign at a time. If you need to send different types of messages (marketing and transactional), you need separate campaigns with separate phone numbers.

After association, the carriers provision throughput for your numbers based on your brand trust score and campaign type. Higher trust scores and transactional use cases usually get more throughput than lower scores and marketing use cases.

Step 4: Start messaging with compliance

With registration complete, your messages route through carrier networks with registered status. That earns higher throughput limits and less filtering. But registration alone does not make you compliant — you must also follow carrier messaging policies and TCPA requirements.

Required compliance elements:

Opt-in: every recipient must have explicitly consented to receive messages from your campaign. Web form opt-ins must include clear disclosure that the consumer will receive text messages. Keyword opt-ins (text JOIN to 12345) must send a confirmation message explaining what they signed up for.

Opt-out: every message must honor STOP requests. When a consumer replies STOP, your system must immediately stop sending to that number and send a confirmation (“You have been unsubscribed. No more messages will be sent.”). Carriers monitor opt-out compliance. Ignore STOP requests and your campaign can be suspended.

Content compliance: do not send messages that violate carrier content policies. Prohibited content includes: illegal products/services, SHAFT content (sex, hate, alcohol, firearms, tobacco) on some carriers, misleading claims, phishing links, and messages that lack clear sender identification. Always include your business name in the message so the recipient knows who is contacting them.

Message frequency: do not exceed your registered throughput limits. If your trust score allows 75 messages per second and you attempt 500, the excess will be queued or dropped. If you keep exceeding limits, carriers may flag your campaign for review.

What happens if you skip registration

The consequences are immediate and measurable.

T-Mobile is the strictest enforcer. Unregistered A2P messages from 10DLC numbers face aggressive filtering. Most unregistered business messages to T-Mobile subscribers are silently dropped. The sender sees no error. The recipient gets nothing. T-Mobile also charges higher surcharges on unregistered traffic (when it is not blocked entirely).

AT&T filters unregistered 10DLC traffic and applies throttling. Delivery rates for unregistered senders are far lower than for registered senders. AT&T also charges higher per-message surcharges on unregistered traffic.

Verizon keeps tightening enforcement. Unregistered senders face filtering and potential blocking, especially for marketing-style content.

The silent nature of the filtering is the worst part. Your messaging system may show a message as “sent” because the carrier’s ingestion point accepted it. But it was never delivered to the recipient. You think your campaign is working. Your customers think you never contacted them. You only discover the problem when you start tracking delivery confirmations and see 40 percent of your T-Mobile messages disappearing.

Toll-free messaging alternative

If you prefer to send messages from toll-free numbers rather than 10DLC numbers, the registration process is different. Toll-free numbers go through a toll-free verification process managed directly by the carriers rather than through TCR.

Toll-free verification is usually simpler than 10DLC registration: you provide business information, describe your use case, and the carrier verifies your identity. Once verified, your toll-free number can send messages at carrier-approved throughput rates.

The tradeoff: toll-free per-message rates are usually slightly higher than 10DLC rates. Consumers may also be less likely to recognize or respond to a toll-free sender than a local number. For some use cases (national brands, customer service notifications), toll-free is appropriate. For local marketing or local business messaging, 10DLC with a local area code usually performs better.

10DLC for finserv and telecom providers

The registration steps are the same for every industry. But two verticals we work with routinely hit questions the generic guides skip.

Do finserv (financial services) companies need 10DLC registration?

10DLC for finserv is the standard A2P 10DLC framework applied to financial services. Banks, lenders, insurers, and fintechs register their brand with The Campaign Registry, register each texting use case as a campaign, and link their numbers before messaging customers.

Yes — registration is required. A financial services company that texts customers from 10-digit local numbers registers like any other business. Brand first, then one campaign per use case, then number association. Transactional campaigns — fraud alerts, account notifications, two-factor authentication — approve quickly. Restricted lending categories face extra carrier scrutiny.

Financial services brands register and vet like any other company. An EIN-verified lender, bank, or insurance agency usually gets a workable trust score. The friction sits at the campaign layer, not the brand layer.

Fintech startups are the exception. A new entity with a short operating history scores low, and a low score means throttled throughput. TCR supports optional external vetting through its approved vetting partners. A successful external vet can raise the trust score and lift the throughput ceiling.

Carriers also draw a hard line inside collections. First-party collection — texting customers about your own receivables — registers under standard use cases. Third-party debt collection, debt relief, and payday lending sit in restricted or prohibited categories. A single carrier can reject those campaigns even though the business itself is legal.

If you operate in a restricted lending category, review each carrier’s messaging code of conduct before writing sample messages. Expect extra vetting on sample messages and opt-in flows.

Here is how common financial services use cases map to campaign types:

Financial services use case10DLC campaign typeApproval friction
Fraud alertsAccount notificationsLow — usually within 24 hours
Two-factor authentication2FALow
Payment reminders (first-party)Customer careLow
Loan or card marketing offersMarketingModerate — extra review
Payday lending, third-party collection, debt reliefSpecial/restrictedHigh — per-carrier rejection risk

Why bank 2FA and fraud-alert texts get blocked

Carriers filter unregistered 10DLC traffic by registration status, not by content. At the network level, a one-time passcode looks the same as a phishing text. Without a registered campaign behind it, the network cannot tell a real fraud alert from a scam that fakes one. So unregistered verification codes get filtered just like marketing spam.

Register authentication traffic under the two-factor authentication or account-notification use case — never under marketing. Transactional campaigns approve fastest and draw the least scrutiny. Misfile that traffic under marketing and you invite review and slow delivery.

Time-sensitive alerts are also why the throughput tier matters here. A fraud alert stuck in a queue behind rate limits is a failed fraud alert. A higher trust score buys the per-second headroom that keeps those messages instant.

Holding companies and multi-entity registration

Each legal entity with its own EIN registers as its own TCR brand. A bank holding company cannot pool its subsidiaries’ traffic under one brand. Every subsidiary that sends messages needs its own brand, its own campaigns, and its own number associations.

This is the same rule carriers apply to telecom resellers, covered in the next section. If your corporate family has several sending entities, plan registration per entity — not per group.

One more boundary: 10DLC registration is carrier policy, not law. Completing it does not satisfy TCPA requirements for consent, GLBA privacy duties, or FINRA and SEC record-keeping rules. Those duties apply on top. A registered sender still needs documented consent, privacy safeguards, and message retention where regulators require it.

10DLC for telecom providers and VoIP resellers

If you are a telecom or VoIP provider whose customers send messages, you cannot register one brand and pool everyone’s traffic under it. Carriers require each business actually sending messages to register as its own brand with its own campaigns. Funneling multiple customers through one registration misrepresents the traffic, and carriers treat it as a violation.

The correct structure: register each end customer as a separate brand — TCR supports this through its provider pathways. Link each customer’s numbers to their own campaigns, and pass the registration fees through. SIPNEX handles this registration workflow for VoIP resellers and platform operators as part of our messaging service.

Frequently asked questions

What is A2P 10DLC?

A2P 10DLC is the registration framework for business text messaging from standard 10-digit phone numbers. A2P stands for Application-to-Person; 10DLC stands for 10-Digit Long Code. T-Mobile, AT&T, and Verizon established the framework through The Campaign Registry (TCR) to separate legitimate business messaging from spam.

Registration has three parts: your brand (business identity), your messaging campaigns (use cases and content), and the phone numbers linked to approved campaigns. Registered traffic receives preferential treatment. Unregistered traffic is filtered or blocked.

How long does A2P 10DLC registration take?

Brand registration and vetting usually takes 1 to 5 business days. Campaign registration review takes 24 hours to several days depending on the use case. Standard transactional campaigns (appointment reminders, account notifications) are usually approved within 24 hours. Marketing campaigns and campaigns involving sensitive categories may take longer. Phone number association is usually immediate once the campaign is approved. Total end-to-end timeline: 3 to 10 business days for most standard use cases. Your messaging provider submits everything on your behalf. You provide the business information and campaign details, and the provider handles the TCR submissions.

How much does A2P 10DLC registration cost?

Brand registration is a one-time $4.50 fee. Campaign registration is a monthly recurring fee, billed through your messaging provider. Standard use cases typically run $10 per month per campaign; special use cases run $1.50 to $30 per month. Each carrier also charges per-message surcharges on registered A2P 10DLC traffic (mid-2026 rates). T-Mobile: $0.0045 per SMS segment and $0.010 per MMS message. AT&T: $0.0035 per SMS and $0.0090 per MMS. Verizon: $0.0045 per SMS and $0.0070 per MMS. These surcharges are on top of your messaging provider’s per-message rates and are non-negotiable — all providers must collect them.

Do I need a separate registration for each phone number?

No. You register brands and campaigns, not individual phone numbers. A single campaign can have multiple phone numbers linked to it. However, each phone number can only be linked to one campaign at a time. If you send different types of messages (marketing promotions and appointment reminders), you need separate campaigns with separate phone numbers. Most businesses need 1 brand registration and 1 to 3 campaign registrations. The phone numbers are then linked to the appropriate campaigns.

What if my A2P 10DLC campaign gets rejected?

Campaign rejections usually happen for one of several reasons. The use case may violate a carrier’s content policy — cannabis, firearms, and certain other categories are restricted on some carriers. The sample messages may contain prohibited content or formatting. Or the opt-in method is inadequate, or the campaign description does not clearly explain the messaging purpose.

Your messaging provider can help you read the rejection reason and resubmit. Common fixes: rewrite flagged sample messages, document the opt-in flow in more detail, and show opt-out compliance clearly. Resubmission is usually possible without extra fees.

Why are a bank’s 2FA text messages blocked or delayed?

Carriers filter unregistered 10DLC traffic no matter what it says. A genuine one-time passcode and a phishing text look identical to the network until a registered campaign stands behind the sender. Banks fix this by registering their brand with The Campaign Registry and filing authentication traffic under a two-factor authentication or account-notification campaign.

Registered transactional campaigns get preferential routing and higher throughput, so verification codes arrive in seconds instead of being silently dropped or queued.

Does 10DLC registration make a financial services company TCPA compliant?

No. 10DLC registration is carrier policy — it governs whether your messages get delivered, not whether you had the legal right to send them. TCPA requirements are federal law and apply separately: prior express consent, written consent for marketing, working opt-outs, and records that prove all three.

GLBA privacy duties and FINRA or SEC record-keeping rules also continue to apply on top of registration for the companies they cover.


SIPNEX handles A2P 10DLC registration as part of our messaging service. We submit your brand and campaign registrations, manage number associations, and provide transparent per-message rates with carrier surcharges itemized separately. Set up business messaging or see our rates.

SIPNEX

The carrier built by operators, for operators.

FCC-licensed carrier with its own STIR/SHAKEN SP certificate. Operator-owned. SIP trunks built for operators who dial at volume.