What are the rules for texting and emailing website leads?

The short version

• A personal reply to someone’s own request is the lowest-risk message. Keep it about their request. Automated texts, even about the request, can still need consent and carrier registration.
• For automated follow-up and marketing texts, get clear permission on the form, in its own unticked box.
• Honor STOP, and any other plain “please stop,” quickly and everywhere.
• Business texting from a local US number needs A2P 10DLC registration with the carriers.
• Marketing emails need accurate sender details, an honest subject, a postal address and an unsubscribe link.

This isn’t legal advice. Texting law in the US comes from federal rules, carrier rules and some state laws, and they change. If texting is central to your business, ask a lawyer to check your wording.

How do I set up texting follow-up properly?

Step 1: Ask for permission on the form

If you plan to text leads automatically, ask on the form, in plain words, with a checkbox that isn’t ticked in advance. For example: “Yes, you can text me about my request. Message and data rates may apply. Reply STOP to opt out.” That’s sample wording; have it checked for your business.

Keep the box optional. Someone who doesn’t tick it can still be phoned or emailed about their request.

Step 2: Register your texting number

Mobile carriers now verify businesses that text from ordinary local numbers. HighLevel’s help page on A2P 10DLC calls it “the carrier registration framework used for business SMS and MMS messages sent to U.S. recipients.” It says registration “is required when a business sends SMS or MMS messages to U.S. recipients” from standard 10-digit numbers, including appointment reminders and customer-care messages, not only marketing.

Registration has two parts:

• Brand: who is sending. Standard brands need a business registration number such as an EIN.
• Campaign: what you send, why, and how people gave consent.

In HighLevel it starts at Settings, Phone System, Trust Center. Other texting tools have their own version of the same process. Toll-free numbers use a separate verification.

Step 3: Make stopping easy

Every automated text should make it clear how to stop. Treat “STOP,” and plain requests like “please don’t text me,” as an opt-out. The safest habit is to stop all texts from your business to that person, not just one campaign.

The FCC has made this stricter. Its consent revocation rules took effect on April 11, 2025, according to the Federal Register notice, which says they “make it simpler for consumers to revoke consent” and require businesses to honor those requests promptly. One part was delayed: the rule that an opt-out in reply to one kind of message must stop all your automated calls and texts on unrelated topics too. An FCC order of January 6, 2026 (DA 26-12) pushed that part to January 31, 2027. Stopping everything after any opt-out, as in Step 3, is the cautious habit now, even though that part isn’t yet in force. Check current guidance if texting is a big part of your marketing.

Step 4: Keep a record

Your CRM or form plugin should keep the date, the page and the consent wording for each lead. If anyone questions a text later, that record is your evidence. Saved form entries help here; see saving form entries.

What are the email rules?

The FTC’s CAN-SPAM compliance guide covers commercial email. For a marketing email, it requires:

1. Accurate “From,” “To” and “Reply-To” details that identify your business.
2. A subject line that matches the content.
3. A clear statement that the message is an ad, where it is one.
4. Your valid physical postal address.
5. A clear way to opt out, working for at least 30 days after you send.
6. Opt-outs honored within 10 business days.
7. Responsibility for anyone sending on your behalf, including an email service.

The guide says messages whose main purpose is transactional or relationship content, such as replying to a customer’s request, are exempt from most of these rules. They still can’t contain false or misleading routing information. Once a follow-up email starts promoting offers, treat it as marketing. The FTC’s guide says each separate email in violation can bring penalties of up to $53,088, a figure it updates for inflation.

Why do these rules matter?

Text follow-up works because people read texts. That’s also why carriers filter and block business texting that isn’t registered or that people report as spam. A blocked number means your genuine replies don’t arrive either. Getting consent, registering and honoring opt-outs keeps the channel open.

What are the common mistakes and edge cases?

• A pre-ticked consent box. Consent should be a choice the person makes.
• Burying consent in the privacy policy. Say it on the form, next to the box.
• Texting from a personal cell phone at volume. Fine for a quick reply, but automated sequences need a registered business number.
• Ignoring “no thanks.” Not every opt-out says STOP.
• Moving leads into a newsletter without asking. A quote request isn’t a newsletter sign-up. See building an email list with real consent.
• Forgetting other countries. If you get leads from Canada, the UK or the EU, their rules differ. Our privacy and cookies guide covers the data side.
• No mention in your privacy policy. Say you may text or email about requests, and how to stop it. See what a privacy policy should cover.

What if texts aren’t being delivered?

Check your registration status first. An unregistered or rejected brand or campaign is the usual cause. Then check that the number is linked to the approved campaign, and that your messages match what you registered. Messages full of links or shortened URLs are more likely to be filtered.

How much does it cost, and how long does it take?

Registration involves fees from the carriers and the texting provider, and approval can take days or weeks. Adding a consent checkbox takes a few minutes. Writing opt-out handling into an automation takes longer, depending on the tool.

How does E-3 handle this?

Our leads and follow-up service uses HighLevel for missed-call text-back and lead follow-up. Carrier registration is part of setting up business texting. Read the wording of every automatic text and email yourself before it’s switched on. We don’t give legal advice, so for consent wording that matters to your business, we’ll suggest you check it with your lawyer.

Related questions

• What is missed-call text-back?
• How do I send form leads into a CRM?
• How fast should I reply to a new lead?
• Do US state privacy laws apply to my small business?
• Back to the complete guide to forms and lead follow-up

Sources

1. CAN-SPAM Act: A Compliance Guide for Business (FTC)
2. Strengthening the Ability of Consumers To Stop Robocalls: effective date notice (Federal Register, October 11, 2024)
3. Order extending the waiver of section 64.1200(a)(10), DA 26-12 (FCC, January 6, 2026)
4. What is A2P 10DLC: brand and campaign registration (HighLevel Help)