FCC Marketing Rules in 2026: What's Actually Enforceable

Most articles about FCC marketing rules are written for lawyers or for companies selling SMS registration services — neither is motivated to answer what you actually need: what the FCC regulates, what changed recently, and what to do now. Here's the direct version.

What the FCC Actually Regulates in Your Marketing (and What It Doesn't)

The FCC's authority over marketing communications comes from one law: the Telephone Consumer Protection Act (TCPA). That statute — and the FCC's rules implementing it — covers phone calls and text messages, not email. Email marketing falls under the FTC's CAN-SPAM Act, a separate law with its own consent and unsubscribe requirements.

This split matters because many SMB owners assume "marketing compliance" is one unified rulebook. It isn't. Texting appointment reminders or promotional SMS blasts puts you in TCPA/FCC territory — prior consent, do-not-call rules, opt-out handling. Sending a newsletter puts you in CAN-SPAM/FTC territory — accurate sender info, a working unsubscribe link, honoring opt-outs within 10 business days. Applying FCC texting rules to email, or vice versa, is how well-meaning businesses over-comply in one channel while staying exposed in the other. For the email side, see this unsubscribe footer compliance checklist.

The Current Status of FCC Rules in 2026 (What's Actually Enforceable)

This is where outdated blog posts get businesses in trouble, since the FCC's rulemaking on texting consent has reversed course more than once since 2023. Here's where things stand:

The one-to-one consent rule is not in effect. The FCC had planned to require that consent to receive marketing calls or texts be given to one specific seller at a time, rather than shared across a list of "partners." The Eleventh Circuit vacated that rule, ruling the FCC exceeded its statutory authority, and the FCC subsequently issued a final rule formally eliminating the one-to-one consent requirement, reinstating the pre-2024 consent standard. Content claiming this rule is currently required is outdated.

Consent revocation via "any reasonable method" has been enforceable since April 2025. Consumers can revoke consent through any reasonable method — replying "STOP," calling your business line, or telling a representative directly. You can't force one specific opt-out channel or ignore a clear revocation because it arrived a different way.

The "revoke-all" provision is delayed until January 2027. This provision would let a single revocation cover all campaigns from a sender rather than just one; it isn't enforceable yet, though businesses should still build toward it.

Texts are treated as calls under the Do-Not-Call framework. If a number is on the national Do-Not-Call Registry or your own internal list, that restriction applies to promotional texts the same way it applies to phone calls. For a deeper breakdown of what's currently enforceable versus delayed, see IDT Express's 2026 TCPA compliance guide.

A Practical FCC/TCPA Compliance Checklist for SMBs

Strip away the legal commentary and compliance comes down to a short list of habits:

• Get and document prior express written consent before sending marketing texts or calls, especially anything using an autodialer or prerecorded message. Keep a timestamped record of how and when consent was given.
• Maintain an internal do-not-call/opt-out list separate from, but synced with, the national registry. Check new contacts against it before sending.
• Honor opt-outs from any channel immediately, not just "STOP" replies. A phone call, email, or verbal request all count under the reasonable-method standard.
• Never share consent across unrelated sellers or partners. Even with the one-to-one rule vacated, consent should still be tied to the specific business a contact opted in with.
• Register your SMS campaigns for carrier delivery through the appropriate registry so messages aren't filtered or blocked — a carrier requirement, not an FCC one, but part of running a legitimate texting program.

Building a clean, well-documented recipient list from the start makes this easier. This step-by-step framework for defining recipients is a good starting point if your contact lists were never built with consent tracking in mind.

What Non-Compliance Actually Costs

TCPA violations carry statutory damages of $500 per violation, rising to $1,500 per violation if a court finds the violation willful or knowing. "Per violation" typically means per message or call — a single bad campaign sent to a few thousand people on a do-not-call list can generate liability far beyond what most SMBs assume. TCPA litigation has also grown steadily, driven by class actions and plaintiff's firms actively monitoring business texting practices. The fix is almost entirely a matter of process, not legal spend.

Why Scattered Tools Make FCC Compliance Harder

Most compliance failures aren't intentional — they're a records problem. A business running a separate SMS platform, CRM, and email tool ends up with three different places someone could opt out, with no guarantee those systems talk to each other. A contact texts "STOP" to your SMS platform, but your CRM still shows them as active, so a sales rep calls them next week. That's a TCPA violation caused entirely by tool fragmentation, not bad intent.

Consent management works best as a single record per contact, visible across every channel you use to reach them. That's the core argument for marketing tool consolidation: an all-in-one platform can sync an opt-out the moment it happens — by text, call, or email — so nobody downstream acts on stale data. The cost comparison isn't just about your monthly software bill; it's about legal exposure from data drifting between disconnected systems. This breakdown of point solutions versus all-in-one platforms walks through both sides of that math, and this guide to choosing an all-in-one marketing platform is useful if you're evaluating a consolidation move.

Frequently Asked Questions

Does the FCC regulate email marketing, or just phone calls and texts?

The FCC only regulates phone calls and text messages, through its TCPA authority. Email marketing is regulated separately by the FTC under CAN-SPAM, which has different consent and unsubscribe requirements.

Is the FCC's one-to-one consent rule actually in effect right now?

No. The Eleventh Circuit vacated the rule for exceeding the FCC's statutory authority, and the FCC formally eliminated it, reinstating the prior consent standard. Content claiming this rule is currently required is out of date.

What's the difference between the FCC's TCPA rules and the FTC's CAN-SPAM Act?

The TCPA, enforced through FCC rules, governs calls and texts and generally requires prior express consent before marketing outreach. CAN-SPAM, enforced by the FTC, governs email and focuses on accurate sender information and honoring unsubscribe requests within 10 business days.

How much can a business be fined for violating FCC text marketing rules?

Statutory damages run $500 per violation, rising to $1,500 if the violation is found willful or knowing. Because damages are typically calculated per message or call, a single non-compliant campaign to a large list can create substantial liability.

What counts as a "reasonable method" for someone to opt out of my texts?

Any clear method a consumer uses to request that texts stop — not just a "STOP" reply — counts as revocation, including phone calls, emails, or a verbal request to staff. This standard has been enforceable since April 2025.

Do I need to register my SMS campaigns somewhere before sending them?

Carrier campaign registration isn't an FCC requirement, but it's necessary for reliable message delivery and is standard practice for legitimate texting programs. Skipping it risks having your messages filtered or blocked, separate from any TCPA consent obligations.

FCC and TCPA compliance is ultimately a consent-and-records problem, and that problem compounds with every disconnected tool in your stack. A separate SMS platform, a separate CRM, and a separate email tool means three different opt-out lists that can silently drift out of sync. Evra keeps one consent record per contact synced across email, SMS, and CRM, so an opt-out in one channel is respected everywhere else automatically.