Toll-free / 10DLC registration requirements

This guide will help you successfully navigate Twilio's A2P 10DLC or Toll-Free messaging registration process by ensuring you meet all compliance requirements before submission.

To ensure successful approval of your SMS campaigns under Twilio’s A2P 10DLC or Toll-Free messaging systems, it’s essential to meet specific compliance requirements. This guide outlines key standards—especially around opt-in forms and privacy policies—to help you get approved faster and avoid rejections.

📘

Registering or migrating a short code?

Please contact [email protected] for assistance with short codes or alpha numeric numbers.


1. Compliant opt-in form requirements

Your "opt-in form" specifically refers to how you collect phone numbers from your users. Before submitting your registration, ensure your opt-in form meets the following standards:

  1. Unchecked Opt-In Checkbox
    1. Must be manually checked by users (off by default)
  2. Clear Opt-Out Instructions
    1. Be explicit with your opt-out keywords like: "Reply STOP to unsubscribe."
  3. Visible Privacy Policy & Terms Links
    1. These links must be directly accessible from the form
  4. Cost Disclosure
    1. Example: "Message & data rates may apply."
  5. Message Frequency Disclosure
    1. Be specific if known (e.g., “1 msg/week”) or use: "Message frequency varies."
  6. Purpose of Messages (Use Case Disclosure)
    1. Explain what the messages are for. Example standard use cases:
      • 2FA (Two-Factor Authentication): One-time passwords or login codes
      • Account Notifications: Password changes, account alerts, etc.
      • Customer Care: Support conversations via SMS
      • Delivery Notifications: Shipping and order updates
      • Fraud Alerts: Suspicious activity alerts
      • Higher Education: Messaging for students, staff, faculty
      • Marketing: Promotions and special offers (requires explicit opt-in)
      • Polling and Voting: Non-political surveys or votes
      • Public Service Announcements: Community or emergency updates
      • Security Alerts: Breach or issue notifications

Example opt-in consent language

[ ] I agree to receive [TYPE OF MESSAGES] from [COMPANY NAME].
Message frequency varies. Message & data rates may apply.
Reply STOP to unsubscribe. View our Privacy Policy and Terms of Service.


Example of a proper opt-in form for web.

Example of a proper opt-in form for web.

Notes on submissions

  • If your opt-in form isn't live or ready yet, you may submit a screenshot or mockup as a placeholder.
  • If the opt-in occurs behind a login or isn’t public, include screenshots to demonstrate the experience.
  • Opt-in must not be bundled with other terms. Example: You can not say: “By accepting our Terms of Use, you also agree to receive Email updates.” SMS opt-in must be explicit and separate.

💡

Check your opt-in form with AI

Try this prompt in ChatGPT or your AI tool:

“Does my opt-in form meet 10DLC requirements?”

Include a screenshot or link to your form.


2. Privacy policy requirements

Your Privacy Policy must be easy to find and contain explicit statements clearly explaining how mobile numbers are used and who they are shared with.

Required Clauses:

  • How Data is Used

    • Describe how mobile numbers are used to send SMS alerts
  • Data Sharing Transparency

    • Must clearly state that phone numbers are not shared with third parties for marketing.
    • Sharing with affiliates/subcontractors for support services is permissible.
  • Opt-Out Instructions

    • Explain how users can stop receiving messages.
    • Example: “You may opt out of receiving text messages from us at any time by replying STOP.”
  • Visibility

    • Link to your Privacy Policy directly from the opt-in form.

Example Privacy Policy Statement:

“Your mobile number will only be used for [specific purpose]. We do not share numbers with third parties for marketing or lead generation. We may share with affiliates or vendors for service-related purposes.”

💡

Check your Privacy Policy with AI

Try this prompt in ChatGPT or your AI tool:

“Review the following privacy policy and provide actionable suggestions on how to make it 10DLC or toll-free compliant.”

Include a link or copy-paste the content.


3. Prohibited use cases (Will be rejected automatically)

Avoid these restricted content categories, which are never approved:

High-Risk Financial

  • Payday loans, short-term/high-interest loans
  • Auto loans with high APR
  • Third-party loan matchmakers

Debt & Credit

  • Credit repair or “get out of debt” offers
  • Debt relief or forgiveness

Regulated Products

  • Cannabis, CBD, Rx drugs (regardless of state legality)
  • Casinos, gambling, betting, sweepstakes, lotteries with cash prizes

Deceptive Offers

  • “Get rich quick” schemes
  • Work-from-home scams
  • High-yield investment pitches

Sensitive or Regulated Content

  • Adult or sexually explicit content
  • Hate speech, violence
  • Alcohol (without age gate)
  • Firearms or weapons

Spam or Lead Generation

  • Cold outreach
  • Messaging users who didn’t opt in
  • Selling or buying user lists

Final checklist before submitting

  • Opt-in form meets all checkbox, disclosure, and link requirements
  • Privacy Policy clearly outlines use, sharing, and opt-out
  • No restricted content or use cases are involved

💡

Double-check your opt-in form and Privacy Policy with AI

If you haven't already, open ChatGPT and try this prompt:

"Review my opt-in form and privacy policy. Provide actionable suggestions on how to make it 10DLC or toll-free compliant."

Provide screenshots, links, or copy-paste your text into the AI tool to review.

👍

Done!

Submit your information to us via our 10DLC or Toll-free forms and contact your Account Manager for next steps.


General Disclaimer: The content on this page is for informational purposes only and does not constitute legal advice. We recommend consulting with a legal professional to ensure full compliance with all applicable regulations.