Home / Resources / US 10DLC Compliance
US COMPLIANCE HUB

US 10DLC Compliance Guide

Complete guide to Application-to-Person messaging compliance in the United States. Master TCR registration, TCPA requirements, and carrier-specific policies for compliant business SMS.

Registration Timeline
24-48 Hours
Trust Score Range
0-100 Points
Max Throughput
4,500 msg/min
Participating Carriers
All Major US

What is 10DLC?

10DLC (10-Digit Long Code) represents Application-to-Person (A2P) messaging infrastructure requiring business registration with The Campaign Registry before organizations can send SMS messages to US consumers using standard 10-digit phone numbers. US carriers implemented 10DLC registration in 2021 to combat SMS spam, validate legitimate business messaging, and improve consumer protection through sender verification.

Unlike previous toll-free SMS or short code systems, 10DLC enables businesses to send commercial messages using standard local phone numbers after completing brand vetting and campaign approval processes. Registration validates business identity, messaging use cases, and consent mechanisms before carriers enable message delivery.

Why 10DLC Exists

Spam Reduction

Carrier-level sender validation eliminates unregistered spam traffic through mandatory business verification before messaging capability activation.

Consumer Protection

TCPA consent validation requirements ensure businesses obtain proper authorization before sending marketing messages to mobile subscribers.

Throughput Management

Trust score-based messaging limits allocate higher throughput to verified legitimate businesses while restricting suspicious sender activity.

Mandatory Compliance: US carriers block all unregistered Application-to-Person traffic. Organizations sending SMS to US phone numbers must complete 10DLC registration before messaging operations.

The Campaign Registry (TCR)

The Campaign Registry serves as centralized verification authority for Application-to-Person messaging across all participating US carriers. Businesses register brands (company entities) and campaigns (messaging programs) with TCR which then distributes approved registrations to T-Mobile, AT&T, Verizon, and other carrier networks.

How TCR Registration Works

1

Brand Registration

Submit business entity information including legal name, EIN, address, vertical classification, and authorized representative details for identity verification.

2

Trust Score Assignment

TCR calculates brand trust score (0-100) based on business verification signals including DUNS number, domain age, and online review presence.

3

Campaign Creation

Register messaging campaigns specifying use case category, sample messages, opt-in workflow, and consent documentation for carrier approval.

4

Carrier Distribution

Approved brands and campaigns propagate to all participating carrier networks enabling cross-carrier messaging capability.

TCR Fees Structure

Campaign Registry charges registration and monthly maintenance fees:

  • Brand Registration: $4 one-time fee per business entity
  • Campaign Registration: $10-$15 per campaign (varies by use case)
  • Monthly Maintenance: Minimal recurring fees for active campaigns
  • Vetting Services: Optional third-party verification for trust score optimization

Registration Process

Complete 10DLC registration requires brand vetting followed by campaign approval. Organizations access TCR through Communications Service Provider (CSP) platforms including Twilio, Bandwidth, Sinch, or Telnyx.

Required Documentation

Business Verification

  • • Legal business name (matching IRS records)
  • • EIN (Employer Identification Number)
  • • Primary business address
  • • Business vertical/industry classification
  • • Company website URL
  • • Business formation documents

Campaign Information

  • • Use case category selection
  • • Sample message templates
  • • Opt-in workflow documentation
  • • Privacy policy URL
  • • Terms of service URL
  • • HELP/STOP keyword responses

Approval Timeline by Trust Score

Trust Score Range Review Type Timeline Throughput Limit
75-100 (High) Automated 24-48 hours 4,500 msg/min
50-74 (Medium) Manual Review 3-5 business days 600 msg/min
25-49 (Low) Extended Vetting 5-10 business days 60 msg/min
0-24 (Very Low) Likely Rejection Blocked N/A

Trust Score Optimization

Trust scores (0-100) determine campaign approval likelihood and messaging throughput limits. TCR calculates scores using business verification signals validating organizational legitimacy and operational history.

Trust Score Factors

DUNS Number +10-15 points

Dun & Bradstreet business identifier validates company legitimacy through third-party credit verification

Domain Age (6+ months) +5-10 points

Established domain ownership demonstrates operational continuity and reduces new business risk indicators

Online Reviews (4+ stars) +5-10 points

Google Business Profile and industry review platforms validate customer satisfaction and business reputation

Business Documentation +5-10 points

Complete EIN verification, business license, formation documents, and address validation improve verification confidence

Website Quality +5 points

SSL certificate, contact page, privacy policy, and professional design signal legitimate business operations

Trust Score Improvement Strategy

Organizations planning 10DLC deployment should implement trust score optimization 3-6 months before campaign launch. Obtain DUNS number, age business domain, build review presence, and complete business verification documentation before TCR registration.

US Carrier-Specific Policies

While TCR provides centralized registration, individual carriers maintain distinct enforcement policies and content restrictions affecting campaign approval and message delivery.

T-Mobile

Enforces strictest content filtering through SHAFT policy (Sex, Hate, Alcohol, Firearms, Tobacco). Cannabis, cryptocurrency, phishing simulation, and debt collection face enhanced scrutiny.

Review Timeline:

24-48 hours automated, 3-5 days manual

Trust Score Focus:

Domain age, online reviews emphasized

AT&T

Requires affiliate sharing clause in privacy policies (TCR error 7103). Age-gated content (alcohol, vaping) must include age verification documentation.

Review Timeline:

48-72 hours automated, 5-7 days manual

Unique Requirement:

Privacy policy sharing disclosure mandatory

Verizon

Emphasizes EIN verification consistency across all documentation. Debt collection campaigns face FDCPA compliance review and behavioral analysis monitoring.

Review Timeline:

48-96 hours automated, 7-10 days manual

Behavioral Focus:

Post-approval volume pattern monitoring

TCPA Compliance Requirements

Telephone Consumer Protection Act (TCPA) mandates express written consent before sending marketing SMS. 10DLC registration validates consent workflows meeting federal regulatory requirements.

Required Consent Elements

  • Affirmative Action:

    Checkbox must default unchecked requiring deliberate subscriber action to opt-in

  • Clear Disclosure:

    State message frequency, carrier fees, and opt-out method explicitly in consent language

  • Purpose Statement:

    Describe what messages subscriber will receive (promotional, transactional, account notifications)

  • Not Conditioned:

    Consent cannot be required to complete purchase or access services

  • Documentation:

    Retain timestamp, IP address, consent language, and subscriber response for 4+ years

TCPA Penalty Structure: $500 statutory damages per violation, $1,500 per willful violation, with class-action exposure potentially reaching millions in aggregate penalties for systematic violations.

Common Compliance Challenges

Organizations implementing 10DLC frequently encounter registration obstacles requiring targeted remediation strategies.

Low Trust Scores

New businesses without DUNS numbers or established domains receive scores below 50 triggering manual review delays.

Solution: Implement trust score optimization 3-6 months before registration

Campaign Rejections

Invalid opt-in workflows, brand/campaign mismatches, and content policy violations cause repeated rejections.

Solution: Use diagnostic tools to identify violations before submission

Documentation Gaps

Missing privacy policies, incomplete EIN verification, or vague consent language prevent approval.

Solution: Complete brand consistency check before registration

Throughput Limits

Low trust scores restrict messaging to 60 messages per minute creating operational bottlenecks.

Solution: Optimize trust score to achieve 4,500 msg/min tier

MyTCRPlus Compliance Tools

Purpose-built diagnostic and remediation tools designed specifically for 10DLC compliance optimization.

Master US 10DLC Compliance

MyTCRPlus provides complete toolkit for TCR registration, campaign approval, and ongoing compliance monitoring.

Frequently Asked Questions

Essential answers about US 10DLC compliance and TCR registration

What is 10DLC?
10DLC (10-Digit Long Code) is Application-to-Person messaging infrastructure requiring business registration with The Campaign Registry before sending SMS to US consumers. Carriers enforce 10DLC to reduce spam and validate legitimate business messaging through mandatory brand vetting and campaign approval processes.
Is 10DLC registration mandatory?
Yes. US carriers (T-Mobile, AT&T, Verizon) block all unregistered Application-to-Person traffic. Organizations sending SMS to US phone numbers must complete TCR brand and campaign registration before messaging operations. Unregistered traffic faces immediate carrier blocking with potential permanent suspension for repeated violations.
How long does 10DLC registration take?
Brand registration with trust scores above 75 achieves automated approval within 24-48 hours. Scores 50-74 require manual review extending timeline to 3-5 business days. Lower trust scores trigger extended vetting 5-10 days or rejection requiring score improvement before resubmission. Campaign approval adds additional 24-48 hours after brand vetting completion.
What is trust score in 10DLC?
Trust score (0-100) evaluates business legitimacy through verification signals including DUNS number, domain age, online review presence, and business documentation completeness. Higher trust scores enable faster automated approval, increased messaging throughput (up to 4,500 msg/min), and reduced carrier scrutiny. Organizations optimize scores through DUNS registration, domain aging 6+ months, building 4+ star review presence, and completing comprehensive business verification documentation.
Do I need separate registration for each carrier?
No. TCR registration applies across all participating US carriers through centralized distribution system. Single brand and campaign registration with The Campaign Registry enables messaging capability on T-Mobile, AT&T, Verizon, and other participating carrier networks. However, individual carriers maintain distinct content policies and enforcement standards requiring compliance with strictest applicable requirements.

Disclaimer: This content provides general information about US 10DLC compliance and does not constitute legal advice. Compliance requirements vary based on business model, messaging use cases, and carrier enforcement policies. Organizations should consult qualified legal counsel for guidance specific to their SMS programs. MyTCRPlus does not provide legal advisory services or guarantee specific carrier approval outcomes. TCR registration requirements and carrier policies subject to change.

View Tools