A2P 10DLC Registration for Insurance Agents

Two separate systems govern your text messages, and conflating them is the source of most confusion in this area.

The TCPA is federal law. Violating it means damages, a plaintiff’s firm, and four years of exposure.

A2P 10DLC is a carrier registration regime, administered through The Campaign Registry on behalf of the US mobile carriers. Violating it means your messages get filtered, throttled, or silently dropped. No lawsuit — just texts that never arrive, and a dashboard that says “delivered.”

You need both. Being TCPA-compliant does not get your messages delivered, and being 10DLC-registered is not a defence to a TCPA claim.

Nothing here is legal advice. This section carries no product links, by policy, enforced by the build.

What 10DLC is and why it exists

“A2P” is application-to-person: messages sent by software rather than typed by a human. “10DLC” is a 10-digit long code — an ordinary phone number, as opposed to a short code or toll-free number.

Before the regime existed, businesses sent A2P traffic over consumer long codes, which were never designed for it. Carriers could not distinguish legitimate business messaging from spam, so they filtered aggressively and opaquely.

10DLC replaced that with registration. You register your business, register what you intend to send, get assigned a trust score and a throughput allowance, and the carriers stop guessing.

The two registrations

Brand registration — your business identity. Legal entity name, EIN, address, and a vetting process that produces a trust score. One-time fee plus a vetting fee, both modest. This is where accuracy matters most: a mismatch between the EIN and the legal name on file is the single most common rejection, and it is entirely avoidable.

Campaign registration — what you send. Use case, sample messages, opt-in flow, opt-out language. A monthly per-campaign fee applies. You register a campaign per distinct use case, not per phone number.

Your trust score determines your throughput — messages per minute to each carrier — and your daily volume caps. A low score means a low ceiling, and the ceiling is enforced silently.

Why insurance is scrutinised

Insurance sits in a category carriers examine more closely, alongside lending and debt relief. The reason is empirical: those verticals generated a disproportionate share of complaint volume before the regime existed.

Practical consequences:

• Vetting is stricter. Sample messages and opt-in flow get read, not skimmed.
• Certain content triggers filtering regardless of registration — see below.
• Content-based filtering happens after registration. Being approved does not immunise individual messages.

What gets filtered even when you are registered

Carrier content filters are not published, and vendors who claim to know the exact rules are guessing. What is well established from operational experience across the industry:

URL shorteners. Public shorteners — bit.ly and equivalents — are heavily filtered because spammers use them to hide destinations. Use a branded domain or the full URL.

Non-standard opt-out language. “Reply STOP to unsubscribe” is expected. Creative variations get flagged.

Messages that read like the categories carriers police. Guaranteed acceptance, no-medical-exam claims, urgency framing, dollar amounts in the first line. These are filtered on content pattern, not on truth — accurate messages get filtered for looking like inaccurate ones.

High volume from a new number. Ramp gradually. A brand-new number sending at your full allowance looks exactly like a spam campaign.

Bad engagement. High opt-out rates and low reply rates feed back into your score. This is the same reinforcement dynamic that governs voice caller-ID reputation, described in why your calls show Spam Likely — and the two systems are separate, so you can be clean on one and burnt on the other.

The failure mode that costs the most is silent. Your platform reports the message as sent; the carrier dropped it. Check delivery receipts, not send confirmations, and compare reply rates across numbers — a number that stopped getting replies has usually stopped getting delivered.

The consent language that survives vetting

Your opt-in flow gets reviewed at campaign registration, and it is also your TCPA evidence. Write it once, correctly, for both purposes.

It should include:

• Explicit consent to receive text messages, distinct from consent to receive calls — these are separate authorisations and a single checkbox covering both is weaker on both
• Your business name, identified
• Message frequency disclosure — “Msg frequency varies” is the accepted form
• ”Msg & data rates may apply”
• Opt-out instructions — “Reply STOP to opt out”
• Help instructions — “Reply HELP for help”
• Links to your terms and privacy policy
• A statement that consent is not a condition of purchase

That last item is a federal requirement for prior express written consent under 47 C.F.R. § 64.1200(f)(9), not a 10DLC one. It belongs in the same block because the same form serves both. Full requirements in do bought leads count as TCPA consent.

Bought leads and texting

This is the part agents most often get wrong.

A lead form that authorises calls does not authorise texts. They are separate consents, and a form that says “we may contact you” without specifying SMS is thin evidence for a text message.

Before texting bought leads, verify three things:

1. The consent language explicitly names text messages or SMS
2. You are identified as an authorised sender, not just “our partners”
3. You hold the record yourself — language, source URL, timestamp, IP — rather than relying on the vendor holding it

If any of the three is missing, you are texting on consent you cannot prove. Washington’s CEMA in particular carries per-violation damages for commercial texts and has been applied aggressively — see state mini-TCPA laws.

Costs

Modest individually, and worth knowing because they are usually invisible until the second invoice.

• Brand registration: one-time, plus a one-time vetting fee
• Campaign: monthly, per campaign
• Per-message carrier fees: charged on top of your platform’s per-message price, and they are pass-through — some vendors mark them up

Ask your platform directly whether carrier fees are passed through at cost. Both practices are common; only one is disclosed by default. Full add-on picture in insurance CRM pricing.

Getting registered without the common rejections

1. Match the EIN to the legal entity name exactly as filed with the IRS. Not your DBA, not the name on your website.
2. Use a business address, consistent with your registration documents.
3. Submit real sample messages you actually intend to send, not placeholders. Placeholders get rejected and reset the clock.
4. Screenshot your opt-in flow and include it. Describing it is weaker than showing it.
5. Match the use case to reality. Registering a marketing campaign as a customer-care one is a fast way to lose the registration later.
6. Ramp volume gradually on new numbers.
7. Monitor delivery receipts weekly, not send confirmations.

Related

Do bought leads count as TCPA consent for the consent record. State mini-TCPA laws for state text-message exposure, which is where the damages are. Calling hours by state — timing rules apply to texts too, and are often overlooked because a text feels less intrusive than a call. TCPA demand letter if one arrives.