Short code vs 10DLC for outbound sales SMS compliance

Last updated 2026-07-10

What is 10DLC and how does it differ from a short code?

10DLC stands for 10-digit long code. It is a standard 10-digit U.S. phone number (area code plus seven digits) registered through The Campaign Registry (TCR) so wireless carriers treat it as a real business number instead of spam. Before 10DLC rules took hold in 2021, companies blasted texts from unregistered long codes and carriers had no reliable way to tell a legitimate business from a scammer. Now they do.

A short code is a 5- or 6-digit number (like 74574) that you lease from the U.S. Short Code Registry. Short codes have been around since the early 2000s and were the original high-volume texting tool. Carriers provision them one by one, which is why they take weeks to turn on and cost a lot to keep.

The practical difference comes down to this. 10DLC routes through the same network as regular calls and texts but carries brand and campaign metadata that carriers check before delivery. A short code has its own dedicated lane, pre-negotiated with every major carrier. That lane is why short codes can hit 100 messages per second (MPS) or more ^[1], while a standard 10DLC number tops out somewhere between 1 and 15 MPS depending on your trust score and message class ^[2].

For most outbound sales teams sending appointment reminders, follow-ups, or promotional offers, neither 100 MPS nor even 15 MPS is a real limit. The limit is usually consent records and message content, not speed.

How does TCPA apply to sales texts from short codes and 10DLC numbers?

TCPA treats a short code and a 10DLC number the same. The number format does not change your legal exposure. The Telephone Consumer Protection Act, 47 U.S.C. § 227, prohibits using an automatic telephone dialing system (ATDS) or an artificial or prerecorded voice to text or call a wireless number without prior express consent ^[3].

For marketing and promotional texts, the FCC requires prior express written consent. The rules say the consumer must have signed "a written agreement, which may include a digital form, that clearly authorizes" the messages ^[4]. That agreement has to name who is messaging, state that consent is not a condition of purchase, and capture an affirmative opt-in. Pre-checked boxes don't count.

For purely informational or transactional texts (a one-time password, an order confirmation, a service alert), the bar is lower: prior express consent, which can be oral or implied from the context. Even here, keep a written record.

Here is what trips teams up. A 10DLC-registered number does not mean you have consent. Registration is a carrier-level spam filter, not a TCPA compliance certificate. You can run a spotless 10DLC campaign and still catch a TCPA class action for texting people who never opted in. The Cash App TCPA class action settlement and the Credit One TCPA settlement both involved companies with established messaging programs, not fly-by-night operations.

See our deeper breakdown of TCPA rules for the full picture on consent standards.

What does 10DLC registration actually cost and how long does it take?

10DLC costs a fraction of a short code, and this is where it wins for smaller teams. Registration runs in two layers: brand registration and campaign registration.

Brand registration costs about $4 one-time through most messaging platforms (some absorb the fee). It links your EIN to a brand profile in TCR so carriers know who is behind the number ^[2].

Campaign registration adds a recurring monthly fee. For standard business use cases (marketing, mixed, customer care), that fee is typically $10-$15 per month per campaign through TCR ^[7], plus whatever your messaging platform charges on top. All in, most small teams pay $30-$150 per month once platform fees are included, depending on volume and provider.

High-volume senders can apply for special A2P 10DLC message classes with higher throughput. T-Mobile requires a separate 10DLC vetting process for senders wanting above 2,000 messages per day ^[2]. That vetting adds cost (often $40-$120 one-time through third-party vetting services) but can open up higher daily limits.

Timeline: brand registration clears in minutes. Campaign registration usually takes 1-5 business days if your use case is straightforward. If your campaign gets flagged for review, or you're in a regulated industry (finance, insurance, real estate), add another week to be safe.

Short code costs are a different animal. Vanity short codes (you pick the number) cost $1,500/month. Random short codes cost $500-$1,000/month depending on whether they are shared or dedicated ^[1]. Setup takes 8-12 weeks because each carrier provisions the number separately. That window alone rules out short codes for most startups and new product launches.

What throughput can you actually expect from each number type?

Throughput matters when your outreach is time-sensitive, like a flash sale or a big appointment reminder blast. For everyone else it rarely bites.

10DLC throughput is tiered by TCR trust score. A newly registered campaign with a low trust score might get 1-3 MPS. A well-established brand with a high trust score and a verified use case can reach 15 MPS on most carriers. AT&T caps standard 10DLC campaigns at a daily message limit per campaign; Verizon and T-Mobile use slightly different scoring models ^[2]. The exact numbers move as carriers update their policies, so treat vendor-published throughput caps as approximate.

At 15 MPS, you can send 54,000 texts in one hour. For most outbound sales teams, that is plenty. A team of 20 reps working leads at any reasonable pace rarely produces 54,000 outbound texts an hour.

Short codes are provisioned for 100 MPS as the baseline. Dedicated short codes (you own the number, nobody else touches it) give you the full 100 MPS with no competing traffic. Shared short codes were effectively killed in 2021 when major carriers dropped support for most use cases ^[1], so if someone is still selling you a shared short code, that is a red flag.

The rule of thumb: past 500,000 messages a month with timing that matters, a short code starts to pay off because you stop paying per-message overages and get predictable delivery. Below that, 10DLC almost always covers you.

Which number type has better deliverability for sales messages?

Deliverability depends more on your content and consent quality than on whether you picked a short code or 10DLC. Vendor marketing glosses over that, but it's the honest answer.

Before 2021, unregistered long codes had terrible deliverability because carriers flagged high-volume long-code sending as probable spam. 10DLC fixed that by handing carriers verified metadata. A registered 10DLC campaign from a reputable brand with low opt-out rates now gets carrier treatment roughly equal to a short code for most message types.

Short codes keep one real deliverability edge: they are provisioned per-carrier through a formal process, so there is no algorithmic trust score to babysit. What you provision is what you get. In industries with heavy message scrutiny, like debt collection or financial services, some compliance teams prefer that predictability even at the higher cost.

The bigger deliverability risk for outbound sales teams is opt-out rate and complaint rate. Carriers track both at the campaign level. A high opt-out rate on your 10DLC campaign reads as spam-like behavior and can trigger throttling or blocking. Short codes face the same dynamics. Clean lists, real consent, and messages people actually want beat number format every time.

Does the FCC or CTIA treat short codes and 10DLC differently for compliance purposes?

The FCC's TCPA rules don't distinguish between number types. The law targets the act of sending an automated marketing text without consent, not the format of the originating number ^[3]. TCPA liability is identical either way.

At the carrier level, CTIA (the wireless industry trade group) keeps separate guidelines for short code messaging and A2P 10DLC messaging. The CTIA Short Code Monitoring Handbook and the CTIA Messaging Principles both require senders to include opt-out instructions (STOP keyword), honor opt-outs within a reasonable time, and skip content that violates carrier restrictions ^[5]. Those apply to both channels.

The channels split on carrier-level enforcement. Short code use cases get explicitly reviewed and approved during provisioning. If your use case involves debt collection, the carrier review may add restrictions or deny the program outright. With 10DLC, campaign use cases are categorized at registration (TCR has about 30 defined use cases), but carrier review is less granular than short code provisioning. In practice, 10DLC lets you start sending faster, with carrier scrutiny happening post-launch through monitoring rather than pre-launch through approval.

The FCC has flagged A2P messaging fraud as an ongoing concern in its robotext work, which is part of why TCR vetting requirements have tightened every year since 10DLC launched ^[6]. Expect more tightening, not less.

Can you use a toll-free number instead, and how does it compare?

Yes. Toll-free numbers (800, 888, 877, 866, 855, 844, 833) are a third option for A2P business texting. They need their own registration, called toll-free number verification, administered by Somos, the toll-free registry ^[9].

Toll-free numbers sit between 10DLC and short codes on throughput and cost. Verified toll-free numbers can usually reach 15-30 MPS with major carriers ^[9], and the monthly cost lands below a short code but often a touch above a 10DLC campaign once platform fees are counted.

The main reason sales teams weigh toll-free: if your reps already run a toll-free voice number for inbound calls, putting SMS on the same number gives prospects a consistent caller ID. Familiar numbers get opened.

The catch is speed. Toll-free verification has run slower than 10DLC registration in practice. Some providers report 2-6 week verification windows, which rivals short code delays. If launch speed matters, 10DLC is usually faster.

For most outbound sales teams starting fresh, 10DLC is still the default. Toll-free makes sense when you already have a toll-free voice presence and want SMS on the same number.

What are the specific registration steps for 10DLC?

Registration happens through your messaging platform (Twilio, Bandwidth, Telnyx, Vonage, and the like), which submits your data to TCR. Four steps:

1. Brand registration. You submit your legal business name, EIN, physical address, and business type. TCR runs this against third-party data sources to assign a trust score. Cost is typically $4 one-time, though some platforms absorb it.

2. Campaign registration. You describe your specific use case (marketing, customer care, 2FA), provide sample messages, confirm your opt-in method, and pay the monthly campaign fee (roughly $10-$15/month through TCR, plus platform markup) ^[7].

3. Number association. You attach your 10-digit number(s) to the campaign. Each number has to be associated before it can send under the campaign's approved parameters.

4. Carrier review. TCR notifies carriers. They may approve automatically or flag for review. T-Mobile has historically been the most active in flagging campaigns ^[2].

Common rejection reasons: vague use case descriptions, sample messages that read like spam, missing opt-in language, or use cases that don't match the business category. If your campaign gets rejected, revise and resubmit. Most platforms charge a small re-submission fee (often $4-$10).

Once the campaign is approved, keep your sample messages and live messages consistent. Carriers monitor real traffic against your registered use case.

What are the real risks of texting without proper registration?

Two risks run in parallel: carrier-level and legal. They compound each other.

On the carrier side, sending A2P traffic from an unregistered 10-digit number has been subject to blocking or filtering by major carriers since late 2021. Verizon and AT&T both announced formal blocking of unregistered A2P long-code traffic. If your messages aren't landing, missing registration is the first thing to check.

On the legal side, unregistered sending doesn't add new TCPA liability by itself. The TCPA violation is the missing consent, the use of an ATDS, or both. But unregistered sending tends to run alongside sloppy consent practices, and that combination is what draws lawsuits. TCPA damages run $500 per violation for negligent violations and up to $1,500 per violation for willful violations ^[3]. A class action with 10,000 members at $500 per text hits $5,000,000 in a hurry, before attorney fees.

The FCC can pursue enforcement separately from private suits. The Commission has issued multi-million-dollar forfeiture orders against robotext senders in recent years ^[6].

If you're managing consent records and opt-out compliance, tools like the ones at LeadCompliant can help you audit existing lists before you send. The do not call list governs voice calls primarily, but the principle of scrubbing anyone who opted out carries straight over to SMS.

Short code vs 10DLC: which should your outbound sales team actually use?

10DLC for almost everyone reading this. Here is the direct answer, and the math behind it.

If your team sends fewer than 500,000 texts a month, you'll spend $30-$150/month on 10DLC registration and platform fees versus $500-$1,500/month on a short code. That gap is $5,400 to $16,200 a year you are not spending on infrastructure that does nothing for your TCPA posture.

Short codes earn their keep in narrow cases. You send at high volume (500K+ messages a month) and timing is critical, like a flash sale or a large appointment campaign. You're in a heavily scrutinized industry and prefer pre-approved carrier provisioning. You have real brand recognition on an existing short code and switching costs bite.

If you're in financial services, insurance, or real estate, you may also face lead-generator consent chain problems that no number type solves. The FCC's January 2025 rule change on one-to-one consent for lead generators ^[4] means consent gathered through a shared opt-in form no longer covers multiple sellers. That is a TCPA issue, not a 10DLC issue, but it shapes your compliance posture no matter which number you pick.

For a clean text message marketing program that holds up to scrutiny, the number format is the easy part. The hard parts are consent records, opt-out honoring, and message content. Get those right first.

LeadCompliant's free compliance kit walks through consent documentation and the opt-out process for small outbound teams if you want a structured start.

What opt-out and consent rules apply to SMS regardless of number type?

Every commercial text program has to give recipients a way out and honor it fast. TCPA and FCC rules require it. The CTIA Messaging Principles state that senders must "honor STOP requests within a reasonable period" and that the STOP keyword must work ^[5]. The industry generally reads "reasonable period" as within one business day, and most platforms process STOP in real time.

For outbound sales texts, the consent standard is prior express written consent. Before you send that first message, you need a record showing the consumer:

• Provided their mobile number
• Received clear disclosure that they'd get marketing texts from your company
• Affirmatively agreed (signed, checked a box, or replied to a confirmation text)
• Was told consent is not required to make a purchase

The FCC's one-to-one consent rule reinforced that this consent must be specific to your company, not bundled across multiple lead buyers ^[4].

Check the mobile phone do not call list question too. Mobile numbers on the National DNC Registry are protected for voice calls, but for SMS the TCPA consent rules are the operative standard. Someone on the DNC Registry can still get texts they explicitly opted into. Someone off the DNC Registry still can't get marketing texts they never consented to. The systems are separate but complementary.

You can review the do not call telemarketer list to see how DNC scrubbing runs alongside your SMS consent process.

How do carriers monitor 10DLC campaigns after registration?

Registration is not one-and-done. Carriers run ongoing monitoring of registered 10DLC campaigns and can throttle or suspend one when the traffic pattern stops matching the registered use case.

Here is what they watch.

Opt-out rate. When more than a small share of recipients reply STOP inside a short window, that signals unwanted messages. Industry guidance treats opt-out rates above roughly 1-2% on a campaign as a yellow flag. Above 5% is serious.

Message content consistency. Register a customer-care campaign but send promotional offers, and carriers detect the mismatch through content analysis.

Sending velocity. A sudden spike in volume from a number that used to send at low rates can trip spam filters.

Unsubscribe chain. If someone sends STOP and then gets another message, that is both a carrier policy violation and a potential TCPA violation.

TCR added campaign monitoring scores that feed back into brand trust scores. A campaign with high complaint rates drags down your overall TCR brand score, which then cuts throughput limits across all your campaigns. This dynamic is fairly new (formalized around 2022-2023) and still evolving.

The practical takeaway for outbound sales teams: send to people who asked, write messages that match what you registered, put opt-out instructions in every message, and process opt-outs immediately. Do those four things and carrier monitoring stops being something you worry about.

Frequently asked questions

Is a 10DLC number the same as a regular business cell phone number?

To recipients it looks identical: a standard 10-digit number with an area code. The difference is back-end registration. A 10DLC number has been registered through The Campaign Registry (TCR) so carriers recognize it as a legitimate A2P (application-to-person) business sender rather than a possible spammer. An unregistered business number sending bulk texts gets filtered or blocked by most carriers.

Do I need TCPA consent to send texts from a short code?

Yes. Short code registration with carriers is separate from TCPA consent. TCPA, 47 U.S.C. § 227, requires prior express written consent before you send marketing texts, no matter the number type. A provisioned short code approved by carriers does not substitute for written consent from each recipient. The two compliance layers run in parallel, and you need both.

How long does short code registration take in 2026?

Plan for 8-12 weeks. Each major U.S. carrier (AT&T, T-Mobile, Verizon) provisions a short code separately, and the queues have not sped up much despite industry pressure. If you need to start texting within a few weeks, 10DLC is the only realistic option. Toll-free number verification is faster than a short code but can still take 2-6 weeks.

Can two companies share a 10DLC number?

No, and shared short codes are effectively gone too. Major carriers stopped supporting shared short codes in 2021. With 10DLC, each registered campaign ties to a specific brand (EIN), so a single 10-digit number can't be legitimately shared across two unrelated companies. Each business registers its own brand and associates its own numbers.

What happens if I send texts from an unregistered 10DLC number?

Your messages will likely be filtered or blocked by Verizon, AT&T, and T-Mobile, which have all announced blocking of unregistered A2P long-code traffic since late 2021. Beyond deliverability, you face TCPA liability if you lack proper consent. Unregistered sending doesn't add legal liability on its own, but sloppy registration usually rides alongside sloppy consent, and that is where the lawsuits come from.

What is the TCPA penalty per text message?

TCPA statutory damages are $500 per violation (per message) for negligent violations and $1,500 per violation for willful or knowing violations, under 47 U.S.C. § 227(b)(3). In a class action with thousands of members, those numbers multiply fast. Courts can award the per-message amount rather than an aggregate cap, which is why TCPA class actions regularly settle in the millions.

Does the National Do Not Call Registry apply to sales texts?

The National DNC Registry primarily governs telemarketing voice calls. For SMS, the controlling standard is TCPA prior express written consent. But if a consumer sits on the DNC Registry and never gave written consent for texts, you have two problems instead of one. Scrub for DNC on voice and keep separate consent records for SMS. Neither system substitutes for the other.

What is TCR (The Campaign Registry) and do I have to use it?

TCR is the central registry major U.S. carriers use to validate A2P 10DLC traffic. Registering your brand and campaign through TCR (via your messaging platform) is effectively mandatory if you want reliable delivery on AT&T, T-Mobile, and Verizon. It is not a government body; it is an industry-operated registry. Skipping it means your messages get filtered, not a legal fine, but the practical effect is the same: your texts don't arrive.

Can I use a personal cell phone to send outbound sales texts without 10DLC registration?

Sending truly manual, one-at-a-time personal texts to prospects generally isn't A2P bulk messaging and doesn't need 10DLC registration. But use any platform, CRM integration, or tool to send multiple texts at once, and carriers treat it as A2P traffic, so registration applies. The line blurs quickly. Most compliance attorneys recommend registering any number used systematically for sales outreach.

What content rules apply to outbound sales texts regardless of number type?

CTIA guidelines require every commercial text campaign to include the sender's identity, a clear opt-out instruction (STOP to stop), and no deceptive content. FCC rules prohibit misleading caller ID, which extends to sender identity in texts. Some content categories face carrier-level blocking regardless of registration: cannabis, firearms sales, payday loans, and explicit content hit restrictions or outright bans depending on the carrier.

Does the FCC's 2025 one-to-one consent rule affect 10DLC campaigns?

Yes. The FCC's rule requiring one-to-one consent (consent specific to each individual seller, not a bundled opt-in across multiple companies) took effect in January 2025. It directly hits teams buying leads from generators who collected a single consent covering multiple sellers. Your 10DLC registration is fine; your consent source may not be. Review where your opted-in numbers came from before sending.

How do I figure out which option fits my current sending volume?

Calculate your monthly message volume and your per-message cost under 10DLC. Then compare the fixed $500-$1,500/month short code cost. If the short code fixed cost beats your 10DLC variable cost, or you need guaranteed 100 MPS delivery, a short code makes financial sense. For most teams under 500,000 messages a month, 10DLC is cheaper and simpler. Throughput only decides it at high volume with time-sensitive campaigns.

What records should I keep for SMS compliance audits?

Keep signed or digital opt-in records showing timestamp, IP address, and the exact disclosure language shown; a log of every number added to your send list and when consent was obtained; opt-out records showing when each STOP arrived and was confirmed; your TCR brand and campaign registration confirmation; and copies of actual message templates used. FCC investigators and plaintiff attorneys will ask for all of it. Store records at least 4 years given typical TCPA statute of limitations.

Sources

1. U.S. Short Code Registry (USSC), Short Code Program Overview: Vanity short codes cost $1,500/month, random short codes $500-$1,000/month; dedicated short codes deliver 100 MPS; shared short codes largely discontinued
2. CTIA, A2P 10DLC and messaging carrier requirements: 10DLC brand registration costs approximately $4 one-time; T-Mobile requires separate vetting for senders above 2,000 messages/day; throughput tiers by trust score
3. U.S. Code, 47 U.S.C. § 227, Telephone Consumer Protection Act: TCPA prohibits ATDS-based texts to wireless numbers without prior express consent; damages are $500 per violation, $1,500 for willful violations
4. FCC, Report and Order FCC 23-107, Advanced Methods to Target and Eliminate Unlawful Robocalls (one-to-one consent rule): FCC's one-to-one consent rule requires prior express written consent specific to each individual seller; effective January 2025
5. CTIA, Messaging Principles and Best Practices: CTIA requires commercial text senders to honor STOP requests within a reasonable period and include opt-out instructions in messages
6. The Campaign Registry (TCR), Registration Portal and Pricing: Monthly campaign registration fee is approximately $10-$15 per campaign through TCR; campaign use case categories number approximately 30
7. FCC, Consumer Guide on Stopping Unwanted Robocalls and Texts: FCC rule requires prior express written consent for marketing texts; consent must be a clear affirmative action and cannot be a pre-checked box
8. Somos, Toll-Free Number Verification Program: Toll-free number (TFN) SMS verification is administered by Somos; verified toll-free numbers support approximately 15-30 MPS with major carriers
9. FCC, Rules and Regulations Implementing the Telephone Consumer Protection Act of 1991, CG Docket No. 02-278: FCC implementing rules for TCPA define prior express written consent requirements for marketing calls and texts to wireless numbers