Infobip A2P 10DLC Guide

A2P 10DLC Registration, Campaign Management

& Ongoing SMS Compliance

Using MyTCRPlus.com Tools

This guide provides step-by-step instructions for Infobip customers

completing A2P 10DLC registration and managing compliant SMS campaigns.

Table of Contents

Section 1 Introduction & Compliance Overview 3

Section 2 Pre-Registration Preparation 5

Section 3 Brand Registration — Step by Step 9

Section 4 Campaign Registration — Step by Step 13

Section 5 Consent & Opt-In Compliance 19

Section 6 Post-Registration Campaign Administration 25

Section 7 Error Code Diagnosis & Remediation 30

Section 8 Industry Vertical Compliance Guides 38

Section 9 Carrier Policy Reference (2025) 44

Section 10 MyTCRPlus Tool Reference 48

Appendix A Compliant Message Templates 51

Appendix B Consent Language Templates 53

Appendix C Prohibited Content Quick Reference 55

About This Guide

This guide is written specifically for businesses that send Application-to-Person (A2P) text messages through Infobip and need to register their brands and campaigns through The Campaign Registry (TCR). MyTCRPlus.com provides diagnostic tools, compliance documentation generators, error code libraries, and step-by-step remediation workflows that complement the Infobip platform.

You will use this guide to: complete brand registration with the correct supporting documentation; build and submit campaigns that meet carrier and TCR requirements; configure compliant opt-in and consent flows; manage live campaigns and respond to throughput events; and diagnose and resolve any rejection or error code.

What is A2P 10DLC?

10-Digit Long Code (10DLC) is the standard U.S. carrier framework that governs business text messaging over regular 10-digit phone numbers. Before February 2025, unregistered business SMS traffic was routinely delivered. After February 2025, all A2P messaging over 10DLC numbers must carry an active TCR registration or it will be blocked across T-Mobile, AT&T, and Verizon.

The registration system has two layers:

• Brand Registration — Identifies the business entity sending the messages. Requires legal business name, EIN, website, and contact details. A brand is registered once and used across all campaigns.
• Campaign Registration — Defines the specific messaging program: what messages will be sent, to whom, for what business purpose, and how recipients consented. Each distinct program type (e.g., promotional versus appointment reminders) requires a separate campaign.

The TCR Ecosystem

The Campaign Registry (TCR) is the central registry that coordinates with U.S. carriers. Infobip, as a registered Communication Service Provider (CSP) on TCR, submits your brand and campaign records on your behalf. MyTCRPlus.com operates as a compliance tool platform — it does not submit directly to TCR but generates, validates, and prepares all documentation required for submission through Infobip.

Mandatory Compliance Standards

All business SMS sent through Infobip over 10DLC numbers must comply with the following standards simultaneously:

• TCPA — Telephone Consumer Protection Act (TCPA): Federal law governing consumer consent for commercial messages. Requires written prior express written consent for marketing messages.
• CTIA — Cellular Telecommunications Industry Association (CTIA) guidelines: Industry standards for opt-in, opt-out, and message content.
• TCR Registration Requirements: Brand and campaign data must be accurate and match business registration records.
• Individual Carrier Policies: T-Mobile, AT&T, and Verizon each enforce additional content and throughput rules.

Platform Note: MyTCRPlus.com tools are designed to help you meet these requirements. They do not substitute for legal counsel. For complex TCPA, HIPAA, or state-law matters, consult qualified legal professionals.

Key Terms Reference

Completing this section before opening the Infobip brand registration form will reduce rejection risk and accelerate approval. Carriers score your brand before assignment — the preparatory steps below directly affect your Trust Score.

Step 2.1 — Business Entity Verification

Your TCR brand registration must match your IRS-registered business entity exactly. Mismatches between the name on your EIN, your website domain, and your Infobip account are the leading cause of brand-level rejections.

What to prepare:

• Employer Identification Number (EIN) — obtain from IRS Form CP-575 or an IRS EIN verification letter. SSNs cannot be used for standard TCR brand registration.
• Legal Entity Name — the exact name on your IRS EIN documentation. Do not use marketing names, DBAs, or shortened versions without explicit DBA registration.
• Business type — LLC, Corporation, Partnership, or Sole Proprietor. Note: Sole proprietors cannot complete standard TCR registration; they must use Low Volume Mixed campaigns through a sole-proprietor pathway.
• State of registration and incorporation date.
• Physical business address — must be a real address, not a P.O. Box.

Domain and Website Requirements:

• Your website domain must resolve over HTTPS (SSL certificate required). HTTP-only sites will produce Error 1103.
• The domain name should relate clearly to your legal entity name. If your entity is "Acme Holdings LLC" and your domain is "acme.com," this may trigger Error 1101 (URL Domain Mismatch). Add a footer line: "© Acme. A DBA of Acme Holdings LLC."
• Your website must be fully accessible — not "coming soon," password-protected, or under maintenance during TCR review.
• If you do not have a website, a LinkedIn Business Page or Facebook Business Page is accepted as a fallback for Error 1100.

Step 2.2 — DUNS Number (Strongly Recommended)

A Dun & Bradstreet DUNS Number adds 10–15 points to your carrier trust score and is required by T-Mobile as of September 1, 2024 for new brand registrations to achieve higher throughput tiers.

• Visit dnb.com and apply for a free DUNS number.
• Processing takes approximately 30 business days for free registration (expedited options are available).
• Once issued, provide the DUNS number in the Infobip brand registration form in the designated field.
• The trust score benefit becomes active approximately 7–14 days after DUNS verification is confirmed by T-Mobile.

Timing Note: If your business is new (under 90 days), apply for DUNS immediately and plan to delay brand submission by 30 days to allow digital footprint maturation. New businesses that register immediately face a 30–40% higher rejection rate.

Step 2.3 — Trust Score Optimization with MyTCRPlus

Use the MyTCRPlus Trust Score Estimator at mytcrplus.com to model your current trust score before submitting to Infobip. The tool evaluates seven factors and produces an estimated score with specific improvement recommendations.

Step 2.4 — Use Case Selection

Choosing the correct use case before registration prevents the most common campaign rejection: Error 9001 (Campaign Use Case Mismatch). Use the MyTCRPlus Use Case Selector at mytcrplus.com to match your message content to the correct TCR category.

Use Case Quick Reference:

Strategic Use Case Planning:

If you intend to send both transactional and marketing messages, register them as separate campaigns. Do not mix promotional content in a transactional campaign — carriers actively scan message content for mismatch.

Start with a low-risk use case (2FA or Customer Care) to establish 90+ days of positive messaging history before adding Marketing campaigns. This history meaningfully improves Marketing campaign approval speed and throughput limits.

Step 2.5 — Pre-Registration Checklist (MyTCRPlus)

Use the MyTCRPlus Brand Readiness Checker at mytcrplus.com before opening any Infobip registration form. The tool runs 12 diagnostic checks in under 2 minutes.

Manual checklist to complete before proceeding:

• EIN documentation in hand (IRS CP-575 or verification letter)
• Legal entity name confirmed — matches EIN exactly
• Website live, HTTPS, publicly accessible
• Website footer includes legal entity name or DBA disclosure
• Privacy Policy published on website with an SMS Communications section
• Terms of Service published on website
• DUNS number applied for (or confirmed existing)
• LinkedIn Business Page or Facebook Business Page created
• Use case selected and documented
• Opt-in method chosen (web form, SMS keyword, verbal, POS, or email)
• 3 sample messages drafted per use case (see Section 4 for format requirements)
• Consent language drafted and matched to opt-in form

Brand registration is a one-time process per legal entity. Once your brand is approved in TCR, it persists and is reused for all campaigns. A brand rejection delays all downstream campaigns — complete Section 2 fully before starting this section.

Step 3.1 — Access Infobip Brand Registration

• Log into your Infobip account at app.infobip.com.
• Navigate to: SMS > 10DLC > Brands > Register New Brand.
• Select "Register a new brand for United States A2P messaging."
• Choose entity type: Standard (LLC, Corp, Partnership) or Sole Proprietor. This guide covers Standard — Sole Proprietor follows a separate pathway with limited throughput.

Step 3.2 — Complete Brand Registration Fields

Step 3.3 — Website Compliance Verification (Pre-Submit)

Before clicking Submit, run the MyTCRPlus Website Compliance Check at mytcrplus.com/tools. This tool validates SSL, accessibility, privacy policy presence, and domain-to-entity name alignment — the same checks TCR performs automatically.

Required website elements before submission:

• HTTPS active — SSL certificate valid and not expired
• Privacy Policy page — must include a dedicated "SMS Communications" or "Text Message Program" section
• Terms of Service page — must be publicly accessible
• Business name visible — legal entity name or DBA in footer, header, or About page
• Contact information — working phone or email address
• No login wall, no maintenance mode, no "coming soon" pages on any linked URLs

Privacy Policy SMS Section (Required):

Your Privacy Policy must contain an SMS-specific section with this exact language (adapt bracketed fields):

SMS Communications

We collect mobile phone numbers when you opt in to our text message program.

SMS consent and phone numbers are NOT shared with third parties or affiliates

for their marketing purposes. Consent records are retained for a minimum of 4

years. You may opt out at any time by texting STOP to any message.

Supported keywords: STOP (unsubscribe), START (resubscribe), HELP (support).

CRITICAL The phrase "SMS consent and phone numbers are NOT shared with third parties" is required verbatim by T-Mobile. Paraphrasing or omitting this language causes Error 9108 rejection.

Step 3.4 — Submit and Monitor Brand Review

• Review all fields for accuracy against your EIN documentation.
• Click Submit in the Infobip brand registration interface.
• Infobip transmits your brand data to TCR. You will receive a Brand ID within 24 hours.
• TCR assigns an initial trust score. Carriers perform supplementary verification over 1–5 business days.
• Monitor your Infobip account for brand status updates. Status transitions: Pending > Under Review > Approved or Rejected.

Brand Approval Timelines:

• Standard entity with DUNS + established website: 1–3 business days
• Standard entity without DUNS or newer domain: 3–5 business days
• Financial services, healthcare, or high-scrutiny verticals: 5–10 business days
• Government entities: up to 15 business days

Step 3.5 — If Your Brand Is Rejected

Brand rejections arrive with one or more error codes. Open the MyTCRPlus Error Code Lookup at mytcrplus.com/fix, enter your error code, and receive the specific remediation steps.

Brand-Level Error Codes:

After completing fixes, resubmit through Infobip. Reference your original Brand ID in the resubmission so Infobip can link the correction to the prior application.

Campaign registration links your approved brand to a specific messaging program. Each campaign requires a description, up to 5 sample messages, an opt-in method, and links to your privacy policy and terms of service. A campaign must be approved before traffic can flow on the associated phone numbers.

Step 4.1 — Access Campaign Registration in Infobip

• In your Infobip account, navigate to: SMS > 10DLC > Campaigns > New Campaign.
• Select your approved brand from the Brand dropdown.
• Confirm your brand status shows "Approved" — campaigns cannot be created on pending or rejected brands.

Step 4.2 — Campaign Description

The campaign description is the most-reviewed field in TCR. A vague or misaligned description accounts for 35% of all campaign rejections. Use the formula below for every submission.

Description Formula:

[Brand Name] sends [message type] to [audience] for [business purpose].

Complete examples by use case:

Description Rules:

• Minimum 40 characters. Maximum 300 characters.
• Must include brand name (or recognized DBA), message type, recipient audience, and business purpose.
• Must align with your selected use case category — do not describe promotional content under Customer Care.
• Do not use vague phrases: "various messages," "business communications," "general updates."

Step 4.3 — Sample Messages

TCR requires a minimum of 2 sample messages and accepts up to 5. Submit 3 distinct samples for every campaign. Carriers use sample messages to verify use case alignment and scan for prohibited content.

Every sample message must include:

• Brand name — legal business name or recognized DBA as the first word or within the first 10 characters.
• Opt-out instruction — "Reply STOP to opt out" or "Text STOP to unsubscribe." This phrase must appear in every single sample.
• Realistic variables — Replace placeholders with real-looking examples. Do not submit [FIRST NAME] or {ORDER ID}. Use "Sarah," "Order #87234," "November 6 at 2pm."
• No URL shorteners — bit.ly and TinyURL trigger spam filters. Use your full branded domain (acme.com/track) or no URL at all.
• Use case alignment — marketing samples must contain promotional language; transactional samples must not contain sales content.
• "Msg & data rates may apply" — include in all consumer-facing campaigns.

Compliant Sample Message Templates by Use Case:

Marketing (Promotional):

Acme: FLASH SALE — 40% off all orders placed this weekend. Use code

FLASH40 at checkout: acme.com/shop Reply STOP to unsubscribe.

Msg & data rates may apply.

Appointment Reminder (Customer Care):

GreenLeaf Dental: Reminder — your cleaning is Wed Nov 6 at 2pm with

Dr. Patel. Confirm: reply YES. Reschedule: call 555-234-5678.

Reply STOP to opt out. Msg & data rates may apply.

Account Notification:

ABC Bank: Your savings account ending in 4521 balance is $3,847.22 as

of today. View full statement: abcbank.com/account Reply STOP to opt out.

Msg & data rates may apply.

2FA / One-Time Passcode:

TechCorp: Your verification code is 847392. This code expires in

10 minutes. Do not share this code with anyone.

Reply STOP to opt out of security alerts.

Delivery Notification:

ShipFast: Your order #87234 has shipped and arrives Tuesday Nov 5.

Track: shipfast.com/track/87234 Reply STOP to opt out.

Msg & data rates may apply.

CRITICAL Submitting even one sample message without "Reply STOP to opt out" causes Error 9106 rejection — the most common single cause of campaign denials. Check every sample before submitting.

Step 4.4 — Opt-In Method Documentation

TCR requires you to declare how you collect consumer consent. This is not a data entry field — it is a binding declaration that carriers verify against your submitted consent documentation. Choose the method that accurately reflects your actual opt-in process.

Opt-In URL Field:

If you collected consent via a website form, you must supply the URL where that form is live. The URL must be accessible during TCR review. If the form is behind a login or on a page not indexed by TCR, you must provide a public-facing landing page that displays the consent language.

Step 4.5 — Privacy Policy and Terms of Service URLs

Both URLs are required fields. Enter the direct URL to each page — not your homepage. TCR automated systems check both URLs during campaign review.

• Privacy Policy URL: https://yourdomain.com/privacy-policy — must include the SMS Communications section from Section 3.3.
• Terms of Service URL: https://yourdomain.com/terms — must be publicly accessible.

Step 4.6 — Campaign Attributes and Flags

Complete the campaign attribute flags accurately. These flags affect carrier routing and review:

Step 4.7 — Associate Phone Numbers

After campaign approval, assign your Infobip-provisioned phone numbers to the campaign. Numbers must be associated with an approved campaign before they can deliver A2P traffic.

• In Infobip, navigate to: SMS > Phone Numbers > Manage.
• Select each phone number intended for this campaign.
• Assign the number to your approved campaign using the Campaign Association dropdown.
• Allow 15–30 minutes for carrier network propagation after association.
• Send a test message to a subscriber device on each major carrier (T-Mobile, AT&T, Verizon) to verify delivery.

Step 4.8 — Campaign Approval Timelines

Consent compliance is the area of highest legal exposure in A2P messaging. Telephone Consumer Protection Act (TCPA) class-action litigation frequently targets businesses that cannot produce documented consent records. This section covers all requirements for building, deploying, and maintaining a compliant consent infrastructure.

Step 5.1 — The Five Mandatory Consent Elements

Every opt-in form, verbal script, and SMS keyword flow must include all five of these elements. Omitting any one is a TCR campaign rejection trigger and a potential TCPA violation.

Step 5.2 — Additional TCPA Requirements

• Not required for purchase — for marketing consent, you must state that consent is not a condition of purchase or service.
• Affirmative action — the opt-in checkbox must be unchecked by default. Pre-checked checkboxes are invalid consent under TCPA and will cause Error 9607.
• Separate consent per purpose — you cannot reuse marketing consent to cover transactional messages or vice versa. Run separate opt-in flows for each message category.
• Consent record retention — maintain consent records for a minimum of 4 years from collection date or opt-out date, whichever is later.

Step 5.3 — Web Form Opt-In Setup

Use the MyTCRPlus Opt-In Form Generator at aio.mytcrplus.com to generate compliant consent language pre-populated for your brand. Copy the generated language into your form template.

Web Form Compliance Checklist:

• Phone number field present and labeled clearly
• Consent checkbox positioned directly adjacent to the phone number field — not buried in a terms block
• Checkbox unchecked by default — no JavaScript that auto-checks, no hidden fields with pre-set values
• Consent language font size: minimum 12pt (16px on web) — must be legible, not grey-on-white or micro-type
• Privacy Policy link functional — opens in new tab
• Terms of Service link functional — opens in new tab
• "Consent is not a condition of purchase" statement visible for marketing programs
• Confirmation message sent to subscriber within 5 minutes of form submission

Recommended Double Opt-In Flow (Marketing Programs):

• User submits web form with phone number and checked consent box.
• System sends: "Reply YES to confirm your Acme subscription. Reply STOP to cancel."
• User replies YES — system logs confirmation event with timestamp and adds number to active list.
• User receives welcome message with subscription confirmation and STOP instructions.
• All four events (form submission, confirmation request, YES reply, welcome sent) are timestamped and stored.

Compliance Advantage: Double opt-in creates a second, carrier-verifiable consent event. In the event of a carrier audit or TCPA dispute, double opt-in records are substantially stronger evidence than single form submissions.

Step 5.4 — Consent Language Templates

Use these templates directly from MyTCRPlus, or generate customized versions at aio.mytcrplus.com.

Basic Promotional SMS Consent:

I consent to receive promotional text messages from [BRAND NAME] at the phone

number provided. Message frequency varies (up to [X] messages per month).

Message and data rates may apply. Text STOP to opt out or HELP for assistance.

View our Privacy Policy at [URL] and Terms of Service at [URL].

Consent is not a condition of purchase.

Transactional Only (Lower TCPA Risk):

By providing your phone number, you agree to receive order confirmations,

shipping updates, and account notifications from [BRAND NAME] at the number

provided. Message and data rates may apply. Reply STOP to opt out.

View our Privacy Policy at [URL].

Combined Transactional + Promotional:

I consent to receive both transactional and promotional text messages from

[BRAND NAME]. Transactional messages include order confirmations, shipping

updates, and account notifications (approx. [X] messages per order).

Promotional messages include sales, offers, and marketing content (up to [X]

messages per month). Message and data rates may apply. Text STOP to opt out

of promotional messages or STOPALL to opt out of all messages. HELP for support.

Verbal Consent Script (Phone/In-Person):

"Before we continue, I want to let you know that [Brand] may send you text

messages about [purpose]. Standard message and data rates may apply, and you

can opt out at any time by replying STOP to any message. Do you agree to

receive text messages from us?"

[If YES: document rep name, date/time, consumer response, and phone number]

Step 5.5 — Required Automated Response Messages

All TCR campaigns must process the following keywords and respond within 5 seconds. Failure to respond to STOP within 5 seconds is an active T-Mobile enforcement trigger as of August 20, 2024.

STOP Response (Opt-Out Confirmation):

[BRAND NAME]: You have been unsubscribed. No further messages will be sent.

Reply START to resubscribe. Questions? Call [PHONE] or visit [URL].

HELP Response:

[BRAND NAME] SMS Support: For assistance call [PHONE] or visit [URL].

Reply STOP to unsubscribe. Msg & data rates may apply.

START / Welcome Response (New Subscriber):

[BRAND NAME]: Welcome! You are now subscribed to receive [message types].

Expect [frequency]. Msg & data rates may apply. Reply STOP anytime to opt out,

HELP for support. [URL]

START Response (Re-subscribe after STOP):

[BRAND NAME]: You have resubscribed to receive [message types].

Reply STOP anytime to opt out. Msg & data rates may apply.

CRITICAL You must process all of the following STOP variants identically: STOP, END, CANCEL, UNSUBSCRIBE, QUIT. Failing to process any variant is a cross-carrier enforcement violation as of August–September 2024.

Step 5.6 — Consent Record Keeping

Every consent event must be logged and retrievable. In the event of a carrier audit, TCPA complaint, or legal discovery request, you must be able to produce a consent record for any phone number in your active or historical list.

Minimum data to capture per consent event:

• Timestamp with timezone (UTC recommended)
• Phone number (store hashed for security; full number required for audit export)
• Collection method: web form, SMS keyword, verbal, email, POS
• Exact consent language presented (version-controlled — store consent language text at time of collection)
• URL where consent was collected (for web forms)
• IP address or device identifier
• User agent (browser/device)
• Opt-out timestamp and method (if applicable)
• Retention expiry date (collection date + 4 years)

MyTCRPlus Tool: The AIO Compliance Document Generator at aio.mytcrplus.com can generate a consent log schema, database field definitions, and audit export templates pre-formatted for TCPA defense documentation.

Campaign approval is the beginning of an ongoing compliance operation, not the end. Carriers actively monitor live campaigns for throughput anomalies, opt-out rates, spam complaints, and content drift. This section covers all administrative tasks required to maintain campaign health.

Step 6.1 — Throughput Management

Your campaign throughput limit is set at registration based on your trust score and use case. Exceeding this limit triggers automatic throttling and, at Verizon, auto-suspension for volume spikes over 300% within 24 hours.

Throughput Limits by Trust Score and Use Case:

Throughput Best Practices:

• Schedule high-volume sends (blasts) with a rate limiter configured at 80% of your approved throughput to provide headroom.
• Stagger sends across multiple time windows to avoid single-day volume spikes. A 300% increase in 24 hours triggers Verizon auto-suspension.
• If you need higher throughput, apply for a trust score upgrade through Infobip after 90 days of compliant messaging history.

Step 6.2 — Opt-Out Processing

STOP processing must be automated and near-instantaneous. Manual opt-out workflows are not acceptable for compliance.

• Configure your messaging platform to process STOP, END, CANCEL, UNSUBSCRIBE, and QUIT as opt-out triggers — all five variants must be handled.
• Immediate removal: the subscriber must receive no further messages after sending a STOP keyword. The 5-second response window is a carrier enforcement standard.
• Log the opt-out event with timestamp, keyword received, and phone number.
• Honor opt-outs across all phone numbers in your campaign, not just the specific number that received the STOP reply.
• Do not re-add opted-out subscribers to any active list without a documented new opt-in event.

Step 6.3 — Campaign Monitoring Metrics

Monitor these metrics weekly. Thresholds that exceed carrier limits trigger manual review or automatic action.

Step 6.4 — List Hygiene

• Validate all phone numbers before adding to active lists. Use a phone number validation API to confirm number type (mobile, landline, VoIP) and carrier.
• Remove subscribers who have been opted out for more than 30 days from any suppression list review.
• Check against TCPA Do-Not-Call registries for marketing campaigns.
• Suppress numbers that have generated spam complaints, delivery failures, or carrier-level blocks.
• Remove numbers that have been inactive (no engagement) for more than 180 days in re-engagement programs.

Step 6.5 — Campaign Modifications

Changes to registered campaign attributes require TCR updates through Infobip. Not all changes require a new campaign, but some do.

Step 6.6 — Periodic Compliance Audits

Run a full campaign audit every 90 days using MyTCRPlus diagnostic tools to catch compliance drift before carriers detect it.

90-Day Audit Checklist:

• Privacy Policy — verify SMS section is still present and URLs function
• Opt-in forms — test all forms; verify consent language is current and checkbox is unchecked by default
• Sample messages — verify sample messages on file with TCR still match messages being sent
• STOP/HELP responses — test by sending STOP and HELP to each active campaign number; verify correct automated responses
• Opt-out list — verify suppression list is being applied consistently across all sends
• Volume trends — review 90-day send volume chart for unexpected spikes
• Complaint reports — download Infobip complaint report and investigate any carriers with complaint rates above 0.05%
• Phone number inventory — confirm all active numbers are associated with an approved campaign

When TCR or a carrier rejects a brand or campaign, a numeric error code is returned to Infobip and passed to your account. This section covers the complete remediation workflow and the most common error codes. Use the MyTCRPlus full error directory at mytcrplus.com/fix for codes not listed here.

Step 7.1 — Remediation Workflow

Phase 1: Diagnosis (Target completion under 1 hour)

• Retrieve all error codes from the Infobip rejection notification. A single rejection may carry multiple codes — address all of them before resubmitting.
• Open mytcrplus.com/fix or the MyTCRPlus Symptom Checker at newclient.mytcrplus.com.
• Enter each error code and classify it: Terminal, Manual Review Required, or Auto-Remediable.
• If any code is classified Terminal, stop. Do not resubmit until root cause is fully resolved. Repeated resubmissions without addressing terminal issues reduce your trust score.

Phase 2: Documentation Fix (1–24 hours depending on error type)

• Consent errors: Screenshot your opt-in form (with checkbox unchecked and visible), copy verbatim consent language, document URL.
• Privacy policy errors: Add or update the SMS Communications section in your policy; verify URL functions.
• Sample message errors: Rewrite all 3 samples with every required element present.
• Website errors: Fix SSL, restore accessibility, update business name in footer.
• Brand entity errors: Obtain correct EIN documentation, update DBA disclosure on website.

Phase 3: Resubmission Preparation

Before resubmitting, your package must include:

• All 3 sample messages updated — each containing brand name, STOP instruction, realistic variables, and correct use case alignment
• Consent documentation — screenshot of opt-in form + verbatim consent language text + URL
• Privacy policy URL — confirmed accessible with SMS section present
• Business verification documents — if brand-level rejection was triggered by entity issues

Phase 4: Carrier Appeal (If Resubmission Is Rejected a Second Time)

Use the MyTCRPlus Carrier Escalation template. Submit through Infobip support with this structure:

Subject: URGENT: TCR Campaign Rejection — Business Impact

Brand ID: [Your Brand ID]

Campaign ID: [Your Campaign ID]

Rejection Code: [CODE]

Business Impact: [daily message volume] messages/day, revenue impact $[X]/day

Prior Attempts: [number of prior submissions]

Remediation Completed: [specific actions taken, with dates]

Request: Expedited review and direct carrier escalation

Step 7.2 — Brand-Level Error Codes (1000–1199)

Step 7.3 — Campaign Description Errors (2001–2006)

Step 7.4 — Consent and Opt-In Errors (2100–2108)

Step 7.5 — High-Volume Carrier Error Codes

Error 9106 — Missing Opt-Out Language (Affects ~15% of All Rejections)

Cause: One or more sample messages does not contain "Reply STOP to opt out" or equivalent language.

Fix: Add opt-out language to every sample message without exception. Position the STOP instruction near the end of each message but before any character limit truncation. Resubmit the same business day after updating all 3 samples.

Format: "Reply STOP to opt out" or "Text STOP to unsubscribe" — both are accepted.

Error 9108 — Privacy Policy Compliance (Affects ~12% of All Rejections)

Cause: Privacy policy URL is broken, policy has no SMS-specific section, or required language is absent.

Required fixes — all must be present:

• Active, accessible URL over HTTPS
• Section header: "SMS Communications" or "Text Message Program"
• Exact language: "SMS consent and phone numbers are NOT shared with third parties or affiliates for their marketing purposes"
• Data retention period (minimum 4 years)
• User opt-out rights statement

Error 9607 — Consent Verification Problems

Cause: TCR cannot verify the opt-in collection method from the documentation provided.

Required documentation package:

• Screenshot of the web form showing the unchecked checkbox and visible consent language — must be a live screenshot, not a mockup
• Full URL of the opt-in page (must be publicly accessible)
• Verbatim consent text (copy-paste the text from the form)
• Timestamp proof if available

Error 9001 — Campaign Use Case Mismatch

Cause: Message content in samples does not match the declared use case category.

Fix option A: Rewrite sample messages to contain only content aligned with the declared use case. Remove any promotional language from transactional campaigns.

Fix option B: Change the use case to Marketing if the samples are genuinely promotional. This requires a new campaign and full approval cycle.

Common pattern: Marketing samples submitted under Customer Care to avoid scrutiny. Carriers scan this pattern actively — it does not work and adds scrutiny to future submissions.

Step 7.6 — Error Severity Classification

Certain industries carry regulatory overlays beyond TCR and TCPA. This section summarizes the additional compliance requirements for the most common verticals served by Infobip customers. Use the full vertical guides at mytcrplus.com/solutions/ for complete documentation.

8.1 — Healthcare & Telehealth

Regulatory overlay: HIPAA + TCPA + TCR

8.2 — Financial Services & FinTech

Regulatory overlay: TCPA + CFPB + GLBA + TCR carrier scrutiny

8.3 — Real Estate

Regulatory overlay: TCPA + state do-not-call laws + TCR

Real estate is one of the highest-frequency TCPA litigation targets. Property alert programs, unsolicited lead outreach, and lead nurturing sequences have generated substantial class-action exposure when consent was improperly documented.

• Property alert programs: must use Marketing use case; consent must be property-interest-specific, not blanket.
• Showing confirmation and scheduling: Customer Care use case.
• Lead nurturing from third-party lead sources: written consent from the original lead source is required. Purchasing lists does not transfer consent.
• Recommended use cases: Marketing (property alerts, buyer/seller campaigns), Customer Care (showing confirmations, active client communications).

8.4 — E-commerce & Retail

Regulatory overlay: TCPA + TCR

8.5 — Education & EdTech

Regulatory overlay: FERPA + TCPA + TCR

• Students under 18: parental consent required in addition to student consent for all marketing messages.
• FERPA: student record information (grades, enrollment status, academic data) is prohibited in SMS message content.
• Emergency alerts: use PSA (Public Service Announcement) use case — separate from general communications campaigns.
• Admissions outreach to prospective students: Marketing use case; requires documented marketing consent before outreach begins.

8.6 — Automotive

Service reminders and sales promotions must be registered as separate campaigns. Do not mix service department messages with inventory or sales messages in the same campaign.

• Service reminders, recall notifications: Customer Care use case
• Inventory alerts, sales promotions, test drive invitations: Marketing use case
• High-volume seasonal campaigns (Black Friday, end-of-year sales): trust score above 75 required for useful throughput. Build score with 90+ days of Customer Care history first.

8.7 — Staffing & Recruiting

Regulatory overlay: TCPA + state labor laws + TCR

Candidate outreach to individuals who have not applied to your organization requires documented marketing consent before any messages are sent. Purchasing candidate databases or scraping LinkedIn does not constitute consent.

• Job alert subscriptions (candidates who opted in): Marketing use case
• Active candidate interview scheduling: Customer Care use case
• Placed employee communications and updates: Customer Care use case

8.8 — Nonprofits & Political Campaigns

Fundraising and general advocacy: Charity use case. Political candidate or issue advocacy: Political use case (mandatory manual carrier review, 5–10 business day approval).

Peer-to-peer (P2P) texting platforms used by political campaigns have a distinct TCR pathway — verify with Infobip whether P2P traffic applies to your scenario before standard 10DLC registration.

Carrier policies are enforced independently from TCR registration. A campaign can be TCR-approved but still blocked or throttled by individual carriers if it violates their specific content or behavioral standards. The policies below were active as of February 2025.

9.1 — T-Mobile Active Enforcement Policies

T-Mobile Throughput Tiers:

• High trust (score >75): 60–225 messages per minute per campaign
• Medium trust (score 50–75): 30–60 messages per minute per campaign
• Low trust (score <50): 6 messages per minute per campaign

9.2 — AT&T Active Enforcement Policies

9.3 — Verizon Active Enforcement Policies

Verizon Auto-Suspension Triggers:

• Volume spike exceeding 300% within a 24-hour window (no warning issued)
• Spam complaint rate above 0.1%
• Opt-out rate above 5% in any rolling 7-day window
• Unusual geographic distribution pattern detected by ML
• Multiple carrier complaints within 48 hours — may trigger cross-carrier blocklist

9.4 — Cross-Carrier Standards (All Three Carriers)

9.5 — Prohibited Content: Cross-Carrier Quick Reference

MyTCRPlus.com provides 16 compliance tools accessible from the tools navigator. This section describes each tool, its intended use in the registration and administration workflow, and the URL.

Copy these templates directly into your campaign sample message fields. Replace all bracketed fields with real values — do not submit with placeholder brackets.

Marketing (Promotional)

[Brand]: [OFFER] — [discount or value]. Use code [CODE] at [full-domain-URL/path]

Reply STOP to unsubscribe. Msg & data rates may apply.

Example:

Acme: FLASH SALE — 40% off all orders this weekend. Use code FLASH40 at

acme.com/shop Reply STOP to unsubscribe. Msg & data rates may apply.

Appointment Reminder (Customer Care)

[Brand]: Reminder — your [appointment type] is [Day Month Date] at [Time] with

[provider/staff name if applicable]. Confirm: reply YES. Reschedule: call [PHONE].

Reply STOP to opt out. Msg & data rates may apply.

Example:

GreenLeaf Dental: Reminder — your cleaning is Wed Nov 6 at 2pm with Dr. Patel.

Confirm: reply YES. Reschedule: call 555-234-5678.

Reply STOP to opt out. Msg & data rates may apply.

Account Notification

[Brand]: Your [account type] account ending in [XXXX] balance is $[amount]

as of today. View full statement: [full-URL]. Reply STOP to opt out.

Msg & data rates may apply.

2FA / One-Time Passcode

[Brand]: Your verification code is [6-digit code]. This code expires in

[X] minutes. Do not share this code with anyone.

Reply STOP to opt out of security alerts.

Delivery Notification

[Brand]: Your order #[order number] has shipped and arrives [Day Month Date].

Track: [full-URL/tracking]. Reply STOP to opt out.

Msg & data rates may apply.

Re-Engagement (Low Volume Mixed)

[Brand]: We miss you! It has been a while since your last visit. As a valued

customer, here is [offer] — valid through [date]. Redeem: [full-URL].

Reply STOP to unsubscribe. Msg & data rates may apply.

Donation / Charity

[Organization]: Your support means everything. Help us reach our goal of

[$amount] by [date]. Donate: [full-URL]. Reply STOP to opt out.

Msg & data rates may apply.

Welcome / Opt-In Confirmation

[Brand]: Welcome! You are now subscribed to receive [message types].

Expect [frequency]. Msg & data rates may apply.

Reply STOP anytime to opt out, HELP for support. [URL]

Use these templates in your opt-in forms and verbal scripts. Generate customized versions at aio.mytcrplus.com. Replace all bracketed fields before deploying.

General Promotional SMS Consent

I consent to receive promotional text messages from [BRAND NAME] at the phone

number provided. Message frequency varies (up to [X] messages per month).

Message and data rates may apply. Text STOP to opt out or HELP for assistance.

View our Privacy Policy at [URL] and Terms of Service at [URL].

Consent is not a condition of purchase.

Transactional Only

By providing your phone number, you agree to receive order confirmations,

shipping updates, and account notifications from [BRAND NAME] at the number

provided. Message and data rates may apply. Reply STOP to opt out.

View our Privacy Policy at [URL].

Combined Transactional + Promotional

I consent to receive both transactional and promotional text messages from

[BRAND NAME]. Transactional messages include order confirmations, shipping

updates, and account notifications (approx. [X] messages per order).

Promotional messages include sales, offers, and marketing content (up to [X]

per month). Message and data rates may apply. Text STOP to opt out of

promotional messages or STOPALL to opt out of all. HELP for support.

Privacy Policy: [URL]. Terms: [URL].

Healthcare / HIPAA Context

I consent to receive appointment reminders and healthcare communications from

[PRACTICE NAME] at the number provided. Messages may include appointment

confirmations, prescription reminders, and health education content.

Message frequency varies based on your care schedule. Message and data rates

may apply. Text STOP to opt out or HELP for assistance.

Privacy Policy (including HIPAA notices): [URL].

Financial Services

I consent to receive account alerts, transaction notifications, and financial

product information from [BANK/INSTITUTION NAME]. Messages may include balance

alerts, fraud notifications, payment reminders, and promotional offers.

Message frequency varies (typically [X-Y] per month). Message and data rates

may apply. Text STOP to opt out or HELP for assistance. Privacy Policy: [URL].

Your information is protected under applicable federal financial privacy regulations.

Verbal Consent Script

"Before we continue, I want to let you know that [Brand] may send you text

messages about [purpose — e.g., appointment reminders / account updates /

promotional offers]. Standard message and data rates may apply, and you can

opt out at any time by replying STOP to any message.

Do you agree to receive text messages from us?"

[If YES — document: rep name, date/time, consumer response, phone number enrolled]

This reference summarizes content categories that will trigger rejection, throttling, or suspension across TCR and/or carrier networks. Consult mytcrplus.com/solutions for your specific vertical for expanded guidance.

SHAFT Categories — Terminal Prohibition

The following categories are blocked at the carrier level and cannot be registered or transmitted through standard 10DLC channels under any circumstances:

Extended Prohibited Categories

High-Scrutiny Categories — Not Banned, Elevated Review

• Debt collection: 3 message per week per recipient maximum (enforced by AT&T and Verizon). Legal disclaimers required in message content. Manual review likely.
• Credit repair services: Elevated scrutiny. Must clearly disclose services. High rejection rate without precise documentation.
• Insurance promotions: Standard scrutiny but above-average rejection rate. Ensure use case (Marketing) matches content precisely.
• Investment products: Elevated scrutiny. Financial services disclaimers recommended. No unlicensed investment advice.
• Pharmaceutical — non-controlled substances: Standard scrutiny. Prescription drug promotions require heightened consent documentation.

Legal Disclaimer

This guide provides operational guidance based on established TCR requirements, CTIA standards, TCPA requirements,

and carrier policies as of February 2025. Carrier policies, TCR standards, and regulatory interpretations change

frequently. Outcomes depend on your specific business registration status, consent documentation quality,

and carrier-specific review criteria outside MyTCRPlus.com's and Infobip's control.

MyTCRPlus.com does not provide legal advice. Organizations should consult qualified legal counsel

for compliance determinations specific to their business, industry, and jurisdiction.