TCPA Texting Compliance for Service Businesses in 2026: What Changed

If your business texts leads back — quotes, appointment reminders, "still interested?" follow-ups — you're operating under federal rules that shifted twice in the last eighteen months. Getting this wrong doesn't just risk a fine. It risks a class action.

TCPA lawsuits have risen nearly 27% to start 2026 compared to 2025, and TCPA class action filings hit 2,788 in 2024 alone — a 67% increase over 2023. For a service business that texts every lead who fills out a form, that's not background noise. That's direct exposure, and most owners have no idea their follow-up sequence is the liability.

Why This Matters More in 2026 Than It Did Last Year

Two things changed recently, and both cut against businesses that haven't kept up.

First, penalties didn't move — they're still $500 to $1,500 per violation — but "per violation" means per text message, not per campaign. A follow-up sequence that sends five texts to one non-consenting lead is five violations, not one. Plaintiffs' firms that specialize in TCPA claims know this and file accordingly.

Second, opt-out rules got stricter. As of April 11, 2025, businesses must accept opt-out requests through any reasonable method — not just the text keyword "STOP." A lead who tells your receptionist "please stop texting me" or emails asking to be removed has just as much legal standing as one who texted STOP. If your system only tracks STOP replies, you're already out of compliance.

What Actually Changed on the Consent Side

Here's where it gets more favorable, and where a lot of outdated advice is still circulating. In January 2025, the Eleventh Circuit Court of Appeals vacated the FCC's proposed "one-to-one consent" rule — the rule that would have required a separate, specific consent for every individual business texting a lead, even ones from the same form submission. That rule never took effect. The FCC has since deleted the vacated language, and as of 2026 the standard reverts to the pre-2023 baseline: prior express written consent, without the one-to-one restriction.

Separately, the FCC's "revocation-all" rule — which would have treated any single opt-out as a blanket revocation across every purpose and channel a business uses to contact that person — was delayed until January 31, 2027. It's coming, just not yet.

The practical takeaway: the rules right now are more workable than the doom-and-gloom compliance blog posts from 2024 suggested, but the enforcement environment is more aggressive than ever. Loose consent practices that got no one's attention two years ago are exactly what plaintiffs' attorneys are actively searching for today.

The Compliance Checklist

This is what actually matters for a service business texting leads and customers:

• Get written consent, not implied. A phone number entered into a "request a quote" form is not automatically consent to text. Your form needs an explicit checkbox or statement: "By submitting, you agree to receive text messages about your request. Msg & data rates may apply. Reply STOP to opt out."
• Log every consent with a timestamp. If you're ever challenged, "we have a record showing when and how this person opted in" is the entire defense. No record, no defense.
• Accept opt-outs through any channel. A phone call, an email, a reply that isn't the word STOP — all of it counts now. Your CRM or texting platform needs a manual override to suppress a number the moment any opt-out request comes in, regardless of format.
• Don't share consent across brands. If you run multiple business entities or DBAs, consent captured for one doesn't cover the others. Each sender needs its own consent.
• Keep marketing texts inside reasonable hours. Industry guidance and most state laws treat 8 a.m. to 9 p.m. local time as the safe window for non-transactional messages.
• Identify yourself in the first message. A text from an unrecognized number with no business name attached is exactly what triggers a complaint. Lead with who you are.

Where Automated Follow-Up Systems Create Risk

Most TCPA exposure for service businesses doesn't come from a human typing texts one at a time — it comes from automated follow-up sequences that fire on a schedule regardless of what happened in between. A lead opts out on message two, but the sequence was already queued through message five. That's not a hypothetical; it's the single most common way service businesses end up on the wrong end of a complaint.

If you're running automated lead follow-up or an AI receptionist that captures leads after hours, the opt-out check needs to happen in real time, not on a nightly batch job. Whatever system sends the text needs to check suppression status immediately before every single send — not just at the start of the sequence.

The Real Cost of Getting This Wrong

A single TCPA violation is $500 to $1,500. A follow-up sequence sent to a list of 200 non-consenting numbers, five messages each, is a thousand violations before anyone even files a claim — and TCPA is a strict liability statute, meaning intent doesn't matter. "We didn't know the rules changed" isn't a defense.

The fix costs almost nothing compared to the exposure: an explicit consent checkbox, a documented opt-out process, and a follow-up system that actually respects it. If you want a second set of eyes on your current lead-capture forms and text follow-up flow, that's something we check as part of every free AI marketing audit — a quick pass can catch a consent gap before it becomes a legal one.

Sources

• ActiveProspect: TCPA Text Messages Rules and Regulations Guide for 2026
• Fisher Phillips: Text Message Lawsuits on the Rise
• Morrison Foerster: Eleventh Circuit Vacates FCC's TCPA One-to-One Consent Rule
• ComplianceHub: The TCPA in 2026