Skip to content
AutoLens logo
← All articles

SMS Compliance for Dealerships: Opt-In, Opt-Out and Records

SMS Compliance for Dealerships: Opt-In, Opt-Out and Records

Dealer and customer discuss text-message consent

A dealership can text customers legally if it has the right consent for the type of message, honors every opt-out, texts only at reasonable hours, identifies itself, and keeps proof. In the US, the Telephone Consumer Protection Act (TCPA) sets the baseline, and carrier rules for registered business texting add a second layer. This guide walks through what to collect, what to say, how long to keep it and where dealers most often slip.

Autolenstudios
Manage Buyer Inquiries More Efficiently
AutoLens helps dealerships manage buyer inquiries with real-time AI replies and lead tracking, alongside tools for creating inventory listings.

TL;DR

  • Get clear, written, affirmative consent before any marketing text. Silence, pre-checked boxes and consent buried in general terms do not count.
  • Match consent to purpose. Permission given for a sales inquiry or a service appointment does not automatically cover promotions.
  • Honor “STOP” and similar replies fast. Under the FCC’s revocation rule, you have up to 10 business days, but stopping immediately is the safer habit.
  • Keep consent records: timestamp, IP address, a screenshot of the form and the wording version the customer saw.
  • Send marketing texts inside the recipient’s local daytime hours and identify the dealership in every message.

Table of Contents

What SMS compliance means for a dealership

SMS compliance means following the consent, content, timing and record-keeping rules that govern text messages to consumers. For a dealership it comes down to a simple chain: you had permission, you said who you were, you texted at a reasonable time, you made stopping easy, and you can prove all of it later.

The rules differ by country. In the US, the TCPA requires prior express written consent before marketing texts and expects opt-outs to be honored within 10 business days. In Canada, CASL requires express consent for promotional messages, with implied consent allowed only in specific cases, and each text must identify the sender and offer a simple unsubscribe method. The UK and EU work under GDPR and PECR, where the ICO describes valid consent as freely given, specific, informed and unambiguous.

SMS consent and opt-out rules across regions

This article focuses on the US, where most dealership texting disputes arise. If you also sell to Canadian customers, apply the stricter standard of the two to those conversations and check CASL guidance separately.

Marketing texts vs. service and transactional texts

The type of message decides how much consent you need. A text that promotes a sale, a trade-in event or financing is marketing and needs the highest level of consent. A text that directly relates to the reason the customer gave you their number sits lower on the scale. Transactional messages carry a lower consent bar and must relate directly to the purpose for which the number was collected.

In dealership terms:

Message Typical category What to have in place
“Your service appointment is tomorrow at 9:00” Transactional Number given for scheduling, clear opt-out
“Your vehicle is ready for pickup” Transactional Number given for that service visit
“Reply to confirm your test drive Saturday” Transactional / sales inquiry Customer asked for the test drive
“Spring trade-in event, 0% financing” Marketing Express written consent for marketing texts
“New SUVs just arrived” sent to past service customers Marketing Marketing consent, not just a repair order

The last row is where dealerships get caught. Consent is scoped to purpose, so permission collected for one reason does not cover unrelated promotional texts. Fisher Phillips, a law firm that advises dealers, recommends regular audits of communication practices so that, for example, service customers are not accidentally enrolled in finance promotions.

A practical habit: tag every contact in your system with the purpose of consent (sales inquiry, service, marketing) and block marketing sends to anyone who lacks the marketing tag.

Consent must be explicit and affirmative. Silence, pre-checked boxes and bundled consent are treated as non-compliant. The Georgia Automobile Dealers Association’s compliance refresher says dealerships can obtain written consent through buyers’ orders, repair orders, online applications or appointment pages with an “I agree” button.

Where dealerships usually collect it

  • Showroom paperwork. A separate checkbox or signature line on the buyer’s order or credit application, not a clause inside the general terms.
  • Service desk. A line on the repair order or check-in tablet that covers service updates, with a distinct, optional line for marketing.
  • Website forms. Lead forms, trade-in valuation forms and appointment schedulers with an unchecked box and the full disclosure next to the button.
  • Inbound texts. When a customer texts you first, reply to their question. That reply is not an invitation to start promotions.

What the disclosure should say

Per the same GCADA guidance, a good disclosure should:

  1. Identify the dealership by name.
  2. Explain that messages are recurring and how often to expect them.
  3. Give customer-care contact details and opt-out instructions.
  4. Disclose that message and data rates may apply.
  5. State that consent is not a condition of purchase.

It should also be clear and conspicuous, separate from general terms and conditions, and never pre-checked. CTIA, the wireless industry association, notes that opt-in procedures reduce unwanted messages and help keep texts from reaching a number that does not belong to the person who signed up.

A sample line for a web form, which your attorney should review before you use it:

By checking this box, I agree to receive recurring text messages from [Dealership Name] about vehicle offers and promotions at the number provided. Message frequency varies. Message and data rates may apply. Reply STOP to cancel or HELP for help. Consent is not a condition of any purchase.

Keep proof of every opt-in

If a customer says “I never agreed,” the burden of showing otherwise falls on you. Fisher Phillips advises dealerships to retain timestamps, IP addresses, screenshots of web forms and the version history of consent language.

A workable record for each contact includes:

  • The phone number and the customer’s name
  • Date and time of consent
  • Where it happened (form URL, desk, paper deal jacket)
  • The exact wording shown, with a version number
  • For web forms, the IP address and a saved screenshot of the form
  • The date and method of any later opt-out

Paper consent should be scanned and linked to the customer record, not left in a deal jacket that gets archived. Audit trails matter beyond texting, and this overview of consent documentation and audit trails in sales follow-up shows how teams think about logging each touchpoint.

Honoring opt-outs

Every marketing message should tell the recipient how to stop it, such as a STOP instruction. Opt-outs should be honored promptly, ideally immediately.

The legal clock is more generous than the best practice. The FCC’s revocation rule has been in force since April 2025, and it requires businesses to honor revocation through any reasonable method, process requests within 10 business days and recognize standard keywords such as “stop” and “revoke.” In practice that means a customer who replies “please stop texting me” or “unsubscribe” in plain words has opted out, even if your template said to reply STOP.

To make this work:

  • Configure your texting system to treat standard stop words as automatic opt-outs.
  • Have staff log verbal and email opt-out requests in the customer record the same day.
  • Maintain one suppression list that every tool and every salesperson’s phone respects.
  • Confirm the opt-out with a single message, and then stay silent.

For Canadian customers, the CRTC says unsubscribe mechanisms must be functioning and readily performed, for instance a STOP reply or a link in the message.

Timing, sender identity and do-not-call lists

Timing. The GCADA refresher says texts should not go out before 8:00 a.m. or after 9:00 p.m. in the recipient’s time zone. The Telemarketing Sales Rule uses the same 8 a.m. to 9 p.m. window for telemarketing. Some messaging providers recommend a tighter window, 8 a.m. to 8 p.m. local time, and following the narrower one costs you almost nothing. Check the customer’s area code against their actual location where you can, since a number from out of state may sit in a different time zone. Transactional messages are generally exempt from quiet-hour rules, though avoiding late-night texts is sensible judgment.

Sender identification. Every message must say who it is from. Start with the dealership name: “Hi Maria, this is Lakeside Motors.”

Do-not-call lists. Scrub marketing lists against the National Do Not Call Registry and your own internal suppression list before each campaign, and keep the scrub date in your records.

10DLC registration. In the US, business texts sent from local 10-digit numbers are generally registered with carriers through a brand and campaign registration process, known as 10DLC. Your messaging provider handles the filing, but you supply accurate business details and sample messages that match what you actually send. Content in restricted categories may require carrier approval, and messages that stray from the registered use case risk being filtered.

Timing, sender identity and do-not-call lists

Lists, inquiries and customer records

Three data sources cause the most trouble.

  • Purchased or shared lists. Purchased, rented or shared lists are non-compliant. Do not text anyone who did not give you consent directly. If you work with a lead vendor, ask in writing how consent was captured and keep the answer. This explanation of contact-list sourcing and platform compliance is a good primer on why list origin matters.
  • Inquiry details. A shopper who submits a form asking about a specific truck gave you their number for that conversation. Answer the question. Do not add them to a monthly promotion blast unless the form included separate marketing consent.
  • Existing customer records. Old deal files are not blanket permission. Unless you captured marketing consent when they bought or serviced, treat them as not opted in. In the UK, PECR has a “soft opt-in” for existing customers who bought similar products, provided they had a clear opt-out when their details were collected and in every message. US law has no equivalent shortcut for marketing texts, so do not assume one.

Penalties and a pre-send checklist

TCPA violations can carry private legal remedies, meaning customers, and not only regulators, can bring claims. Counsel generally treat that exposure as the reason to document everything. For the dealership, a handful of complaints about unwanted texts can become expensive, and a messaging provider can also suspend your number if carriers see a pattern of complaints.

Before each send, confirm:

  1. Destination. The number belongs to a customer in a country and time zone you have checked.
  2. Consent and proof. The contact has the right type of consent for this message, and you can produce the record.
  3. Sender and content. The message names the dealership, matches your registered use case and contains no restricted content without approval.
  4. Timing. It will arrive within local daytime hours.
  5. Opt-out. Stop instructions are included and your suppression list is applied.

Print it and tape it next to the marketing manager’s monitor. Run a quarterly audit: sample 25 contacts, find their consent records, and note any you cannot produce.

Perspective: automated replies change the compliance picture

Most compliance advice for dealers assumes a human types every text. That is no longer how leads are handled. Shoppers message you on Facebook Marketplace at 10 p.m. on a Sunday, and the dealers who answer first tend to keep the conversation.

We built our AI Responder around the idea that a fast reply should still sound like your store. It answers buyer inquiries over SMS in your dealership’s voice, and it hands the conversation to your staff when negotiation or personal follow-up is needed. That handoff matters for compliance too: the person who knows what the customer agreed to is the one who should decide whether a promotional follow-up is appropriate.

Our view is simple. Reply to the inquiry the customer made, keep that conversation about the vehicle they asked about, and keep promotions on a separate track that requires its own consent. A focused tool that does listings and SMS well makes that separation easier than a sprawling system that tries to blast everything to everyone. You remain responsible for your consent language and records, so have your attorney review them.

Adam

Answering Marketplace leads without crossing the line

Marketplace inquiries are a good example of consent in practice. A buyer who messages about a listing wants an answer about that unit. A prompt, relevant reply, such as availability, price confirmation or a time to see the vehicle, is the conversation they started. If you want to move that thread to text, ask for permission clearly. Our write-up on converting Messenger conversations to SMS covers what tends to work, and our guide to Marketplace auto responses shows how to keep replies useful and specific.

Good habits for automated and manual replies alike:

  • State who is texting in the first message.
  • Keep the topic to the vehicle or appointment discussed.
  • Offer a clear way to stop.
  • Route price negotiation and personal questions to a staff member.
  • Log the conversation and any opt-out in the lead record.

For more on how automated texting works in a store, see how an AI SMS responder works for dealerships. To tighten the questions your team asks on first contact, use our lead qualification questions.

Handle SMS leads with AutoLens

If you list inventory on Facebook Marketplace and want inquiries answered quickly in your own voice, the AutoLens AI Responder handles buyer inquiries over SMS and passes the conversation to your team when it needs a person. Leads then move through a nine-stage pipeline with role-based dashboards, tasks, and metrics such as speed-to-lead and inventory aging.

Plans are billed monthly: Extension at 79 CAD per month, Individual at 130 CAD per month and Team at 219 CAD per month, with extra users at 100 CAD per month per user. Dealer Groups pricing is not published. See the pricing page for details, or book a demo to see it with your own inventory.

Autolenstudios

FAQ

Do I need written consent to text a customer about their service appointment?

Not necessarily the same level as for marketing. Appointment reminders and service updates are transactional and must relate directly to why the customer gave you their number. Capture that number with a clear service-communication line on the repair order or check-in form, and include opt-out instructions.

Can I text customers from my old sales records?

Only if they gave marketing consent that you can document. A past purchase or repair order does not by itself cover promotional texts, and consent is limited to the purpose for which it was given. If you cannot find a record, treat the contact as not opted in and ask again through a compliant form.

How long do I have to honor a STOP request?

The FCC’s revocation rule allows up to 10 business days, but best practice is to stop immediately and automatically. Also recognize plain-language requests, not just the word STOP, and record every opt-out in the customer file.

What time can a dealership send marketing texts?

Keep marketing texts between 8:00 a.m. and 9:00 p.m. in the recipient’s local time at the very latest. Many teams choose 8 a.m. to 8 p.m. to leave a margin, and check the customer’s time zone rather than assuming your own.

Does 10DLC registration make my texting compliant?

No. Registration identifies your business and use case to carriers, but it does not replace customer consent, opt-out handling or record-keeping. Send only the types of messages you registered.

Sources