Sign in See what your database is worth
Compliance · Logan Bates

TCPA-Compliant Texting for Real Estate Agents: The 2026 Rules You Can't Break

The TCPA rules that decide whether your texts are legal in 2026, what actually counts as consent, the April 2025 opt-out requirement, the one-to-one consent rule, and how to text your database without triggering a lawsuit.

TCPA real estate textingTCPA compliance real estatereal estate SMS compliancetext cold real estate leads legallyone-to-one consent real estate

Most agents I talk to want to text their old leads but worry about getting sued. That worry is reasonable. TCPA statutory damages run $500 per violating message, rising to $1,500 where the violation is willful or knowing, and there is no cap on the total. Texting old leads is not casual, but it’s also not impossible. The agents who text their databases compliantly are not breaking the law; they’re just following a specific set of rules most agents have never read.

This guide is what you actually need to know in 2026. What counts as consent, the opt-out rules that took effect in April 2025, what happened to the one-to-one consent rule you may have read about, and the practical checklist for texting your CRM contacts without ending up in a TCPA class action. Quick disclaimer: this is informational, not legal advice. For your specific situation, talk to a real lawyer.

The single most important rule

If you take one thing from this post: before you can legally text any consumer for marketing or sales purposes, you need their prior express written consent. Period.

That’s the foundation of the entire Telephone Consumer Protection Act (TCPA) for SMS. It’s a 1991 federal law that treats every text message as a “call,” and it’s enforced both by the FCC and by a robust private litigation industry, plaintiffs can sue you directly under 47 U.S.C. 227(b)(3) and collect $500 per non-compliant text, trebled to $1,500 where the violation is willful or knowing, with no cap on total liability.

The exposure is real at class scale. Duane Morris tracks the ten largest TCPA class settlements each year, and that top-ten figure was $69.1 million in 2025, down from $84.73 million in 2024 and $103.45 million in 2023. Those are the headline cases, not the median outcome, and the trend has been downward for three years. Treat them as evidence the plaintiffs’ bar is active, not as a forecast of what a single agent faces.

The good news for real estate agents: most leads in your CRM did give you consent when they originally came in. You just need to confirm it and document it.

The law has specific requirements. To be TCPA-compliant, the consent must be:

  1. In writing, verbal consent isn’t enough for marketing texts. The consumer must have agreed in writing (which includes online checkboxes, signed forms, web form submissions with clear text disclosures, etc.).
  2. Clear and conspicuous, the language can’t be buried. The disclosure must explicitly say the consumer is agreeing to receive marketing texts, identify who’s sending them, and mention that consent isn’t a condition of any purchase.
  3. Matched to who is actually sending, consent obtained in a context that never identified you is weak ground for a marketing text from you. Note that the FCC’s attempt to make this a hard, seller-by-seller requirement was struck down, which is covered below, so this is a question of how defensible your consent record is rather than a bright-line rule.
  4. For the type of message being sent, consent for “occasional listing updates” isn’t the same as consent for “marketing texts about your real estate plans.” Match the consent to the message.

For a real estate agent, the typical consent moments are:

  • Lead capture forms on your website with a TCPA disclosure and consent checkbox
  • IDX search registrations that include consent language
  • Open house sign-in sheets with explicit text-consent language
  • Buyer/seller agreements that include SMS consent
  • Direct prior business relationships (past clients, where the relationship itself implies consent for non-marketing communication, but for marketing you still need express written consent)

If a lead came in through a portal (Zillow, Realtor.com, etc.), the portal typically captures the consent, but you should check what that consent actually authorized and who it named, not just that a box was ticked somewhere.

You have probably read that a “one-to-one consent rule” requires every consumer to consent to your business by name, killing shared lead-generation consent. That rule is not in force, and it never took effect.

The history matters, because the dates get misremembered. The FCC adopted the rule as part of a 2023 order. It was scheduled to take effect on January 27, 2025. The FCC then postponed that effective date to January 26, 2026 while the rule was under judicial review. Before either date arrived, the Eleventh Circuit vacated the rule on January 24, 2025 in Insurance Marketing Coalition v. FCC, holding that the Commission had exceeded its statutory authority by redefining “prior express consent.” The postponed 2026 date became moot the moment the rule was struck down, and the FCC has since formally repealed the vacated language and removed it from the Code of Federal Regulations.

So the pre-existing standard still governs: consent obtained through a shared or multi-seller lead form has not been outlawed, and the ordinary meaning of prior express written consent applies.

Do not read that as a green light for purchased lists. The vacatur removed a stricter rule that never took effect. It did not loosen the underlying requirement, which has been in place since 1991. A list whose consent language never contemplated marketing texts from a real estate agent was a problem before this litigation and remains one.

The good news for reactivation specifically: leads who signed up on your forms, attended your open houses, or registered on your IDX site gave consent directly to you. That is the cleanest category under any version of the rule, struck down or not.

The April 2025 opt-out rule

The other recent change worth knowing: in April 2025, the FCC updated the opt-out rules to require businesses to honor opt-out requests made through “any reasonable method”, not just the standard keyword “STOP.”

What this means:

  • If a consumer texts “stop,” “unsubscribe,” “remove me,” “quit,” or anything similar, you must honor it
  • If a consumer says “please stop texting me” in an email, voicemail, or even verbally, you must honor it across all your texting
  • Businesses must process opt-out requests within 10 business days, though real-time is best practice
  • An opt-out request to one of your campaigns applies across all of your campaigns

Practical implication: you need a real opt-out system, not just a “STOP” keyword. If a lead replies “no thanks, take me off your list”. That’s an opt-out, even though they didn’t type the magic word.

The compliance checklist for texting your old leads

Here’s the practical, do-this-before-you-text checklist:

1. Audit your database for consent. For each lead, can you point to when and how they gave you written consent to be texted for marketing? If yes, they’re textable. If no, they’re not, even if they’re a past contact.

2. Identify the originally-on-your-forms leads as the textable subset. These are your safest bets: leads who filled out a form on your website, registered on your IDX, signed in at your open house, or otherwise opted in directly to you. This is the cleanest category, and it has been throughout every turn the consent rules have taken.

3. Be cautious with purchased leads and shared lists. If you bought leads from a third party, read the actual consent language the consumer saw and check whether it authorized marketing texts and identified who would be sending them. If it did not, don’t text them. Call or email instead, since different consent rules apply. The same call-first caution applies to cold prospects who never opted in at all, like FSBOs: here’s how to work FSBO sellers without tripping the TCPA.

4. Don’t text past clients without consent unless you have an established business relationship for that purpose. Past clients are not automatically textable for marketing just because you closed a deal. The original transaction is a “prior business relationship” which gives you limited rights, but for marketing texts, you generally still need express written consent. When in doubt, ask: “Hey, mind if I text you occasional market updates?” before adding them to a reactivation campaign.

5. Identify yourself in every message. The recipient must be able to tell who sent the message. “Hey [Name], this is [Your Name] with [Brokerage]”. That’s the minimum. Don’t text from a number with no context.

6. Include an opt-out in every marketing message. The standard is “Reply STOP to opt out” at the end. This is non-negotiable. Every. Single. Message.

7. Honor opt-outs immediately, and broadly. When someone opts out, remove them from all your lists, not just the one they replied to. Process within 10 business days at the maximum; same-day is the safe practice.

8. Respect time-of-day rules. FCC rules bar telephone solicitations before 8 AM or after 9 PM in the called party’s local time zone, and those quiet hours apply to texts, not just voice calls. Send at 6 AM and you are in the window plaintiffs are currently suing over.

Worth knowing the wrinkle, because it cuts both ways. A “telephone solicitation” excludes a message sent with the recipient’s prior express invitation or permission, which arguably puts your properly opted-in database outside the quiet-hours rule entirely. Courts have not resolved that, an industry petition asking the FCC to confirm it is still pending, and there is an active wave of class actions built on the opposite reading. So the honest position is that you may well be exempt and it is not worth finding out. Send between 8 and 9 local, and the question never comes up.

9. Check state-level rules. About a dozen states have their own SMS laws stricter than the TCPA. Florida’s FTSA is particularly aggressive, explicit consent required for marketing texts, with state-level enforcement and penalties. Connecticut, Oklahoma, and Washington also have their own frameworks. If you operate in or text into these states, the state law usually controls.

10. Document everything. Keep records of how each lead gave consent, when, and through which form. If you’re ever challenged, the burden is on you to prove consent, not on the consumer to prove they didn’t give it.

Practical templates that comply

Here are the elements a compliant reactivation text needs, in order:

  1. Identification (“Hey [Name], this is [Your Name] with [Brokerage]”)
  2. A clear purpose (a real reason for the text, not just “hi”)
  3. A simple question or value offer (single ask, low pressure)
  4. The opt-out (“Reply STOP to opt out”)

Putting it together:

“Hey [Name], this is [Agent] with [Brokerage]. Quick question, are you still keeping an eye on the market, or has that taken a back seat for now? Reply STOP to opt out.”

That’s all four elements. Compliant, low-pressure, gets replies. (For more reactivation scripts, see our 7 scripts that get replies.)

Why this is solvable, not scary

Reading a TCPA guide for the first time can feel like the right move is to never text anyone again. Don’t do that. The TCPA is not designed to prevent real estate agents from texting their own opted-in databases. It’s designed to prevent spam, purchased lists, blasts to strangers, ignored opt-outs, deceptive identification.

If you’re texting people who gave you consent through your own channels, identifying yourself clearly, including an opt-out, and respecting “stop” when you get it, you are operating within the spirit and letter of the law. Plaintiffs’ attorneys don’t go after agents doing this; they go after operators sending bulk texts to purchased lists with no consent and no opt-outs.

The practical bar is: be the kind of texter you’d want to receive a text from. Identify yourself. Don’t spam. Honor “no.” Keep records. That’s the system.

When automation helps you stay compliant

A common worry: “If I’m running a 1,000-text reactivation campaign by hand, am I going to mess up the compliance somewhere?” That worry is legitimate. Manual SMS at scale is where most agents accidentally violate something, sending outside hours, missing an opt-out in a long reply thread, forgetting the STOP language in one variant.

This is where automated reactivation platforms, built specifically for compliance, actually reduce your risk rather than add to it. Klosed handles the compliance layer automatically: every outbound message includes the opt-out, time-of-day restrictions are respected, “STOP” and reasonable variants are auto-honored across the entire database, identification is built into every text, and consent records are maintained. You don’t have to remember those rules on every message; the system enforces them.

That said, no platform absolves you of the underlying responsibility. You still need to ensure the leads you upload gave consent in the first place. Compliance starts with your database, not your texting tool.

Logan Bates, Founder, Klosed. This article is for informational purposes only and is not legal advice. For specific guidance on your situation, consult a qualified attorney familiar with TCPA and your state’s telemarketing laws.