TCPA-Compliant Texting for Real Estate Agents: The 2026 Rules You Can't Break

The TCPA rules that decide whether your texts are legal in 2026 — what actually counts as consent, the April 2025 opt-out requirement, the one-to-one consent rule, and how to text your database without triggering a lawsuit.

Most agents I talk to want to text their old leads but worry about getting sued. That worry is reasonable. TCPA violations cost $500 to $1,500 per message, and a single careless campaign to 1,000 leads can theoretically expose an agent to over $1 million in statutory damages. Texting old leads is not casual — but it’s also not impossible. The agents who text their databases compliantly are not breaking the law; they’re just following a specific set of rules most agents have never read.

This guide is what you actually need to know in 2026. What counts as consent, the new opt-out rules that took effect in 2025, the one-to-one consent rule that landed in January 2026, and the practical checklist for texting your CRM contacts without ending up in a TCPA class action. Quick disclaimer: this is informational, not legal advice. For your specific situation, talk to a real lawyer.

The single most important rule

If you take one thing from this post: before you can legally text any consumer for marketing or sales purposes, you need their prior express written consent. Period.

That’s the foundation of the entire Telephone Consumer Protection Act (TCPA) for SMS. It’s a 1991 federal law that treats every text message as a “call,” and it’s enforced both by the FCC and by a robust private litigation industry — plaintiffs can sue you directly and collect $500-$1,500 per non-compliant text, with no cap on total liability. TCPA settlements exceeded $150 million in 2025 alone, and total TCPA judgments have crossed $925 million in recent years.

Penalties of $500-$1,500 per message stack fast. A single 1,000-lead campaign without proper consent: $500,000 to $1,500,000 in potential exposure. That’s not a hypothetical — it’s the calculation plaintiffs’ attorneys run when deciding which campaigns to sue.

The good news for real estate agents: most leads in your CRM did give you consent when they originally came in. You just need to confirm it and document it.

The law has specific requirements. To be TCPA-compliant, the consent must be:

  1. In writing — verbal consent isn’t enough for marketing texts. The consumer must have agreed in writing (which includes online checkboxes, signed forms, web form submissions with clear text disclosures, etc.).
  2. Clear and conspicuous — the language can’t be buried. The disclosure must explicitly say the consumer is agreeing to receive marketing texts, identify who’s sending them, and mention that consent isn’t a condition of any purchase.
  3. Specific to the sender — as of January 2026, the new one-to-one consent rule closed the so-called “lead generator loophole.” Consent given to one company cannot be shared, sold, or transferred to another. Each business that contacts a consumer needs its own consent from that consumer.
  4. For the type of message being sent — consent for “occasional listing updates” isn’t the same as consent for “marketing texts about your real estate plans.” Match the consent to the message.

For a real estate agent, the typical consent moments are:

  • Lead capture forms on your website with a TCPA disclosure and consent checkbox
  • IDX search registrations that include consent language
  • Open house sign-in sheets with explicit text-consent language
  • Buyer/seller agreements that include SMS consent
  • Direct prior business relationships (past clients, where the relationship itself implies consent for non-marketing communication, but for marketing you still need express written consent)

If a lead came in through a portal (Zillow, Realtor.com, etc.), the portal typically captures the consent — but you should verify that the consent specifically named you (post-January 2026) and authorized marketing texts, not just general communication.

This is the big change agents need to understand. As of January 2026, the FCC’s one-to-one consent rule fundamentally changed how lead generation works.

What it means in practice:

  • You can’t buy a lead list and text it, even if those leads “consented” to be contacted by “agents” generally. That blanket consent is no longer valid.
  • Each individual lead must have specifically consented to be contacted by your business by name.
  • Lead generators must now obtain separate consent for each company they share data with. This closed a huge loophole and significantly affects affiliate marketing in real estate.

The practical implication: purchased lead lists are now significantly riskier than they used to be. A 2025 list that gave you consent to text under the old framework may not be valid in 2026. If you’re texting purchased leads, you should verify the consent was structured to comply with one-to-one.

The good news for reactivation specifically: leads who originally signed up on your forms, attended your open houses, or registered on your IDX site gave consent directly to you. That consent is still valid for one-to-one purposes — you’re the named recipient.

The April 2025 opt-out rule

The other recent change worth knowing: in April 2025, the FCC updated the opt-out rules to require businesses to honor opt-out requests made through “any reasonable method” — not just the standard keyword “STOP.”

What this means:

  • If a consumer texts “stop,” “unsubscribe,” “remove me,” “quit,” or anything similar — you must honor it
  • If a consumer says “please stop texting me” in an email, voicemail, or even verbally — you must honor it across all your texting
  • Businesses must process opt-out requests within 10 business days, though real-time is best practice
  • An opt-out request to one of your campaigns applies across all of your campaigns

Practical implication: you need a real opt-out system, not just a “STOP” keyword. If a lead replies “no thanks, take me off your list” — that’s an opt-out, even though they didn’t type the magic word.

The compliance checklist for texting your old leads

Here’s the practical, do-this-before-you-text checklist:

1. Audit your database for consent. For each lead, can you point to when and how they gave you written consent to be texted for marketing? If yes, they’re textable. If no, they’re not — even if they’re a past contact.

2. Identify the originally-on-your-forms leads as the textable subset. These are your safest bets: leads who filled out a form on your website, registered on your IDX, signed in at your open house, or otherwise opted in directly to you. Post-January 2026, this is the cleanest category.

3. Be cautious with purchased leads and shared lists. If you bought leads from a third party, verify the consent was structured for one-to-one compliance and specifically named you. If not, don’t text them — call or email instead (different consent rules apply). The same call-first caution applies to cold prospects who never opted in at all, like FSBOs — here’s how to work FSBO sellers without tripping the TCPA.

4. Don’t text past clients without consent unless you have an established business relationship for that purpose. Past clients are not automatically textable for marketing just because you closed a deal. The original transaction is a “prior business relationship” which gives you limited rights — but for marketing texts, you generally still need express written consent. When in doubt, ask: “Hey, mind if I text you occasional market updates?” before adding them to a reactivation campaign.

5. Identify yourself in every message. The recipient must be able to tell who sent the message. “Hey [Name], this is [Your Name] with [Brokerage]” — that’s the minimum. Don’t text from a number with no context.

6. Include an opt-out in every marketing message. The standard is “Reply STOP to opt out” at the end. This is non-negotiable. Every. Single. Message.

7. Honor opt-outs immediately — and broadly. When someone opts out, remove them from all your lists, not just the one they replied to. Process within 10 business days at the maximum; same-day is the safe practice.

8. Respect time-of-day rules. TCPA restricts texting to between 8 AM and 9 PM in the recipient’s local time zone. Sending at 6 AM might feel harmless to you, but it’s a violation.

9. Check state-level rules. About a dozen states have their own SMS laws stricter than the TCPA. Florida’s FTSA is particularly aggressive — explicit consent required for marketing texts, with state-level enforcement and penalties. Connecticut, Oklahoma, and Washington also have their own frameworks. If you operate in or text into these states, the state law usually controls.

10. Document everything. Keep records of how each lead gave consent, when, and through which form. If you’re ever challenged, the burden is on you to prove consent — not on the consumer to prove they didn’t give it.

Practical templates that comply

Here are the elements a compliant reactivation text needs, in order:

  1. Identification (“Hey [Name], this is [Your Name] with [Brokerage]”)
  2. A clear purpose (a real reason for the text — not just “hi”)
  3. A simple question or value offer (single ask, low pressure)
  4. The opt-out (“Reply STOP to opt out”)

Putting it together:

“Hey [Name], this is [Agent] with [Brokerage]. Quick question — are you still keeping an eye on the market, or has that taken a back seat for now? Reply STOP to opt out.”

That’s all four elements. Compliant, low-pressure, gets replies. (For more reactivation scripts, see our 7 scripts that get replies.)

Why this is solvable, not scary

Reading a TCPA guide for the first time can feel like the right move is to never text anyone again. Don’t do that. The TCPA is not designed to prevent real estate agents from texting their own opted-in databases. It’s designed to prevent spam — purchased lists, blasts to strangers, ignored opt-outs, deceptive identification.

If you’re texting people who gave you consent through your own channels, identifying yourself clearly, including an opt-out, and respecting “stop” when you get it — you are operating within the spirit and letter of the law. Plaintiffs’ attorneys don’t go after agents doing this; they go after operators sending bulk texts to purchased lists with no consent and no opt-outs.

The practical bar is: be the kind of texter you’d want to receive a text from. Identify yourself. Don’t spam. Honor “no.” Keep records. That’s the system.

When automation helps you stay compliant

A common worry: “If I’m running a 1,000-text reactivation campaign by hand, am I going to mess up the compliance somewhere?” That worry is legitimate. Manual SMS at scale is where most agents accidentally violate something — sending outside hours, missing an opt-out in a long reply thread, forgetting the STOP language in one variant.

This is where automated reactivation platforms — built specifically for compliance — actually reduce your risk rather than add to it. Klosed handles the compliance layer automatically: every outbound message includes the opt-out, time-of-day restrictions are respected, “STOP” and reasonable variants are auto-honored across the entire database, identification is built into every text, and consent records are maintained. You don’t have to remember those rules on every message; the system enforces them.

That said, no platform absolves you of the underlying responsibility. You still need to ensure the leads you upload gave consent in the first place. Compliance starts with your database, not your texting tool.


Want a reactivation system that handles compliance for you? Try Klosed free for 14 days — TCPA-compliant texting, automatic opt-out handling, in-your-voice openers on your opted-in database. Flat $299/month per agent. No setup fee.

Logan Bates — Founder, Klosed. This article is for informational purposes only and is not legal advice. For specific guidance on your situation, consult a qualified attorney familiar with TCPA and your state’s telemarketing laws.