SMS Marketing in 2026: Consent Rules and Flows That Work

Text messages land in the most personal inbox your customers have. That is why SMS marketing works, and it is also why it goes wrong so quickly when a business texts people who never asked to hear from it.

This guide covers what SMS is good for, the consent rules you must follow in the US, UK and EU, the automated flows worth setting up first, and how to write texts that people actually act on.

Why SMS still earns a place in your marketing

The most quoted number in SMS marketing is that around 98% of text messages get read. Treat that as a commonly cited industry figure rather than a benchmark: it traces back to a 2010 white paper by the mobile research firm Mobilesquared, and Mobilesquared itself has since said the figure no longer reflects how people use their phones. SMS also has no tracking pixel, so "open rates" for texts are estimates.

What is not in dispute is how the channel behaves:

• It is direct. No feed algorithm decides whether your message is shown.
• It is fast. Texts suit time-sensitive messages: appointment reminders, same-day offers, "your order is ready."
• It is intimate. That cuts both ways. A useful text feels like a favor; an irrelevant one feels like an intrusion and gets a STOP reply.

The practical lesson: send fewer, more relevant texts to people who opted in, and let email carry the longer content. Our guide to email flows that sell explains how the two channels split the work.

The consent rules, market by market

Consent is the foundation of SMS marketing. Get it wrong and the costs are real.

United States: the TCPA

The Telephone Consumer Protection Act (TCPA, 47 U.S.C. § 227) and the FCC's rules under it (47 CFR § 64.1200) treat marketing texts sent with automated systems like calls. For those, you need prior express written consent. Under the FCC definition, that means a written agreement, signed by the recipient (electronic signatures count), that:

• clearly authorizes your business to send marketing messages,
• names the phone number those messages may go to, and
• discloses that agreeing is not a condition of buying anything.

The penalties are why this matters. The statute lets recipients sue for $500 in damages per violation, and a court can increase that to up to three times the amount, $1,500, when the violation was willful or knowing. Each text can count as a separate violation, so a single bad campaign to a large list can add up fast.

Two more rules to build into your process:

1. Opt-outs. Under FCC rules in effect since April 11, 2025, people can revoke consent by any reasonable means, replies such as "STOP," "quit," "cancel" or "unsubscribe" count, and you must honor the request within 10 business days. You cannot insist on one specific opt-out method.
2. Timing. FCC rules bar telephone solicitations to residential subscribers before 8 a.m. or after 9 p.m. in the recipient's local time. Schedule marketing texts inside that window.

European Union: ePrivacy and GDPR

In the EU, the ePrivacy Directive (2002/58/EC), Article 13, requires prior consent for marketing by electronic mail, which includes SMS. The main exception covers existing customers: if you collected their number during a sale, you may text them about your own similar products, provided you offered a clear opt-out when you collected it and in every message.

The GDPR (Regulation (EU) 2016/679) then governs how you handle the data:

• Article 6 requires a lawful basis for processing; for marketing texts that is usually consent.
• Article 7 sets the conditions for valid consent, and Article 7(3) says withdrawing consent must be as easy as giving it.
• Article 21 gives people the right to object to direct marketing at any time, and once they object, their data can no longer be used for it.
• Article 83 sets fines for infringing these provisions of up to €20 million or 4% of worldwide annual turnover, whichever is higher.

United Kingdom: PECR

The UK applies the Privacy and Electronic Communications Regulations (PECR). According to the Information Commissioner's Office (ICO), regulation 22 means you must not send marketing texts to individuals without their specific consent. Pre-ticked boxes, silence or inactivity do not count. The "soft opt-in" exception works much like the EU one: existing customers, similar products, and an opt-out at collection and in every message. Texts to corporate subscribers fall outside this rule, but sole traders and some partnerships count as individuals.

Enforcement has teeth. Since the Data (Use and Access) Act 2025 provisions commenced on 5 February 2026, the ICO says it can fine up to £17.5 million or 4% of global turnover under PECR.

A consent checklist for your sign-up forms

• An unticked checkbox or keyword opt-in specifically for marketing texts
• Plain wording that says who will text, about what, and roughly how often
• A statement that signing up is not required to buy (US)
• A confirmation text that repeats how to opt out
• A stored record of when, where and how each person agreed
• Opt-out instructions in marketing messages, processed promptly
• Separate handling for customers in the US, UK and EU

Five SMS flows worth building first

Automated flows send the right text when a customer does something, instead of blasting the whole list.

Start with one or two. A welcome flow and a reminder flow cover most small businesses.

Note that a pure service message, such as an appointment reminder with no promotion in it, is generally treated differently from marketing. The moment you add an offer, treat it as marketing and apply the consent rules above.

How to write texts people act on

1. Say who you are first. "Rosa's Bakery:" beats an unknown number.
2. One message, one action. A single link or a single reply option.
3. Be specific. "Your table for 4 is confirmed for 7:30 tonight" is better than "Thanks for booking!"
4. Keep it short. One or two sentences. Long texts split into multiple segments and read like spam.
5. Include the opt-out. "Reply STOP to opt out" protects you and builds trust.
6. Respect frequency. There is no magic number. Watch your opt-out rate after each send and slow down if it climbs.

How Automations.link runs SMS

SMS and email marketing come with our Pro plan ($699 a month) and Business plan ($990 a month); yearly billing saves 10%. AI agents segment your audience from contacts who have opted in, draft messages in your brand voice, schedule sends inside permitted hours, run the flows above, and coordinate with your email so customers are not hit twice with the same message.

Your part matters. You approve the strategy and offers, make sure your sign-up forms collect valid consent, and reply to customers who text back. Our features page shows the full workflow, and the integrations page lists the tools we connect to.

FAQ

Do I need permission to send marketing texts?

Yes, in practice. In the US, automated marketing texts require prior express written consent under the TCPA. In the UK and EU you need consent, unless the narrow soft opt-in for existing customers applies.

Can I text customers who already bought from me?

In the UK and EU, often yes, about similar products, if you offered an opt-out when you collected their number and include one in every text. In the US, a past purchase does not replace written consent for automated marketing texts.

What happens when someone replies STOP?

You must stop marketing texts to that number. In the US, FCC rules require you to honor the request within 10 business days; under GDPR, once someone objects, you can no longer use their data for direct marketing.

Is SMS better than email?

Neither wins on its own. SMS suits short, urgent messages; email suits detail and storytelling. Our FAQ covers how we balance the two.

If you want SMS that is compliant and consistent without managing it day to day, see our plans.