Compliance

10DLC registration, start to finish

An unregistered 10-digit number doesn't quietly underperform — it stops working. Fixing that takes two registrations, in order: a brand, which is your legal identity checked against tax records, and a campaign, which is what you intend to send checked against your website. The brand usually clears the same day. The campaign is where the waiting and the rejections happen, and the rejections are boringly repetitive: a legal name that doesn't match the EIN letter, an address missing its suite line, and a privacy policy that either isn't public or doesn't contain the one sentence reviewers look for.

Keith PeikerKeith PeikerPublished August 20, 2026 · 15 min read

Key takeaways

  • Two registrations, in this order: a brand — your legal entity, verified against tax and business records — then a campaign, which declares what you send and why. Your numbers attach to the campaign, not to the brand.
  • The brand is fast; the campaign is the queue. Brand approval is usually minutes to a day. Campaign review is done by a human, and published turnaround times move with submission volume — plan in weeks and start before you need to send.
  • Three rejections cover most of them: a legal name that doesn't match the CP 575 EIN letter, a registered address missing its suite or unit line, and a privacy policy that doesn't say mobile information and messaging consent are never shared with third parties.
  • Registration is not consent. A brand and a campaign tell carriers who you are and what you intend to send. Whether you may text a particular number is a separate question, governed by the TCPA and by your platform's acceptable-use policy.

Why does an unregistered number stop working?

Every message your business sends from a standard 10-digit US number is application-to-person traffic — A2P — whether it goes out of a platform in bulk or looks exactly like a personal text. The major US carriers now require that traffic to be registered through The Campaign Registry, the central database they all read from. Registration ties a verified business identity and a declared purpose to the number. Traffic with no identity behind it gets treated as the thing it resembles.

You find that out in one of two ways. Where registration is enforced at the gate, the send simply fails — the industry has a named error for it, "message from an unregistered number," and nothing leaves. Where it isn't enforced at the gate, the worse version happens: the message is accepted, your dashboard shows sent, and it gets dropped somewhere downstream. Nobody tells you. You find out from a reply rate that quietly went to zero.

Sent is not delivered

"Sent" only means your platform handed the message off. Delivery is a separate status that comes back from the carrier, and on a filtered number it never arrives. If you're diagnosing a number that's gone quiet, the delivery receipt is the thing to look at — not the send count.

Registration also doesn't travel with you. It attaches to a business, and then to the specific numbers you assign to an approved campaign. Buying a fresh number doesn't reset anything or buy a clean start: an unassigned number is an unregistered number.

What is a brand, and what is a campaign?

A brand is who you are. A campaign is what you intend to send. You register the brand once and reuse it; you register a campaign for each distinct kind of messaging you do; you attach phone numbers to the campaign.

The brand: your legal identity

The brand record is your company as the government knows it — legal business name, EIN, registered address, business type, industry, website, and a named human contact with an email and a phone number. That gets checked against tax and business records. You can't submit it yourself: businesses register through a Campaign Service Provider, which in practice means whichever texting platform you use. The outcome of the check also feeds a score the carriers use to decide how much you're allowed to send per day and how fast, so it's worth getting right rather than getting past.

The campaign: what you intend to send

The campaign is the part a reviewer actually reads. It declares a use case — marketing, customer care, mixed, low volume and so on — a plain-language description of the program, a message flow describing how people opt in, two or more sample messages, your opt-in, opt-out and help keywords with the automatic reply each one triggers, public links to your privacy policy and terms, whether your messages contain links or phone numbers, and an estimated monthly volume. Numbers attach to it once it's approved.

The two registrations, and what each one is really being tested for.
BrandCampaign
What it answersWho is sendingWhat they're sending, and to whom
Checked againstTax and business records, plus your websiteYour website, your privacy policy, and the consent story you describe
How manyOne per businessOne per distinct messaging program
Typical waitMinutes to about a dayManual review — plan in weeks
Most common failureName, EIN or address mismatchWeak opt-in description, or a non-compliant privacy policy

What do the carriers actually ask for?

Collect all of it before you open the form. A large share of rejections aren't judgement calls — they're transcription errors made under the impression that close enough is close enough.

For the brand:

  • Legal business name, exactly as it appears on your EIN confirmation letter — not your DBA, not the name on your website, not the version without the comma.
  • EIN, and the registered address that goes with it, including the suite or unit line.
  • Business type (LLC, corporation, partnership, sole proprietorship, non-profit) and industry.
  • A live website on a domain that plainly belongs to the business.
  • A named contact: first and last name, a business email, a phone number.

For the campaign:

  • A use case that matches what you'll actually send. Declaring customer care and then sending cold outreach is precisely the mismatch reviewers are looking for.
  • A campaign description that says who the sender is, who the recipient is, and why the messages are being sent.
  • A message flow: how a person ends up on your list, in enough detail that a stranger could go and verify it.
  • At least two sample messages, each identifying your business by name and each carrying opt-out language.
  • Opt-in, opt-out and help keywords, plus the automatic reply each one sends.
  • Public URLs for your privacy policy and terms — no login, no coming-soon page.
  • Whether messages carry embedded links or phone numbers, and your estimated monthly volume.

Sample messages are where people get sloppy. A sample has to read like a real message from a named business, not a placeholder, and reviewers read it against the description you wrote two fields earlier — so make them agree.

Samples written the way reviewers expect

Hi Dana, it's Sam at [Your Company]. You reached out about the house on Alder St — is that still something you want to talk through? Reply STOP to opt out.
[Your Company]: msg frequency varies. Msg & data rates may apply. Reply HELP for help, STOP to unsubscribe.
[Your Company]: you're unsubscribed and won't receive any more messages. Reply HELP for help.

The second and third aren't decoration. Your help reply has to answer something, and your opt-out reply has to confirm — one message, then silence. The exact strings go on the form, and the reviewer expects the ones on the form to be the ones your account actually sends.

How long does 10DLC registration take, and in what order?

The brand is usually the fast part — often minutes, sometimes up to a day, longer if something in your details triggers a manual second look. The campaign is the queue. Review is done by people against carrier and CTIA requirements, and the turnaround providers publish moves with submission volume; it has sat above a week for long stretches. Plan in weeks. Don't plan a launch around it clearing on Thursday.

One trap catches new entities specifically. A freshly issued EIN takes time to propagate into the databases the registry validates against — Twilio's own documentation puts that at 30 to 90 days. If you formed the LLC last week, a registration can fail on a name and a number that are completely correct, simply because the record hasn't landed yet. That's a wait, not a mistake to fix.

  1. Get the entity and EIN in order and put your hands on the CP 575 confirmation letter. Everything downstream is copied from it, character for character.
  2. Put a real website up, with a privacy policy and terms at stable public URLs. This gates the brand and the campaign both, so it can't be the last thing you do.
  3. Register the brand. If it comes back rejected, fix the mismatch and resubmit before you touch the campaign — a campaign can't outrun a bad brand.
  4. Write the campaign before you open the form: description, message flow, samples, keywords and auto-replies, in a document, where you can edit them.
  5. Register the campaign and wait. Resubmissions cost you the queue again, which is the real argument for reading the fields twice.
  6. Attach your numbers to the approved campaign. A number that isn't attached isn't registered, however approved everything else is.

Start the clock during your trial

Registration is the only part of setting up business texting that has a queue in it — everything else is bounded by how fast you work. If you're evaluating platforms, get the brand submitted in the first week rather than the last, and let the wait run in the background while you do everything else.

What gets a 10DLC registration rejected?

Reviewers reject for cause, and the causes repeat. These are the ones worth checking twice before you submit.

1. The legal name doesn't match the EIN record

This is the most common brand rejection and the least forgiving, because the comparison is exact. Twilio's onboarding documentation tells you to copy the name from the CP 575 EIN confirmation letter, and warns specifically against using the version on a W-2 or W-9 because those can differ. A DBA is not a legal name. "Inc" is not "Inc." if the record says otherwise. An ampersand is not "and." If you can't find the letter, the IRS Business and Specialty Tax Line can confirm the name on file for your EIN — that phone call is cheaper than a rejection and a resubmission.

2. The address is missing its suite line

The registered address has to be the entity's registered address, complete. A missing suite or unit number is a mismatch, and it's the version of this failure that slips through most often — the street and the city look right, so nobody rereads it. Two related traps: a PO box or mail-drop sits badly on a record meant to identify a physical business, and a single address can only be used a limited number of times across all brand registrations in the registry — Twilio documents that ceiling at ten. If you share a virtual office with a dozen other companies, that ceiling is closer than you'd think.

3. There's no public privacy policy — or it says the wrong thing

Campaign vetting checks that you have a privacy policy, that it's publicly reachable without a login, and that it addresses text messaging specifically. This failure has its own documented rejection code, which tells you how often it fires. The substance reviewers look for is narrow.

The sentence your privacy policy has to contain

That mobile information and messaging consent are not shared with third parties or affiliates for marketing or promotional purposes. Saying you don't sell that data isn't enough — the wording has to cover sharing as well, because sharing without a sale is exactly the practice the rule exists to stop. And one policy, not two: conflicting or duplicate policies on the same site are their own rejection.

4. The campaign description doesn't say who, whom and why

"We send text messages to our customers" is not a description. Twilio's guidance on improving approval odds states the test plainly: the description has to explain who the sender is, who the recipient is, and why the messages are being sent to them. Write it as though the reader has never heard of you, because they haven't.

5. The message flow describes an opt-in nobody can find

The message flow field asks how people join your list, and it's the field most often marked incomplete. If you say they opt in on a web form, a reviewer will go look for the form. If you say they text a keyword to a number, the keyword and the number have to be real and working. This is also the field where an honest answer and an approvable answer have to be the same answer — which is the next section.

6. The website doesn't back up the story

Brands get rejected when the URL can't be validated: a parked domain, a site under construction, a password-protected page, a typo in the address, or a domain with no visible relationship to the business name on the registration. If your entire web presence is a social profile and a link tree, fix that before you register rather than after.

7. The brand type is wrong

There's a sole-proprietor path for individuals who genuinely have no tax ID, verified by a one-time code sent to a mobile number and capped at much lower sending limits. It isn't a shortcut. If your business has an EIN, the registry requires a standard or low-volume brand instead, and picking sole proprietor with an EIN in hand is a rejection on its own. Those one-time-code verifications are also rationed: a given mobile number and a given email address can only be used a small number of times across the registry, counting registrations you made with other vendors.

An approved brand and campaign tell the carriers who you are and what you say you're doing. They are not permission to message anyone in particular. Two different systems, two different enforcers, and clearing one has never cleared the other.

Under the TCPA, text messages are treated as telephone calls. The FCC's rules require prior express written consent before a business sends autodialed telemarketing texts to a wireless number, and they require that a request to stop be honored — consent is revocable at any time, in any reasonable way, including a reply of "stop." Numbers on the national Do Not Call registry carry their own restrictions on solicitation, and several states have added statutes on top of the federal ones.

You are prohibited from using the Twilio Messaging Services if you buy, sell, rent, or transfer consent to or from your affiliates or any other party.
Twilio Messaging Policy — the acceptable-use terms of the gateway most US texting platforms run on, ours included

That's the sentence to sit with if your list came from a data vendor. Carrier-side policy treats consent as something a person gives you, not something that arrives attached to a phone number — and it's why the message flow field is the hinge of the whole registration. It asks where consent came from. There is no box for "purchased." Whatever you write there should be something you'd be comfortable having a stranger go and verify, because that is literally the job of the person reading it.

The mechanics of leaving have to be real too. STOP and its common variants must work on every number you send from, one confirmation message may follow, and then nothing else — ever, unless that person opts back in. HELP has to return something useful. Those are CTIA best practices and carrier requirements at the same time, and they're the cheapest part of compliance to get right, which is exactly why failing them reads so badly.

Where the platform fits — and where it doesn't

You don't register with the registry directly. Brands and campaigns are submitted by a Campaign Service Provider, which in practice is whatever texting platform you use, and approvals come back to that platform asynchronously — sometimes minutes after you submit, sometimes days later, by webhook rather than by email. Two consequences worth knowing before you pick one. If registration lives behind a support ticket, your visibility into a multi-week review is whatever the ticket says. And if you leave, the registration doesn't follow you: a new provider means submitting again.

Carrier fees ride along — a one-off vetting charge when the brand is checked, and a recurring monthly charge on an approved campaign. Those originate with the carriers and the registry rather than with your provider, but a provider that doesn't mention them before you sign up is going to mention them later.

Full disclosure, reitexter is ours. Brand and campaign registration run inside the app as a guided flow rather than a support ticket — the same fields described above, with carrier status syncing back onto the number so you can see where a submission actually stands, and Learn covering the fields that cause most rejections. Plans start at $99.99 a month with a fourteen-day free trial and no credit card. The advice is the same whoever you use: start the registration on day one of the trial, not day twelve.

None of this is interesting work. It's a name copied exactly, an address with its suite line, a privacy policy with one specific sentence in it, and a description of your list you'd be comfortable having someone check. Get those four right and registration is a wait. Get them wrong and it's a loop.

Frequently asked questions

What is 10DLC registration?

10DLC is the framework US carriers use to permit business texting on standard 10-digit phone numbers. You register two things through your texting platform: a brand, which is your legal business identity — legal name, EIN, registered address, website, named contact — and a campaign, which declares what you intend to send, how people opt in, and what your sample messages look like. Your phone numbers are then attached to the approved campaign. Business traffic from an unregistered 10-digit number is blocked or filtered.

How long does 10DLC registration take?

Brand approval is usually the fast part — often minutes, up to about a day, longer if a detail forces a manual second look. Campaign registration is reviewed by a person against carrier and CTIA requirements, and published turnaround times move with submission volume, so plan in weeks rather than hours. If your EIN was issued recently, add more: Twilio's documentation notes it can take 30 to 90 days for a new EIN to propagate into the databases the registry validates against.

Why was my 10DLC campaign rejected?

The repeat offenders are: a legal business name that doesn't exactly match the EIN confirmation letter; a registered address missing its suite or unit line; a privacy policy that is missing, behind a login, or that doesn't state that mobile information and messaging consent are not shared with third parties for marketing; a campaign description that doesn't say who is sending, who is receiving and why; and an opt-in description a reviewer can't verify on your website.

Do I need an EIN for 10DLC registration?

If your business has an EIN you must use it — the registry requires businesses with a tax ID to register as a standard or low-volume brand, and choosing the sole-proprietor path anyway is a rejection in itself. Individuals with no tax ID can register a sole-proprietor brand, verified with a one-time code sent to a mobile number, but that path carries much lower sending limits and the number and email used for verification can only be reused a few times across the registry.

Does 10DLC registration mean I can legally text a cold list?

No. Registration establishes who you are with the carriers; it says nothing about whether you have permission to message a particular person. The TCPA still governs consent and opt-outs, and platform acceptable-use policies generally prohibit relying on consent that was bought, sold, rented or transferred from another party. The campaign form asks how people opt in, and there is no option for a purchased list.

What happens if I text from an unregistered number?

One of two things. Where registration is enforced at the gate, the send fails outright with an unregistered-number error and nothing is delivered. Where it isn't, the message is accepted, shows as sent, and gets dropped by the carrier on the way — no error, no delivery receipt, no reply. The second version is worse, because the number looks like it's working.

Keith Peiker

Keith Peiker

Founder, reitexter

Founder of reitexter. Grew his own company from zero to $500k+ in 12 months on about $3,600 a year of text messages — then built the software for everyone else working a list of phone numbers.

More about Keith

Keep reading

Get registered first. Then text.

reitexter is texting and calling for real-estate wholesalers and agents: 10DLC brand and campaign registration built into setup, a thread per person, campaigns, bulk send and auto-replies. From $99.99/mo — fourteen-day free trial, no credit card.

Start free trial