Compliance
10DLC registration, start to finish
An unregistered 10-digit number doesn't quietly underperform — it stops working. Fixing that takes two registrations, in order: a brand, which is your legal identity checked against tax records, and a campaign, which is what you intend to send checked against your website. The brand usually clears the same day. The campaign is where the waiting and the rejections happen, and the rejections are boringly repetitive: a legal name that doesn't match the EIN letter, an address missing its suite line, and a privacy policy that either isn't public or doesn't contain the one sentence reviewers look for.
Key takeaways
- Two registrations, in this order: a brand — your legal entity, verified against tax and business records — then a campaign, which declares what you send and why. Your numbers attach to the campaign, not to the brand.
- The brand is fast; the campaign is the queue. Brand approval is usually minutes to a day. Campaign review is done by a human, and published turnaround times move with submission volume — plan in weeks and start before you need to send.
- Three rejections cover most of them: a legal name that doesn't match the CP 575 EIN letter, a registered address missing its suite or unit line, and a privacy policy that doesn't say mobile information and messaging consent are never shared with third parties.
- Registration is not consent. A brand and a campaign tell carriers who you are and what you intend to send. Whether you may text a particular number is a separate question, governed by the TCPA and by your platform's acceptable-use policy.
In this guide
- 01Why does an unregistered number stop working?
- 02What is a brand, and what is a campaign?
- 03What do the carriers actually ask for?
- 04How long does 10DLC registration take, and in what order?
- 05What gets a 10DLC registration rejected?
- 06Registration is not consent
- 07Where the platform fits — and where it doesn't
Why does an unregistered number stop working?
Every message your business sends from a standard 10-digit US number is application-to-person traffic — A2P — whether it goes out of a platform in bulk or looks exactly like a personal text. The major US carriers now require that traffic to be registered through The Campaign Registry, the central database they all read from. Registration ties a verified business identity and a declared purpose to the number. Traffic with no identity behind it gets treated as the thing it resembles.
You find that out in one of two ways. Where registration is enforced at the gate, the send simply fails — the industry has a named error for it, "message from an unregistered number," and nothing leaves. Where it isn't enforced at the gate, the worse version happens: the message is accepted, your dashboard shows sent, and it gets dropped somewhere downstream. Nobody tells you. You find out from a reply rate that quietly went to zero.
Sent is not delivered
Registration also doesn't travel with you. It attaches to a business, and then to the specific numbers you assign to an approved campaign. Buying a fresh number doesn't reset anything or buy a clean start: an unassigned number is an unregistered number.
What is a brand, and what is a campaign?
A brand is who you are. A campaign is what you intend to send. You register the brand once and reuse it; you register a campaign for each distinct kind of messaging you do; you attach phone numbers to the campaign.
The brand: your legal identity
The brand record is your company as the government knows it — legal business name, EIN, registered address, business type, industry, website, and a named human contact with an email and a phone number. That gets checked against tax and business records. You can't submit it yourself: businesses register through a Campaign Service Provider, which in practice means whichever texting platform you use. The outcome of the check also feeds a score the carriers use to decide how much you're allowed to send per day and how fast, so it's worth getting right rather than getting past.
The campaign: what you intend to send
The campaign is the part a reviewer actually reads. It declares a use case — marketing, customer care, mixed, low volume and so on — a plain-language description of the program, a message flow describing how people opt in, two or more sample messages, your opt-in, opt-out and help keywords with the automatic reply each one triggers, public links to your privacy policy and terms, whether your messages contain links or phone numbers, and an estimated monthly volume. Numbers attach to it once it's approved.
| Brand | Campaign | |
|---|---|---|
| What it answers | Who is sending | What they're sending, and to whom |
| Checked against | Tax and business records, plus your website | Your website, your privacy policy, and the consent story you describe |
| How many | One per business | One per distinct messaging program |
| Typical wait | Minutes to about a day | Manual review — plan in weeks |
| Most common failure | Name, EIN or address mismatch | Weak opt-in description, or a non-compliant privacy policy |
What do the carriers actually ask for?
Collect all of it before you open the form. A large share of rejections aren't judgement calls — they're transcription errors made under the impression that close enough is close enough.
For the brand:
- Legal business name, exactly as it appears on your EIN confirmation letter — not your DBA, not the name on your website, not the version without the comma.
- EIN, and the registered address that goes with it, including the suite or unit line.
- Business type (LLC, corporation, partnership, sole proprietorship, non-profit) and industry.
- A live website on a domain that plainly belongs to the business.
- A named contact: first and last name, a business email, a phone number.
For the campaign:
- A use case that matches what you'll actually send. Declaring customer care and then sending cold outreach is precisely the mismatch reviewers are looking for.
- A campaign description that says who the sender is, who the recipient is, and why the messages are being sent.
- A message flow: how a person ends up on your list, in enough detail that a stranger could go and verify it.
- At least two sample messages, each identifying your business by name and each carrying opt-out language.
- Opt-in, opt-out and help keywords, plus the automatic reply each one sends.
- Public URLs for your privacy policy and terms — no login, no coming-soon page.
- Whether messages carry embedded links or phone numbers, and your estimated monthly volume.
Sample messages are where people get sloppy. A sample has to read like a real message from a named business, not a placeholder, and reviewers read it against the description you wrote two fields earlier — so make them agree.
Samples written the way reviewers expect
The second and third aren't decoration. Your help reply has to answer something, and your opt-out reply has to confirm — one message, then silence. The exact strings go on the form, and the reviewer expects the ones on the form to be the ones your account actually sends.
How long does 10DLC registration take, and in what order?
The brand is usually the fast part — often minutes, sometimes up to a day, longer if something in your details triggers a manual second look. The campaign is the queue. Review is done by people against carrier and CTIA requirements, and the turnaround providers publish moves with submission volume; it has sat above a week for long stretches. Plan in weeks. Don't plan a launch around it clearing on Thursday.
One trap catches new entities specifically. A freshly issued EIN takes time to propagate into the databases the registry validates against — Twilio's own documentation puts that at 30 to 90 days. If you formed the LLC last week, a registration can fail on a name and a number that are completely correct, simply because the record hasn't landed yet. That's a wait, not a mistake to fix.
- Get the entity and EIN in order and put your hands on the CP 575 confirmation letter. Everything downstream is copied from it, character for character.
- Put a real website up, with a privacy policy and terms at stable public URLs. This gates the brand and the campaign both, so it can't be the last thing you do.
- Register the brand. If it comes back rejected, fix the mismatch and resubmit before you touch the campaign — a campaign can't outrun a bad brand.
- Write the campaign before you open the form: description, message flow, samples, keywords and auto-replies, in a document, where you can edit them.
- Register the campaign and wait. Resubmissions cost you the queue again, which is the real argument for reading the fields twice.
- Attach your numbers to the approved campaign. A number that isn't attached isn't registered, however approved everything else is.
Start the clock during your trial
What gets a 10DLC registration rejected?
Reviewers reject for cause, and the causes repeat. These are the ones worth checking twice before you submit.
1. The legal name doesn't match the EIN record
This is the most common brand rejection and the least forgiving, because the comparison is exact. Twilio's onboarding documentation tells you to copy the name from the CP 575 EIN confirmation letter, and warns specifically against using the version on a W-2 or W-9 because those can differ. A DBA is not a legal name. "Inc" is not "Inc." if the record says otherwise. An ampersand is not "and." If you can't find the letter, the IRS Business and Specialty Tax Line can confirm the name on file for your EIN — that phone call is cheaper than a rejection and a resubmission.
2. The address is missing its suite line
The registered address has to be the entity's registered address, complete. A missing suite or unit number is a mismatch, and it's the version of this failure that slips through most often — the street and the city look right, so nobody rereads it. Two related traps: a PO box or mail-drop sits badly on a record meant to identify a physical business, and a single address can only be used a limited number of times across all brand registrations in the registry — Twilio documents that ceiling at ten. If you share a virtual office with a dozen other companies, that ceiling is closer than you'd think.
3. There's no public privacy policy — or it says the wrong thing
Campaign vetting checks that you have a privacy policy, that it's publicly reachable without a login, and that it addresses text messaging specifically. This failure has its own documented rejection code, which tells you how often it fires. The substance reviewers look for is narrow.
The sentence your privacy policy has to contain
4. The campaign description doesn't say who, whom and why
"We send text messages to our customers" is not a description. Twilio's guidance on improving approval odds states the test plainly: the description has to explain who the sender is, who the recipient is, and why the messages are being sent to them. Write it as though the reader has never heard of you, because they haven't.
5. The message flow describes an opt-in nobody can find
The message flow field asks how people join your list, and it's the field most often marked incomplete. If you say they opt in on a web form, a reviewer will go look for the form. If you say they text a keyword to a number, the keyword and the number have to be real and working. This is also the field where an honest answer and an approvable answer have to be the same answer — which is the next section.
6. The website doesn't back up the story
Brands get rejected when the URL can't be validated: a parked domain, a site under construction, a password-protected page, a typo in the address, or a domain with no visible relationship to the business name on the registration. If your entire web presence is a social profile and a link tree, fix that before you register rather than after.
7. The brand type is wrong
There's a sole-proprietor path for individuals who genuinely have no tax ID, verified by a one-time code sent to a mobile number and capped at much lower sending limits. It isn't a shortcut. If your business has an EIN, the registry requires a standard or low-volume brand instead, and picking sole proprietor with an EIN in hand is a rejection on its own. Those one-time-code verifications are also rationed: a given mobile number and a given email address can only be used a small number of times across the registry, counting registrations you made with other vendors.
Registration is not consent
An approved brand and campaign tell the carriers who you are and what you say you're doing. They are not permission to message anyone in particular. Two different systems, two different enforcers, and clearing one has never cleared the other.
Under the TCPA, text messages are treated as telephone calls. The FCC's rules require prior express written consent before a business sends autodialed telemarketing texts to a wireless number, and they require that a request to stop be honored — consent is revocable at any time, in any reasonable way, including a reply of "stop." Numbers on the national Do Not Call registry carry their own restrictions on solicitation, and several states have added statutes on top of the federal ones.
You are prohibited from using the Twilio Messaging Services if you buy, sell, rent, or transfer consent to or from your affiliates or any other party.— Twilio Messaging Policy — the acceptable-use terms of the gateway most US texting platforms run on, ours included
That's the sentence to sit with if your list came from a data vendor. Carrier-side policy treats consent as something a person gives you, not something that arrives attached to a phone number — and it's why the message flow field is the hinge of the whole registration. It asks where consent came from. There is no box for "purchased." Whatever you write there should be something you'd be comfortable having a stranger go and verify, because that is literally the job of the person reading it.
The mechanics of leaving have to be real too. STOP and its common variants must work on every number you send from, one confirmation message may follow, and then nothing else — ever, unless that person opts back in. HELP has to return something useful. Those are CTIA best practices and carrier requirements at the same time, and they're the cheapest part of compliance to get right, which is exactly why failing them reads so badly.
Where the platform fits — and where it doesn't
You don't register with the registry directly. Brands and campaigns are submitted by a Campaign Service Provider, which in practice is whatever texting platform you use, and approvals come back to that platform asynchronously — sometimes minutes after you submit, sometimes days later, by webhook rather than by email. Two consequences worth knowing before you pick one. If registration lives behind a support ticket, your visibility into a multi-week review is whatever the ticket says. And if you leave, the registration doesn't follow you: a new provider means submitting again.
Carrier fees ride along — a one-off vetting charge when the brand is checked, and a recurring monthly charge on an approved campaign. Those originate with the carriers and the registry rather than with your provider, but a provider that doesn't mention them before you sign up is going to mention them later.
Full disclosure, reitexter is ours. Brand and campaign registration run inside the app as a guided flow rather than a support ticket — the same fields described above, with carrier status syncing back onto the number so you can see where a submission actually stands, and Learn covering the fields that cause most rejections. Plans start at $99.99 a month with a fourteen-day free trial and no credit card. The advice is the same whoever you use: start the registration on day one of the trial, not day twelve.
None of this is interesting work. It's a name copied exactly, an address with its suite line, a privacy policy with one specific sentence in it, and a description of your list you'd be comfortable having someone check. Get those four right and registration is a wait. Get them wrong and it's a loop.
Frequently asked questions
What is 10DLC registration?
10DLC is the framework US carriers use to permit business texting on standard 10-digit phone numbers. You register two things through your texting platform: a brand, which is your legal business identity — legal name, EIN, registered address, website, named contact — and a campaign, which declares what you intend to send, how people opt in, and what your sample messages look like. Your phone numbers are then attached to the approved campaign. Business traffic from an unregistered 10-digit number is blocked or filtered.
How long does 10DLC registration take?
Brand approval is usually the fast part — often minutes, up to about a day, longer if a detail forces a manual second look. Campaign registration is reviewed by a person against carrier and CTIA requirements, and published turnaround times move with submission volume, so plan in weeks rather than hours. If your EIN was issued recently, add more: Twilio's documentation notes it can take 30 to 90 days for a new EIN to propagate into the databases the registry validates against.
Why was my 10DLC campaign rejected?
The repeat offenders are: a legal business name that doesn't exactly match the EIN confirmation letter; a registered address missing its suite or unit line; a privacy policy that is missing, behind a login, or that doesn't state that mobile information and messaging consent are not shared with third parties for marketing; a campaign description that doesn't say who is sending, who is receiving and why; and an opt-in description a reviewer can't verify on your website.
Do I need an EIN for 10DLC registration?
If your business has an EIN you must use it — the registry requires businesses with a tax ID to register as a standard or low-volume brand, and choosing the sole-proprietor path anyway is a rejection in itself. Individuals with no tax ID can register a sole-proprietor brand, verified with a one-time code sent to a mobile number, but that path carries much lower sending limits and the number and email used for verification can only be reused a few times across the registry.
Does 10DLC registration mean I can legally text a cold list?
No. Registration establishes who you are with the carriers; it says nothing about whether you have permission to message a particular person. The TCPA still governs consent and opt-outs, and platform acceptable-use policies generally prohibit relying on consent that was bought, sold, rented or transferred from another party. The campaign form asks how people opt in, and there is no option for a purchased list.
What happens if I text from an unregistered number?
One of two things. Where registration is enforced at the gate, the send fails outright with an unregistered-number error and nothing is delivered. Where it isn't, the message is accepted, shows as sent, and gets dropped by the carrier on the way — no error, no delivery receipt, no reply. The second version is worse, because the number looks like it's working.
Sources
- The Campaign Registry — the 10DLC brand and campaign registry the US carriers read from
- CTIA — Messaging Principles and Best Practices (consent, STOP and HELP requirements)
- Twilio Docs — A2P 10DLC: gather the required business information (legal name, CP 575, address limits, EIN propagation)
- Twilio — Improving your chances of A2P 10DLC registration approval (brand and campaign rejection reasons)
- Twilio Docs — Error 30034: message from an unregistered number
- Twilio Docs — Error 30908: campaign vetting rejection, compliant privacy policy required
- Twilio Messaging Policy — consent may not be bought, sold, rented or transferred
- Twilio Support — A2P 10DLC Sole Proprietor Brands FAQ
- FCC — Stop Unwanted Robocalls and Texts (consumer guide to the TCPA rules)

Keith Peiker
Founder, reitexter
Founder of reitexter. Grew his own company from zero to $500k+ in 12 months on about $3,600 a year of text messages — then built the software for everyone else working a list of phone numbers.
More about KeithKeep reading
What TCPA actually says about texting a skip-traced list
A skip-traced number carries no consent — so the rule that reaches you is the Do Not Call registry, not the autodialer ban. What TCPA says, with the citations.
Why your texts aren't delivering
Carrier filtering, explained: what actually triggers it, how to tell filtering from a bad number, and what to change when your reply rate falls off a cliff.
What happens when someone replies STOP
Replying STOP blocks one sender at your provider. Your own do-not-call record is a separate duty that runs five years. Why re-imports break opt-outs — and the fix.
Get registered first. Then text.
reitexter is texting and calling for real-estate wholesalers and agents: 10DLC brand and campaign registration built into setup, a thread per person, campaigns, bulk send and auto-replies. From $99.99/mo — fourteen-day free trial, no credit card.
Start free trial