TCPA Compliance for Property Managers: The 2025 Consent Playbook

This is general information for property managers, not legal advice. Have a lawyer review your consent language, especially in Florida, Texas and California.

Key takeaways

• Consent must be provable. A phone number on file is not consent. Keep a dated record of who agreed, how, and to what.
• The FCC's "one-to-one consent" rule never took effect. An appeals court vacated it on January 24, 2025, three days before its January 27, 2025 start date. The rule that would have required consent to name one specific company is not in force. Collecting consent directly in your own name is still the safest practice.
• Revocation is getting stricter. Under the FCC's revocation rule, people can opt out by any reasonable means and you must stop within 10 business days. One part of it, the "revoke all" requirement, is delayed to January 31, 2027.
• Register for 10DLC. Carriers filter unregistered business texts even when your consent is perfect.
• Exposure adds up. $500 per negligent violation and up to $1,500 per willful one. One unconsented blast to 500 residents is $250,000 to $750,000 on paper.

How we wrote this

We updated this playbook on October 2, 2026. We re-checked the 2025 FCC sections against the Eleventh Circuit opinion itself and the FCC's own order DA 26-12 (the revoke-all date), and the Texas chapters against Texas statute summaries. The damages figures, the CTIA disclosure elements, the autodialer discussion and the state-law notes are carried over from the earlier version and hedged, not re-verified. We corrected the 2025 FCC section, which stated that the one-to-one consent rule took effect. We make no claim that following this playbook makes you compliant. State rules differ and change.

The consent workflow at a glance

1. Map your message types. Separate informational messages from marketing; the consent bar differs.
2. Audit your contact database. Classify what documented consent exists for every contact.
3. Build consent capture into every intake touchpoint. Lease signing, HOA onboarding, work-order portals, website forms.
4. Register your 10DLC campaigns. Carrier compliance runs alongside TCPA.
5. Create an opt-out procedure. Process, confirm and suppress within the required window.
6. Train the team. Written guidance plus a one-page card at every workstation.
7. Run a quarterly consent audit. Catch drift before it becomes liability.

Know what you are sending: informational vs marketing messages

Pull the last 90 days of outbound texts and calls and sort them into two buckets.

Message type	Consent standard	Example
Informational	Prior express consent (oral or written)	Water shutoff notice, maintenance appointment confirmation, package alert
Marketing or promotional	Prior express written consent	Renewal incentive offer, referral bonus, add-on service upsell

If your team cannot confidently sort a message, treat it as marketing and require written consent. Over-collecting consent costs almost nothing. Under-collecting it is expensive. The output of this step is a written register of every recurring campaign, its classification and the consent it requires.

How to audit your contact database for consent gaps

Add a consent-status field to each contact record and ask: do you have documented proof, not an assumption, that this person agreed to texts or autodialed calls at this number?

Acceptable proof includes a signed lease or HOA onboarding form with a clear SMS checkbox, a recorded verbal agreement with a timestamp, or a text-based opt-in reply. A number written on a paper check does not meet the written-consent standard for marketing messages.

Flag every contact in one of three groups:

• Documented consent, verified. Keep sending and preserve the record.
• Consent claimed but not documented. Do not send marketing until you re-obtain written consent.
• No consent on record. Suppress from outbound campaigns now; contact only to answer an inbound request until consent is collected.

For teams managing hundreds of units, a platform that links every conversation to a per-contact timeline makes this audit much faster than rebuilding from spreadsheets. See how to track every call, email and text without a paper trail.

Done when: every record has a consent status and all "claimed" and "none" contacts are suppressed from marketing sends.

Build consent capture into every intake touchpoint

Collect consent the first time a resident or owner deals with your office, not after a complaint. Industry guidance (CTIA Messaging Principles and Best Practices) expects each consent disclosure to include:

• a message-frequency statement, such as "Message frequency varies,"
• a message-and-data-rates notice,
• opt-out instructions (STOP),
• a link to your SMS privacy policy.

Opt-in template for a lease or HOA onboarding packet:

By checking this box, I agree to receive text messages and autodialed calls from [Management Company Name] at the mobile number provided above. Messages may include maintenance updates, account notices and community announcements. Message frequency varies. Message and data rates may apply. Reply STOP at any time to opt out or HELP for assistance. View our privacy policy at [URL].

Opt-in template for a work-order or resident portal form:

By submitting this form, you consent to receive automated text messages from [Company Name] at the number provided regarding the status of your maintenance request. Msg & data rates may apply. Reply STOP to opt out.

For more wording by scenario, see our SMS opt-in examples for HOAs and property managers.

Inbound calls: when a resident calls for the first time, train staff to ask, "Would you like text updates on your maintenance requests? It's optional and you can stop at any time." Log the answer with date and time in the contact record.

Done when: every intake document and digital form carries a compliant disclosure and a checkbox that creates a timestamped record.

What changed in 2025: the one-to-one consent rule did not take effect

Correction to earlier versions of this post: we previously described the FCC's one-to-one consent rule as effective January 27, 2025. It was not. On January 24, 2025 the Eleventh Circuit, in Insurance Marketing Coalition v. FCC, held that the FCC exceeded its authority and vacated the rule before it started. The rule would have required that consent name a single seller instead of a list of businesses.

What this means for property managers:

• You are not bound by a one-to-one requirement under that rule.
• Consent a resident gave to a lead aggregator or listing site may or may not cover your company. That depends on what the resident actually agreed to. If you cannot show that your company was covered, treat the contact as undocumented and collect consent directly.
• Direct, company-named consent is still the cleanest defense and costs you little.

Consent revocation is the rule to watch. The FCC's revocation amendments say a person may withdraw consent by any reasonable means that clearly expresses a wish to stop, and you must stop within 10 business days. The effective date of the "revoke-all" requirement (honoring a stop request across all your messages) was pushed to January 31, 2027. Build your opt-out process to handle any plain-language request, not only the word STOP.

10DLC registration for property management SMS

Since 2023, US carriers have required any business texting from a standard 10-digit number to register its brand and campaigns through The Campaign Registry (TCR). Unregistered traffic is filtered or blocked, so a technically compliant message may never arrive.

To register:

1. Register your brand: legal company name, EIN and contact details.
2. Create a campaign describing your use case.
3. List your opt-in method, opt-out keywords (STOP, UNSUBSCRIBE) and help keyword (HELP).
4. Assign your sending numbers to the approved campaign.

Your SMS provider usually submits the paperwork. Your job is accurate information and an opt-in flow that matches exactly what residents see, because TCR checks that consistency. Fees vary by provider; for example Quo lists a one-time $19.50 review fee and $1.50 to $3 a month. Ask your provider what it charges.

Done when: brand and campaign are approved and every sending number is assigned to a registered campaign.

Opt-out handling and the Do Not Call list

Opt-outs must be honored promptly. For outbound marketing calls, scrub your list against the National Do Not Call Registry first. Transactional calls are treated differently.

Cover three situations:

• Text STOP reply. Auto-suppress and send a one-time confirmation: "You have been unsubscribed from [Company] and will receive no further messages. Reply START to re-subscribe." Confirm the flag is in your CRM, not only the SMS tool.
• Verbal opt-out on a call. Staff mark the record immediately with date, time and initials. A shared inbox across email and text helps nothing get missed.
• Written opt-out (email or letter). Process within 24 hours and suppress across phone, text and email, since a general opt-out should be read broadly.

Done when: a written opt-out procedure exists, every staff member knows it, and a suppression flag is checked before every campaign.

State law overlays: California, Florida and Texas

Federal TCPA is the floor. Some states add rules, and they change often. Confirm with local counsel.

• California. The CCPA requires a privacy policy disclosing what personal data, including phone numbers, you collect and how you use it. The Rosenthal Fair Debt Collection Practices Act can reach rent-related communications.
• Florida. The Florida Telephone Solicitation Act (FTSA) restricts automated telephone sales calls and texts and gives a private right of action. It has been amended and is actively litigated, so Florida portfolios need Florida-specific counsel.
• Texas. Three chapters of the Business and Commerce Code matter. Chapter 302 requires registration for sellers who make telephone solicitations, and a 2025 amendment (Senate Bill 140) widened "telephone solicitation" to include text messages. Chapter 304 sets up the Texas no-call list. Chapter 305 restricts automated and mobile-phone sales calls without consent and lets a recipient sue for the greater of $500 or actual damages per violation, up to $1,500 if knowing or intentional. Whether your messages are "solicitation" depends on their content, so have Texas counsel review it.

Common mistakes that create TCPA violations

• Consent collected but never logged. A staff member confirms consent verbally and never enters it. Six months later no one can prove it. Fix: make consent a required field in the intake checklist.
• Marketing sent to informational-only contacts. Someone adds all residents to a referral campaign. Fix: segment so marketing can only go to a consented list.
• Opt-outs siloed in one platform. A resident texts STOP and still gets an email campaign. Fix: keep one master suppression list every tool checks.
• Assuming third-party consent covers you. Consent collected by a listing site or lead aggregator may not name your company. Fix: collect consent directly.

Compliance metrics to track

Metric	What to measure	Our suggested target
Consent documentation rate	Share of active contacts with a verified record	100% for marketing; most informational contacts documented within 60 days
Opt-out processing time	Hours from request to suppression	Same business day, and well inside the 10-business-day FCC limit
10DLC registration status	Sending numbers confirmed in TCR	100%, no unregistered numbers sending
TCPA complaints	Demand letters or complaints per quarter	Zero; any non-zero result triggers a consent audit
Staff training	Share of staff with annual TCPA sign-off	100% before a new campaign launches

These targets are our suggestions, not legal thresholds.

Frequently asked questions

Sources

Checked October 2, 2026.

• Eleventh Circuit opinion, Insurance Marketing Coalition v. FCC, No. 24-10277
• FCC: Eleventh Circuit grants petition for review in Insurance Marketing Coalition v. FCC
• FCC order DA 26-12 (revoke-all effective date)
• FCC order DA 25-312 (revocation rules)
• Morrison Foerster: Eleventh Circuit vacates the FCC one-to-one consent rule
• Texas Business and Commerce Code, Chapter 302
• Quo pricing (10DLC registration fees)