The Real Cost of Getting Texting Wrong

A single TCPA (Telephone Consumer Protection Act) violation can run $500 to $1,500 per message. A dealer sending 100 texts per day without proper consent documentation faces exposure in the five-figure range per week of noncompliance. These are not theoretical penalties—the FTC and state attorneys general actively pursue dealership cases, and private plaintiff attorneys make TCPA suits their bread and butter.

Yet many dealer teams treat SMS lead follow-up like email: send it when you want, ask forgiveness later. That math does not work. The legal mechanics are straightforward. Understanding the core rules is the baseline cost of staying operational.

Consent: The Foundation

TCPA requires express written consent before you send any promotional text to a consumer. Written does not mean a handwritten note—it means documented, traceable proof that the person asked for your messages.

Consent can come from a web form (captured opt-in), a signup at the dealership (form or checkbox), a verbal agreement you recorded or documented in your CRM with timestamp and details, or a text the customer initiates to you. The critical element is that the consent happens before the promotional text goes out.

Do not rely on checkbox defaults. A pre-checked box that the customer must uncheck to opt out is not consent under TCPA—it is inaction. The consumer must take affirmative action to agree. In practice, a form that says “Check here to receive text updates about your vehicle” is stronger than “Uncheck this if you don’t want texts.”

Store the consent proof. Keep it with the customer record in your DMS or CRM. If a customer later disputes sending you a text or claims they never agreed, you need to show the timestamp, the method (form, phone note, text), and ideally the customer’s own words or signature. Screenshots of form submissions are admissible; sloppy notes or deleted records are not.

The Consent Window: Pre-Approved vs. Promotional

There is a technical distinction between texts sent under an existing business relationship and outright promotional texts. If a customer has already bought a car from you or financed through you, they have an existing relationship. You may text them about that specific transaction without separate consent—payment reminders, service notifications, delivery info. That is relationship-based texting, not promotional texting.

But the moment you text them about a new vehicle, a new offer, a special sale, or anything designed to generate new sales interest, you need fresh consent for promotional messaging. Many dealers blur this line. A customer who financed a car in 2022 does not automatically consent to promotional texts about a trade-in appraisal or a new-model announcement three years later. You need new consent.

In practice, when a lead comes in, you should capture consent at the point of lead generation. Online forms, chat prompts, phone intake scripts—all should include a text opt-in question with clear language that the customer is agreeing to receive promotional text messages about vehicles and offers.

The Opt-Out Obligation

Every promotional text must include a mechanism for the customer to opt out. The standard language is a phrase like “Reply STOP to unsubscribe” or “Text STOP to stop receiving messages from [dealership name].” You cannot bury it or use vague language. The opt-out instruction must be easy to read and unambiguous.

When a customer texts STOP or any clear opt-out signal, you must honor it immediately. Remove them from your texting list that day. Do not send them another promotional text. Do not send them a confirmation text (“You have been unsubscribed”). Confirmation messages are themselves violations—you are texting someone who just asked not to be texted.

The exception: transactional messages tied to an active transaction can still go out (final payment reminders, delivery scheduling, service appointment confirmation for work they requested). But marketing messages must stop.

Log the opt-out. Document the date, time, and the message they sent. If a customer later complains or you face an audit, that record proves you complied.

Timing and Frequency

TCPA does not specify a maximum frequency, but case law and regulatory guidance suggest that texting more than twice per day to the same customer or texting outside 8 a.m. to 9 p.m. (recipient’s local time) invites liability. Treating texts like email blasts—sending 50 per day to new leads—increases your regulatory and reputational risk.

Operationally, most dealers adopt a pattern: text a new lead within 24 hours of form submission or phone intake. Follow up with a second text 48 hours later if there is no response. A third text after 5 to 7 days is reasonable. Beyond that, you are moving into bulk marketing territory that carries higher compliance risk.

Always use the recipient’s local time zone when determining whether you are within the 8 p.m. to 9 p.m. window. Many CRM systems have time-zone intelligence built in; if yours does not, adjust manually or use a texting platform that handles it automatically.

Documentation and Proof

When a TCPA claim lands, the burden shifts to you to prove you had consent. The customer does not have to prove they did not consent; you must demonstrate you did. This is a major legal asymmetry.

Store at minimum:

• The date and method of consent (form URL, form name, date submitted, etc.)
• The customer’s name and phone number as provided
• The text or checkbox language they agreed to
• Any timestamp data your system captures
• The list of promotional texts sent and the dates
• Any opt-out requests and the date they were honored

If you use a third-party texting platform (many dealers do), confirm they retain logs of consent and opt-out activity. Review their data retention policy. A platform that deletes consent records after 90 days is a liability.

Set up a quarterly audit process: spot-check 20 to 30 customers from your texting list. Verify that consent documentation exists in your system. If you find gaps, halt texting to those customers until consent is documented.

Platform Selection and Integration

Many dealerships now use dedicated texting platforms (Calldrip, Leadcar, Tekion, and others) or texting modules within their CRM or DMS. These platforms typically manage opt-out lists, time-zone logic, and message logging for you. That automation reduces manual error.

When evaluating or switching platforms, ask the vendor directly:

• Do you store consent records and make them exportable?
• How long do you retain opt-out data?
• Do you honor STOP replies automatically?
• Can we audit our message history and consent log?
• Do you provide compliance reporting?

A platform that cannot answer these questions clearly is a risk. You are liable for the texts sent through your account, regardless of the vendor’s assurances.

Training and Accountability

Compliance breaks down when staff do not understand the rules or feel pressured to send texts without documentation. Sales managers focused on lead conversion can inadvertently create a culture of skipping consent steps to speed up outreach.

Run annual TCPA training for your sales and finance teams. Use real dealership examples (redacted case summaries are available from the FTC and state AGs). Assign someone—typically the compliance or operations lead—ownership of the texting process. They should review consent documentation at intake, approve any texting system changes, and monitor opt-out compliance.

Make it easy for staff to do the right thing: an intake form with a built-in text opt-in checkbox, a CRM that flags customers who have opted out, and a texting platform that logs everything automatically. Friction in the process creates incentive to cut corners.

Common Violations to Avoid

Texting before consent is received: A lead fills out a form with no opt-in box, and your team texts anyway because the lead looks hot. Do not do this. Wait for consent first.

Not honoring opt-outs: A customer texts STOP, and your system continues to send promotional texts because the opt-out did not sync to your DMS. Audit your systems to ensure opt-outs flow through immediately.

Sending at wrong times: Texting a customer at 10 p.m. their local time is legally risky and operationally poor (they are asleep and annoyed when they see it).

Co-mingling relationship and promotional texts: A customer wants service reminders but you text them a special offer without fresh consent. Use separate opt-ins or explicitly ask for separate permissions.

Missing or vague opt-out language: “Text UNSUBSCRIBE to remove” is weaker than “Text STOP to unsubscribe from [dealership name].” Be explicit.

No documentation: You texted someone; they later claim no consent. You have no proof. You lose.

The Practical Path Forward

If you are texting without a documented consent process today, start by auditing your current list. Identify which customers have documented consent and which do not. Segment the latter group and stop sending them promotional texts until you can document permission.

Next, redesign your lead intake process. Add a clear, affirmative opt-in checkbox for texting. Train your intake team on capturing consent. Update your CRM or texting platform to log consent at submission.

Then, implement a quarterly or semi-annual consent audit. Pull a random sample of texting customers, verify their consent records exist, and address gaps.

Finally, establish clear opt-out handling in your texting workflow. Whether you use a platform or in-house process, make sure STOP replies are honored the same day and logged. Make this someone’s job, not a hope.

Compliance is not frictionless, but it is not complex. It is a series of documented steps: capture consent, send appropriate messages, honor opt-outs, keep records. Dealers who treat it as a checkbox exercise get hit. Operators who build it into their process reduce risk and keep lead follow-up flowing.