TCR
STARTER KIT
and Messaging Compliance
Table of Contents
Introduction: Why TCR Matters
10-Digit Long Code (10DLC) registration through The Campaign Registry (TCR) is mandatory for business text messaging in the United States.
Non-compliance results in message blocking, throughput throttling, and sender suspension across T-Mobile, AT&T, and Verizon networks.
Business Impact
Deliverability
Unregistered traffic experiences 60-80% filtering rates
Throughput
Approved campaigns achieve 60-4,500 messages/min vs. 1-3 unregistered
Legal Exposure
TCPA violations carry $500-$1,500 penalties per message
Customer Experience
Blocked messages damage trust and conversion rates
Timeline Reality
⚠️ The Cost of Trial-and-Error
This guide eliminates the trial-and-error approach that costs businesses 2-4 weeks in delays and $2,000+ in opportunity costs per failed registration.
Essential Terminology
Core Acronyms
Registration Components
CSP: Campaign Service Provider (messaging platform) that submits TCR registrations.
Compliance Terms
The TCR Ecosystem Explained
Registration Flow
Business Prepares
Gather EIN, business registration, website with privacy policy, sample messages.
CSP Submits to TCR
Messaging platform (Twilio, Bandwidth, etc.) submits brand and campaign data.
TCR Assigns Trust Score
Automated vetting assigns 0-100 score based on verification signals.
Carriers Review
T-Mobile, AT&T, Verizon evaluate use case and approve/reject campaigns.
Message Delivery
Approved campaigns begin sending at assigned throughput limits.
Trust Score Mechanics
| Score Range | Approval Rate | Throughput Limit | Review Type |
|---|---|---|---|
| 75-100 | >95% | Up to 4,500 msg/min | Automated |
| 50-74 | 70-90% | Up to 600 msg/min | Automated + spot checks |
| 25-49 | 40-60% | Up to 60 msg/min | Manual review required |
| 0-24 | <30% | Blocked pending remediation | Manual + carrier escalation |
Score Improvement Strategies
- Obtain DUNS number before registration (+10-15 points)
- Age business domain 6+ months
- Build online review presence (4+ star avg across Google, Yelp, Trustpilot)
- Verify business address with Google Business Profile
- Start with low-risk use case (2FA, notifications) before marketing
Use Case Categories
Marketing/Promotional
Examples: Sales, promotions, special offers
Requirements: Express written consent
Scrutiny: Highest
Customer Care
Examples: Support, service notifications, account updates
Requirements: Transactional consent often sufficient
Scrutiny: Moderate
2FA/Account Notifications
Examples: Security alerts, password resets, login verification
Requirements: Service relationship
Scrutiny: Lowest (fastest approval)
Mixed
Examples: Combination of promotional + transactional
Requirements: Must justify business necessity, comprehensive consent
Scrutiny: Highest documentation requirements
Registration Prerequisites
Required Business Documents
Legal Entity Verification
- EIN (Employer ID Number) from IRS
- Business registration confirmation
- Operating address (no P.O. boxes)
- Business phone number
- Official business email (matching domain)
Online Presence
- Active website (homepage, about, contact)
- Privacy policy accessible from homepage
- Terms of service (recommended)
- Physical address displayed on website
- Opt-out mechanism documented
Brand Verification Signals (Highly Recommended)
- DUNS number
- Google Business Profile verified
- Domain age 6+ months (ideal)
- Online reviews (Google, Yelp)
- Social media presence
Website Compliance Requirements
Privacy Policy Must Include:
- Information collection practices
- Data usage and sharing
- Third-party service providers
- User rights and opt-out procedures
- Contact info for privacy inquiries
- SMS-specific language explicitly stating mobile data is NOT shared with 3rd parties.
Consent Language Requirements:
- Clear disclosure of message frequency
- Statement of message/data rates
- Opt-out instructions (reply STOP)
- Help keyword (reply HELP)
- Terms and conditions link
- Not conditional on purchase
Sample Message Preparation
| Use Case | Requirements |
|---|---|
| Marketing | 3+ sample messages showing promotional content, explicit opt-in language, clear call-to-action, opt-out instructions in every message. |
| Customer Care | 3+ sample messages showing support/service content, account-specific info examples, transactional nature clearly demonstrated. |
| 2FA | 2+ sample messages showing security verification, code/token format, time sensitivity indicators. |
Brand Registration Walkthrough
Information Gathering
Legal Business Details:
- Legal business name (must match IRS records)
- DBA/trade name (if different from legal)
- Business structure (LLC, Corporation, etc.)
- EIN or Tax ID
- Formation state
- Business address (physical location)
Contact Information:
- Support email (domain matching)
- Support phone
- Website URL
- Authorized representative name and title
Vertical Classification:
Select industry category matching primary business: Retail/E-commerce, Healthcare/Telehealth, Financial Services/Fintech, Professional Services, Technology/SaaS, Automotive, Real Estate, Education, Non-profit, etc.
CSP Submission
Your messaging provider (CSP) submits:
- All business information collected in Phase 1
- Verification documents (EIN confirmation, registration)
- Stock symbol (if publicly traded) OR DUNS number (if obtained)
Processing Timeline:
Trust Score Assignment
TCR evaluates multiple factors:
- Business age and formation verification
- Online presence and domain age
- Review ratings and quantity
- Previous messaging history (if applicable)
- Industry risk profile
- Registration completeness
Score Ranges and Outcomes:
| 75+ | High confidence, proceed directly to campaign registration |
| 50-74 | Moderate confidence, consider external vetting for throughput upgrade |
| 25-49 | Low confidence, external vetting strongly recommended |
| <25 | Very low confidence, remediation required before campaign approval |
Vetting Options
Standard Vetting (Included)
Automated verification against public databases. No additional cost. Results in baseline Trust Score.
External Vetting ($40 one-time)
Third-party identity verification through Aegis Mobile. Typically increases Trust Score 10-25 points.
When to Choose External Vetting:
- Initial Trust Score 50-74 and need higher throughput
- Marketing use case requiring premium deliverability
- Competitive industry with higher carrier scrutiny
- New business lacking extensive online presence
Campaign Registration Walkthrough
Use Case Selection
Choose primary category:
Marketing
Focus: Promotional content, sales, special offers
Requirements: Express written consent
Approval difficulty: High
Throughput: Trust Score dependent
Customer Care
Focus: Support, service updates, account notifications
Requirements: Transactional consent sufficient
Approval difficulty: Moderate
Throughput: 600-4,500 msg/min
2FA
Focus: Security codes, password resets
Requirements: Security-focused samples
Approval difficulty: Low
Throughput: 4,500 msg/min (typically)
Mixed
Focus: Combination of promo + transactional
Requirements: Comprehensive consent
Approval difficulty: Very High
Throughput: Variable
Campaign Details
Required Information:
- Campaign description (150-300 characters explaining purpose)
- Message flow description (how consumers enter/exit program)
- Sample messages (minimum 2, recommended 3-5)
- Embedded link examples (if applicable)
- Embedded phone number examples (if applicable)
- Message volume estimate (messages per day/month)
Sample Message Best Practices:
- Include opt-out language: "Reply STOP to opt out"
- Include help keyword: "Reply HELP for help"
- Show realistic promotional/transactional content
- Demonstrate brand name/identification
- Avoid placeholder text or generic examples
- Match website tone and terminology
Consent Documentation
Express Written Consent Elements:
- Clear agreement language ("I agree to receive...")
- Message frequency disclosure ("up to 4 msgs/week")
- Statement of message/data rates
- Opt-out instructions ("Reply STOP to cancel")
- Help instructions ("Reply HELP for assistance")
- Terms and privacy policy links
- Not conditional on purchase or service access
Documentation Requirements:
- Timestamp of consent (with timezone)
- IP address or device identifier
- Exact consent language presented
- User's affirmative action (checkbox, keyword)
- Retention period: 4+ years minimum
Consent Collection Methods:
- Website forms with electronic signature (unchecked box)
- SMS keyword opt-in with double confirmation
- Point-of-sale checkout process
- Paper forms with signature (digitized and stored)
- Mobile app permissions
Website Verification
Carriers check:
- Privacy policy accessibility from homepage
- Physical business address displayed
- Contact information available
- Brand consistency (name, logo match registration)
- Opt-out mechanism documented
- SSL certificate active (https)
Common Verification Failures:
- Privacy policy link broken or 404 error
- Website under construction
- Domain privacy masking business details
- Mismatch between registered business name and website branding
- Missing opt-out disclosure
Submission and Review
Automated Review (Trust Score 75+)
- Approval typically within 48-72 hours
- No manual intervention required
- Immediate activation upon approval
Manual Review (Score <75 or flagged)
- 5-10 business days for evaluation
- May trigger additional documentation requests
- Possible carrier-specific questions
Approval Notification:
- CSP receives confirmation from TCR
- Campaign ID assigned
- Throughput limits specified
- Activation instructions provided
Trust Score Optimization
Pre-Registration Strategies
6+ Months Before Registration
- Register business domain and establish website
- Create Google Business Profile and verify location
- Begin building online review presence
- Establish social media accounts
- Obtain DUNS number if not publicly traded
3 Months Before Registration
- Publish comprehensive privacy policy
- Add physical address and contact information to website
- Generate initial customer reviews (5+ across Google/Yelp)
- Start email marketing list (demonstrates legitimate audience)
1 Month Before Registration
- Ensure website SSL certificate active
- Verify all links functional (privacy policy, terms, contact)
- Document consent collection methods
- Prepare sample messages matching actual use case
- Confirm business address with Google Maps
During Registration
Completeness Matters:
- Provide DUNS number if available (even if optional)
- Select most accurate vertical/industry classification
- Include stock symbol for publicly traded companies
- Provide detailed campaign description (use full character limit)
- Upload multiple sample messages (3-5 better than 2)
Accuracy Matters:
- Legal business name must match IRS records exactly
- Website URL must match business branding
- Support email must use business domain (not @gmail.com)
- Address must match public business filings
Documentation Quality:
- Sample messages should represent actual content, not templates
- Campaign description should explain business benefit to consumers
- Message flow should detail full subscriber journey (opt-in to opt-out)
Post-Registration Score Improvement
If Initial Score <75:
- External vetting ($40) typically increases score 10-25 points
- Wait 30 days, build online presence, resubmit brand
- Start with low-risk use case (2FA) to establish messaging history
- Request manual review if confident documentation is strong
Ongoing Score Maintenance:
- Maintain website accessibility (monitor uptime)
- Respond to customer reviews (shows active management)
- Keep privacy policy current
- Avoid spam complaints (under 0.5% complaint rate)
- Maintain low opt-out rates (industry average 1-2%)
Common Rejection Scenarios
Error Code 9106: Missing Opt-Out Language
Problem: Sample messages lack clear opt-out instructions or use non-standard language.
Carrier Requirement: Every marketing message must include: "Reply STOP to opt out" or substantially similar language using the keyword STOP.
Fix:
- Add "Reply STOP to opt out" to all sample messages
- Use exact keyword STOP (not "unsubscribe," "cancel," "end")
- Place opt-out language prominently (not buried in fine print)
- Resubmit campaign with updated samples
Error Code 9108: Privacy Policy Verification Failed
Problem: Carriers cannot access privacy policy, or policy lacks required SMS disclosures.
Common Causes:
- Privacy policy link returns 404 error
- Policy requires login/authentication to view
- Policy missing from website footer or main navigation
- Policy does not mention SMS/text messaging explicitly prohibiting 3rd party sharing
Fix:
- Verify privacy policy URL loads from homepage
- Ensure public accessibility (no login required)
- Add SMS-specific section covering data collection, storage, usage, and opt-out
- Add "Privacy Policy" link to website footer
- Resubmit campaign after verification
Error Code 9607: Consent Verification Issues
Problem: Consent documentation insufficient or does not meet TCPA requirements.
Carrier Concerns:
- Consent language too vague or ambiguous
- Frequency disclosure missing or unclear
- Terms and conditions not linked
- Consent conditional on purchase
Fix: Revise consent language to include all required elements (explicit agreement, frequency, rates, opt-out, help, policy links). Ensure consent is a separate checkbox (not pre-checked) and not conditional on completing a purchase.
Brand-Website Mismatch
Problem: Business name on registration does not match branding on website.
Example: Legal name "ABC Marketing LLC" but website only shows "ABC" or "ABC Marketing"
Fix:
- Add legal business name to website footer
- Include "DBA [trade name]" on About page
- Ensure brand consistency across registration and website
- Consider registering with DBA/trade name if substantially different
Prohibited Content Detection
Problem: Sample messages contain SHAFT content or other restricted categories.
Restricted Categories:
- Adult content/services
- Cannabis/CBD (all forms)
- Debt relief/credit repair
- Get-rich-quick schemes
- Cryptocurrency/NFT promotions
- Payday loans
- Phishing simulation (requires pre-approval)
Fix: Remove prohibited content from samples, select different use case if primary business is restricted, add age-gating documentation for alcohol, or provide state licensing for cannabis (where applicable).
Compliance Checklist
Pre-Registration Checklist
Business Foundation
- EIN obtained from IRS
- Business registered with state
- Physical business address (no P.O. boxes)
- Business phone number active
- Business email (domain-based, not free provider)
- DUNS number obtained (optional but recommended)
Online Presence
- Business website live and accessible
- Domain age 6+ months (ideal, not required)
- SSL certificate active (https)
- Privacy policy published and linked from homepage
- Terms of service available
- Physical address displayed on website
- Contact page with email and phone
Consent Infrastructure
- Opt-in forms/methods documented
- Consent language includes required elements
- Consent collection captures timestamp, IP, exact language
- Opt-out mechanism tested and functional
- Consent records stored securely
- Retention plan for 4+ years
Brand Registration Checklist
- Legal business name (matching IRS records)
- DBA/trade name (if applicable)
- Business structure (LLC, Corp, etc.)
- EIN or Tax ID
- Formation state
- Business address
- Support email (business domain)
- Support phone
- Website URL
- Industry vertical selection
- Authorized representative name and title
- DUNS number provided (optional enhancement)
Campaign Registration Checklist
Campaign Details
- Use case selected (Marketing, Customer Care, 2FA, Mixed)
- Campaign description (150-300 characters)
- Message flow description (opt-in to opt-out journey)
- Sample messages prepared (minimum 3, showing realistic content)
- Sample messages include opt-out: "Reply STOP to opt out"
- Message volume estimate (daily/monthly)
Consent Documentation
- Express written consent template prepared
- Frequency disclosure included ("up to X messages per week")
- Message/data rates statement included
- Opt-out instructions included
- Terms and privacy policy links included
- Consent not conditional on purchase
Post-Submission Checklist
Monitoring
- Check CSP dashboard for approval status
- Respond promptly to any documentation requests
- Note assigned Trust Score and throughput limits
- Verify campaign activation after approval
Operational Readiness
- Opt-out automation tested (STOP keyword processing)
- Help responses configured (HELP keyword processing)
- Sending volume within approved throughput limits
- Consent logs accessible for audit requests
Frequently Asked Questions
Registration Process
Q: How long does TCR registration take?
A: Brand registration typically completes in 1-3 business days with standard vetting. Campaign registration takes 1-10 business days depending on Trust Score and use case complexity. High Trust Score campaigns (75+) often approve within 48 hours. Lower scores trigger manual review extending timelines to 7-10 days.
Q: Do I need separate registrations for different phone numbers?
A: One brand registration covers your entire business. Each phone number requires its own campaign registration if use cases differ. For example, one number for marketing and another for customer service would require two campaign registrations under the same brand.
Q: Can I update my brand or campaign after approval?
A: Yes, but changes trigger re-review. Minor updates (contact information, message volume estimates) typically process quickly. Major changes (use case category, sample messages, business name) may require full re-approval. Consult your CSP before making changes.
Q: What happens if my registration is rejected?
A: Your CSP receives rejection reason with error code. Review error details, correct the issue, and resubmit. Common fixes take 2-4 business days to implement (website updates, consent language revisions). Resubmission review typically completes in 3-7 business days.
Trust Score
Q: Can I improve my Trust Score after initial assignment?
A: External vetting ($40) can increase scores 10-25 points. Building online presence (reviews, domain age, Google Business verification) helps for future resubmissions. Establishing successful messaging history with low spam complaints gradually improves reputation over 6+ months.
Q: Does my Trust Score affect all campaigns?
A: Yes. Trust Score is assigned at brand level and influences throughput limits for all campaigns under that brand. Higher scores unlock premium tiers (4,500 msg/min) while lower scores restrict to basic tiers (60-600 msg/min).
Q: How do Russell 3000 companies get automatic high scores?
A: Publicly traded companies in Russell 3000 index receive pre-vetted status based on market capitalization and regulatory oversight. This grants Trust Scores 75+ without additional verification. Provide stock ticker symbol during registration to claim this benefit.
Consent and Compliance
Q: What's the difference between express written consent and transactional consent?
A: Express written consent requires explicit agreement via electronic signature, checkbox, or SMS keyword with full disclosure of frequency, rates, and opt-out. Required for marketing. Transactional consent is implied through service relationship (e.g., account creation) and sufficient for order updates, security alerts, appointment reminders.
Q: Do I need consent if customer texts me first?
A: Customer-initiated contact establishes consent for that conversation. However, ongoing messages require explicit consent. Include in first response: "By texting us, you agree to receive responses via SMS. Reply STOP to opt out." Marketing messages always require separate express written consent regardless of who initiated.
Q: How long must I retain consent records?
A: Minimum 4 years to cover TCPA statute of limitations. Industry best practice: 5-7 years. Records must include timestamp (with timezone), IP address or device identifier, exact consent language presented, and user's affirmative action.
Q: Can I text people who gave me their business card?
A: No. Physical exchange of contact information does not constitute TCPA consent. You must obtain express written consent through proper disclosure (frequency, rates, opt-out) and documented agreement before sending marketing texts.
Use Cases
Q: What's the difference between Customer Care and Marketing use cases?
A: Customer Care covers service-related messages directly supporting a transaction or account (order confirmations, appointment reminders, password resets). Marketing includes promotional content, sales, offers, or calls-to-action not required for service delivery. Marketing has higher scrutiny and requires express written consent.
Q: When should I select Mixed use case?
A: Only when you genuinely need to send both promotional and transactional messages from the same campaign. Mixed requires comprehensive consent covering all types, samples for each category, and business justification. If you can separate into distinct campaigns, that's typically easier for approval.
Q: Can I change my use case after approval?
A: Requires resubmission and re-approval. Use case changes are considered major modifications triggering full carrier review. Plan use case carefully during initial registration to avoid delays.
Technical Operations
Q: What is throughput and why does it matter?
A: Throughput is maximum messages per minute your campaign can send. Determined by Trust Score and use case. Low throughput (60 msg/min) limits campaigns to 86,400 messages per day. High throughput (4,500 msg/min) supports 6.48 million messages per day. Critical for time-sensitive campaigns or large subscriber bases.
Q: Can I send MMS (picture messages) through 10DLC?
A: Yes, if your CSP supports MMS on 10DLC numbers. Same registration requirements apply. Sample messages should indicate if images will be included. MMS messages consume more throughput capacity than SMS (typically 2-3x the "cost" per message).
Q: What happens if I exceed my throughput limit?
A: Messages queue for delayed delivery or are rejected depending on CSP configuration. Consistent overage triggers carrier scrutiny and potential throughput reduction. Monitor volume carefully and upgrade use case or add campaigns if approaching limits.
Costs
Q: What are the total costs for TCR registration?
A: Brand registration: $4 one-time. Campaign registration: $10-60/month depending on use case (Marketing highest at $60/month). External vetting (optional): $40 one-time. Carrier pass-through fees vary by CSP but typically $0.0025-0.01 per message. Budget $200-500 for first year depending on volume.
Q: Do I pay TCR fees directly?
A: No. Your CSP (messaging provider) handles TCR billing. Fees appear on your CSP invoice as line items. TCR does not bill businesses directly.
Q: What happens if I stop paying campaign fees?
A: Campaign registration expires. Messages from that number will be blocked by carriers. Reactivation requires paying past-due fees and may trigger re-review of campaign details.
Industry-Specific
Q: Do healthcare organizations have special requirements?
A: HIPAA-covered entities must ensure messaging provider signs Business Associate Agreement (BAA). TCR registration process is identical, but privacy policies must address HIPAA compliance. Use case selection typically Customer Care or 2FA. Consent must address protected health information (PHI) handling.
Q: Can non-profits get special pricing or expedited approval?
A: Non-profit use case category exists but does not reduce fees or accelerate timelines. 501(c)(3) organizations follow standard registration process. However, established non-profits often achieve high Trust Scores due to public filing requirements and online presence.
Q: Are there restrictions for financial services messaging?
A: Higher scrutiny due to fraud concerns. Must clearly identify as financial institution. Sample messages should demonstrate legitimate account servicing. Avoid content that could be interpreted as phishing (e.g., requesting sensitive information via text). GLBA compliance required for privacy policies.
Next Steps
Immediate Actions
Before You Register
- Complete Pre-Registration Checklist
- Verify website accessibility and privacy policy
- Prepare sample messages for your use case
- Document consent collection methods
During Registration
- Gather all required business documents
- Work with your CSP to submit brand registration
- Monitor for Trust Score assignment
- Prepare campaign details while brand processes
After Registration
- Test opt-out automation (STOP keyword)
- Configure help responses (HELP keyword)
- Train team on compliance requirements
- Set up consent logging system
Resources
Tools and Diagnostics
- TCR Use Case Selector: Identify appropriate classification
- Sample Message Validator: Pre-submission content check
- Trust Score Simulator: Predict likely score range
- Brand Consistency Checker: Verify registration alignment
Advanced Guides
- TCR Rejection Remediation Guide (37+ error codes)
- TCPA Compliance Blueprint (consent best practices)
- Carrier Policy Updates (monthly regulatory changes)
- Multi-Campaign Management (scaling operations)
Get Expert Help
If TCR registration complexity exceeds internal resources, mytcrplus.com provides compliance microsites centralizing required documentation, consent management, and audit-ready records.
Platform Features:
Subscription Tiers
+ $299 setup
- Core microsite
- Privacy policy & terms
- Consent collection forms
- Basic opt-out automation
- Email support
+ $399 setup
- Everything in Basic
- Enhanced analytics
- Custom branding
- Priority support
- Compliance reporting
+ $499 setup
- Everything in Standard
- Multi-campaign support
- Dedicated account manager
- White-label options
- Phone support
Schedule a consultation to discuss your specific use case, timeline constraints, and compliance requirements.
Schedule ConsultationLegal Disclaimer
This guide provides general information about 10DLC, TCR, TCPA, and CTIA messaging frameworks and does not constitute legal advice. Compliance requirements vary based on business model, use case category, message content, and recipient jurisdiction. Organizations should consult qualified legal counsel for guidance specific to their messaging programs. mytcrplus.com does not provide legal advisory services or regulatory representation.
mytcrplus.com is designed to help customers achieve 10DLC compliance and carrier policy adherence. Final carrier approval is subject to The Campaign Registry (TCR) review and use case specifics. Campaign throughput limits and trust scores are determined by TCR based on brand verification and reputation signals outside mytcrplus.com's control. Customers remain responsible for obtaining appropriate legal counsel regarding TCPA compliance and consent management requirements.
TCR Starter Kit
The Complete Guide to 10DLC Registration and Messaging Compliance
© 2026 Native Chaos Holdings LLC (mytcrplus.com)
1887 Mesa Vista Dr, Henderson, NV 89014
Document Version: 2.0 | Last Updated: Q1 2026