Your confirmation text should name your business, show how to opt out with STOP, offer a contact or HELP option, say the messages recur and how often, and rest on consent collected first. Miss those, and the carriers that move your texts may filter the message without telling you.
What does a compliant confirmation text actually contain?
Five items, from Section 5.1.2.1 of the CTIA Messaging Principles (May 2023): the program name, a customer care contact, how to opt out, a note that messages recur and how often, and any fees.
- 01Name the programSay who is texting. "Reminders from Bright Smile Dental," not an unlabeled number.
- 02Give a contact or HELPA toll-free number, a 10-digit number, or HELP command instructions all count as customer care contact.
- 03Show how to opt outReply STOP. The Principles say variants like stop, end, unsubscribe, cancel, and quit should be honored too.
- 04Say it recurs, and how oftenDisclose that the messages are recurring and roughly how frequently they arrive.
- 05Spell out any feesClear, conspicuous language about charges and how they are billed, if any apply.
"The confirmation message should include: (1) the program name or product description; (2) customer care contact information (e.g., a toll-free number, 10-digit telephone number, or HELP command instructions); (3) how to opt-out; (4) a disclosure that the messages are recurring and the frequency of the messaging; and (5) clear and conspicuous language about any associated fees or charges and how those charges will be billed." Section 5.1.2.1 (May 2023).
The May 2023 Messaging Principles and Best Practices. The October 2025 file is a separate eight-page Messaging Security Best Practices document; vendor blogs sometimes blur the two. Build to the 2023 list.
Who do these rules cover, and are they even law?
They are not law. They cover Non-Consumers, meaning any business that texts customers, and the document calls itself voluntary. Federal laws like the TCPA sit somewhere else.
"A Non-Consumer is a business, organization, or entity that uses messaging to communicate with Consumers" (Section 3.3.2), which lists medical practices among its examples. A salon or repair shop sending reminders is squarely in.
"a set of voluntary best practices developed by CTIA’s member companies throughout the wireless messaging ecosystem" (Section 1, Executive Summary).
Its Principles "do not constitute or convey legal advice" and "do not impose, prescribe, or require" anything; individual carriers "may choose to implement modified and additional requirements" (Section 2.3, May 2023).
Federal law and regulation, written by Congress and federal agencies, enforced as law, outside this document. Fall short of CTIA and your texts can be filtered; fall short of the TCPA and the exposure is legal. Ask a lawyer.
View data
| Step | Value |
|---|---|
| express permission, collected first | Opt-in (applies only to the campaign and sender it was collected for) |
| fulfills the request | First text ("Appointment reminders, welcome texts, and alerts fall into this category because the first text sent by the business fulfills the Consumer’s request" (Exhibit II)) |
| reminders, at the disclosed frequency | Recurring (Informational messaging; anything promotional needs express written consent first) |
| one final confirmation, then nothing | STOP (stop, end, unsubscribe, cancel and quit all count) |
What happens when a carrier decides your text looks off?
It can filter or block the message before it reaches the phone, and it only "may" tell you, "to the extent practical." There is no bounce like a failed email.
Delivered and silently dropped are the two outcomes of step 2. The carrier "may" notify you when it blocks, and only "to the extent practical." Silence is the default.
View data
| Step | Value |
|---|---|
| Your text | 1 (Confirmation SMS leaves your platform) |
| Carrier filter | 2 (Screened against CTIA best practices, at the carrier’s discretion) |
| Delivered | 3a (Lands on the customer’s phone) |
| Silently dropped | 3b (No bounce, no alert, nobody notices.) |
"Service Providers may block or filter message traffic to protect Consumers, their networks, and the messaging ecosystem from Unwanted Messages" (Section 7.2.3).
"To the extent practical and consistent with Service Providers' Unwanted Message prevention and mitigation methods, Service Providers may notify the Message Sender." May, not will.
Providers "should provide a point of contact" for senders who "can provide evidence that their messages have been blocked" (Section 7.2.8, May 2023). The burden sits on you.
A dropped confirmation looks exactly like a text you never sent, so when reminders quietly stop landing, you end up debugging everything except the carrier.
Is a HELP keyword required on its own?
Not as its own rule. In this document HELP appears once, as one example of customer care contact information you can offer; a staffed phone number works too.
A toll-free number, a 10-digit telephone number, or HELP command instructions. Any one of them.
That is their policy, not this text.
A person who got a reminder and has a question needs somewhere to send it. The format matters less than the answer.
Do I really have to drop bit.ly?
The Principles never name bit.ly or tinyurl, and never say "no shorteners." They ask that a shortened link use a domain dedicated to the sender and plainly identify who owns it (Section 5.3.2, May 2023).
The link in your text
a shared public shortenera domain dedicated to you
Web address and IP addresses "dedicated to the exclusive use of the Message Sender."
What the customer sees
a domain anyone’s links ride onyour name, visible in the link
The link should plainly identify who owns it.
The document to build to
October 2025 Security Best PracticesMay 2023 Messaging Principles
The October 2025 chatter usually points at the separate companion document, not the one with the checklist.
View data
| Metric | Day zero → target |
|---|---|
| The link in your text | a shared public shortener → a domain dedicated to you |
| What the customer sees | a domain anyone’s links ride on → your name, visible in the link |
| The document to build to | October 2025 Security Best Practices → May 2023 Messaging Principles |
What does this mean at your front desk?
A filtered confirmation looks like a quiet morning: the customer never got the text, shows up at the wrong time or not at all, and nobody connects the no-show to the carrier.
- 01Name the programEvery confirmation carries your business name, not a bare number.
- 02Keep the opt-out cleanSTOP and its variants end the thread with one final confirmation, whatever the capitalization or punctuation.
- 03Disclose the cadenceSay the messages recur and roughly how often, and offer a contact or HELP.
- 04Keep the consent recordsExpress permission before the first reminder; express written consent before anything promotional.
- 05Watch delivery, not complaintsIf delivery numbers slip, ask your messaging provider to check for filtering before you blame the customer.
- 01Collect consent first
- 02Build the confirmation to the checklist
- 03Honor STOP and HELP
- 04Watch delivery
The same document governs the text you send after a missed call. This is general information, not legal advice, and CTIA’s document is voluntary industry guidance rather than law; for how the TCPA and your setup interact, talk to qualified counsel.
Questions owners ask
Is CTIA’s Messaging Principles and Best Practices a law?
No. The document calls itself a set of voluntary best practices written by CTIA, the wireless carriers' trade association, in May 2023. No agency enforces it. Separate federal laws like the TCPA do exist, but they sit outside this document. Ask a lawyer.
Do appointment reminder texts need the customer’s consent?
Under the CTIA Principles, appointment reminders are Informational messaging, and the customer should give express permission before the first text. Marketing or promotional texts carry a higher bar: express written consent. A consumer’s opt-in applies only to the campaign and sender it was collected for.
What does STOP have to do with my confirmation texts?
The Principles ask senders to honor opt-out requests and send one final confirmation, then stop. STOP is the standard word, but variants like stop, end, unsubscribe, cancel, and quit should be read and acted upon too. Capitalization and punctuation should not invalidate a customer’s opt-out.
Will a carrier tell me if my texts are being filtered?
Not reliably. The Principles say a Service Provider may notify a sender when it blocks messages, and only to the extent practical. There is no bounce. If delivery drops, ask your provider to check, and use the carrier redress contact if you can show blocking.
Sources
The first meeting starts with findings, not promises.The free Business Health Report reads your business and shows you what it found, in days.
Get Your Free Business Health Report