Free SMS Compliance Checker
Carriers review your website before they approve your texting campaign. Find out what they'll see.
How to Use this SMS Compliance Checker Tool
The SMS Compliance Checker scans your website against the criteria carriers use to review A2P 10DLC campaigns.
It finds your privacy policy, SMS terms, and phone-collecting forms, then runs 17 checks covering opt-out language, message frequency, rate disclosures, privacy cross-links, and third-party data sharing.
You get a rejection risk score and a specific fix for every issue. It takes about 30 seconds and it's free.
What this A2P 10DLC Compliance Checker Looks for
Seventeen checks, grouped by what they examine. Blocking issues are the ones that commonly cause outright rejection. Warnings slow review down or trigger follow-up questions.
Your privacy policy
That third one catches more solid sites than anything else on this list. A privacy policy can be well written, lawyer-reviewed, and current, and still fail it by never mentioning text messaging. Carriers want the sentence stated, close to word for word:
"Text messaging originator opt-in data and consent will not be shared with any third parties."
Add that to your privacy policy and you've cleared the check.
Your SMS terms and disclosures
Your Opt-in Forms
Your Campaign Setup
These four come from the questions you answer during the scan, not from your
website.
Is My Website SMS Compliant?
There's no certificate that says yes. What there is: a set of things carrier reviewers look for, and a fairly short list of ways websites come up short.
Your website is ready for carrier review when a stranger can land on it and find, without hunting: a privacy policy that addresses text messaging and says opt-in data isn't shared, SMS terms covering STOP and HELP and frequency and rates, and consent language sitting right next to every field where you ask for a phone number. Those three surfaces need to reference each other.
That's what this checker looks for. It can't tell you that you're compliant, because no scan can. It can tell you which of those pieces are missing.
Why Carriers Reject A2P 10DLC Campaigns
Your campaign gets reviewed by a Direct Connect Aggregator before it reaches AT&T, Verizon, or T-Mobile. That reviewer opens your website. They're checking whether the consent you describe in your registration is actually visible where you say it is.
Most rejections come down to one of four gaps.
1. The disclosure is incomplete. You have SMS terms, but they never say "message frequency varies" or "msg and data rates may apply." Carriers treat those as required elements, not suggestions.
2. Consent is invisible at the point of collection. Your contact form takes a phone number and says nothing about texting. The reviewer sees a phone field with no consent copy and stops there.
3. The privacy policy is silent on SMS. It covers cookies and email. It never says what happens to a phone number, and it never says opt-in data isn't shared.
4. The links don't connect. Privacy policy exists, SMS terms exist, and the opt-in form references neither. Reviewers read that as an incomplete consent flow.None of these are hard to fix. They're hard to notice on your own site, because you already know what you meant.
There's a fifth reason, and it has nothing to do with your website. Carriers restrict certain content categories no matter how clean your disclosures are: cannabis and CBD, adult content, hate speech, fraud, firearms, gambling, prescription drugs, debt collection, and political messaging.
Restricted doesn't mean banned. A pharmacy texting refill reminders, a licensed collections agency, a bar confirming reservations, and a PAC with proper sender identification all register successfully. What they have in common is extra requirements on top of the usual disclosures: licensing evidence, age-gating, sender identification. A few categories, cannabis being the clearest, rarely clear at all.
No website scan can see any of this, so we ask you during the scan and tell you where you stand.
How the Scan Works
Step 1.
We find your pages. Enter your URL. The scanner crawls your site to locate your privacy policy, terms, and any form collecting phone numbers. It respects robots.txt and reads only public pages, the same ones a carrier reviewer would open.
Step 2.
You tell us about your campaign. A few questions: what kind of messages you send, how you collect numbers, whether you keep consent records. Some checks only apply to promotional campaigns, some only to web-form opt-ins.
Step 3.
We evaluate and report. Every applicable check runs against what we found. You get a rejection risk score, findings sorted by severity, and the specific fix for each one.
What Your Scan Results Mean
Read this part carefully, because the framing matters.
This scan estimates carrier rejection risk. It is not a compliance certification and it is not legal advice.
A clean result means we found no blocking issues in this evaluation. It doesn't mean your campaign will be approved. Carrier review includes factors no website scan can see: your brand vetting score, your message content and category, your traffic history, and reviewer judgment on the day.
We also tell you what we couldn't check. If your opt-in form is rendered in JavaScript and we can't read it, that check comes back incomplete, not passed. An incomplete check is a gap in the evaluation and we'll say so rather than round it up in your favor.
Who This Scanner is For
You're about to register a 10DLC campaign. Run the scan first. Fixing a privacy policy takes an afternoon. Getting rejected, fixing it, and resubmitting takes weeks.
Your campaign was already rejected and the notice didn't say why. They rarely do. This does.
You run texting for clients. Scan every client site before you file on their behalf. The re-scan link lets you verify the fix landed.
You inherited a texting program and have no idea what state it's in. Start here.
What Happens After You Fix These Issues
Fixing the website is the part you control. Registration is the part that follows.
MessageDesk is a Campaign Service Provider registered with The Campaign Registry. We collect the information, submit your brand and campaign registrations, handle denials, resubmit, and track approval status. Most platforms hand you a link to TCR and wish you luck.
Registration runs about $4 a month for your brand and $10 a month per campaign. Those are carrier fees and we pass them through at cost. Our customers average 48 hours to approval. Some clear in 24.
If the scan turned up blocking issues, we've seen all of them.
What These Checks Are Based on
The 17 checks come from published carrier and industry requirements, not our opinion.
1. CTIA Messaging Principles and Best Practices: the disclosure elements carriers expect: STOP, HELP, message frequency, and rate language
2. The Campaign Registry: brand and campaign registration requirements and review criteria
3. FCC rules under the TCPA: federal consent requirements for calls and texts
4. Direct Connect Aggregator review practice: the privacy policy and opt-in evidence reviewers ask for in campaign vetting
SMS Compliance & A2P 10DLC Resources
Check out these additional SMS compliance resources.
A2P 10DLC Registration | 10DLC Compliance Guide for Business
What Does Opt Mean in Texting? 33 SMS Opt-in Examples
SMS Privacy Policy Templates + SMS Terms & Conditions Guide
FAQs
Frequently asked phone number management questions.
An SMS compliance checker is a tool that scans your website for the disclosures and consent language carriers look for when they review a business texting campaign. This one checks your privacy policy, SMS terms, and phone-collecting forms against 17 A2P 10DLC carrier-review criteria and returns a rejection risk score with a fix for each issue.
A2P 10DLC is the system US carriers use to register and approve business text messaging on standard 10-digit phone numbers. A2P means application-to-person: texting sent by a business through a platform, as opposed to person-to-person texting from a personal phone. Every business sending A2P messages has to register its brand and campaigns with The Campaign Registry through a Campaign Service Provider.
Effectively, yes. Carrier reviewers use your website to verify the consent flow you describe in your registration. If you don't have a website, or your site has no privacy policy and no visible opt-in disclosure, reviewers have no way to confirm your consent claims, and campaigns are commonly rejected.
Consent copy visible next to the phone field, covering who's texting, what kind of messages, how often, that message and data rates may apply, how to opt out with STOP, and links to your privacy policy and SMS terms. A box that's checked by default isn't consent.
For promotional campaigns, many carriers also expect double opt-in: the customer checks the box on your form, then confirms by replying YES to a confirmation text. It's not one of the 17 checks, but it strengthens a promotional campaign at review.
No. This checker evaluates carrier-review criteria for A2P 10DLC. The TCPA is federal consent law with its own requirements and its own litigation exposure, and no website scan assesses that. The two overlap in practice and they're different things.
Brand registration is usually quick. Campaign review is where timelines vary, and a rejection restarts the clock. MessageDesk customers average 48 hours to approval and some clear in 24. The single biggest factor is whether your website supports your consent claims on the first submission, which is what this scan checks.
Yes. The discovery pass runs with no email required. The full evaluation asks for a business email so we can send the report. No charge, no account.
No. We read your public pages to run the checks and we store the findings, not your page content.
Carriers apply extra scrutiny to cannabis and CBD, firearms and ammunition, gambling, adult content, hate speech, phishing and fraud, controlled substances, lending and debt collection, and political messaging. Age-restricted content like alcohol and tobacco gets the same treatment.
Restricted isn't the same as banned. Most of these register successfully with the right setup, whether that's age-gating on your website, licensing evidence, or proper sender identification. Cannabis and CBD are the hardest and rarely clear. Content that's illegal or deceptive never does.
The scan asks which categories apply to you, flags what your vertical needs on top of the 17 checks, and points you to someone who can walk you through it.
No scan can answer that with a yes. What this checker tells you is whether the three surfaces carriers examine, your privacy policy, your SMS terms, and your opt-in form, contain the specific disclosures reviewers look for. If all 17 checks pass, you've removed the most common reasons campaigns get rejected. That's a meaningfully different claim from compliance, and it's the honest one.
10DLC compliance means your business meets the consent, disclosure, and content requirements carriers enforce when they review your campaign registration. In practice: a published privacy policy covering SMS, SMS terms stating opt-out and frequency and rates, visible consent language wherever you collect phone numbers, and durable records of who opted in and when.
Two things at minimum. It needs to address SMS specifically rather than only email and cookies. And it needs an explicit statement that text messaging opt-in data and consent aren't shared with third parties. Something close to: "Text messaging originator opt-in data and consent will not be shared with any third parties." Language that suggests you sell or share phone numbers is a frequent hard rejection.
For promotional campaigns, generally no. Carriers expect written or electronic proof of consent. Verbal-only opt-in for promotional messaging is one of the 17 checks and it returns as a blocking issue.
Messages from unregistered numbers get filtered or blocked by carrier networks. Deliverability drops, often with no error visible on your end. Sustained unregistered sending can lead to number or account suspension.
No. It evaluates your website against the criteria carriers commonly use during A2P 10DLC review and estimates rejection risk. It isn't a compliance certification, it doesn't assess TCPA litigation exposure, and it isn't legal advice.
No. We ask for an email address, not a phone number.
About $4 a month for your brand and $10 a month per campaign. Those are carrier registration fees. MessageDesk passes them through at cost with no markup, and there are no approval or resubmission fees.
Double opt-in is two separate confirmations: the customer opts in on your website, then confirms by replying to a text from you. Carriers commonly recommend it for promotional campaigns and it's the strongest consent record you can hold. It isn't required for transactional messaging like appointment reminders or order updates.
