Nonprofit Texting Compliance: TCPA & A2P 10DLC Made Simple (2026)

Texting is the most direct way to reach your supporters — and the rules around it scare a lot of nonprofit leaders into doing nothing. That fear is understandable, but it's fixable. Once you understand the two things that govern nonprofit texting — the TCPA and A2P 10DLC — compliance becomes a short checklist, not a minefield.

From Rally's founder, James

Most nonprofits overthink the send. Here's the truth: your donors want to hear from you. They just want to know you're a real person, that you'll protect their privacy and their data, and that they said yes. They want to recognize who's texting them.

The biggest mistake I see isn't a compliance slip — it's never starting at all. Nonprofits get so nervous they never set up texting, so they never even get to say thank you.

So start with gratitude. When someone gives, capture their cell number with a clear consent checkbox, then send an immediate thank-you. Follow up over time with the impact of their gift — not another ask. What you never want to do is go silent until Giving Tuesday and then blast a stack of donation requests. (What about the gift I already gave? What about my chance to serve?)

And don't assume hardly anyone will opt in. When you ask the right way — give a reason, and say plainly how you'll use their number — we see 50–60% consent, not 3 in 10. Even at 3 in 10, the math still wins: 30 cell phones are worth far more than 100 email addresses once you compare how texts get opened and clicked.

Capture consent inside the journey people are already in — a donation, an event registration, a petition, a contact form, a gala RSVP. Let them scan, tap, or text to opt in. Then thank them right away and build a real relationship. The one thing to never do: spray, pray, spam, or sell their data. That's the opposite of human-centered.

Is it legal to text your supporters?

Yes — as long as you have permission. That's the whole foundation. Texting someone who agreed to hear from you is legal and effective. Texting someone who didn't is where nonprofits get into trouble.

Two systems set the rules:

• The TCPA — a federal law about consent and opt-outs.
• A2P 10DLC — the phone carriers' registration system for business and nonprofit texting.

You need to satisfy both. Here's each one, simply.

TCPA: the consent law

The Telephone Consumer Protection Act (TCPA) treats text messages a lot like telemarketing calls. For your nonprofit, it comes down to three duties:

1. Get clear consent before you text. People must agree to receive texts from you — by texting a keyword, checking a box, or filling out a form that plainly says they'll get texts.
2. Match your messages to that consent. If someone opted in for event updates, don't blindside them with daily appeals.
3. Honor opt-outs immediately. When someone replies STOP, the texts stop — right away — and you keep a record.

TCPA violations can carry penalties of around $500 per message, and up to $1,500 per willful violation.

The safest path is simple: get clear consent, send what people agreed to, honor opt-outs instantly, and keep good records.

A2P 10DLC: the registration step

A2P 10DLC stands for "application-to-person 10-digit long code." In plain terms, it's how U.S. phone carriers approve organizations to send texts from a regular 10-digit number. You register your organization and your campaigns so carriers know you're real and trustworthy.

Why it matters: if you skip registration, carriers filter or block your messages. You could be fully consented and still have your texts vanish before they reach a phone — and you may never know, because the tool will still say "sent."

What registration involves, at a high level:

• Register your organization (your EIN and basic details).
• Register your campaign (what kind of messages you send).
• Wait for approval (often a week or two).

A nonprofit-focused platform walks you through this. If a tool doesn't help with 10DLC registration, that's a red flag.

Rally Corp's full-service texting handles registration for you.

Are nonprofits exempt from these rules?

This is the most common — and most dangerous — misunderstanding. Don't assume you're exempt.

When in doubt, default to: "get consent anyway."

The practical takeaway for almost every nonprofit: build your program on permission, not on a hoped-for exemption. It's simpler, safer, and it performs better.

Why permission-based texting raises more money

Here's the part most "compliance" articles miss: doing this right isn't just about avoiding penalties. It raises more money — because it's relational.

Texting already gets attention. It's right there in front of people. Everyone knows texts get read — that's exactly why so many people feel nervous sending one. So use that power well: lead with gratitude, story, and impact, and build the relationship.

People want to care. They just need to know you'll honor their request, you won't spam them, and you won't sell their data. We text our friends and family — that's how we talk to the people we care about. If our donors are really our community, why would we treat them any differently, or fall back on stale channels that don't get results?

A clean, consented list outperforms a big cold one every time — and it protects your sender reputation so your messages keep landing. Compliance and results point the same direction.

Your 6-step compliance checklist

1. Collect clear consent at every opt-in point (keyword, form, QR code, NFC tap).
2. Keep records of who opted in, when, and how.
3. Register for A2P 10DLC before you send at scale.
4. Send what people agreed to — match the message to the consent.
5. Honor STOP instantly and include opt-out language at the right cadence.
6. Lead with gratitude, then impact — not back-to-back solicitations.

What Your Disclosure Actually Has to Say

Here's what to actually put on your page.

On your opt-in point (checkbox, form, or keyword reply):

• Your organization's name, clearly stated
• What the program is (a short description of what someone's signing up for)
• How they're opting in (checking a box, texting a keyword, filling out a form)
• Message frequency ("message frequency varies," or a real number if you know it)
• "Message and data rates may apply"
• A line that consent isn't a condition of any purchase or service
• How to opt out ("Reply STOP to opt out")
• How to get help ("Reply HELP for support")
• A link to your Terms of Service
• A link to your Privacy Policy

If you include a checkbox on a form, it must not be checked by default and must not be required to submit the form.

A template you can copy

"By texting {{Keyword}} to {{number}}, you agree to receive text messages from {{Organization}} about {{Program Description}}. Message frequency varies. Message and data rates may apply. Reply STOP to opt out, HELP for help. View our [Terms] and [Privacy Policy]."

What this looks like in practice. Here's Rally's own live disclosure: rallycorp.com/sms-terms and rallycorp.com/sms-privacy.

You don't have to build your Terms and Privacy Policy from scratch. Rally customers get compliant terms and privacy language handed to them, copy-paste ready, and we host the pages for you. If you're not a customer yet, everything above is enough to build your own.

Frequently asked questions

Is it illegal to text someone without their permission?
Texting people who haven't consented can violate the TCPA and carry real penalties. Always get clear permission first.

Do nonprofits have to follow TCPA rules?
Don't assume you're exempt. The safest approach for nearly every nonprofit is to build on permission and consent regardless.

What is A2P 10DLC, and do nonprofits need it?
It's the carrier registration system for texting from a 10-digit number. Yes — without it, your messages are likely to be filtered or blocked.

How many supporters will actually opt in?
When you ask the right way — with a clear reason and a plain explanation of how you'll use their number — many nonprofits see 50–60% consent. Even a smaller opt-in rate is worth it, given how much higher text engagement runs than email.

The bottom line

Compliant nonprofit texting isn't complicated once you see it clearly: get permission (TCPA), register your number (A2P 10DLC), honor opt-outs, and lead with gratitude. Do that, and texting becomes your safest and highest-performing channel.

Want a platform with consent and 10DLC handling built in? See how Rally keeps you compliant or view pricing.

Heads up: we make great texting software, not legal rulings. This is general info, not legal advice — rules shift and every org is different, so verify the current
TCPA/A2P 10DLC requirements and check with an attorney before you act. And then book a call with us, and we'll loop in our compliance team to help.