Compliance

How to Add an Opt-Out to Every Group Text — Required by Law

Adding an opt-out to your business text messages isn't optional politeness — it's federal law. The Telephone Consumer Protection Act (TCPA), FCC regulations, and CTIA guidelines all require every commercial or business SMS to include a clear, easy way for the recipient to stop receiving messages. The penalties for skipping it are real: $500-1,500 per violating message, and class action plaintiffs have collected millions from businesses that ignored opt-outs. The good news: compliance is six words at the end of every text. "Reply STOP to end." That's it. Here's exactly what the law requires, which keywords must be honored, and why platforms like ZestyText handle the technical part automatically.

🍋 Compliant texting from $1 →

Why is an opt-out required by law?

The Telephone Consumer Protection Act of 1991, as expanded by FCC rulemaking and reinforced by CTIA industry guidelines, gives consumers the right to stop unwanted commercial messages. The opt-out requirement reflects a core principle: businesses can text consumers who consent, but consumers can revoke that consent at any time, and the revocation must be easy. No phone calls, no fee, no online portal hoops — just reply STOP and the messages stop.

The "easy" part matters. Courts have repeatedly held that opt-outs which require additional steps (calling a number, visiting a website, finding a buried link) don't satisfy TCPA. The opt-out must be in the body of the message, in plain English, and require nothing more than a single reply. This is why "Reply STOP to end" is the standard pattern — it's the simplest possible compliant opt-out.

What's the right way to add an opt-out?

Three components work together:

  1. The phrase in the message body. "Reply STOP to end" or equivalent. It must be in the actual SMS, not in a separate disclosure document, and must appear in every message — not just the first one.
  2. Backend honoring of opt-out keywords. When a recipient replies STOP, your messaging platform must recognize the keyword and remove them from the list immediately. ZestyText does this automatically.
  3. Confirmation message. When someone opts out, they must receive a confirmation ("You have been unsubscribed and will receive no further messages from this sender"). This is the last message they receive — anything after it would itself be a violation.

The "Reply STOP to end" phrasing is industry standard and universally recognized. Other equivalent phrasings — "Text STOP to opt out," "Reply STOP to unsubscribe" — also work. What doesn't work: burying the opt-out in a long disclosure paragraph, requiring the recipient to call a number, requiring them to visit a website, or formatting the opt-out so it gets cut off in older phones that show only the first 50 characters of an SMS.

What words count as opt-out keywords?

Per CTIA Short Code Monitoring Handbook guidelines (which apply to 10DLC messaging too), all of these keywords must be honored as valid opt-outs:

The keyword should be honored regardless of capitalization (STOP, stop, Stop all work), and regardless of whether it's the entire message ("STOP") or part of a longer message ("Hi, can you stop sending these please"). ZestyText recognizes all of these automatically and removes the recipient from active lists. You don't need to manually monitor replies for opt-outs — the platform handles it.

What about HELP?

HELP is a separate required keyword. When a recipient texts HELP, they must receive an automated response identifying the sender and providing contact info or basic information about the messaging program. The standard HELP response includes the sender name, what the messages are about, contact information for support, and the opt-out instruction.

Example HELP response: "ZestyText: For support, email support@zestytext.com or visit zestytext.com. Reply STOP to end."

The HELP requirement is parallel to but distinct from the STOP requirement — both must be supported, both must be automated. ZestyText handles HELP responses automatically. You don't need to monitor for HELP replies and craft individual responses; the platform does it.

$1 covers your first 25 compliant messages →

What's the difference between opt-in and opt-out?

Opt-in is consent the recipient gives before being messaged — a checkbox on a form, a signed lease clause, an explicit "yes I want updates" reply, an in-store sign-up sheet with clear disclosure. Opt-in must be obtained before the first message; you can't text someone who hasn't opted in and ask them to opt in. (Well, you can, but it's an immediate TCPA violation.)

Opt-out is the right to stop messages after they start. Even with a valid opt-in, recipients can revoke their consent at any time. Opt-out must be honored immediately and permanently — no last-chance message, no "are you sure," no waiting period.

Both are required for compliance. You need opt-in to start, and you need to honor opt-out instantly when requested. Skipping either is a TCPA violation. The two requirements work together: opt-in establishes the relationship; opt-out preserves the recipient's ongoing control. (For more on the opt-in side: how to send a group text for your small business.)

What happens when someone opts out?

Three things, immediately:

  1. The recipient is removed from the messaging list. Not flagged, not paused — removed. They no longer receive messages from this sender's program.
  2. A confirmation message is sent. "You have been unsubscribed and will receive no further messages from [sender]." This is the last permitted message in the conversation.
  3. The opt-out is recorded. The platform logs the timestamp, keyword used, and the fact that consent was revoked, in case anyone (including the recipient or a regulator) ever asks for documentation.

Subsequent messages to the opted-out number are direct TCPA violations. Even one — even an accidental — is a violation. This is why platform-level automation matters: humans miss replies, especially in high-volume sends. ZestyText (and any compliant platform) maintains a suppression list automatically so opt-outs can't accidentally receive future messages.

For broader small business texting context: how to send a group text for your small business.

Can you ever message them again after opt-out?

Only if they re-opt in. And the new opt-in must be fresh, explicit, and documented — not a workaround. Acceptable re-opt-in scenarios:

What's not acceptable: manually re-adding the number to your list, assuming consent because the recipient is now a paying customer, sending "we miss you" winback texts to opted-out numbers, or any other circumvention. The opt-out is permanent until the recipient affirmatively opts back in. This is one of the easiest TCPA violations to commit accidentally — a well-meaning team member sees a former customer in the database and adds them back to the list, not realizing they had previously opted out. Platform-level suppression lists prevent this.

What are the penalties for non-compliance?

TCPA statutory penalties run $500-1,500 per violation. Critical detail: per violation means per individual message, not per recipient. A single broadcast that goes to 1,000 opted-out recipients is potentially 1,000 violations — $500,000 to $1.5 million in statutory exposure. For knowing or willful violations, the penalty triples.

Class action plaintiffs have won settlements in the millions against businesses that ignored opt-outs. The FCC also has independent enforcement authority and can levy fines for systemic non-compliance. State attorneys general have parallel authority under state UDAP and consumer protection laws. The legal exposure for ignoring TCPA opt-outs is real and substantial — substantially more than the cost of doing it right.

The compliance bar isn't high, though. Including "Reply STOP to end" in every message and using a platform that honors opt-outs automatically gets you 95% of the way there. The remaining 5% is documenting opt-ins (which you should be doing anyway) and not manually circumventing opt-outs (which you should never do regardless). The FCC's TCPA reference covers the legal framework.

How does ZestyText handle opt-outs automatically?

ZestyText is registered with The Campaign Registry for 10DLC messaging, which means the platform handles compliance at the infrastructure level:

You don't have to manually monitor reply threads for opt-outs, manually maintain a suppression list, or manually remove people from future sends. The platform does it. Your job is to honor the opt-in side (don't message people who haven't consented), keep the message content compliant (lead with sender name, keep messages relevant, don't spam), and document your consent capture for your own records.

🍋 Start your compliant text for $1 →

What pricing tier should you start with?

For most businesses just starting compliant texting, the One Dollar Lemon Drop ($1, up to 25 customers) is the right test plan. Send your first compliant message to a small list, watch the opt-out and reply patterns, then scale up. ZestyText pricing:

(For broader pricing context: the cheapest SMS reminder service. For scheduling: how to schedule a text message to send automatically.)

Make your first event in about 60 seconds at zestytext.com/send — no signup, no monthly fee, just a one-time payment from $1.

Note: This article is informational and not legal advice. TCPA, state-level consumer protection laws, and CTIA guidelines evolve over time and may have additional requirements specific to your industry, list source, or message content. For TCPA compliance specific to your situation, consult an attorney with experience in consumer protection law.

Frequently asked

Quick answers about SMS opt-outs

Why is an opt-out required by law?

TCPA and FCC regulations require every commercial SMS to include an easy way to stop receiving messages. Penalties run $500-1,500 per violating message.

What's the right way to add an opt-out?

Include "Reply STOP to end" at the end of every message. The phrase must be in the message body, in plain English, and require only a single reply to act on.

What words count as opt-out keywords?

STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT, REVOKE — all must be honored per CTIA guidelines. ZestyText recognizes all of them automatically.

What about HELP?

HELP is a separate required keyword. Replying HELP must trigger an automated response identifying the sender and providing contact info.

Opt-in vs. opt-out?

Opt-in is consent before messaging starts. Opt-out is the right to stop messages after they start. Both are required for compliance.

What happens when someone opts out?

They're removed from the list immediately, get a confirmation message, and never receive further messages unless they re-opt in.

Can you message them again after opt-out?

Only if they re-opt in via a new sign-up or by texting START. Manual re-adding is a TCPA violation.

What are the penalties?

$500-1,500 per violating message. Class action settlements have run into the millions. Compliance is much cheaper than litigation.

Compliant texting for $1.

One dollar covers 25 recipients. STOP, HELP, suppression lists handled automatically.

🍋 Start your event for $1