SMS compliance isn't complicated. But it is specific — and franchise development teams get tripped up in predictable ways. Before you fire off a single automated text to a franchise lead, here's what you need to have right.
The Law You're Actually Working Under
The Telephone Consumer Protection Act (TCPA) is the governing framework for automated text outreach in the United States. It predates smartphones, but courts and the FCC have applied it to SMS automation, and the enforcement landscape has gotten sharper in recent years. The Consumer Financial Protection Bureau and state attorneys general have added their own layer through statutes like the California Consumer Privacy Act (CCPA) and its successors.
The version that matters most for franchise development: if you are sending automated texts to leads — triggered by a form fill, a CRM stage change, or a workflow — those texts are subject to TCPA requirements. The automation is the trigger for the requirement, not the volume. A sequence of five automated texts to one lead carries the same compliance exposure as a sequence to five hundred.
What TCPA requires, at its core: prior express written consent before sending automated marketing texts, a clear disclosure that automated messages will be sent, and an immediate, functioning opt-out path. The "written" part doesn't mean a signature on paper — it means a documented, affirmative action by the recipient. A pre-checked box doesn't count. Silence doesn't count. A verbal agreement over the phone doesn't count for automated messages.
Consent Is the Whole Game — and Most Forms Don't Cover It
Here's where franchise development teams run into trouble. A franchise interest form that says "submit your information to learn more" does not constitute TCPA-compliant consent for automated text outreach. It establishes that the person expressed interest. That's it.
Compliant consent language has to appear at the point of collection — on the form, before the submit button — and it has to name the channel. Something like: "By submitting this form, you agree to receive automated text messages from [Brand Name] about franchise opportunities. Message and data rates may apply. Reply STOP to opt out at any time." That language, at that location, with that specificity, is what you need. If your form doesn't have it, you don't have consent to automate texts — regardless of how warm the lead is or how compelling the opportunity.
This applies to third-party lead sources too, including broker portals and franchise directory forms. If the lead was generated on someone else's form, you need to verify that their form captured consent for your outreach specifically. "Consent to be contacted by franchise brands" is often too broad to cover automated SMS from your system. Know what the source form says before you load those leads into an automated sequence.
What Your Opt-Out Path Has to Do
Every automated message — every single one — needs a functioning opt-out mechanism. For SMS, the industry standard is STOP. When a lead replies STOP, your system has to honor that immediately. Not at the end of the day. Not on the next business day. Immediately. If another automated message goes out after a STOP reply, that's a violation.
This means your automation platform needs to handle opt-outs at the system level, not as a manual step someone on your team processes. If you're running stage-based follow-up sequences across a full franchise sales pipeline — intro agent, application follow-up, FDD reminders, Discovery Day confirmation — all of those agents have to respect the same opt-out list. A lead who opted out during the intro stage should not receive texts when they move to the application stage. The opt-out has to be global, not sequence-specific.
A few other required disclosures: your messages should identify who is sending them (your brand name), and your initial message should include or link to terms and a privacy policy. Most platforms handle this as part of the initial opt-in confirmation message. If yours doesn't, add it manually.
73% of franchise brands never used SMS — meaning most of your competition hasn't figured this out yet. The teams that build compliant SMS programs now own the channel before the laggards catch up. FranFunnel Franchise Lead Response Time Study, Q1 2025 · 500+ brands · 14 franchise categories
Timing, Frequency, and What "Reasonable" Actually Means
TCPA doesn't set a specific maximum message frequency, but courts have used reasonableness standards and state statutes do impose time-of-day restrictions. The federal safe harbor is 8 a.m. to 9 p.m. in the recipient's local time zone. If you're texting leads nationally and your automation fires at 6 a.m. Eastern to cover the whole country, you are texting people in Pacific time at 3 a.m. That is a problem.
Your automation platform should localize send times by the lead's area code or zip code, or at minimum default to the most conservative time window. When in doubt, 9 a.m. to 7 p.m. local is a defensible standard that keeps you well inside the safe harbor.
Frequency is a judgment call with real consequences. Three to five messages over the first week of engagement is common and generally defensible for franchise leads who opted in and expressed genuine interest. Twenty texts in forty-eight hours is not, no matter how motivated the lead looked on the form. Let the conversation dictate cadence. If the lead is responding and engaging, the automated sequence does its job. If they're not responding, the sequence should throttle — not accelerate.
What Compliance Looks Like Inside an Automated Sequence
A compliant franchise lead SMS sequence does several things automatically so your team never has to think about them:
First message fires within seconds of form submission — includes brand identification, a one-sentence disclosure that they'll receive follow-up texts, and a STOP opt-out instruction. Every subsequent message includes or ends with "Reply STOP to opt out." The sequence fires only during local business hours. If the lead replies STOP at any point, all automated messages from all stages stop immediately and the lead is flagged in the CRM. If a rep manually intervenes and takes over the conversation, the automated sequence for that stage shuts off — the rep is driving the thread now, not the automation.
That last point matters for compliance too. When a rep manually sends a message, that message is a human-sent text, not an automated one — different standard. The TCPA's automated messaging rules apply to the platform-fired sequences. Human-sent replies from your reps operate under different (and more permissive) guidelines. A good system makes the distinction clear: automated sends are tracked as automated, manual sends are tracked as manual, and the record exists if you ever need it.
The Record-Keeping Piece Most Teams Skip
If you are ever named in a TCPA complaint — and the plaintiff bar has become sophisticated about identifying high-volume franchise lead programs — you will need to produce documentation of consent. That means a record of when the lead submitted the form, what consent language was on the form at that moment, and what communications followed.
Most franchise development teams don't have this. They have CRM notes and email threads. They don't have a timestamp-linked screenshot of the exact consent language on the form when lead number 4,847 submitted it. That gap is not theoretical — it's been the deciding factor in settlements.
Set up your consent documentation before you launch any automated sequence. Screenshot and version-control your lead forms every time you change the consent language. Log opt-ins and opt-outs in your CRM with timestamps. Make sure your SMS platform exports message logs in a format you can actually retrieve. The work is minimal upfront. The alternative is reconstructing it under pressure.
FAQ
Do I need written consent before texting a franchise lead who filled out my contact form? Yes. A basic contact form submission does not constitute TCPA-compliant consent for automated text outreach. Your form must include specific disclosure language — before the submit button — that names automated text messaging as a channel, identifies your brand, discloses that message and data rates may apply, and provides an opt-out instruction. Without that language on the form at the moment of submission, you do not have consent to automate texts to that lead.
What happens if a franchise lead replies STOP to one of my automated texts? Your system must stop all automated messages to that lead immediately — not at end of day, not on the next business day. Immediately. If your automation platform sends another message after a STOP reply, that message is a TCPA violation. Opt-outs must also be global across your entire sequence: a lead who opts out during early-stage follow-up should not receive texts when they move to a later pipeline stage.
Does TCPA apply to all automated texts, or only marketing messages? The TCPA's strictest requirements apply to automated marketing messages — texts sent with a commercial purpose. Purely transactional messages (a meeting confirmation sent directly in response to the lead booking a call) are treated differently and carry lighter requirements. In practice, most franchise development sequences blend both, so building your entire program to the higher standard is the right call. When in doubt, treat it as a marketing message.
Can I text leads who came from a third-party broker portal or franchise directory? Only if you can verify that the form the lead submitted on that portal captured TCPA-compliant consent for your specific automated outreach. "Consent to be contacted by franchise brands" is often too broad. The safest approach is to confirm exactly what consent language the source platform uses and, if it doesn't cover automated SMS from your system specifically, collect consent again on your own landing page before you launch any sequence.
What time of day can I legally send automated texts to franchise leads? Federal TCPA safe harbor is 8 a.m. to 9 p.m. in the recipient's local time zone. Some states have narrower windows. If you're texting leads nationally, your automation should localize send times by area code or zip code. If your platform can't do that, defaulting to 9 a.m. to 7 p.m. in the most conservative applicable time zone is a reasonable safeguard.
How many texts can I send a franchise lead before it becomes a compliance problem? TCPA doesn't specify a maximum frequency, but courts apply a reasonableness standard and juries respond badly to evidence of aggressive texting. Three to five messages in the first week of engagement — spread across a few days, firing only during business hours — is defensible for franchise leads who opted in and expressed genuine interest. The moment a lead replies with anything that reads like disengagement or annoyance, your sequence should throttle or hand off to a human. The metric isn't "what's technically allowed" — it's "what would a reasonable person expect given what they agreed to."
Do I need to identify my brand in every text I send to a franchise lead? Your initial message must identify who is sending it. Subsequent messages in the same thread don't need to repeat full brand identification every time, but if there's any ambiguity about who is texting — especially in automated sequences where days may pass between messages — including the brand name in each message is the conservative and defensible choice.
What records do I need to keep to prove SMS compliance if I'm ever challenged? You need documentation of the consent event: when the lead submitted the form, what the form said at that moment (a timestamped screenshot or version-controlled record of the form's consent language), and what messages were sent afterward with timestamps. You also need opt-out logs — who opted out, when, and what happened to their automation immediately after. Most CRMs don't capture all of this automatically. Set up a documentation process before you launch any sequence, not after you receive a complaint.
If one of my reps manually takes over a text conversation, does that change the compliance rules? Yes. TCPA's automated messaging requirements apply to platform-fired automated messages. When a rep manually sends a message from inside the same thread, that's a human-sent text and is governed by different (and more permissive) standards. The practical implication: your system should track automated sends and manual sends separately so you have a clear record of which is which. A good automation platform makes this distinction automatic.
Does my SMS platform handle compliance for me, or is that my responsibility? Both. Your platform is responsible for the technical mechanics — honoring opt-outs immediately, timing messages within allowed windows, maintaining message logs. You are responsible for the business decisions: the consent language on your forms, which lead sources you load into automated sequences, how frequently you message, and what the messages say. The platform can fail a compliance check if the opt-out mechanic doesn't work. You can fail one if your forms never collected valid consent in the first place. Neither party's failure excuses the other.
What's the difference between a transactional text and a marketing text for TCPA purposes? A transactional text is sent in direct response to an action the recipient just took — a meeting confirmation sent immediately after a lead books a call, for example. A marketing text has a commercial purpose: prompting the lead to take a next step, re-engaging a cold lead, following up on an application. Transactional messages have lighter TCPA requirements. Marketing messages require prior express written consent, opt-out disclosure, and sender identification. Most franchise development sequences are marketing messages, so build your consent and disclosure program around that standard.
Compliance is one of those things that feels optional until it isn't. The teams that build it right before they launch don't think about it again — the teams that skip it spend money they didn't plan on. Get your forms right, get your opt-out mechanics right, document your consent events, and then let your automated sequences do what they're built to do.
See how FranFunnel manages automated franchise lead outreach — with compliant opt-out handling built in. Book a demo at franfunnel.com.