compliancemortgagefollow-up

new TCPA texting rules 2026 what loan officers need to know

·Terrell Gentry·10 min read
new TCPA texting rules 2026 what loan officers need to know

If your team texts borrowers, the rules for how you handle opt-outs just moved, and most of the guides you'll find when you search were written before the change was adopted. The FCC finalized a set of amendments this fall that change what a revocation of consent actually covers and how fast you may soon have to honor one. Here is what shifted, what is still only proposed, and the two things worth checking in your follow-up setup this week.

Quick answer: The new TCPA texting rules for 2026 come from an FCC order adopted September 30, 2026 that narrows how far a consumer's opt-out sweeps: revoking consent to one category of informational texts no longer automatically stops unrelated informational messages. The FCC also proposed, but has not yet adopted, shortening the opt-out window from 10 to seven business days and ending the one-way texting carve-out. None of this is legal advice; your compliance team decides how it applies to your messages.

What the new TCPA texting rules for 2026 actually changed

The FCC adopted a Report and Order amending its TCPA rules in a 3-0 vote on September 30, 2026, per a client alert from the law firm Crowell & Moring. The core change: it narrowed the old "revoke all" rule so that a revocation of consent to an informational call or text can be read as applying only to the specific category at issue.

In plain terms, the Telephone Consumer Protection Act (TCPA) is the federal law that governs automated calls and texts. Before this order, the FCC was moving toward a rule where if a borrower opted out of any informational text from you, you had to stop all of them. The adopted order softens that for informational messages: as the Consumer Financial Services Law Monitor explains, opting out of one type of informational message does not automatically stop unrelated informational messages from the same sender.

One thing that did not change: marketing. According to the law firm Troutman Pepper, a single revocation of telemarketing consent still eliminates all future telemarketing robocalls and texts from that caller. The category-specific flexibility does not extend to advertising or promotional messages. So if a borrower says stop to your promotional drip, every promotional message has to stop, full stop.

Is this law now, or still a proposal?

The order is adopted, but it is not yet in force. The amendments take effect 30 days after publication in the Federal Register, potentially as early as November 2026, and as of early October had not been published, so no effective date existed yet, per Recording Law's summary of the order. The category-specific revocation change is real and coming; the exact day it binds you depends on that publication.

Separately, the FCC opened a companion Further Notice of Proposed Rulemaking (FNPRM) — a request for public comment on rules it is considering but has not passed. Two items in it matter for a loan team.

The FNPRM seeks comment on shortening the window to honor revocation requests from 10 to seven business days, per Troutman Pepper. Under current rules, a revocation request must be honored within a reasonable time, not to exceed 10 business days from receipt. If the seven-day version passes, you have three fewer days to fully suppress an opt-out across every system.

The FNPRM also proposes requiring two-way texting capability, which would potentially eliminate the exception that let senders use one-way texting protocols that don't accept a reply STOP, again per Troutman Pepper. If you run blast or drip tools that send from a number nobody can reply to, that carve-out may go away.

Neither of those is law yet. They are proposed. But teams are asking about them now because the direction is set.

What "category-specific revocation" means for your texts

Category-specific revocation means a borrower can opt out of one kind of informational message from you without silencing every informational message you send. The flexibility is real, and it is also a trap if you lean on it.

Say a borrower replies STOP to your document-reminder texts but still wants rate and status updates. Under the new rule, that STOP can be read as applying only to the document-reminder category, not to the loan-status updates. That sounds convenient. It is also exactly the kind of judgment call that gets a team sued when someone's system guesses wrong. The safe operating posture for most small teams is to treat an opt-out broadly unless your compliance team has defined clean categories and your tools can enforce them. The rule gives you room; it does not require you to use it.

There is a related change worth knowing: the order lets a sender designate an exclusive opt-out method, meaning you can tell recipients the one way to opt out, as long as you use an FCC-approved method and disclose it clearly in every message. Whether to do that is a compliance decision, not an operations one.

Does a plain-English "stop texting me" still count?

Yes. Under current FCC rules, recipients are not limited to official keywords; a plain-English request like "please stop texting me" counts as revocation through a reasonable means and must be honored, per Fransis AI's compliance writeup. Your team cannot ignore an opt-out just because the borrower did not type the exact word STOP.

This is where a lot of follow-up systems quietly break. A tool that only listens for the literal keyword STOP will miss "take me off your list," "quit texting me," or a reply to a loan officer's cell that says "stop." A human reads all of those as an opt-out. Your automation has to as well.

What to check in your CRM and follow-up tools this week

Two things, and both are about whether your system enforces opt-outs by design or relies on someone remembering. Opt-outs have to be suppressed across every tool: as Salesmessage notes, if someone opts out in one system but their number stays active in a CRM workflow that fires follow-up texts, that is still a TCPA violation.

  1. Confirm opt-outs suppress instantly and everywhere. When a borrower opts out — by STOP or by plain English — does that number go dead across your CRM, your loan origination system (LOS), your inbox, and any texting tool, all at once? Or does one system keep an active workflow that fires a follow-up text three days later? That gap is the violation.
  1. Confirm consent is logged, not assumed. For every number you text, can you show when and how you got consent? Marketing texts to a mobile number using an automated system require prior express written consent, while transactional and informational messages carry a lower consent bar, per loanofficer.ai. If a complaint comes in, the log is your defense.

The stakes are per message. A single non-compliant text is a standalone TCPA violation carrying statutory damages of roughly $500 to $1,500 per message, per a mortgage-compliance analysis from GHL Snapshot. Fire a stalled drip at fifty borrowers who should have been suppressed and the math gets ugly fast.

This is the leak we build around. Automated follow-up usually fails compliance in one of two ways the brief above names: the sequence keeps running after someone opts out, or nobody can prove consent when asked. SalesOS works the follow-up inside the CRM and texting tools your team already uses, with opt-out handling and consent logging enforced by the system following the rules your compliance team sets — not left to whoever remembers to flip a toggle. That is the same reason automated follow-up tends to die the moment a lead replies: the handoff between tools is where things fall through.

Manual opt-out handling vs. a system that enforces it

Most teams handle opt-outs by hand, which works until the day it doesn't. The difference shows up in the gap between the opt-out arriving and the number actually going dead everywhere.

Handled by memoryEnforced by the system
Borrower texts "stop texting me"Someone has to notice it isn't the keyword STOPRead as an opt-out by design
Suppression across CRM, LOS, inbox, texting toolEach tool updated manually, if at allOne opt-out propagates to all of them
Proof of consentScattered or missingLogged per number, time and method
A 7-day window if it passesThree fewer days to rememberSame instant suppression, no clock

If your opt-outs move through lead sellers, CRM platforms, dialers, and texting aggregators, a shorter processing mandate would be hard to meet by hand, requiring changes to data integrations and audit procedures, per CommLaw Group's analysis. That is a data-plumbing problem, and it is better solved before the rule binds you than after a complaint. For the broader picture of why your systems don't talk, see why stages don't match between Follow Up Boss and your LOS.

FAQ

Are the new TCPA texting rules for 2026 in effect yet? The adopted order is not yet in force. The amendments take effect 30 days after publication in the Federal Register, potentially as early as November 2026, and had not been published as of early October 2026, per Recording Law. The category-specific revocation change is final; the proposed seven-day window and two-way texting requirement are still open for comment and are not law.

Is the opt-out window seven days now? The opt-out window is still 10 business days under current rules. The FCC is only taking comment on shortening the window to honor revocation requests from 10 to seven business days, per Troutman Pepper. Until a final rule passes, a revocation must be honored within a reasonable time not to exceed 10 business days.

Does a borrower have to text STOP to opt out? No. Under current FCC rules, a plain-English request like "please stop texting me" counts as a valid revocation and must be honored, per Fransis AI. Your follow-up tool needs to catch opt-outs that don't use the exact keyword, or your team has to read and act on them manually.

Can SalesOS make my texting TCPA-compliant? No tool or vendor can promise compliance, and anyone who does should worry you. SalesOS enforces opt-out handling and consent logging by following the rules your compliance team defines, so follow-up doesn't depend on someone remembering to suppress a number. Whether your specific setup meets TCPA is your compliance team's call.

Does this change who I'm allowed to text, or just how opt-outs work? The adopted order changes how opt-outs are read and handled, not the baseline consent you need to text in the first place. Marketing texts to a mobile number still require prior express written consent; informational texts carry a lower bar, per loanofficer.ai. State laws like Pennsylvania's Act 47 add their own rules on top — see [Pennsylvania texting rules for loan officers](/pennsylvania-texting-rules-for-loan-officers-pa-act-47).

If opt-out handling and consent logging in your follow-up are currently living in someone's head, that is the gap worth closing before the next rule binds you. Book a demo and we'll walk through how your follow-up suppresses opt-outs and logs consent across the tools you already run.

About Terrell Gentry

Founder at 6omb

Terrell is the founder of 6omb and runs Claude Community, the #1 Skool community for Voice AI agents. Over 16 months his team has built 100+ AI agent systems delivering $10M+ in business value, including voice agents like Emily, which booked 453 new clients for a law firm in 8 months. He is a Y Combinator Startup School alum (SUS20) and a Gold Retell partner.

AI AgentsClaude CodeVoice AIBusiness AutomationGrowth Marketing

Close more of the deals you already have

SalesOS follows up with every lead in your own voice, keeps your CRM in sync, and shows you where every deal stands. See it working on a pipeline like yours.

Book a Demo