The End of Unregulated SMS: Navigating A2P 10DLC Compliance and The Campaign Registry

For over a decade, text messaging was the undisputed champion of enterprise communication. It boasted a 98% open rate, bypassing the cluttered email inbox and the ignored phone call. Businesses utilized standard local phone numbers to blast marketing campaigns, appointment reminders, and automated alerts with zero oversight.

That era is permanently over. Driven by an exponential rise in spam, "smishing" (SMS phishing), and localized fraud, tier-one North American carriers—specifically AT&T, T-Mobile, and Verizon—have systematically dismantled the unregulated SMS ecosystem. They have implemented a draconian, highly complex regulatory framework known as A2P 10DLC (Application-to-Person 10-Digit Long Code).

Providing SMS services is no longer a simple matter of provisioning a SIP trunk and an API endpoint. It now requires navigating a labyrinth of third-party vetting, cryptographic identity verification, and dynamic carrier throughput limits. For telecommunications providers and enterprises alike, SMS compliance has become a massive operational bottleneck.

The Catalyst: Why Carriers Cracked Down

Historically, 10-digit local numbers were designed exclusively for P2P (Person-to-Person) communication. When businesses started using automated software to send thousands of messages per second over these local routes (A2P), it congested edge networks and bypassed the strict spam filters applied to traditional 5-digit short codes.

To reclaim their networks, carriers mandated that all commercial traffic must be explicitly identified, verified, and heavily monitored. If an application (software, CRM, PBX) generates a text message to a mobile handset, it is classified as A2P traffic and is subject to immediate algorithmic scrutiny.

Algorithmic carrier filtering scrutinizes every outbound SMS payload for registered intent and TCPA compliance.

The Bureaucracy of The Campaign Registry (TCR)

You can no longer purchase a phone number and immediately send a commercial text. Enterprises must now submit their corporate identity to a centralized, privately owned database called The Campaign Registry (TCR). The registration process is split into two rigid phases:

• Brand Registration: You must submit your exact legal entity name, Employer Identification Number (EIN), corporate address, and stock ticker (if applicable). TCR utilizes third-party vetting agencies to verify this data against IRS and state databases. A mismatched address or a typo in the EIN results in an immediate rejection.
• Campaign Registration: Once the Brand is verified, you must define the exact intent of your traffic. Are you sending 2FA (Two-Factor Authentication) codes, customer care replies, or promotional marketing? You must provide explicit sample messages and document exactly how consumers opt-in to receive these texts.

Trust Scores and Throughput Throttling (MPS)

Compliance is not merely a checkbox; it dictates your technical bandwidth. When a Brand is vetted, the algorithm assigns a Trust Score ranging from 0 to 100.

This Trust Score directly controls your Maximum Messages Per Second (MPS) and your daily volume caps. A Fortune 500 bank sending transactional fraud alerts may receive an allocation of 4,000 MPS. A newly formed LLC attempting to send promotional real estate texts may be aggressively throttled to 1 MPS and capped at 2,000 messages per day on the T-Mobile network. Attempting to push traffic faster than your allocated MPS results in the carrier gateway outright dropping the packets.

Violating your algorithmic Trust Score limits guarantees immediate packet drops at the carrier edge gateway.

The Brutal Penalties for Non-Compliance

Carriers have weaponized their billing infrastructure to force compliance. Bypassing the TCR is no longer a viable technical workaround. If you attempt to send unregistered A2P traffic, or if your traffic deviates from your registered use case, you will face severe consequences:

• Silent Filtering: Carriers will block your messages without returning a standard SIP/HTTP error code. Your API will report the message as "Delivered," but the end-user's handset will never ring.
• Aggressive Surcharges: Unregistered outbound SMS incurs massive pass-through penalty fees. T-Mobile currently issues a $10,000 flat fine for severe messaging violations (such as phishing or explicit content) originating from an unregistered long code.
• Network Blacklisting: Repeated violations will result in your DIDs, and potentially your entire corporate domain, being permanently blacklisted across the North American numbering plan.

TCPA and CTIA: The Opt-In/Opt-Out Mandate

TCR registration only satisfies the carriers; you must still satisfy federal law. The Telephone Consumer Protection Act (TCPA) and Cellular Telecommunications Industry Association (CTIA) guidelines mandate flawless consent architecture.

Enterprises must maintain cryptographic proof of "Express Written Consent" before sending a single promotional SMS. Furthermore, your telecom infrastructure must programmatically intercept and respect mandatory opt-out keywords (STOP, CANCEL, UNSUBSCRIBE). If a user replies "STOP" and your system routes another message to them, statutory fines range from $500 to $1,500 per individual text message.

How Eleven Architects SMS Compliance

The sheer volume of bureaucracy, API changes, and shifting carrier requirements has made it nearly impossible for standalone enterprises to manage SMS infrastructure in-house.

Eleven solves this by embedding compliance directly into our core routing logic. We do not expose our clients directly to the raw, unforgiving carrier gateways. Instead, Eleven programmatically manages the entire lifecycle of your messaging infrastructure:

• Automated TCR Vetting: We execute your Brand and Campaign registrations through our administrative dashboard, utilizing our direct API pipelines to The Campaign Registry to secure the highest possible Trust Scores.
• Automated Opt-Out Handling: Eleven's edge network intercepts standard opt-out keywords before they even hit your CRM, instantly severing the outbound route to that specific handset to guarantee absolute TCPA compliance.
• Throughput Management: Our message queues automatically read your carrier-assigned MPS limits, intelligently buffering and throttling your outbound blasts to ensure 100% deliverability without triggering automated spam flags.

The "Wild West" of SMS is over. Reaching your customers now requires flawless data hygiene, legal consent, and a telecom partner capable of navigating the bleeding edge of A2P 10DLC regulations. Eleven provides the engineered resilience required to keep your critical messaging traffic flowing.