SMS Marketing Rules Expands in Texas With SB 140

Texas has a message for marketers: “Don’t mess with TEXts.” Starting September 1, 2025, Texas Senate Bill 140 (SB 140) widened the state’s “mini-TCPA” telemarketing rules so that marketing texts (not just calls) can trigger registration duties, tighter compliance expectations, and bigger lawsuit exposure. If your brand sends promotional SMS to Texas residentseven if your headquarters is somewhere far, far awaythis law can still tap you on the shoulder and say, “Howdy. We need to talk.”

This guide explains what SB 140 changed, what it means for everyday SMS campaigns, and how to build a Texas-ready texting program without turning your marketing calendar into a legal thriller. (Spoiler: the villain is usually “missing consent records.”)

What SB 140 Actually Did (In Plain English)

Texas already regulated telemarketing through several chapters of its Business & Commerce Code. SB 140 didn’t invent complianceit expanded it. The headline change is that Texas broadened “telephone solicitation” so it can include texts and other message transmissions used to induce a purchase or similar commercial action. In other words: if it walks like marketing and quacks like marketing… Texas may treat it like telemarketing, even if it arrives as a friendly little SMS.

SB 140 also increased litigation risk by strengthening consumers’ ability to sue over certain violations, with the Deceptive Trade Practices framework playing a bigger role. The practical outcome: businesses that once treated SMS as “lighter regulated than calls” can’t rely on that assumption in Texas anymore.

Why Texas? Why Now?

Two reasons keep showing up in compliance discussions:

• Texting is the new cold call. Consumers get hammered by spam texts, short-code promos, and “your package is totally real (please click this link)” scams. Legit brands often get blamed for the vibe created by bad actors.
• States are getting more comfortable building “mini-TCPA” rules. Federal law (the TCPA) still matters a lot, but Texas decided it wanted additional state-level toolsespecially around registration and private lawsuits.

The Texas “Mini-TCPA” Map: The Parts SMS Marketers Should Care About

Think of Texas telemarketing regulation as a set of connected rooms rather than one single rule:

Chapter 301: “Quiet Hours” and Core Sales-Call Practices

Texas limits when consumer solicitation can happen. The commonly cited window is:

• Monday–Saturday: 9:00 a.m. to 9:00 p.m. (recipient local time)
• Sunday: 12:00 p.m. to 9:00 p.m. (recipient local time)

These time windows were originally framed around “consumer telephone calls,” but SB 140’s broader approach makes it wise to align marketing texts to the same windows for Texas recipients. If your SMS platform can schedule by timezone, this is the moment to use that feature like it’s your job (because it is).

Chapter 302: Registration and Disclosure for “Telephone Solicitation”

This is the part that made many marketers spit out their coffee. Chapter 302 focuses on registration and related requirements for telephone solicitation activities. SB 140 expanded definitions so that some text-based marketing can fall within the scope of these registration obligations.

What registration generally involves (at a high level):

• Filing a registration statement with the Texas Secretary of State
• Paying an annual fee (commonly referenced as $200)
• Providing a security deposit (commonly referenced as $10,000, often satisfied via a bond/LOC/CD)
• Keeping registrations updated (including periodic updates about sales activity/personnel)

Important nuance: Chapter 302 includes exemptions and edge cases. Some businesses may qualify for exemptions based on who they’re contacting and the nature of the relationship. Because registration is operationally heavy, many companies choose one of two strategies: (1) confirm they’re exempt with counsel and document the basis, or (2) register to reduce uncertainty if they’re clearly running SMS marketing at scale into Texas.

Chapter 304: Do-Not-Call and “Telemarketing” Restrictions

Texas has a state do-not-call framework. Marketing outreach to numbers on relevant lists can be restricted, and SB 140 increased the consequences for violations by connecting certain breaches to stronger consumer remedies.

SMS takeaway: If you’re running SMS campaigns into Texas, your compliance program should include list hygiene, suppression management, and documented handling of “do not contact” requestseven if your brand primarily thinks in terms of text opt-outs rather than DNC lists.

Chapter 305: Consent for Sales Communications to Mobile Numbers

Texas also restricts certain sales calls/communications to mobile numbers in situations where consent isn’t present. SB 140’s broader definitions and enhanced private lawsuit exposure make it especially risky to treat consent as a “nice-to-have.” In Texas SMS marketing, consent is your foundation, your roof, anddepending on the dayyour emotional support animal.

The Big SB 140 Impact: Litigation Risk Got Realer

SB 140 didn’t just widen definitions. It also strengthened how consumers can enforce certain violations. In practice, this can mean:

• More lawsuits, faster. Consumers may have a clearer path to sue over specific telemarketing-related violations without jumping through as many procedural hoops.
• More costly outcomes. The Deceptive Trade Practices framework can raise the stakes through damages concepts and fee-shifting (attorneys’ fees), depending on the claim and facts.
• Repeat-claim dynamics. SB 140 includes language intended to prevent prior recoveries from automatically limiting future recoveries for separate violationsmeaning “we already paid once” is not a magic shield.

Translation: if your SMS program has gaps (thin consent language, incomplete logs, sloppy opt-out handling), Texas is a place where those gaps can become expensive faster than your next “48-hour flash sale.”

Consent: What “Good” Looks Like in Texas SMS Marketing

Most SMS compliance problems start the same way: a marketer says, “We have consent,” and then everyone realizes the consent is a screenshot of a spreadsheet named final_final_reallyfinal_v7.xlsx.

1) Make the Opt-In Unmistakable

Use clear language at the moment of collection. Avoid pre-checked boxes. Avoid vague “sign up for updates” copy if you’re going to send promotions. And don’t hide the truth in a link nobody clicks.

Example opt-in language (customize it):

2) Store Proof Like You’ll Need It Later (Because You Might)

For each Texas recipient, keep a record that ties the person, the number, and the opt-in event together. A solid record typically includes:

• Date/time of opt-in (with timezone)
• Source (website form, keyword, QR code, checkout checkbox, in-store tablet, etc.)
• The exact disclosure shown at opt-in (versioned)
• IP address/device data when relevant
• If double opt-in is used: the confirmation event

3) Separate Transactional vs. Marketing Texts

It’s common for brands to send both:

• Transactional/informational: order confirmations, delivery updates, appointment reminders
• Marketing: promos, product drops, “Hey bestie 💅 20% off ends tonight”

Even if you treat them differently internally, your systems must honor opt-outs properly. Also, don’t “launder” marketing as transactional. A shipping update is fine. A shipping update with “BTW buy two get one free” starts to look like marketing wearing a fake mustache.

Quiet Hours: Scheduling That Won’t Get You Side-Eyed

If your SMS platform supports timezone-based sending, set Texas rules so marketing messages land within permitted windows. Key operational tips:

• Use recipient local time, not your office time. A 9 a.m. blast in California is an 11 a.m. hello in Texasfine. A 9 p.m. blast in New York is an 8 p.m. hey in Texasalso fine. A 9 p.m. blast in Texas is… not fine if it slides later.
• Don’t rely on area code alone. People move. Numbers travel. Use address data, shipping state, or self-reported location where possible.
• Build “Texas guardrails.” If a campaign can’t confidently place a recipient in a timezone/state, default to safer windows.

Opt-Outs: The Fastest Way to Avoid Slow, Painful Problems

Opt-out isn’t a vibeit’s a system requirement. Your program should:

• Honor STOP (and common variants) immediately
• Suppress the number across all marketing campaigns (not just the one that triggered STOP)
• Send a confirmation (often expected in standard SMS practice)
• Keep an internal “do not text” list that survives platform changes

Also: don’t make people work for it. If your “opt out” instructions sound like an escape room clue, you’re doing it wrong.

Registration: The Part Everyone Asks About First

Because SB 140 expanded the definition of telephone solicitation to include certain text transmissions, some SMS marketers may be pulled into Chapter 302’s registration world. The registration process is typically described in practical terms as:

• Registering with the Texas Secretary of State before making covered solicitations
• Paying an annual fee and maintaining a security deposit
• Updating information periodically (including required updates tied to solicitation activity)

How to decide what to do:

1. Inventory your Texas exposure. How many Texas recipients? How frequent are sends? Are messages clearly promotional?
2. Map your use cases. Purely transactional? Mixed? Heavy promotions?
3. Review exemptions. Some scenarioslike messaging only current/former customersmay be treated differently, but you should document the basis and keep your facts clean.
4. Choose a risk posture. If you’re running large-scale SMS acquisition in Texas, registration may be part of a conservative approach.

Note: This is compliance education, not legal advice. Registration obligations are fact-specific, and exemptions can be narrow. If Texas is a major market for you, it’s worth getting counsel to sanity-check your interpretation before you “set it and forget it.”

What “Compliance-Ready SMS” Looks Like: A Practical Checklist

Use this as a build list for your SMS program:

1. Consent language audit: Confirm disclosures are clear, marketing-specific, and not bundled into vague language.
2. Consent log system: Store timestamp, source, and disclosure version for each opt-in.
3. Double opt-in (optional but helpful): Consider it for higher-risk acquisition channels.
4. STOP handling: Test STOP, CANCEL, END, UNSUBSCRIBE; verify suppression is immediate.
5. Quiet hours scheduling: Enforce Texas sending windows for marketing messages.
6. List hygiene: Maintain suppression lists and handle do-not-contact requests consistently.
7. Vendor governance: If an agency runs SMS for you, require proof of consent and process controls.
8. Creative review: Ensure texts clearly identify the sender; avoid misleading subject lines or “urgent” language that could look deceptive.
9. Registration analysis: Determine whether Chapter 302 registration applies; document exemptions if relying on them.
10. Incident playbook: If you discover missing consent, pause campaigns, suppress affected numbers, and remediate fast.

Specific Examples: How SB 140 Changes Everyday Campaign Decisions

Ecommerce Flash Sale

Before: “Send to everyone at 9:30 p.m. because urgency converts.”
Now (Texas-aware): Split Texas recipients into an earlier send window. Keep the same promo, just schedule it so it doesn’t arrive outside the permitted hours. Maintain the opt-in disclosure version used for those recipients.

Restaurant Loyalty Program

Before: “They gave us their number at checkoutclose enough.”
Now: Make the opt-in explicit: “Text deals & offers.” Use a short form with a clear disclosure. Don’t send promos to numbers that never opted in, even if they’ve purchased before, unless your compliance posture clearly supports it and you’ve documented the rationale.

Healthcare Appointment Reminders

Before: “Reminders are fine; they’re helpful.”
Now: Reminders can still be appropriate, but avoid mixing in promotions (“While you’re here, book Botox!”) unless you have marketing-grade consent. Keep informational and marketing streams separate.

What To Do If You’re Already Texting Texans

If your SMS program is live, don’t panic. Do this instead:

• Run a Texas-only audit. Pull a sample of Texas opt-ins and verify disclosure + logs.
• Fix the intake first. Update forms, keywords, QR flows, and checkout consent language.
• Then fix the backlog. If you can’t prove consent for a group, suppress them and rebuild permission the right way.
• Confirm quiet hours settings. Test with real phones across timezones.
• Evaluate registration obligations. If you likely fall in scope, develop a plan rather than waiting for a demand letter to become your project manager.

Bonus: of Real-World Experiences Marketers Report Under SB 140

Since SB 140 took effect, many SMS teams describe the same set of “oh wow” momentsless like a single dramatic compliance event and more like a series of tiny operational realities that suddenly matter a lot.

First: brands learn that “consent” isn’t one thing. A marketing manager might think, “They opted in at checkout,” while the legal team asks, “Opted in to what, exactly?” The gap is usually disclosure specificity. When teams rewrite their opt-in language, they often discover it’s not just a legal improvementit boosts subscriber trust. Clear disclosure tends to reduce angry replies, which helps deliverability and keeps carrier filtering calmer. Nobody likes being surprised by promotions, even when the promo is genuinely good.

Second: scheduling becomes a real engineering feature. Teams that used to blast the full list at one time now build segmentation rules: Texas vs. non-Texas, and sometimes Texas-by-timezone. The funny part is that the “hard” work is rarely the schedule itself; it’s the messy reality that a phone number doesn’t guarantee location. Many marketers report that they upgraded data hygieneshipping state, billing state, user profilesbecause SB 140 made “guessing” feel risky. The side benefit? Better targeting overall.

Third: opt-out handling becomes a culture test. Mature programs treat STOP as sacred: instant suppression, no questions asked, and a confirmation that doesn’t try to win the person back. Less mature programs sometimes have edge-case bugs: the number opts out of Campaign A but still gets Campaign B, or a vendor uploads an old list and reactivates suppressed contacts. After SB 140, teams tend to centralize suppression lists and treat them like critical infrastructurebecause they are.

Fourth: registration discussions force clarity about who’s “sending.” Brands that use agencies, affiliates, or lead-gen partners often realize they need tighter contracts and clearer responsibility. Many teams report adding requirements like: “Partner must provide consent proof on request,” “Partner must use our approved disclosure language,” and “Partner must honor opt-outs across all shared systems.” SB 140 doesn’t just change what you sendit changes how you govern who can send on your behalf.

Finally: the most common emotional experience is relief after cleanup. The first audit can feel brutal: missing logs, inconsistent disclosures, confusing customer status, and campaign settings that never considered state-specific rules. But once teams fix intake, build a reliable consent ledger, enforce quiet hours, and tighten opt-out controls, they often find the program runs smoother. Complaints drop, engagement improves, and stakeholders stop treating SMS like a risky side project. It becomes what it should be: a high-performing channel built on permission, not guesswork.