Franchise SMS Marketing Compliance: One Bad Text List, Network-Wide Risk

How many of your locations could tell you, right now, exactly where their text marketing list came from and what each customer agreed to when they signed up? For most franchise networks the honest answer is nobody knows, because the list was built one Wi-Fi splash page, one point-of-sale prompt, and one paper sign-up sheet at a time, across dozens of locations, with no shared record of consent. Franchise SMS marketing compliance is not a policy problem. It is a data problem wearing a legal problem's clothes, and the Telephone Consumer Protection Act does not care that the location manager who added a customer to that list left the company two years ago.

What TCPA actually regulates for franchise text marketing

The Telephone Consumer Protection Act requires prior express written consent before a business sends a marketing text, and that consent has to name the specific business doing the sending, describe what the customer is signing up for, and confirm the message isn't a condition of purchase. It sounds simple until a franchise network scales it across 60 locations, three point-of-sale vendors, and a corporate marketing platform layered on top. TCPA litigation volume backs up how often that scaling breaks down. Through September 2025, more than 2,128 TCPA lawsuits had been filed, a 57.9 percent increase over the same period the year before, and nearly 80 percent of those suits were class actions. A class action doesn't need one bad text. It needs one bad list.

Why one location's opt-in list becomes a network-wide liability

A franchisee who imports a list from an old loyalty program, buys a list from a local vendor, or lets a part-time employee type numbers into a spreadsheet from a raffle box is making a decision that can reach every other unit in the system. If the franchisor's marketing platform later pulls that list into a brand-wide campaign, or if a plaintiff's attorney frames the franchisor as exercising enough control over marketing to be vicariously liable, the exposure stops being one location's problem. Courts have increasingly looked past the franchise agreement's independent-contractor language and asked who actually controlled the campaign, the list, and the vendor relationship. A brand-mandated texting platform with a shared short code is exactly the kind of centralized control that argument needs.

What changed in 2026, and what didn't

The FCC's one-to-one consent rule, which would have required a separate opt-in for every individual seller a list gets shared with, was vacated by the Eleventh Circuit in January 2025 and formally eliminated by the FCC later that year. A single, clearly written opt-in can still cover multiple sellers under federal law as of 2026. That sounds like relief for franchise networks running shared vendor platforms, and in one narrow sense it is. But a second rule, the revocation-all requirement that would force a business to treat one opt-out as a universal opt-out across every campaign and message type, has only been delayed, not cancelled. The FCC pushed it to January 31, 2027, in a January 2026 order. Franchise networks that read the vacated one-to-one rule as a green light and stopped tightening their consent records are reading half the update. The opt-out method requirement never went away: a customer can revoke consent through any reasonable method, not just the word STOP, and every location has to honor it. Promotional texts are also still restricted to an 8 a.m. to 9 p.m. window in the recipient's local time zone, which matters more than it sounds like for a network spanning multiple time zones on one send schedule.

The dollar math behind a bad send

Statutory damages under TCPA run $500 per message for a negligent violation and $1,500 per message for a willful one, with no cap on total liability. A single campaign sent to a list of 4,000 numbers without valid consent is not a $500 problem. It is a multi-million-dollar problem before a court even reaches the willfulness question. The settlements from the past year show what that math looks like once it lands: Kaiser Permanente paid $10.5 million over spam telemarketing texts, Cash App settled for $12.5 million over referral texts sent without clear consent, Zales paid $7.5 million for SMS marketing violations, and DSW paid $4.42 million for continuing to text customers who had already opted out. None of those were franchise cases specifically, but every one of them involved the same failure a franchise network is structurally prone to: a list that outgrew the consent record attached to it.

Franchise SMS marketing compliance starts with the list, not the platform

Most franchise marketing teams evaluate texting platforms on deliverability, segmentation, and price, and treat TCPA compliance as a checkbox the vendor's terms of service already covers. It doesn't. A platform can be fully compliant and still send a franchise network into a class action, because the platform enforces opt-out mechanics, not the legitimacy of how a number got onto the list in the first place. Franchise SMS marketing compliance has to start at the point of capture: every opt-in needs a timestamp, the exact consent language shown to the customer, the location or channel where it happened, and a record of which business entity the customer agreed to hear from. Without that record attached to the number itself, a franchise network can't prove consent when a plaintiff's attorney asks for it, and inability to prove consent is treated the same as consent never having existed.

What to audit before the next campaign goes out

Pull a sample of numbers from the list behind the next scheduled campaign and ask each location to produce the consent record for ten of them: timestamp, language shown, and capture channel. If a location can't produce it inside a day, that list segment doesn't go out until it can. Confirm the texting platform logs opt-outs from every method a customer might use, a reply of STOP, a call to the location, a comment on a review site, not just the platform's own keyword. Set send windows by each location's local time zone rather than one schedule for the whole network. Get the vendor contract in front of legal and confirm who indemnifies whom if a send goes out on a bad list, because most franchise marketing agreements are silent on it. Revscale's platform helps franchise networks centralize the consent and activity data behind local marketing programs, but the underlying legal obligation to capture and document consent correctly sits with whoever owns the customer relationship at the point of signup, and no platform removes that.

The one-to-one consent rule's death gave franchise networks a real reason to relax about vendor-sharing scenarios. It gave them no reason at all to relax about consent recordkeeping, opt-out honoring, or send-window discipline, and the lawsuit volume through 2025 shows plaintiffs' firms have not slowed down waiting for anyone to catch up.