If your business sends text messages to customers from a phone system, CRM, scheduling tool, or any automated platform, U.S. carriers now require you to register those messages under a framework called 10DLC. As of 2026, unregistered traffic is being blocked, filtered, or surcharged aggressively across AT&T, T-Mobile, and Verizon, and most New Jersey small businesses we talk to are surprised to learn that their appointment reminders, two-factor codes, or mass notifications are affected. The good news is that registration is a one-time setup with predictable fees. The bad news is that doing it wrong, or waiting until your messages start failing, creates real revenue and customer-service problems. This guide explains what 10DLC is, who has to register, and how to get your business compliant without disrupting the texts you already depend on.
What Is 10DLC and Why Does It Exist?
10DLC stands for "10-Digit Long Code" and refers to the standard local phone numbers that businesses use to send Application-to-Person (A2P) text messages. Historically, businesses used the same 10-digit numbers for texting customers that consumers used for personal texting, with no registration and no oversight. That loophole made U.S. SMS a favorite channel for spam, phishing (smishing), and fraud, and the wireless carriers responded by requiring every business that sends automated text traffic to register its brand and each messaging use case through a central authority called The Campaign Registry (TCR).
The registration system has been phased in over several years. What changed for 2026 is enforcement. Carriers are no longer issuing soft warnings or silently delivering unregistered traffic at low throughput. Unregistered or misregistered messages are now being rejected outright, throttled to trickle rates, or hit with per-message penalties that can exceed the cost of a legitimate message. We have seen NJ businesses discover the problem only when their Friday appointment reminders stop going out and the Monday morning no-show rate doubles.
Who Has to Register for 10DLC?
Any business that sends text messages to the U.S. general public from a standard 10-digit phone number using automated or bulk systems. That includes a lot more organizations than most owners realize. A medical practice that sends automated appointment reminders through its scheduling software is sending A2P traffic. A law firm that uses a CRM to confirm consultations is sending A2P traffic. A retailer using Shopify or Klaviyo to text order updates is sending A2P traffic. Any business that delivers 2FA codes to customers over SMS is sending A2P traffic.
The rule of thumb is simple. If the text is generated by software rather than hand-typed on a phone by a human, it is A2P and needs to be registered. Person-to-person texting between employees and customers using their own mobile phones is not covered.
Toll-free numbers have their own separate verification process (sometimes called TFN Verification) that runs on a different but parallel track. Short codes (five or six-digit numbers like 12345) are an entirely different product with their own registration. Most NJ small businesses are using 10DLC, which is what this guide covers.
The Three Pieces of a 10DLC Registration
Every 10DLC registration involves three linked records, and all three must be correct and consistent or the registration is rejected.
The first is the Brand. This is your legal business entity. You register once with your EIN, legal name, address, website, and contact information. Registering a Brand costs a one-time fee of around $4 for a standard small business, and the business is vetted against external data sources. If your address on your website does not match what is on your EIN, if your website looks like a placeholder, or if your entity is not reachable, the Brand fails vetting and nothing downstream works. For NJ businesses, make sure your address matches what the New Jersey Division of Revenue has on file, and make sure your public website shows your business name, phone, and address prominently.
The second is the Campaign. A Campaign is a specific use case for messaging. Examples include "appointment reminders for medical patients," "two-factor authentication codes for portal logins," "delivery notifications for online orders," or "customer service replies for support tickets." Each Campaign has its own monthly fee, usually $1.50 to $10 depending on the type, and its own content rules. Marketing and promotional messaging is scrutinized more heavily than transactional messaging. Most small businesses need between one and three Campaigns, not twenty.
The third is the Number Assignment. You link specific 10-digit numbers to specific Campaigns. A number cannot send traffic for a Campaign it is not linked to. If your office phone system has one main number that sends both appointment reminders and billing notices, you can attach both Campaigns to that number, but both Campaigns must exist and be approved.
Common Ways NJ Businesses Get 10DLC Wrong
The single most common mistake is not registering at all. Businesses assume that because their VoIP provider, CRM, or scheduling tool "handles messaging," the compliance piece is handled too. It usually is not. The provider handles the technical connection to the carrier network, but the registration is the business's responsibility and in the business's name. Your VoIP provider or SMS vendor can submit the paperwork on your behalf, but the Brand has to be yours.
The second is mismatched data. The legal name on your EIN, the name on your Brand registration, the name on your website, and the sender name in your messages all need to agree. "ABC Dental Group LLC" on the EIN and "ABC Dental" on the website will often pass vetting, but "ABC Dental Group LLC" on the EIN and "Parsippany Smile Studio" on the website will frequently fail. If your business operates under a DBA, register the DBA properly on the Brand and make sure the link between the two names is visible on your site.
The third is under-registering Campaigns. A practice that sends appointment reminders, birthday greetings, and billing notices is running three Campaigns, not one. Sending three types of traffic under a single "Notifications" Campaign will eventually get your throughput cut or the Campaign suspended when carriers audit content.
The fourth is ignoring the opt-in and opt-out language. Every Campaign requires a clear disclosure of how customers consent to receive messages (the opt-in) and a working way to stop them (usually STOP as a reply keyword). The Campaign Registry will ask for screenshots of your opt-in flow. If your booking form or patient portal does not collect and display a specific SMS consent checkbox, you will fail this check. Fix the form before you submit.
How Long Does Registration Take?
Brand registration is usually completed in minutes to a few hours once the data is submitted cleanly. Standard Campaign registration typically takes one to five business days. Campaigns that involve higher-risk content categories (loans, debt collection, political, gambling, cannabis) can take longer and have their own rules. We tell NJ clients to plan for a two-week window from "we decided to do this" to "our first message is sending on a registered Campaign," assuming no data problems.
If you are migrating from an unregistered setup, keep the old system running until the new Campaign is fully approved and numbers are ported to the new traffic path. Carrier filtering is a cutover event, not a gradual transition.
How 10DLC Intersects with HIPAA, TCPA, and Other Compliance
10DLC is a carrier-level registration, not a privacy or consent law. You still need to follow all of the existing rules that applied before 10DLC existed. The federal Telephone Consumer Protection Act (TCPA) still governs what you can say, when you can say it, and whose consent you need. HIPAA still applies to anything you text a patient about their care. NJ state privacy laws still apply to consumer messaging. 10DLC is an additional layer on top of all of that, not a replacement for any of it. A business that is 10DLC-registered but texting marketing offers to customers who never opted in is still exposed to TCPA class actions, which commonly settle for seven figures.
For healthcare, legal, financial services, and other regulated industries in NJ, treat 10DLC registration as a single line item in a broader compliance program that includes documented consent, retention policies, and incident response.
FAQ
Does 10DLC registration apply if I only send a few texts a month?
Yes. There is no volume floor. A law firm that sends thirty appointment confirmations a month from its phone system is still sending A2P traffic and is still subject to the same registration requirements as a retailer sending thirty thousand. The carriers' filtering systems do not check volume before they decide whether a message came from a registered Campaign.
Who pays the 10DLC fees, my business or my VoIP provider?
Your business pays them, either directly or passed through on your VoIP or CRM invoice. Expect a one-time Brand vetting fee of around $4 per business, plus a monthly per-Campaign fee of roughly $1.50 to $10, plus per-message surcharges that vary by carrier (usually fractions of a cent). Unregistered traffic carries dramatically higher per-message surcharges or is blocked outright, so the registered path is almost always cheaper at any real volume.
What happens if my Campaign is rejected?
You will get a reason code from The Campaign Registry. The most common rejections are for missing opt-in language, mismatched business data, or content that does not match the Campaign type you selected. Fix the underlying issue and resubmit. Repeated rejections can count against your Brand's trust score, so it is worth pausing to get the submission right rather than iterating blindly.
Strategic Micro Systems has been the IT and telecom backbone for New Jersey businesses for more than 25 years. If your texts are getting blocked, your Campaigns are stuck in review, or you just want someone to handle the whole 10DLC registration end-to-end, give us a call and we will get your business messaging clean, registered, and reliable.