Buying leads

How to vet a lead provider for compliant texting

Vetting a lead provider for compliant texting is critical to protect your business from legal risks. You need to understand his or her methods and ensure they align with federal and state regulations for SMS outreach.

October 23, 2026 · 4 min read

Understanding TCPA and state-specific rules

The Telephone Consumer Protection Act (TCPA) is the primary federal law governing text message outreach. It requires prior express consent for marketing texts. Your lead provider must be compliant with this. This is not legal, tax, or financial advice; consult professionals for your specific situation. You can read more about TCPA basics at /learn/tcpa-and-cold-outreach-basics.

Beyond federal law, many states have their own, often stricter, regulations regarding text messaging. A reputable lead provider will be aware of and adhere to these state-specific rules, especially concerning opt-out procedures and acceptable messaging content.

Ask the lead provider what specific steps he or she takes to ensure compliance in the areas you operate. If he or she cannot clearly articulate his or her compliance strategy, that is a major red flag for your business's legal exposure.

Opt-out management procedures

Every text message campaign must include clear instructions on how a recipient can opt out of future messages. This is a non-negotiable requirement. Ask the lead provider how he or she ensures this is embedded in every message.

Inquire about his or her process for immediately honoring opt-out requests. Does he or she have an automated system that removes numbers from future campaigns? Are these records maintained for an appropriate period, as required by law?

You also need to know how these opt-out requests are communicated to you, the buyer of the lead. You must have a system to ensure you do not inadvertently text an opted-out number yourself, even if you acquired the lead. Ask about integration with your CRM.

Consent capture and record-keeping

The most crucial aspect of compliant texting is how consent is obtained. Ask the lead provider for a detailed explanation of his or her consent capture methods. Is it through a double opt-in process, a web form, or another verifiable method?

The provider should be able to demonstrate a robust system for recording and storing consent. This includes the date and time of consent, the method used, and the specific language the recipient agreed to. These records are vital if a dispute arises.

Request to see examples of his or her consent forms or processes. A transparent provider will be willing to share this information. If he or she is vague or defensive about his or her consent methods, consider that a serious warning sign.

Data sourcing for phone numbers

Understand where the lead provider gets his or her phone numbers. Are they skip-traced from public records, or from other sources? This affects the likelihood of hitting a Do Not Call (DNC) list or texting a wrong number. A compliant provider will be clear about this.

Ask if the provider scrubs his or her lists against federal and state DNC registries before sending texts. This is a crucial step in maintaining compliance. Even if a number is not explicitly on a DNC list, improper sourcing can still lead to issues.

The quality of the data source also impacts the quality of the lead. Poor data sourcing can lead to texting wrong numbers, business lines, or numbers that belong to people not associated with the property. This wastes your time and can create compliance headaches. You can learn more about lead quality at /learn/what-is-a-motivated-seller-lead.

What to ask a lead provider directly

Beyond general compliance, ask specific questions about his or her texting platform and policies. For example, inquire about message frequency, message content guidelines, and any restrictions on what you can say when you follow up.

Ask about his or her internal audit processes. How does he or she regularly review his or her texting campaigns for compliance? Does he or she have a dedicated compliance officer or legal counsel involved in setting policies?

Be direct about your concerns. A good lead provider understands the importance of compliance and will appreciate your thoroughness. If he or she dismisses your questions or provides evasive answers, it is a clear indicator to look elsewhere. You can compare lead sources at /compare/cold-calling-vs-responded-leads.

Ongoing compliance monitoring

Compliance is not a one-time check; it is an ongoing process. Ask the lead provider how he or she stays updated on changes in TCPA and state laws. Laws can evolve, and his or her methods must adapt accordingly.

Inquire about his or her incident response plan. What happens if a complaint is filed? How does he or she handle legal challenges related to his or her texting practices? You need to know that your provider has a plan to mitigate risks.

Your reputation and business are on the line when you buy leads. Partnering with a provider who prioritizes and actively maintains texting compliance is an investment in your long-term security. A provider's track record and commitment to compliance are just as important as the leads he or she delivers. For tips on responding to leads, see /learn/how-to-respond-to-a-motivated-seller-text.

Questions people ask

Do I need to keep my own opt-out records?

Yes, it is best practice to keep your own records of opt-out requests, especially for any communication you send. This creates a clear audit trail and protects you if there is ever a dispute about consent.

What if a lead came from a public list?

Even if a number is public, express consent is still required for marketing text messages under TCPA. Public availability does not automatically grant permission to text. A compliant provider will obtain consent regardless of sourcing.

Can I use a lead if I don't know the consent source?

If you cannot verify the consent source or if the provider is vague about it, it is a high-risk lead for texting. It is always safer to use leads where the consent process is transparent and verifiable to avoid potential legal issues.