Sticky Cards

SMS opt-in and consent for dispensaries

Before a dispensary texts marketing messages, it needs express written consent for that program, collected on a sign-up that says who is texting and how to stop. Send a confirmation text before anything else, honor STOP and similar replies within ten business days, and keep a record of every opt-in. In Canada, CASL sets similar rules.

Last updated:

Book a demo

A shopper checks her phone at a dispensary counter while the budtender rings up the order.
  • CTIA expects express written consent for marketing texts, given before the first one is sent.
  • Adding an offer, such as a coupon code, can turn an informational text into a promotional one, which needs that higher level of consent.
  • Consent covers the program and sender it was given for. It cannot be transferred, and rented, bought or shared lists should not be used.
  • Signing up at the point of sale is one valid way to opt in.

What must the confirmation text say?

For a recurring program, CTIA says a confirmation goes out before any other message. It names the program, gives a way to get help, explains how to opt out, and says that messages recur, how often, and whether fees may apply. For sign-ups at a counter or on paper, the confirmation should follow as soon as reasonably possible.

Kendall's

Kendall's: you are in our text club. We text a few times a month. Msg and data rates may apply. Reply STOP to opt out, HELP for help.

A confirmation text. Sample text from Kendall’s Cannabis, our sample store. Yours sends under your store’s name.

How do keyword and QR code opt-ins work?

A keyword opt-in starts when the customer texts a word to your number; a QR code can open that text ready to send. Keywords should work whether they arrive as SMS or MMS. When consent is collected away from the phone, such as at the counter, T-Mobile recommends confirming it by text. Age-gate the sign-up with a date of birth, not a yes or no question.

What records should you keep?

CTIA recommends recording, for each opt-in, the time, how it was collected, the wording shown, the program and the phone number. CTIA’s short code handbook says to keep opt-in and opt-out records until at least six months after the person opts out.

How fast must you honor an opt-out?

Under the FCC’s rules, replies such as stop, quit, end, revoke, opt out, cancel or unsubscribe revoke consent, and so does any reply a reasonable person would read as a request to stop. Revocations must be honored within ten business days; that took effect on April 11, 2025. One confirmation text with no marketing is allowed after an opt-out. A September 2026 FCC order (FCC 26-67) lets senders name reply keywords as their exclusive opt-out method, once it takes effect.

Are there quiet hours for texts?

Federal rules bar telephone solicitations before 8am or after 9pm in the recipient’s local time, and that covers telemarketing texts. Some states set stricter hours.

T-Mobile asks for reconfirmation when no first message is sent within 30 days of consent. For an old list or one with missing records, re-permission it before texting. For more practical tips, see cannabis SMS compliance tips.

Build your text program with us

Book a time and we will walk through your list, your POS and the texts you want to send, on a video call with a real person.

Book a demo

Frequently asked questions

Is joining a loyalty program consent to receive texts?

Not by itself. Marketing texts need express written consent for that program, with the sign-up saying who will text and how to stop.

What has to be in the first text after someone joins?

The program name, how to get help, how to opt out, that messages recur and how often, and any fees.

How quickly must opt-outs be honored?

Within ten business days under FCC rules, and in Canada within 10 business days under CASL.

How long should I keep consent records?

CTIA’s short code handbook says at least six months after the person opts out.

Can I text a list I bought?

No. Consent is tied to the sender it was given to, and bought or rented lists should not be used.

Sources

  1. CTIA, Messaging Principles and Best Practices (May 2023) (opens in a new tab), accessed October 18, 2026
  2. CTIA, Short Code Monitoring Program Handbook, version 1.9 (opens in a new tab), accessed October 18, 2026
  3. T-Mobile, Code of Conduct for messaging, version 2.2 (opens in a new tab), accessed October 18, 2026
  4. 47 CFR 64.1200, Delivery restrictions (eCFR) (opens in a new tab), accessed October 18, 2026
  5. Federal Register, Strengthening the Ability of Consumers To Stop Robocalls (effective date notice) (opens in a new tab), accessed October 18, 2026
  6. FCC 26-67, Report and Order on TCPA consent revocation (September 2026) (opens in a new tab), accessed October 18, 2026