Text-to-Win SMS Promotions: What TCPA Compliance Requires in 2026

Text-to-win is still a legal entry mechanic for U.S. sweepstakes and instant win games in 2026, but the compliance bar didn't get lower this year. The FCC's "one-to-one consent" rule, which would have tightened consent requirements further, was vacated by a federal appeals court in early 2025 and has not been revived. That doesn't mean the coast is clear: the underlying Telephone Consumer Protection Act (TCPA) still requires prior express written consent for marketing texts, and TCPA lawsuit filings are up sharply in 2026. This article explains what actually changed, what didn't, and what a compliant text-to-win entry flow needs.

What is text-to-win?

Text-to-win is a promotion entry mechanic where a consumer sends a text message — often a keyword to a short code, or a reply to an SMS link — to enter a sweepstakes or receive an instant win result. It is an entry channel, not a promotion type on its own; the underlying promotion is still a sweepstakes, an instant win game, or occasionally a purchase-based promotion layered on top.

Text-to-win is not the same as general SMS marketing (ongoing promotional texts a brand sends after opt-in) or as receipt-upload or on-pack code entry, which use a web or app form instead of a text message as the entry path. A single promotion can offer text-to-win alongside a web-based alternate method of entry (AMOE) as two parallel ways to participate.

How text-to-win compliance works in the United States

1. The shopper opts in by texting a keyword or short code

What happens: The consumer sees a call to action (in-store signage, on-pack callout, social ad, or broadcast mention) inviting them to text a keyword to a short code. Who owns it: The brand or agency defines the keyword and short code; an SMS/short-code aggregator or platform provisions the number. What the shopper sees: A simple instruction, e.g., "Text WIN to 12345." Compliance consideration: The initial text itself is generally treated as the consumer-initiated action, but the confirmation message that follows must independently satisfy TCPA prior express written consent requirements before any further marketing texts are sent. What to measure: Text volume and unique participants per keyword/short code.

2. The platform sends a confirmation and captures consent

What happens: An automated reply confirms entry and, if the brand intends to send further marketing texts (not just the single entry confirmation and result), asks the consumer to affirmatively opt in to those future messages. Who owns it: The SMS platform or promotion technology vendor builds this flow; brand legal/compliance approves the exact consent language. What the shopper sees: A confirmation text disclosing the business name, that they've entered, expected message frequency if enrolling in further texts, "msg & data rates may apply," and how to opt out (reply STOP) and get help (reply HELP). Compliance consideration: Consent must be specific to this business — a consumer's consent to receive texts from one seller cannot be resold or shared to authorize texts from a different, unrelated seller. What to measure: Opt-in completion rate for any secondary marketing consent request.

3. The entry is validated and, for instant win, resolved

What happens: The system checks the entry against promotion rules (one entry per phone number per day, entry window, eligible states) and, for an instant win game, determines and delivers the result. Who owns it: The promotion administrator. What the shopper sees: An immediate win/lose result (instant win) or an entry confirmation (sweepstakes, pending the drawing). Compliance consideration: If the promotion requires a purchase to enter by text, most states also require a genuine no-purchase alternate method of entry (AMOE) — this is a sweepstakes-law requirement independent of TCPA. What to measure: Entry validation rate and duplicate/invalid entry rate.

4. Opt-outs are honored in real time

What happens: Any consumer who replies STOP, UNSUBSCRIBE, CANCEL, QUIT, or END must be removed from future messaging. Who owns it: The SMS platform, with the brand responsible for confirming the vendor's opt-out handling meets the requirement. What the shopper sees: A one-time confirmation that they've been unsubscribed. Compliance consideration: The FCC's consent-revocation rule requires reasonable, timely processing of opt-outs; a related "revoke-all" provision (letting one STOP reply revoke consent across a business's different message programs) has had its effective date repeatedly pushed back by the FCC, most recently to January 31, 2027 — brands should track this date rather than assume it's already in force. What to measure: Opt-out rate and time-to-processing.

5. Winner notification and fulfillment proceed as with any promotion

What happens: For sweepstakes entries, winners are selected and notified per the official rules; for instant win, winners already know and move to prize claim. Who owns it: The promotion administrator and, for physical prizes, a fulfillment partner. What the shopper sees: Winner notification (which should not rely solely on unsolicited texts to a number that already opted out) and prize delivery. Compliance consideration: Winner notification content and channel should still respect any prior opt-out. What to measure: Fulfillment completion rate.

When to use text-to-win

Text-to-win fits well when the promotion needs the lowest-friction possible entry path and the brand already has (or is building) SMS infrastructure. It's a weaker fit when the brand has no existing short-code/SMS platform relationship, since setting one up adds lead time, or when the target audience skews toward channels where a QR-to-web flow is more natural, such as a product page or retail media unit that already opens a browser.

Text-to-win vs. other entry channels for sweepstakes and instant win

Practical campaign example

Illustrative example — not a documented PrizeEra case study. A beverage brand wants to run a four-week instant win promotion tied to summer coolers displays at convenience stores, where shoppers are unlikely to have a free hand or good lighting to photograph a receipt. The brand's agency proposes text-to-win as the primary entry path, layered with a no-purchase mail-in AMOE disclosed in the official rules.

• Shopper occasion: Grabbing a cold drink at a convenience store, prompted by shelf signage.
• Campaign mechanic: "Text WIN to [short code] for a chance to win instantly" — an instant win game with SMS as the entry channel.
• Entry/participation path: Shopper texts the keyword, receives an automated confirmation with required disclosures, and gets an immediate win/lose reply.
• Retail touchpoints: Cooler-door clings, register signage, and a supporting radio spot in select markets.
• Compliance build: Single-seller consent language drafted and approved by counsel before launch, real-time STOP handling configured with the SMS vendor, and a mail-in AMOE with equal odds documented in the official rules.
• Operational requirements: Short code provisioning and carrier approval (which can take several weeks), predetermined winning-entry allocation for the instant win logic, and fulfillment for physical prizes.

Performance outcomes were not publicly disclosed, because this is an illustrative example rather than a completed campaign.

U.S. compliance considerations

This is an educational checklist, not legal advice. Confirm every item with qualified U.S. promotion and telemarketing counsel before launch.

• Official rules. The promotion still needs complete official rules covering eligibility, entry period, entry methods (including the SMS path), odds where applicable, prize description and value, and winner selection method — the same as any sweepstakes or instant win game.
• No-purchase-necessary/AMOE. If entry is conditioned on a purchase, most states require a free alternate method of entry with genuinely equal odds; this requirement is separate from and in addition to TCPA consent requirements.
• Eligibility and age restrictions. Minimum age, residency, and any employee/household exclusions belong in the official rules regardless of entry channel.
• Geographic restrictions. Confirm which states the promotion is open to; some states impose their own telemarketing/text-message statutes on top of federal TCPA rules — for example, Florida, Oklahoma, and Washington have enacted their own "mini-TCPA" laws with distinct consent or timing requirements.
• Void-where-prohibited language. Disclose it where relevant, consistent with the promotion's actual state eligibility.
• Prize disclosures and approximate retail value (ARV). Disclose the nature, quantity, and ARV of prizes, as with any promotion.
• Winner selection and notification. Disclose the method and timing, and make sure any notification via text respects the recipient's consent/opt-out status.
• Privacy, consent, and SMS-specific requirements. Prior express written consent (PEWC) is required before sending marketing text messages under the TCPA. Consent must be specific to the single business sending the messages — a rule the FCC tried to formalize as the "one-to-one consent rule" in 2023, which was set to take effect January 27, 2025, but was postponed by the FCC and then vacated the same day by the U.S. Court of Appeals for the Eleventh Circuit, which found the FCC exceeded its statutory authority. [Source: Foley & Lardner LLP, "Federal Communications Commission's One-to-One Consent Rule Under Telephone Consumer Protection Act Vacated Day Before Rule Set to Take Place," January 27, 2025] As a practical matter, this means the FCC's stricter formal rule is not currently in force, but the underlying statutory requirement for prior express written consent from a specific business remains, and brands should not assume the vacatur lowers their obligations. [Source: Buchanan Ingersoll & Rooney PC, "FCC's New TCPA One-to-One Consent Rules Effective January 27: What Companies Need To Know," updated January 24, 2025]
• Consent revocation ("revoke-all") handling. A separate FCC rule addressing how a single opt-out request should be honored across a business's different messaging programs has had its effective date repeatedly extended, most recently to January 31, 2027; confirm the current status before assuming this specific rule applies. [Source: Consumer Financial Services Law Monitor (Troutman Pepper Locke), "FCC Further Extends Effective Date for TCPA 'Revoke-All' Rule," January 2026] Regardless of that specific rule's status, real-time or near-real-time opt-out processing (STOP, in particular) is standard practice and reduces litigation exposure.
• Litigation exposure. TCPA statutory damages run $500 per violation, up to $1,500 for willful or knowing violations, with no cap on aggregate class exposure. [Source: Telephone Consumer Protection Act, 47 U.S.C. § 227(b)(3)] TCPA filings were up roughly 29.6% year-to-date through May 2026 compared to the same period in 2025. [Source: Consumer Financial Services Law Monitor (Troutman Pepper Locke), "May 2026 Consumer Litigation Filings," 2026] This makes clean consent documentation a higher priority, not a lower one, in 2026.
• Bonding or registration considerations. State sweepstakes registration/bonding rules (for example, Florida and New York generally above $5,000 in aggregate prize value) apply based on prize value and structure, independent of whether text-to-win is one of the entry channels.
• Retailer and platform approval requirements. SMS short codes require carrier and aggregator approval, which typically takes longer to provision than a standard web landing page; build this lead time into the launch schedule.

Best practices

1. Draft consent language for a single seller, and keep it that way. Even though the formal one-to-one consent rule was vacated, consent that's vague about who is texting the consumer is a persistent source of TCPA claims.
2. Build real-time STOP handling into the SMS platform from day one, rather than treating opt-out processing as a post-launch fix.
3. Separate the entry-confirmation text from any further marketing-text opt-in. A one-time promotion confirmation and an ongoing marketing subscription are different consents; don't conflate them in a single checkbox or reply.
4. Start short-code/carrier provisioning early. Aggregator and carrier approval for a new short code or keyword commonly takes several weeks, longer than most web-based entry paths.
5. Pair any purchase-required text-to-win entry with a genuine AMOE, disclosed as clearly as the SMS entry instructions themselves.
6. Check state-specific telemarketing statutes, not just federal TCPA rules, for every state where the promotion runs.
7. Log consent records the way you'd want them to look in litigation — timestamp, exact disclosure language shown, and the specific opt-in action taken — since the burden of proving valid consent falls on the business.

Common mistakes

1. Assuming the one-to-one consent rule vacatur means SMS compliance got easier. It removed one specific proposed rule, not the underlying TCPA consent requirement. Fix: keep single-seller, specific consent practices regardless of the rule's current status.
2. Reusing a receipt-upload or web sweepstakes' official rules template without adding SMS-specific disclosures. Missing message frequency, "msg & data rates may apply," or opt-out instructions in the text flow itself is a common gap. Fix: have counsel review the actual text message content, not just the web official rules.
3. Underestimating short-code provisioning time. Launching creative before the short code is approved delays the whole promotion. Fix: start carrier/aggregator approval in parallel with creative development, not after.
4. Treating STOP requests as a low-priority queue. Slow opt-out processing is a specific, well-documented basis for TCPA claims. Fix: automate STOP handling and test it before launch.
5. Skipping the AMOE because "it's just a text." A purchase-required, chance-based text-to-win entry is still subject to the same no-purchase-necessary requirements as any other sweepstakes mechanic. Fix: build and disclose the AMOE regardless of entry channel.
6. Not tracking the revoke-all rule's actual effective date. Some vendors market "revoke-all compliant" features as if the rule is already mandatory; confirm the current FCC effective date before treating it as a hard requirement. Fix: verify the current status with counsel before finalizing vendor requirements.

Measurement framework

Frequently asked questions

Is text-to-win still legal for U.S. sweepstakes in 2026?

Yes. Text-to-win remains a legal entry mechanic. What changed is the status of one specific proposed FCC rule (one-to-one consent), which was vacated by a federal appeals court in January 2025 and has not been reinstated; the underlying TCPA requirement for prior express written consent from the specific business sending the texts still applies.

Do I still need consent that's specific to my brand, even though the one-to-one consent rule was vacated?

Yes, as a matter of sound practice. The vacated rule would have formalized this requirement, but the TCPA's existing prior-express-written-consent standard already requires consent to come from the consumer for the specific business texting them, and litigation risk supports treating it that way regardless of the rule's formal status.

Does a text-to-win entry still need a no-purchase alternate method of entry (AMOE)?

If the promotion requires a purchase to enter and offers a chance-based reward, yes — the AMOE requirement comes from state sweepstakes/lottery law, not from TCPA, so it applies to text-to-win the same way it applies to any other purchase-required entry channel.

How long does it take to set up a short code for a text-to-win promotion?

Provisioning and carrier/aggregator approval for a new short code commonly takes several weeks, which is typically longer than setting up a web-based entry form. Build this into the launch timeline.

What is the "revoke-all" rule, and is it in effect yet?

It's a separate FCC rule (distinct from one-to-one consent) addressing how a single opt-out request should be honored across a business's different text programs. Its effective date has been repeatedly extended, most recently to January 31, 2027, so confirm current status before treating it as a binding requirement.

What happens if a brand doesn't process STOP requests quickly enough?

Slow or inconsistent opt-out processing is a common, well-documented basis for TCPA claims, and TCPA statutory damages ($500 to $1,500 per violation, uncapped in aggregate) make this a meaningful financial risk, independent of any specific FCC rulemaking.

Can text-to-win be combined with other entry channels in the same promotion?

Yes. Brands commonly offer text-to-win alongside a web-based entry form or a mail-in AMOE as parallel paths into the same sweepstakes or instant win game, which can also help satisfy no-purchase-necessary requirements.

Sources

• Foley & Lardner LLP, "Federal Communications Commission's One-to-One Consent Rule Under Telephone Consumer Protection Act Vacated Day Before Rule Set to Take Place," January 27, 2025.
• Buchanan Ingersoll & Rooney PC, "FCC's New TCPA One-to-One Consent Rules Effective January 27: What Companies Need To Know," January 23, 2025 (updated).
• Consumer Financial Services Law Monitor (Troutman Pepper Locke), "FCC Further Extends Effective Date for TCPA "Revoke-All" Rule," January 2026.
• Consumer Financial Services Law Monitor (Troutman Pepper Locke), "May 2026 Consumer Litigation Filings: All Major Statutes Down as April Trends Reverse," 2026.
• Telephone Consumer Protection Act, 47 U.S.C. § 227(b)(3) (statutory damages provision).
• Federal Trade Commission, Consumer Advice, "Fake Prize, Sweepstakes, and Lottery Scams," accessed September 1, 2026.

Reviewed by: [named legal/compliance reviewer to be assigned before publication]. This article has not yet completed formal legal review; do not rely on the compliance section as legal advice.