This is one of the most common questions we get, and it usually arrives after someone has already bought the list. The short answer is no: you cannot send marketing texts to a purchased or rented list. The longer answer explains why the rule is structural rather than technical, why vendor assurances do not change it, and what to do with the money and the list instead.
Why the answer is no
US text marketing runs on consent. Marketing messages sent to a mobile number using an autodialer or a prerecorded voice require prior express written consent, and that consent belongs to the specific business the consumer agreed to hear from. In practice, treat every marketing text blast as needing it: carrier and messaging-industry rules expect opt-in consent for marketing texts whatever system sends them, and state laws add their own requirements.
That last clause about the specific business is the whole answer. Consent is not a property of the phone number. It is a relationship between a person and a named business. It does not transfer when a file changes hands, it does not survive being resold, and it cannot be manufactured after the fact by a vendor's compliance certificate.
What "TCPA compliant" usually means on a list
When a list broker says their data is "TCPA compliant", the useful follow-up is: compliant how, and for whom? Usually they mean the numbers were checked against the national do-not-call registry. That is a genuine step, and it is not consent. It tells you those people did not put themselves on a registry. It does not tell you they agreed to hear from you.
Other common claims fall apart the same way. "Opt-in data" usually means the person agreed to something, somewhere, for someone; ask to see the exact wording they agreed to and whether it names your business. "Verified mobile numbers" tells you the number works, not that its owner wants your messages. If a vendor cannot show you a consent record that names you, you do not have consent.
One nuance worth having, because it is widely misreported: the FCC rule that would have required consent to name a single seller at a time was vacated by an appeals court in January 2025 and formally removed from the regulations in August 2025. Multi-seller consent can be valid federally. But it has to be consent that names your business, given by the consumer, with a record. A list sold to whoever pays for it is not that.
Why the risk is bigger than it looks
Statutory damages under the TCPA are $500 per message, trebled to $1,500 where a violation is willful, and there is no cap. Because the figure is per message, the exposure scales with the list. A purchased file of a few thousand numbers is not a small problem; a file of tens of thousands is a serious one.
State law adds to it. Several states run their own rules for marketing texts, with private rights of action and narrower sending windows. Florida, for example, requires written consent and limits sending to 8am to 8pm, and Texas extended its telemarketing statute to text messages in September 2025. Federal rules loosening in one place has not reduced the practical risk.
And the liability does not stay with whoever pressed send. The business whose offer is in the message is the obvious defendant, which is why buying a list and handing it to a texting vendor does not move the risk anywhere. It is also why we ask every customer to use a contact list they have permission to message.
What to do instead
If you have already bought the list, the least-bad path is to treat it as a research asset rather than a send list. Use it to identify who you want to reach, then reach them through channels that do not depend on consent you do not have, such as paid media, direct mail or an actual introduction, and give them a clear way to opt in to your texts.
If you have not bought it yet, spend the money on collecting your own list. The sources that hold up are the ones where you can say exactly how you got each number:
- Your own website forms, with a separate, unticked consent line that names your business and says you will send marketing texts.
- Text-to-join keywords on signs, receipts, packaging and ads, where the person starts the conversation.
- Point of sale and events, where staff collect numbers with a short written consent statement.
- Existing customers who have agreed to receive marketing texts, not just service updates.
Keep a record for each contact: the date, the source and the wording they agreed to. It is slower than buying a file, and it is the only version of this that compounds. Our SMS compliance guide covers what good consent language looks like, and our post on text blasting for real estate investors shows the same problem in a sector where skip-traced lists were once the norm.
The one-line version
You cannot text a purchased list. The rule is not new, and with the TCPA revoke-all rule arriving in January 2027, the direction of travel is towards stricter consent handling, not looser.
Have a list that opted in to you?
One-time SMS packages from $449 for up to 100,000 texts. No monthly fee, no number rental.
See SMS packages →Frequently Asked Questions
Can I text a purchased or rented phone list?
No. Marketing texts to mobile numbers require prior express written consent, and that consent belongs to the specific business the consumer agreed to hear from. It does not transfer with a data file. No vendor certification changes that.
My list vendor says the data is TCPA compliant. Is that enough?
Ask what they mean. Almost always it means the numbers were scrubbed against the national do-not-call registry, which is a necessary step and a different question from consent. Scrubbing tells you people did not opt out of a registry; it does not tell you they opted in to you.
What if the consumer agreed to hear from several companies, including mine?
That can be valid at the federal level if the consent clearly names your business and you hold a record of it. The rule that would have limited consent to one seller at a time was vacated in January 2025. State rules can still be stricter, and a generic list sold to many buyers is not this kind of consent.
What does texting without consent cost?
Statutory damages under the TCPA are $500 per message, trebled to $1,500 per message where the violation is willful, with no cap. Exposure grows with list size, which is why a large bought list is a large risk.
What can I do with a list I have already purchased?
Treat it as research rather than a send list. Use it to work out who you want to reach, then reach them through channels that do not depend on consent you do not hold, such as paid media, direct mail or a warm introduction, and invite them to opt in to your texts.