01
Federal communications law
The Telephone Consumer Protection Act and FCC rules can regulate calls and text messages according to the technology, message purpose, consent obtained, revocation request, and recipient.
Table of Contents
- How can dispensaries text customers legally?
- Law, carrier rules, platform policy, and best practices are different.
- Consent should be specific, provable, and connected to the sender.
- Classify the message before selecting the consent standard.
- Opt-out handling must work across the entire messaging program.
- 10DLC registration is a carrier requirement, not a cannabis license.
- Age requirements apply to the audience and the customer journey.
- A text message can be cannabis advertising.
- Compliance depends on the records behind the campaign.
- A practical cannabis text marketing compliance framework.
- Common dispensary texting compliance mistakes.
- Cannabis text marketing laws FAQ
- Legal texting starts before the campaign is written.
The quick answer
Dispensaries can legally text customers when they have the appropriate consent, clearly identify the sender, provide and honor opt-out methods, maintain reliable records, use approved messaging routes, apply required age controls, and comply with the cannabis advertising rules that govern the customer and store.
No single disclaimer, checkbox, age gate, or 10DLC approval makes every campaign compliant. The operator must evaluate federal communications rules, state and local cannabis law, carrier requirements, platform policies, the message type, and the content of every linked page.
Federal layer
Consent, revocation, do-not-contact rules, and customer rights
Cannabis layer
Age, audience, offer, warning, content, and license restrictions
Carrier layer
Registration, sender identity, opt-in proof, filtering, and traffic rules
Operational layer
Approval, suppression, linked pages, privacy, and recordkeeping
Legal disclaimer
This article provides general educational and operational information. It is not legal advice and does not determine whether a specific campaign, consent flow, offer, audience, or message is lawful. Cannabis and communications laws vary by jurisdiction and change over time. Work with qualified counsel familiar with the jurisdictions where your stores and recipients are located.
01
Legal framework
How can dispensaries text customers legally?
Start by treating legal compliance as a coordinated operating system rather than a footer added to a promotional message.
A compliant dispensary texting program begins before the first message is written.
The operator should define the sender, message purpose, customer jurisdiction, store location, consent standard, age requirement, messaging route, opt-out process, data source, approval owner, linked destination, and records that will support the campaign.
Promotional campaigns, automated lifecycle messages, order notifications, customer-service conversations, review requests, and loyalty updates may involve different rules. Classify the message before deciding which consent and content standards apply.
02
State and local cannabis law
Cannabis regulations may restrict who can receive advertising, which warnings must appear, how age is confirmed, which offers are allowed, and how licensed businesses identify themselves.
03
Carrier and registration rules
Wireless carriers and messaging partners use registration, consent, filtering, reputation, complaint, and content policies to decide whether traffic may use their networks.
04
Messaging-platform policy
A provider may impose stricter standards than the law or prohibit cannabis messaging entirely. State legality does not require every provider to carry the campaign.
02
Rule categories
Law, carrier rules, platform policy, and best practices are different.
A campaign can satisfy one category and still fail another.
| Requirement type | Who creates it | What it may govern | Possible consequence |
|---|---|---|---|
| Federal law and FCC rules | Congress, the FCC, courts, and other federal authorities | Consent, telemarketing, automated messages, revocation, do-not-contact obligations, and customer remedies | Complaints, enforcement, litigation, damages, or injunctions |
| State and local law | State legislatures, cannabis regulators, attorneys general, cities, and counties | Cannabis advertising, privacy, age, warnings, offers, recordkeeping, message timing, and licensed activity | Fines, license action, enforcement, litigation, or campaign removal |
| Carrier requirements | Wireless carriers and messaging ecosystem participants | Registration, traffic classification, consent evidence, sender reputation, complaints, links, volume, and prohibited content | Filtering, blocking, reduced throughput, suspension, or carrier penalties |
| Platform policy | The messaging software, communications provider, or aggregator | Permitted industries, prohibited content, consent workflows, account verification, and acceptable use | Account suspension, message rejection, number blocking, or termination |
| Operational best practice | The operator, counsel, compliance team, provider, and industry guidance | Approval, immediate suppression, documentation, frequency, testing, customer support, and incident response | Higher complaints, weaker evidence, customer frustration, and preventable delivery problems |
Carrier approval is not legal approval.
Registering a campaign or receiving platform approval does not prove that the consent, offer, audience, age controls, message content, or linked page complies with every applicable law.
03
Consent
Consent should be specific, provable, and connected to the sender.
A phone number in the POS is not automatically proof that the customer agreed to receive promotional text messages.
Do not rely on an existing customer relationship alone.
A purchase, loyalty membership, account creation, ID scan, or email subscription does not necessarily authorize promotional SMS. The disclosure and customer action must support the message being sent.
04
Message classification
Classify the message before selecting the consent standard.
The message purpose matters. Adding promotional content to an operational notification can change the analysis.
| Message type | Examples | Primary risk | Operational approach |
|---|---|---|---|
| Promotional | Discounts, product drops, loyalty incentives, events, win-back offers, and category campaigns | Marketing consent, cannabis advertising rules, age, content, offer, and frequency requirements | Use a clear promotional opt-in and review the complete campaign before launch |
| Transactional | Order confirmation, pickup readiness, delivery status, substitution, cancellation, and support notices | Turning an expected service message into an advertisement | Keep the message limited to the transaction unless the customer separately consented to marketing |
| Conversational | A customer initiates a question and an employee responds | Using a support conversation as an undeclared promotional opt-in | Answer the request and obtain separate consent before adding recurring marketing |
| Lifecycle automation | Birthday, loyalty milestone, review request, first-purchase follow-up, cart recovery, and win-back | Assuming an automated message is non-promotional because it was triggered by data | Classify the content and consent according to what the message actually says |
The label inside the platform does not control the legal classification.
Calling a message “transactional” does not make it transactional when it contains an offer, product promotion, cross-sell, or request intended to drive another purchase.
05
STOP and HELP
Opt-out handling must work across the entire messaging program.
Customers should not need to understand which list, automation, campaign, store, or software feature produced the message.
Support standard keywords and recognize ordinary language that clearly asks the sender to stop. Do not require one exact capitalization, spelling pattern, or menu path when the customer’s intent is clear.
Suppress the number from future covered messages as soon as the request is received. Do not wait for a nightly list sync or the next campaign review.
A single non-promotional confirmation may acknowledge the opt-out. It should not contain a discount, product, link, or attempt to persuade the customer to remain subscribed.
Configure a reusable response identifying the program and providing a real support method. Include opt-out instructions where required by the messaging program or provider.
Sync opt-outs across campaigns, automations, scheduled sends, imported lists, employee tools, and connected systems that use the same consent.
Do not restore marketing eligibility merely because the customer made another purchase. Obtain a new affirmative action and preserve the new consent record.
Build for reasonable customer language.
A reply such as “please stop texting me” should not be ignored because it does not match a single programmed keyword.
06
10DLC
10DLC registration is a carrier requirement, not a cannabis license.
Registration helps carriers understand who is sending, what the use case is, and how customers join and leave the program.
Typical 10DLC registration path
Brand, use case, consent, and approved traffic
Brand
Verify the business
Submit accurate legal business, tax, address, website, and contact information.
→
Campaign
Describe the use case
Explain the message types, sender, audience, frequency, and customer relationship.
→
Consent
Document the opt-in
Provide the signup flow, disclosures, terms, privacy policy, and sample confirmation.
→
Traffic
Send what was registered
Keep actual content, volume, links, and behavior consistent with the approved campaign.
01
Use accurate business information
Legal name, tax information, website, store identity, contact details, and campaign ownership should match the operating business.
02
Submit the real opt-in flow
Do not register a compliant sample form and then collect customers through a different disclosure or undocumented POS workflow.
03
Use representative message samples
Samples should reflect the actual sender identity, cannabis context, links, offer style, recurring nature, and STOP or HELP instructions.
04
Keep traffic aligned with the use case
A registered order-notification campaign should not become the route for unrelated promotional blasts.
05
Expect filtering beyond registration
Registration does not prevent filtering caused by complaints, reputation, unsupported links, inaccurate content, consent problems, volume changes, or provider policy.
07
Age controls
Age requirements apply to the audience and the customer journey.
The correct age rule depends on the jurisdiction, license type, adult-use or medical program, and message content.
A customer states or confirms age
A signup form may ask the customer to confirm eligibility or provide a birth date. Some jurisdictions expressly require an age-affirmation method for direct individualized cannabis communications.
Eligibility is checked using stronger evidence
A basic “I am 21” gate is not the same as identity or document verification. Determine which level is required at signup, on linked pages, before purchase, and within the licensed retail process.
01
Signup
Apply the required age method before adding the customer to cannabis promotional messaging when the applicable law requires it.
02
Linked campaign pages
Age controls should not disappear when the customer leaves the text thread. Review menus, offer pages, product pages, review flows, and loyalty destinations.
03
Adult-use and medical customers
Do not assume one universal age threshold. Some jurisdictions distinguish adult-use customers from qualified medical patients.
04
Age records
Preserve the date, method, source, and result of the age control where recordkeeping is appropriate or required.
08
State cannabis rules
A text message can be cannabis advertising.
State advertising restrictions can apply to the message, offer, creative, destination, audience, and business responsible for the campaign.
| Review area | Questions to answer |
|---|---|
| Licensed sender | Is the business authorized to advertise the products, store, service, or offer in the recipient’s jurisdiction? |
| Audience age | Does the jurisdiction require age affirmation, verification, audience-composition evidence, or another youth-protection control? |
| Required identity | Must the advertisement include the licensee name, license number, store name, address, or other identifying information? |
| Warnings and disclosures | Does the jurisdiction require a cannabis warning, age statement, health disclosure, offer term, or other notice? |
| Offer structure | Are giveaways, coupons, free products, below-market pricing, loyalty rewards, birthday offers, or certain promotional terms restricted? |
| Youth appeal | Does the campaign use cartoons, mascots, youth-oriented imagery, protected characters, candy-like language, games, or other prohibited elements? |
| Product claims | Are potency claims, health claims, medical implications, safety claims, consumption claims, or product comparisons restricted? |
| Linked content | Does the landing page, online menu, product page, image, or checkout experience contain content that would be prohibited in the text campaign? |
| Geography | Could the campaign appear to promote unlicensed sales, delivery outside the authorized territory, or interstate cannabis activity? |
Do not assume a short text is exempt from advertising rules.
Character limits do not automatically remove warning, identity, age, offer, or content requirements. Counsel should determine how a jurisdiction’s rules apply to the format.
09
Privacy and records
Compliance depends on the records behind the campaign.
An operator should be able to explain where the audience came from, what the customer agreed to, what was sent, who approved it, and how later requests were handled.
Store the source, disclosure, customer action, date, time, covered sender, phone number, and later changes in consent.
Preserve the applicable age-affirmation or verification result without collecting more sensitive data than the program requires.
Save the audience criteria, suppression rules, message, image, destination, schedule, estimate, and final version.
Record who approved the audience, offer, content, timing, store readiness, and launch.
Keep the request, source, time received, suppression result, confirmation, and any later re-opt-in evidence.
Retain delivery results, filtering, replies, complaints, escalations, and actions taken to correct the program.
Define retention periods with counsel.
The correct retention period may depend on federal law, state law, litigation risk, provider agreements, privacy obligations, and the operator’s recordkeeping policy.
10
Operating framework
A practical cannabis text marketing compliance framework.
Apply the framework to every new campaign, automation, data source, store, and messaging use case.
Step 01
Identify the jurisdictions
Determine where the store is licensed, where recipients are located, and which federal, state, local, medical, adult-use, privacy, and advertising rules may apply.
Step 02
Classify the message
Decide whether the communication is promotional, transactional, conversational, lifecycle marketing, or a mixture.
Step 03
Verify consent and age eligibility
Confirm that the evidence supports the sender, content, frequency, automation, store, and customer receiving the message.
Step 04
Confirm the messaging route
Use a registered and approved 10DLC, toll-free, short-code, or other supported route that permits the business and use case.
Step 05
Review the message and destination
Evaluate sender identity, warnings, offers, product claims, youth appeal, images, links, age controls, and geographic implications.
Step 06
Apply suppression and frequency rules
Exclude opted-out customers, ineligible customers, recent purchasers where appropriate, overlapping workflows, wrong-store customers, and excessive recent recipients.
Step 07
Complete documented approval
Confirm legal or compliance review where required, offer economics, inventory, store execution, customer support, and final launch authority.
Step 08
Monitor and retain evidence
Review replies, opt-outs, complaints, filtering, delivery, customer issues, and campaign records after launch.
11
Common mistakes
Common dispensary texting compliance mistakes.
Most problems begin with weak consent evidence, disconnected systems, mismatched campaigns, or the assumption that another party already handled compliance.
01
Treating every POS phone number as opted in
A phone number collected for ID, loyalty, receipts, order pickup, or account access may not support recurring promotional messages.
02
Importing a list without the original disclosure
A spreadsheet containing phone numbers does not show which sender, message type, frequency, or terms the customer accepted.
03
Assuming 10DLC approval proves legality
Registration describes the campaign to the carrier ecosystem. It does not replace legal, cannabis, privacy, age, or offer review.
04
Ignoring linked landing pages
The destination may contain prohibited products, claims, offers, missing warnings, weak age controls, inaccurate inventory, or unauthorized geographic activity.
05
Suppressing one list but not the account
A customer who opts out of one campaign may continue receiving automations, scheduled messages, employee sends, or campaigns from an unsynchronized system.
06
Adding promotions to order notifications
An expected pickup message can become mixed promotional content when it adds products, offers, rewards, or incentives.
07
Using one opt-in for unrelated brands or stores
The customer may not reasonably understand that one signup authorizes messages from every affiliate, location, licensee, or future brand.
08
Choosing a provider that prohibits cannabis
A mainstream messaging account may be suspended even when the dispensary is licensed and the campaign follows state advertising law.
12
FAQ
Cannabis text marketing laws FAQ
Is cannabis SMS marketing legal?
Cannabis SMS marketing can be legal when the sender complies with applicable consent, revocation, cannabis advertising, age, privacy, carrier, registration, and platform requirements. The answer depends on the jurisdiction, message, audience, and messaging route.
Can a dispensary text existing customers?
Only when the dispensary has evidence supporting the type of text being sent. A prior purchase or customer account does not automatically prove consent to receive recurring promotional messages.
Does joining a dispensary loyalty program include SMS consent?
It depends on the disclosure and customer action. Loyalty enrollment and promotional SMS consent should be clearly explained rather than assumed to be identical.
Is 10DLC registration legally required?
10DLC is a carrier registration system for application-to-person messaging over ten-digit long-code numbers. It is not a cannabis license or a substitute for legal compliance, but unregistered traffic may be blocked by carriers and providers.
How quickly must a dispensary honor STOP?
Current FCC rules require covered revocation requests to be honored within a reasonable time not exceeding ten business days. A safer operational practice is to suppress future messages immediately.
What should a HELP response say?
The response should identify the messaging program, provide a working customer-support method, and include any opt-out or disclosure language required by the carrier, campaign registration, or provider.
Can a dispensary promote cannabis products by text?
That depends on the state and local advertising rules, customer eligibility, consent, product, offer, required warnings, linked content, carrier route, and provider policy.
Does an age gate make the campaign compliant?
No. An age gate addresses only part of the customer journey. The campaign may still require stronger age verification, consent, advertising disclosures, audience controls, registration, opt-out handling, and lawful content.
Can medical cannabis patients under 21 receive texts?
The answer depends on the jurisdiction’s medical cannabis rules, the patient’s eligibility, the sender’s license, the consent obtained, and the message content. Do not apply an adult-use rule to a medical program without review.
Can a dispensary purchase a marketing list?
A purchased list generally does not provide reliable evidence that each person consented to receive promotional texts from the dispensary. It also creates privacy, carrier, complaint, and deliverability risk.
Can one opt-in cover every dispensary location?
It depends on how clearly the disclosure identifies the sender, stores, affiliates, message types, and customer expectations. A broad internal database does not automatically create broad customer consent.
Are order notifications subject to the same rules as promotional texts?
Not always. An expected order-status message may be analyzed differently from promotional content. Keep operational notifications limited to the transaction unless the customer separately consented to marketing.
Build compliance into the workflow
Legal texting starts before the campaign is written.
Verify the customer, consent, jurisdiction, sender, route, message type, offer, linked content, suppression rules, and approval record before launch.