If you send Application-to-Person (A2P) SMS traffic to US mobile numbers using standard 10-digit long codes, you need to register through the 10DLC framework. This is not optional. Carriers now require it, and unregistered traffic faces severe throughput throttling, filtering, or outright blocking. Here is a practical guide to what 10DLC is, how the registration process works, and what to watch out for.
What Is 10DLC?
10DLC stands for 10-Digit Long Code. Historically, long codes (standard phone numbers like +1 512 555 0199) were designed for person-to-person (P2P) messaging. Businesses that needed high-volume A2P delivery typically used short codes (5- or 6-digit numbers) or toll-free numbers. But as more businesses adopted long codes for A2P messaging -- appointment reminders, OTP codes, marketing campaigns -- carriers needed a way to distinguish legitimate business traffic from spam.
The 10DLC system, managed by The Campaign Registry (TCR), creates a formal registration layer between businesses sending A2P messages and the carriers delivering them. Every business (brand) registers once, then registers each messaging use case (campaign) separately. Carriers use this registration data to assign throughput limits, apply filtering rules, and enforce compliance.
Why Registration Is Mandatory
T-Mobile was the first major US carrier to enforce 10DLC registration requirements, with AT&T following shortly after. As of late 2023, all three major US carriers (T-Mobile, AT&T, and Verizon) require 10DLC registration for A2P long code traffic. The consequences of not registering are real:
- Throttled throughput -- Unregistered traffic is limited to as low as 1 message per second on some carrier networks, compared to hundreds of messages per second for registered campaigns.
- Pass-through fees -- Carriers charge per-message surcharges on all A2P traffic. Unregistered traffic pays higher surcharges than registered traffic.
- Filtering and blocking -- Carriers actively filter messages from unregistered senders. Your delivery rate drops, and you may not even know messages are being silently discarded.
- Fines -- T-Mobile has imposed fines on messaging providers that route unregistered A2P traffic through their network.
The Brand Registration Process
Brand registration is the first step. You register your business entity once with TCR, providing the following information:
- Legal company name and DBA (doing business as) name
- EIN (Employer Identification Number) -- This is the US tax ID. Non-US companies can register using a DUNS number or LEI instead.
- Company address, website, and vertical (industry category)
- Company type -- Private, public, non-profit, government, or sole proprietor
- Stock symbol and exchange (if publicly traded)
- Contact information -- Name, email, and phone for the authorized representative
Once submitted, TCR runs a brand vetting process. This cross-references your business information against public records, tax databases, and third-party data sources. The vetting process produces a Trust Score ranging from 0 to 100. This score directly determines your throughput limits.
Brand Vetting Scores and Throughput Tiers
Your Trust Score places you into one of several throughput tiers. The exact thresholds vary by carrier, but the general structure looks like this:
- Low volume (score 1-24) -- 0.2 TPS (T-Mobile), limited daily volume. Suitable only for very small senders.
- Basic (score 25-49) -- 1-4 TPS depending on carrier. Adequate for small businesses with transactional messages.
- Standard (score 50-74) -- 10-40 TPS. The most common tier for mid-size businesses.
- High volume (score 75-100) -- 60-225+ TPS. Required for marketing campaigns, high-volume OTP delivery, and enterprise use cases.
If your initial score is too low, you can request a manual external vet through third-party vetting providers (like WMC Global or Aegis Mobile) for an additional fee, typically around $40. External vetting often raises your score significantly, especially for legitimate businesses whose information is well-documented in public records.
Campaign Registration
After your brand is registered and vetted, you register individual campaigns. Each campaign represents a specific messaging use case. TCR defines several standard use case categories:
- Transactional -- Order confirmations, shipping notifications, account alerts
- OTP / Two-Factor Authentication -- Login codes, verification messages
- Customer Care -- Support messages, ticket updates
- Marketing -- Promotions, offers, sales announcements
- Mixed -- Combination of transactional and marketing (lower throughput than dedicated categories)
- Public Service Announcement -- Non-commercial informational messages
- Polling and Voting -- Surveys and feedback collection
- Charity / Non-profit -- Fundraising and donation-related messaging
Each campaign registration requires you to provide sample messages -- typically 2-5 examples of the actual messages your campaign will send. Carriers review these samples to confirm they match the declared use case.
What Carriers Look for in Message Samples
Carriers and TCR reviewers pay close attention to your sample messages. They are checking for:
- Consistency with use case -- If you register as "Customer Care" but your samples contain promotional language, expect rejection.
- Opt-out language -- Every campaign must include clear opt-out instructions. The standard is "Reply STOP to unsubscribe" or equivalent.
- Business identification -- Messages should identify the sender. Anonymous or ambiguous messages are flagged.
- No prohibited content -- Cannabis, firearms, lending with misleading terms, and SHAFT (sex, hate, alcohol, firearms, tobacco) content for certain carriers.
- URL usage -- Public URL shorteners (bit.ly, tinyurl.com) are often flagged. Use branded short domains instead.
Common Rejection Reasons
Campaign registrations are rejected more often than most senders expect. The most common reasons include:
- Mismatched use case -- Registering as "Customer Care" when you are actually sending marketing messages. Be honest about your use case.
- Missing opt-in documentation -- You must describe how subscribers consent to receive your messages (web form, keyword opt-in, paper form, etc.).
- Vague sample messages -- Samples like "Hi, check this out" do not demonstrate a clear business purpose.
- Website issues -- Your declared website must be live, must match the registered brand, and should contain a privacy policy and terms of service.
- EIN mismatch -- The company name and EIN must match exactly what is on file with the IRS. Even minor discrepancies (LLC vs Inc., extra spaces) cause failures.
Timeline: What to Expect
The typical registration timeline breaks down as follows:
- Brand registration + vetting -- Automated vetting completes within minutes. External (manual) vetting takes 1-3 business days.
- Campaign registration -- Most campaigns are approved within 24 hours. T-Mobile may take up to 5 business days for manual review of certain use cases (especially marketing and mixed campaigns).
- Number assignment -- Associating phone numbers with approved campaigns is typically instant.
- Full activation -- End-to-end, plan for 1-5 business days from initial brand submission to live traffic.
How MOBITELSMS Handles 10DLC
MOBITELSMS includes built-in TCR integration at the platform level. Rather than managing 10DLC registration through a third-party dashboard, you handle everything directly from the MOBITELSMS admin panel:
- Brand registration -- Submit brand details through the compliance dashboard. MOBITELSMS submits to TCR via API and returns your Trust Score.
- Campaign management -- Create campaigns, attach sample messages, select use case categories, and track approval status in real time.
- Number assignment -- Associate approved campaigns with your 10DLC numbers directly from the SMS gateway configuration page.
- Compliance monitoring -- The platform validates outbound messages against campaign registrations before routing. Messages that do not match an approved campaign are flagged rather than silently dropped by the carrier.
- Throughput enforcement -- TPS limits from your Trust Score are automatically applied at the gateway level, preventing you from exceeding carrier-imposed caps and triggering penalties.
The goal is to keep 10DLC compliance out of your way while ensuring your traffic is never at risk. Registration is a one-time process per brand and per campaign. Once configured, the platform handles the ongoing enforcement automatically.
If you are sending A2P traffic to US numbers today without 10DLC registration, the time to register is now. The longer you wait, the more likely your traffic is being silently filtered or throttled. Start your registration from the MOBITELSMS dashboard or contact our compliance team for guidance on complex multi-brand setups.