Post-late-2023: 100% 10DLC registration enforced by all three carriers
Every 10DLC number in the US must be registered with the Telecommunications Consumers Registry (TCR) before carriers grant messaging permission. This is not optional. An unregistered 10DLC (a standard landline or mobile number) will not transmit A2P traffic—carriers block it at the network edge. The registration links your business identity, phone number, and use-case description into a cryptographic bundle that carriers validate in real time.
The approval timeline ranges from 15 minutes (instant auto-pass for low-risk verticals like OTP) to 7–14 days if TCR flags you for manual review. During review, your messages queue; they do not bounce. Once approved, your TCR vetting score begins at 100 and decays based on carrier complaints, abuse reports, and spam trap hits. Each complaint or STOP-request violation costs 1–10 points depending on severity. Below 70, carriers throttle you. Below 50, throttling becomes severe (1–2 TPS). Below 30, suspension and re-vetting are likely.
Cost is the primary advantage: 10DLC sender IDs for the US market start around $1–$3 per number per month, making multi-number deployments feasible for high-volume senders. You can provision 5–50 numbers under one brand if your compliance is clean, spreading reputation risk and maximizing throughput. However, maintaining multiple registrations means multiple compliance surfaces: each number has its own vetting score, and a violation on one can trigger carrier review of all.
Toll-free verified: the dark horse with 3 TPS unthrottled
Toll-free A2P (numbers like 833, 844, 855, 866, 877, 888) was relegated to voice and call centers for decades. Around 2022–2023, US carriers opened toll-free to A2P SMS as an alternative to congested 10DLC corridors. The appeal: toll-free numbers are less common for spam (lower historical complaint volume), so they start with cleaner reputation. Carriers grant them 3 messages per second by default, without throttling, even if your brand is new. For senders with unpredictable volume spikes or testing new messaging, this is valuable.
Toll-free registration is simpler than 10DLC. You provide brand ownership proof, phone number, and use-case description to the carrier or a compliance vendor (like Sinch, Netcentrex, or Bandwidth). Approval is usually 24–48 hours. Vetting scores apply the same way as 10DLC, but your starting reputation is higher because the number itself has less spam history. A carrier complaint still costs you points, but you have more cushion before hitting throttling thresholds.
The drawback: toll-free SMS delivery is less mature. Not all carriers' networks prioritize toll-free the same way; AT&T and Verizon treat it as a secondary route. Complaints about toll-free blocking are more common in user forums than 10DLC complaints, suggesting less network optimization. For critical use cases like two-factor authentication and account recovery, 10DLC remains the carrier-preferred path. Toll-free shines for marketing and promotional messaging where slight delivery variance is acceptable and sender novelty is an asset.
Shortcode: expensive but premium (you keep the brand)
A shortcode is a 5–6 digit number rented from the carrier or a lease broker (like Twilio, Sinch, or Telnyx). Unlike 10DLC and toll-free, which are shared-use numbers, a shortcode is dedicated: your brand name is registered as its sole sender or one of a small approved pool. End users see the same number repeatedly, building recognition and trust. Shortcodes cost $500–$1,200 per month, plus per-message rates. For a small deployment sending 50,000 messages/month, that's $0.005–$0.01 per message before capacity. Not worth it. For 5 million messages/month, it breaks to $0.0001–$0.0003 per message pure overhead—competitive with 10DLC's message rates, and your brand ID is locked in.
Shortcodes carry the strongest vetting because they are visible and attributable. A shortcode tied to fraud or complaints is immediately deprioritized and can lose provisioning. But if kept clean, shortcodes have the highest delivery rates (99.9%+ first-attempt) and the lowest carrier throttling risk. Shortcodes are the choice for loyalty programs, subscription renewals, and financial alerts where the sender identity must be recognizable every time. The premium is paid for consistent brand presence and premium treatment by carrier networks.
Provisioning a shortcode requires a commitment. Most carriers impose 6–12 month minimum leases. If you need to migrate senders or change messaging strategy mid-term, you're stuck paying. Regulatory risk also concentrates: if a shortcode is suspended for violations, recovering it is harder than abandoning a 10DLC number and registering a new one.
TCR brand vetting: 0-100 trust score and what it unlocks
The TCR vetting score is the invisible gating function. It determines your baseline TPS, carrier routing priority, and whether messages are examined for spam triggers before transmission. A score of 100 is a new registration with no history. A score of 70+ unlocks the full 3 TPS or higher for 10DLC; 70–50 range drops you to 0.5–2 TPS depending on carrier; below 50, you're at 1 TPS or less. Below 30, expect warnings and audits.
Score decay is driven by complaint sources: STOP request violations (highest impact, -10 to -50 per incident), spam trap hits (-5 to -15), carrier abuse complaints from end users (-2 to -5 per complaint), and content flagging by keyword filters (-1 to -2 per message). A single major violation can take you from 95 to 70 in one batch. Recovery is manual: you must update your TCR registration, adjust messaging templates, and wait 30–60 days for carriers to rescan your history.
What does a high score unlock? Beyond pure TPS, it unlocks carrier discretion for retry logic. Messages from senders with scores below 70 are often not retried if first delivery fails; above 70, carriers retry for up to 72 hours. For time-sensitive campaigns like 2FA, this means the difference between 99.5% and 97% delivery. It also affects inbound routing: replies to SMS from high-score senders are prioritized in carrier systems, so two-way messaging is more reliable.
Sole-proprietor campaigns: the 1,000-msg/day ceiling
If you register a 10DLC under your personal SSN (sole proprietor, no business entity), carriers impose a soft ceiling of 1,000 messages per day as a baseline. This is not a hard block—messages won't bounce at 1,001. Instead, a sustained pattern of exceeding 1,000/day triggers carrier manual review. If they see legitimate business use (e.g., a freelance consultant sending password resets to clients), they may upgrade your registration to allow higher volume. If they see patterns consistent with spam or rapid-fire blasting, they flag your account for investigation.
To unlock higher volume without the 1,000/day review trigger, register as an LLC or S-Corp and provide an EIN. Most carriers then remove the ceiling and allow you to scale based on your TCR vetting score and use case. The registration process is slightly longer (3–7 days), but the upside is regulatory clarity: a business entity is held to explicit terms and conditions, whereas sole proprietor accounts are treated as exceptions and reviewed more aggressively for edge-case behavior.
If you are bootstrapping or testing a use case, the 1,000/day limit is often a feature, not a bug: it forces you to run lean, monitor quality metrics, and avoid the reputation damage of a high-volume blast before you've optimized copy and targeting. Once you've proven the business and compliance, formalize the entity and re-register. smsroute does not require KYC at signup, so you can begin testing any sender type immediately; formal registration with carriers is the step that introduces business verification.
Frequently asked questions
Can I mix 10DLC, toll-free, and shortcode in a single campaign?
Technically yes—most carriers allow it. However, it fractures your sender reputation scoring. If you send authentication codes from 10DLC (high volume, rapid fire) and promotional offers from the same brand via shortcode, the carriers track them separately. TCR registrations are tied to sender phone numbers, not brands, so mixing types can trigger duplicate compliance reviews and slower remediation if one sender violates terms. Best practice: one sender type per use case, or use the same sender ID consistently.
What happens if my TCR brand vetting score drops below 50?
Below 50, carriers begin throttling outbound traffic—typically capping you at 1–2 TPS even on a high-capacity 10DLC number. This is a soft limit, not an automatic block, but it persists until you improve compliance. Ways to recover: validate and update your business identity in TCR, adjust messaging templates to reduce complaint-triggering language, monitor STOP requests and honor them in real time, and reduce velocity if you're in a high-spam-like vertical. Scores can take 30–60 days to recover after remediation.
Is toll-free SMS verification as secure as 10DLC for 2FA?
From a carrier perspective, yes—both have identity verification and are monitored by the same anti-fraud networks. The difference is reputation: toll-free has fewer compliance fingerprints than 10DLC because it's a newer channel for A2P. This means fewer historical complaints about the number, but also fewer data points to build trust. For 2FA specifically, toll-free is good if you have moderate volume (under 1 million codes/month) or unpredictable spikes; 10DLC is better for steady-state authentication at scale because optimization is more granular.
Why would I pay shortcode rates if 10DLC is cheaper?
Brand continuity and inbox placement. A shortcode is rented exclusively to your brand (or shared within your organization), so end-users see a consistent 5–6 digit number every time. This creates pattern recognition and trust. 10DLC numbers rotate or are shared with other senders, so inboxes can't build muscle memory. For high-value sectors like financial services, healthcare, or loyalty programs where repeat messaging is key, shortcode's premium cost ($500–$1,200/month) pays back in better engagement and lower unsubscribe rates.
Can sole proprietors register for 10DLC, or only businesses with EINs?
Sole proprietors can register, but with guardrails. Most TCR registration systems accept a Social Security Number (SSN) or ITIN in lieu of an EIN. However, sole proprietor 10DLC numbers are typically throttled to 1,000 messages/day as a baseline by the carriers. To exceed that ceiling, you must upgrade your business type to an LLC or S-Corp and provide an EIN. This is a soft cap, not a technical one—messages won't bounce, but sustained high volume will trigger manual carrier review and possible suspension if your vetting score is below 70.
If I'm outside the US, do I still need to pick between 10DLC, toll-free, and shortcode?
No. These three options are US-only. If you're sending SMS internationally to the US, you route through one of these three inbound. If you're sending from outside the US to other countries, you use local sender types: alphanumeric sender IDs in Europe, registered commercial numbers in India, et cetera. smsroute supports 149 countries with localized compliance—pick the appropriate sender type for your destination market, not your origin.
Can I mix 10DLC, toll-free, and shortcode in a single campaign?
Technically yes—most carriers allow it. However, it fractures your sender reputation scoring. If you send authentication codes from 10DLC (high volume, rapid fire) and promotional offers from the same brand via shortcode, the carriers track them separately. TCR registrations are tied to sender phone numbers, not brands, so mixing types can trigger duplicate compliance reviews and slower remediation if one sender violates terms. Best practice: one sender type per use case, or use the same sender ID consistently.
What happens if my TCR brand vetting score drops below 50?
Below 50, carriers begin throttling outbound traffic—typically capping you at 1–2 TPS even on a high-capacity 10DLC number. This is a soft limit, not an automatic block, but it persists until you improve compliance. Ways to recover: validate and update your business identity in TCR, adjust messaging templates to reduce complaint-triggering language, monitor STOP requests and honor them in real time, and reduce velocity if you're in a high-spam-like vertical. Scores can take 30–60 days to recover after remediation.
Is toll-free SMS verification as secure as 10DLC for 2FA?
From a carrier perspective, yes—both have identity verification and are monitored by the same anti-fraud networks. The difference is reputation: toll-free has fewer compliance fingerprints than 10DLC because it's a newer channel for A2P. This means fewer historical complaints about the number, but also fewer data points to build trust. For 2FA specifically, toll-free is good if you have moderate volume (under 1 million codes/month) or unpredictable spikes; 10DLC is better for steady-state authentication at scale because optimization is more granular.
Why would I pay shortcode rates if 10DLC is cheaper?
Brand continuity and inbox placement. A shortcode is rented exclusively to your brand (or shared within your organization), so end-users see a consistent 5–6 digit number every time. This creates pattern recognition and trust. 10DLC numbers rotate or are shared with other senders, so inboxes can't build muscle memory. For high-value sectors like financial services, healthcare, or loyalty programs where repeat messaging is key, shortcode's premium cost ($500–$1,200/month) pays back in better engagement and lower unsubscribe rates.
Can sole proprietors register for 10DLC, or only businesses with EINs?
Sole proprietors can register, but with guardrails. Most TCR registration systems accept a Social Security Number (SSN) or ITIN in lieu of an EIN. However, sole proprietor 10DLC numbers are typically throttled to 1,000 messages/day as a baseline by the carriers. To exceed that ceiling, you must upgrade your business type to an LLC or S-Corp and provide an EIN. This is a soft cap, not a technical one—messages won't bounce, but sustained high volume will trigger manual carrier review and possible suspension if your vetting score is below 70.
If I'm outside the US, do I still need to pick between 10DLC, toll-free, and shortcode?
No. These three options are US-only. If you're sending SMS internationally to the US, you route through one of these three inbound. If you're sending from outside the US to other countries, you use local sender types: alphanumeric sender IDs in Europe, registered commercial numbers in India, et cetera. smsroute supports 149 countries with localized compliance—pick the appropriate sender type for your destination market, not your origin.
Can I mix 10DLC, toll-free, and shortcode in a single campaign?
Technically yes—most carriers allow it. However, it fractures your sender reputation scoring. If you send authentication codes from 10DLC (high volume, rapid fire) and promotional offers from the same brand via shortcode, the carriers track them separately. TCR registrations are tied to sender phone numbers, not brands, so mixing types can trigger duplicate compliance reviews and slower remediation if one sender violates terms. Best practice: one sender type per use case, or use the same sender ID consistently.
What happens if my TCR brand vetting score drops below 50?
Below 50, carriers begin throttling outbound traffic—typically capping you at 1–2 TPS even on a high-capacity 10DLC number. This is a soft limit, not an automatic block, but it persists until you improve compliance. Ways to recover: validate and update your business identity in TCR, adjust messaging templates to reduce complaint-triggering language, monitor STOP requests and honor them in real time, and reduce velocity if you're in a high-spam-like vertical. Scores can take 30–60 days to recover after remediation.
Is toll-free SMS verification as secure as 10DLC for 2FA?
From a carrier perspective, yes—both have identity verification and are monitored by the same anti-fraud networks. The difference is reputation: toll-free has fewer compliance fingerprints than 10DLC because it's a newer channel for A2P. This means fewer historical complaints about the number, but also fewer data points to build trust. For 2FA specifically, toll-free is good if you have moderate volume (under 1 million codes/month) or unpredictable spikes; 10DLC is better for steady-state authentication at scale because optimization is more granular.
Why would I pay shortcode rates if 10DLC is cheaper?
Brand continuity and inbox placement. A shortcode is rented exclusively to your brand (or shared within your organization), so end-users see a consistent 5–6 digit number every time. This creates pattern recognition and trust. 10DLC numbers rotate or are shared with other senders, so inboxes can't build muscle memory. For high-value sectors like financial services, healthcare, or loyalty programs where repeat messaging is key, shortcode's premium cost ($500–$1,200/month) pays back in better engagement and lower unsubscribe rates.
Can sole proprietors register for 10DLC, or only businesses with EINs?
Sole proprietors can register, but with guardrails. Most TCR registration systems accept a Social Security Number (SSN) or ITIN in lieu of an EIN. However, sole proprietor 10DLC numbers are typically throttled to 1,000 messages/day as a baseline by the carriers. To exceed that ceiling, you must upgrade your business type to an LLC or S-Corp and provide an EIN. This is a soft cap, not a technical one—messages won't bounce, but sustained high volume will trigger manual carrier review and possible suspension if your vetting score is below 70.
If I'm outside the US, do I still need to pick between 10DLC, toll-free, and shortcode?
No. These three options are US-only. If you're sending SMS internationally to the US, you route through one of these three inbound. If you're sending from outside the US to other countries, you use local sender types: alphanumeric sender IDs in Europe, registered commercial numbers in India, et cetera. smsroute supports 149 countries with localized compliance—pick the appropriate sender type for your destination market, not your origin.
Can I mix 10DLC, toll-free, and shortcode in a single campaign?
Technically yes—most carriers allow it. However, it fractures your sender reputation scoring. If you send authentication codes from 10DLC (high volume, rapid fire) and promotional offers from the same brand via shortcode, the carriers track them separately. TCR registrations are tied to sender phone numbers, not brands, so mixing types can trigger duplicate compliance reviews and slower remediation if one sender violates terms. Best practice: one sender type per use case, or use the same sender ID consistently.
What happens if my TCR brand vetting score drops below 50?
Below 50, carriers begin throttling outbound traffic—typically capping you at 1–2 TPS even on a high-capacity 10DLC number. This is a soft limit, not an automatic block, but it persists until you improve compliance. Ways to recover: validate and update your business identity in TCR, adjust messaging templates to reduce complaint-triggering language, monitor STOP requests and honor them in real time, and reduce velocity if you're in a high-spam-like vertical. Scores can take 30–60 days to recover after remediation.
Is toll-free SMS verification as secure as 10DLC for 2FA?
From a carrier perspective, yes—both have identity verification and are monitored by the same anti-fraud networks. The difference is reputation: toll-free has fewer compliance fingerprints than 10DLC because it's a newer channel for A2P. This means fewer historical complaints about the number, but also fewer data points to build trust. For 2FA specifically, toll-free is good if you have moderate volume (under 1 million codes/month) or unpredictable spikes; 10DLC is better for steady-state authentication at scale because optimization is more granular.
Why would I pay shortcode rates if 10DLC is cheaper?
Brand continuity and inbox placement. A shortcode is rented exclusively to your brand (or shared within your organization), so end-users see a consistent 5–6 digit number every time. This creates pattern recognition and trust. 10DLC numbers rotate or are shared with other senders, so inboxes can't build muscle memory. For high-value sectors like financial services, healthcare, or loyalty programs where repeat messaging is key, shortcode's premium cost ($500–$1,200/month) pays back in better engagement and lower unsubscribe rates.
Can sole proprietors register for 10DLC, or only businesses with EINs?
Sole proprietors can register, but with guardrails. Most TCR registration systems accept a Social Security Number (SSN) or ITIN in lieu of an EIN. However, sole proprietor 10DLC numbers are typically throttled to 1,000 messages/day as a baseline by the carriers. To exceed that ceiling, you must upgrade your business type to an LLC or S-Corp and provide an EIN. This is a soft cap, not a technical one—messages won't bounce, but sustained high volume will trigger manual carrier review and possible suspension if your vetting score is below 70.
If I'm outside the US, do I still need to pick between 10DLC, toll-free, and shortcode?
No. These three options are US-only. If you're sending SMS internationally to the US, you route through one of these three inbound. If you're sending from outside the US to other countries, you use local sender types: alphanumeric sender IDs in Europe, registered commercial numbers in India, et cetera. smsroute supports 149 countries with localized compliance—pick the appropriate sender type for your destination market, not your origin.
Can I mix 10DLC, toll-free, and shortcode in a single campaign?
Technically yes—most carriers allow it. However, it fractures your sender reputation scoring. If you send authentication codes from 10DLC (high volume, rapid fire) and promotional offers from the same brand via shortcode, the carriers track them separately. TCR registrations are tied to sender phone numbers, not brands, so mixing types can trigger duplicate compliance reviews and slower remediation if one sender violates terms. Best practice: one sender type per use case, or use the same sender ID consistently.
What happens if my TCR brand vetting score drops below 50?
Below 50, carriers begin throttling outbound traffic—typically capping you at 1–2 TPS even on a high-capacity 10DLC number. This is a soft limit, not an automatic block, but it persists until you improve compliance. Ways to recover: validate and update your business identity in TCR, adjust messaging templates to reduce complaint-triggering language, monitor STOP requests and honor them in real time, and reduce velocity if you're in a high-spam-like vertical. Scores can take 30–60 days to recover after remediation.
Is toll-free SMS verification as secure as 10DLC for 2FA?
From a carrier perspective, yes—both have identity verification and are monitored by the same anti-fraud networks. The difference is reputation: toll-free has fewer compliance fingerprints than 10DLC because it's a newer channel for A2P. This means fewer historical complaints about the number, but also fewer data points to build trust. For 2FA specifically, toll-free is good if you have moderate volume (under 1 million codes/month) or unpredictable spikes; 10DLC is better for steady-state authentication at scale because optimization is more granular.
Why would I pay shortcode rates if 10DLC is cheaper?
Brand continuity and inbox placement. A shortcode is rented exclusively to your brand (or shared within your organization), so end-users see a consistent 5–6 digit number every time. This creates pattern recognition and trust. 10DLC numbers rotate or are shared with other senders, so inboxes can't build muscle memory. For high-value sectors like financial services, healthcare, or loyalty programs where repeat messaging is key, shortcode's premium cost ($500–$1,200/month) pays back in better engagement and lower unsubscribe rates.
Can sole proprietors register for 10DLC, or only businesses with EINs?
Sole proprietors can register, but with guardrails. Most TCR registration systems accept a Social Security Number (SSN) or ITIN in lieu of an EIN. However, sole proprietor 10DLC numbers are typically throttled to 1,000 messages/day as a baseline by the carriers. To exceed that ceiling, you must upgrade your business type to an LLC or S-Corp and provide an EIN. This is a soft cap, not a technical one—messages won't bounce, but sustained high volume will trigger manual carrier review and possible suspension if your vetting score is below 70.
If I'm outside the US, do I still need to pick between 10DLC, toll-free, and shortcode?
No. These three options are US-only. If you're sending SMS internationally to the US, you route through one of these three inbound. If you're sending from outside the US to other countries, you use local sender types: alphanumeric sender IDs in Europe, registered commercial numbers in India, et cetera. smsroute supports 149 countries with localized compliance—pick the appropriate sender type for your destination market, not your origin.