FCC Revises TCPA Consent-Revocation Rules: What Businesses Should Know Before November 25, 10-30-2026

Businesses that use automated calls and text messages to communicate with customers should review their consent-revocation procedures ahead of November 25, 2026, when revised rules under the Telephone Consumer Protection Act (TCPA) take effect.

The Federal Communications Commission (FCC) published its final rule in the Federal Register on October 26, 2026, easing certain restrictions on how businesses handle requests to stop automated communications. The changes allow businesses to honor more targeted opt-out requests, designate specific methods for withdrawing consent and provide financial institutions with greater flexibility to send certain fraud-related alerts.

The November 25 effective date replaces the previously scheduled January 31, 2027 implementation date for portions of the FCC’s earlier consent-revocation requirements.

Background

Under the TCPA, businesses generally must obtain appropriate consent before making certain automated or prerecorded calls or sending certain automated text messages. Consumers also have the right to withdraw that consent.

The FCC previously adopted rules requiring businesses to process revocation requests made through any reasonable method. Under that framework, a request to stop one category of informational communications generally would have been treated as withdrawing consent for other categories. The revised rules address concerns that this approach could prevent consumers from receiving important messages they still wanted.

What Is Changing?

Opt-Out Requests No Longer Necessarily Apply to All Informational Messages

The revised rules permit businesses to interpret a consumer’s revocation request as applying only to the category of informational calls or texts to which the request was directed, rather than automatically extending it to all categories.

For example, a customer who opts out of automated payment reminders may continue receiving unrelated fraud alerts, appointment reminders or account security notifications.

This change applies only to informational communications. Requests to stop automated calls or texts containing advertising or constituting telemarketing continue to revoke consent for all future automated advertising or telemarketing communications from that caller.

Businesses Can Designate Exclusive Methods for Revoking Consent

Under the earlier framework, businesses were required to honor consent-revocation requests submitted through any reasonable method, even if they preferred a different process.

The revised rules allow businesses to designate certain exclusive opt-out methods, including:

• Automated telephone opt-out mechanisms;
• Standardized text-message responses, such as replying “STOP”; or
• A designated website or telephone number.

Businesses must clearly and conspicuously disclose their designated method in the call or text. Text senders designating a reply text as their exclusive opt-out method may disclose a single standardized keyword, such as “STOP,” but must honor requests using any of the FCC-recognized standardized keywords.

Businesses that designate one of these authorized exclusive methods are not required under the revised rule to process revocation requests submitted through other means. Those that do not designate an exclusive method must continue honoring requests made through any reasonable means. Existing opt-out requirements for certain exempt calls and telemarketing communications remain in place.

Financial Institutions Have More Flexibility to Send Fraud Alerts

Previously, financial institutions relying on a TCPA exemption for certain informational calls and texts to wireless numbers generally were limited to numbers provided directly by customers.

The revised rules allow financial institutions to use wireless telephone numbers obtained from specified reliable sources, including a spouse or other family member authorized on the account, a number obtained when a customer calls the institution, or records received from another financial institution.

This change facilitates communications concerning suspected fraud, identity theft and other matters covered by the existing exemption. Financial institutions must still comply with the exemption’s conditions, including limits on communications and requirements to honor opt-out requests.

What Businesses Should Consider

Although the revisions impose no new compliance obligations, businesses should review how they distinguish informational from marketing communications, process category-specific opt-outs and disclose designated revocation methods. Those using third-party calling or messaging vendors should ensure their systems can accurately implement and document customer preferences.

Consent-revocation requests generally must be honored within a reasonable time, not exceeding 10 business days; opt-outs under the financial-institution exemption must be honored immediately. Existing TCPA consent requirements and other restrictions on automated communications remain in place.

Authors: 

Richard J. Perr
Monica M. Littman
Graeme E. Hogan
Shera Anderson
Anna M. Holloway
Kristen Hacker
Dominic Borelli
Samuel Sjosten