SMS list collected without TCPA-compliant double opt-in
TCPA compliance for commercial SMS in the US requires express written consent that is specific to the SMS channel — bundled consent covering both email and SMS in a single checkbox does not satisfy the requirement. The standard Shopify checkout SMS opt-in, if not configured with a double opt-in confirmation, may not meet the TCPA standard. The consequence of non-compliant SMS collection is $500 to $1,500 per message fines, and class action exposure under the TCPA is significant. Before adding SMS to any lifecycle flow, the consent collection method needs to be reviewed and, if necessary, rebuilt with a TCPA-compliant double opt-in confirmation step.