Rejected by carriers? The website is one of the most common reasons. Fix it today →
A2P 10DLC · Website requirements

What website do I need for 10DLC approval?

Quick answer

You need a live, public website that clearly belongs to the same business you registered. It should have a privacy policy that says you do not share mobile numbers for marketing, SMS terms, a compliant opt-in form, contact details, real business pages, and HTTPS. Reviewers check these before approving your campaign.

You submit your own 10DLC registration · No one can guarantee campaign approval

The checklist

What reviewers check on your website

Each item has its own page with the exact wording, the provider rules behind it and what a reviewer sees.

Can I use a parked or under construction website for 10DLC?

Why parked, for-sale, under construction, login-only, and redirecting websites get 10DLC campaigns rejected, and what to do before you submi...

Read the requirement →

Does my 10DLC website need SSL and HTTPS?

Why your 10DLC website and links should use HTTPS: Plivo requires SSL, and Twilio flags http links in samples and wants an https terms URL.

Read the requirement →

Does my website have to match my 10DLC brand name?

Why your website, legal name, DBA, domain, and email must line up for A2P 10DLC, and how Twilio and Plivo check brand name matches.

Read the requirement →

What contact information does my website need for 10DLC?

What business contact info reviewers look for on a 10DLC website: business name, email on your domain, phone, services, and a Contact Us pag...

Read the requirement →

What does a 10DLC privacy policy need to say?

What your privacy policy must say for A2P 10DLC approval: the no-sharing SMS clause, frequency and rates, one policy only, plus sample langu...

Read the requirement →

What does a compliant 10DLC opt-in form look like?

How to build an SMS opt-in form reviewers accept: unchecked checkbox, optional consent, disclosure next to the box, privacy and terms links....

Read the requirement →

What pages does a 10DLC website need?

The pages reviewers expect on a 10DLC website: About Us, Contact Us, Terms, Privacy, services, and your texting use case. No form-only landi...

Read the requirement →

What should SMS terms and conditions include for 10DLC?

What SMS terms need for A2P 10DLC: program name, message types, frequency, rates, HELP, STOP, and a public https page. Includes sample terms...

Read the requirement →

When you register an A2P 10DLC campaign, your messaging provider sends it to The Campaign Registry (TCR) and on to carriers for review. Someone, or an automated check, opens your website. Twilio says TCR runs automated verification that captures a screenshot of your site. If the site is down, parked, behind a login, or shows a different business name, the campaign can be rejected. If the privacy policy, SMS terms, or opt-in form is missing or weak, it can be rejected too. The good news: the rules are published, and they are mostly the same across providers.

10DLC Site builds carrier-ready websites for A2P 10DLC registration.

Key facts at a glance

Question Answer Source
Who reviews my campaign? Your provider (the CSP), TCR, carriers, and vetting partners such as Aegis Mobile and WMC TCR CSP User Guide
What URLs do I submit? Homepage, privacy policy, terms and conditions, and your opt-in page (in the message flow) Twilio, Telnyx, Vonage
What is now required at Twilio? Privacy policy URL and terms URL for new API campaign submissions after June 30, 2026 Twilio changelog
How many sample messages? At least 1 and up to 5 in TCR; Marketing and Mixed need at least 2. Twilio asks for 2 to 5 TCR, Twilio
Campaign vetting fee $15 per vetting event (Vonage), $15 when sent for carrier review (Telnyx), $15 (Plivo) Vonage, Telnyx, Plivo
Brand registration fee $4.50 one time (Plivo, Vonage) Plivo, Vonage
Monthly campaign fee $10 for most standard use cases; Low Volume Mixed $1.50 (Plivo, Vonage) Plivo, Vonage
How long does review take? Twilio: several days, currently 10 to 15 days. Telnyx: about 72 business hours after Telnyx approval. SignalWire: 3 to 5 business days Twilio, Telnyx, SignalWire

Fees and timelines change. Always check your own provider's current page.

What are the 8 website requirements for 10DLC?

Each item below has its own page with sample language, checklists, and common mistakes.

  1. Privacy policy. One clear, public policy that says mobile numbers and SMS opt-in data are not shared with or sold to third parties or affiliates for marketing. Twilio, Telnyx, Bandwidth, Vonage, and Plivo all ask for this.
  2. SMS terms. Your program name, what messages you send, how often, "Message and data rates may apply", HELP, and STOP instructions.
  3. Opt-in form. A separate SMS consent checkbox, unchecked by default, not required to submit the form, with the disclosure right next to it.
  4. Brand name match. The site must show the same business you registered. Twilio rejects sites that don't match the brand.
  5. Business contact info. Business name, contact details, and services, so a reviewer can tell who you are.
  6. SSL and HTTPS. Plivo requires HTTPS. Twilio wants an https terms URL and flags unsecured links in sample messages.
  7. Real content pages. A real business site, not a lone lead form. Plivo lists About Us, Contact Us, Terms, and Privacy pages.
  8. No parked or unfinished sites. No parked, for-sale, under construction, login-only, or redirecting pages.

Why do carriers care about my website?

Carriers want to know a real business is sending the texts, and that people agreed to get them. CTIA's Messaging Principles ask senders to get consent, show a clear privacy policy, and make opt-in terms easy to find. Your website is where a reviewer checks all of that. The Campaign Registry says it is "not a compliance house" and points to CTIA guidance, so the details come from CTIA and from each provider.

What changed in 2025 and 2026?

The rules got stricter and more specific. Here is what the sources show:

  • January 13, 2025: Vonage began requiring a reseller ID on campaigns.
  • January 29, 2025: Bandwidth added Privacy Policy and Terms and Conditions fields to campaign registration (optional at that time).
  • 2025: Vonage made website information required for all brands except sole proprietors, and added a "URL Samples" list for links in your messages.
  • July 15, 2025: Vonage lists a $15 campaign vetting fee per vetting event, charged again for each re-vet.
  • August 7, 2025: Vonage lists Authentication Plus at $12.50.
  • February 17, 2026: Twilio began requiring a business registration number (EIN in the US) for new toll-free verification submissions, except sole proprietors. This is toll-free, not 10DLC, but many businesses use both.
  • February 18, 2026: Twilio's Console added dedicated Privacy Policy URL and Terms and Conditions URL fields. Before, that information went inside the message flow text.
  • June 30, 2026: Twilio made both URLs required for new A2P 10DLC campaign submissions via the API. Campaigns without them are rejected. Existing campaigns are not affected.
  • 2026: Twilio publishes many specific website and opt-in rejection codes (30919 to 30934). Telnyx's 2026 guide says verbal opt-in for marketing, political, and charity campaigns now needs double opt-in.

What URLs do I paste into my provider's form?

Most providers ask for the same four links. Field names differ a little.

What Example Where it goes
Homepage https://yourbusiness.com Website field on the brand or campaign
Privacy policy https://yourbusiness.com/privacy Privacy Policy URL field
Terms (with SMS terms) https://yourbusiness.com/terms Terms and Conditions URL field
Opt-in page https://yourbusiness.com/contact Message flow or call-to-action description

A few tips from the sources:

  • Twilio says the terms page must be on the same domain as your website, public, and https.
  • Twilio's message flow field takes 40 to 2,049 characters. Telnyx allows 40 to 2,048. List every way people opt in.
  • If your form is behind a login, Twilio and Vonage ask for public screenshots at a link instead.

Step-by-step guides by provider:

What happens if my site is rejected?

You get a rejection reason, fix it, and resubmit. Your provider shows the reason. Twilio uses numbered error codes, and Plivo shows an error code and reason on rejected campaigns. Twilio says to edit the rejected campaign instead of deleting it.

Resubmission costs are different at each provider. Twilio says it charges the vetting fee once per campaign, so resubmitting the same campaign adds no new fee. Vonage charges $15 for each vetting event. Bandwidth and Telnyx describe a $15 fee on resubmission. Check your provider before you resubmit.

Find your rejection reason:

Can a website promise approval?

No one can guarantee approval. Carriers and their vetting partners make the final call, and they look at more than your site: your brand details, sample messages, use case, and message flow all count. A compliant website removes one big set of reasons to reject you. It does not promise the result. Be careful with anyone who says otherwise.

Sources

Not sure if your current site passes? Run the free site check. Want all eight requirements built for you on a new .com in about 15 minutes? See pricing.

If you were already rejected

Start from the exact reason your provider gave you, fix it on your site, then edit and resubmit the same campaign.

Why was my 10DLC campaign rejected because sample messages do not match?

10DLC sample messages must match your use case, name your brand, and avoid public link shorteners. See why they fail, wi...

Why was my 10DLC campaign rejected because the opt-in could not be verified?

If reviewers cannot see how people agree to your texts, your 10DLC campaign gets rejected. Learn what proof they need an...

Why was my 10DLC campaign rejected because the website is not accessible?

Reviewers must open your site with no login, no errors, and no redirects. Learn why 'website not accessible' 10DLC rejec...

Why was my 10DLC campaign rejected for 'website does not match brand'?

Your 10DLC website must show the same business you registered. Learn why the 'website does not match brand' rejection ha...

Why was my 10DLC campaign rejected for a privacy policy that is missing SMS language?

A 10DLC privacy policy needs a clear SMS no-sharing clause. See why campaigns get rejected for it, a sample clause, and...

Why was my 10DLC campaign rejected for an under construction or parked website?

Parked, for-sale, and coming-soon pages cannot pass 10DLC review. See why they get rejected, what counts as a real site,...

Why was my 10DLC campaign rejected for missing SMS terms and conditions?

10DLC campaigns need public SMS terms on your own domain. Learn why missing terms cause rejection, what to include, and...

Why was my 10DLC campaign rejected for missing business contact information?

10DLC reviewers need to see who runs your site and how to reach you. Learn why missing contact info causes rejections an...

Skip the checklist

We build the whole list for you

A new .com with hosting, SSL, a privacy policy that covers SMS, SMS terms, a compliant opt-in form and real business pages, live in about 15 minutes, then checked every day. You submit your own registration through your provider.

Get my website: $149 →

One-time price · 14-day money-back guarantee

Frequently asked questions

Do I need a website to register a 10DLC campaign?

For most businesses, yes. Vonage says website information became required for all brands except sole proprietors in 2025, and Twilio rejects campaigns when the site is unreachable, parked, or behind a login. Some providers, like Telnyx and Bandwidth, say a social media or business profile link may work if you have no site.

What URLs do I paste into my 10DLC campaign form?

You usually paste four URLs: your homepage, your privacy policy, your terms (with SMS terms), and the page with your opt-in form. The homepage goes in the website field, the policy and terms go in their own fields, and the opt-in page link goes in your message flow or call-to-action description.

Are privacy policy and terms URLs required now?

At Twilio, yes, for new campaigns. Twilio says new A2P 10DLC campaigns submitted through the API after June 30, 2026 without a privacy policy URL and a terms and conditions URL are rejected. The Campaign Registry lists those link fields as optional in its own system but says a compliant policy and terms are required.

Can anyone guarantee my 10DLC campaign will be approved?

No. Carriers, The Campaign Registry, and their vetting partners make the final decision, and no website builder or provider can promise the outcome. What you can do is meet the published website requirements so the reviewer has nothing on your site to flag.

How long does 10DLC campaign review take?

It depends on the provider. Twilio's quickstart says campaigns typically take several days and currently 10 to 15 days, and Twilio says standard campaigns can take up to several weeks. Telnyx says carrier review is typically 72 business hours after Telnyx approves it. SignalWire says 3 to 5 business days overall.

What does a 10DLC privacy policy need to say?

What your privacy policy must say for A2P 10DLC approval: the no-sharing SMS clause, frequency and rates, one policy only, plus sa...

What does a compliant 10DLC opt-in form look like?

How to build an SMS opt-in form reviewers accept: unchecked checkbox, optional consent, disclosure next to the box, privacy and te...

Does my website have to match my 10DLC brand name?

Why your website, legal name, DBA, domain, and email must line up for A2P 10DLC, and how Twilio and Plivo check brand name matches...

What website URLs do I need for 10DLC registration with any provider?

The four website URLs every 10DLC registration uses: homepage, privacy policy, terms, and opt-in page. The TCR field model plus a...

Why was my 10DLC campaign rejected for 'website does not match brand'?

Your 10DLC website must show the same business you registered. Learn why the 'website does not match brand' rejection happens and...

Frequently asked questions

Straight answers about 10DLC websites, timing, renewals and refunds.

Carrier-ready website: $149Get started