NevTan Engage is a customer engagement platform that lets you create automated email, push, SMS, and WhatsApp journeys, segment audiences, and deliver personalized campaigns powered by unified customer data.
When you start building an SMS strategy you hit a fork almost immediately: is this message transactional or promotional? The answer determines what consent you need, when you're allowed to send, how the message is routed, and whether you're exposed to statutory penalties. Get it wrong in one direction and you look like a spammer. Get it wrong in the other and you can face fines measured per message.
This guide covers the actual definitions, the regulatory boundaries in major markets, and the practical rules for running both message types safely.
⚡ TL;DR: Transactional SMS fulfils something the user initiated — an OTP, an order update, an appointment reminder. Promotional SMS is marketing you decided to send. Transactional messages still require consent in most jurisdictions, just a lower standard than the express written consent marketing demands. The single rule that matters most: never put promotional content in a transactional message. One coupon code in a delivery notification reclassifies the entire message and voids the exemption you were relying on.
What Actually Makes a Message Transactional
The distinction is about causation, not tone or format.
A message is transactional when it exists because the recipient took a specific action: they placed an order, requested a password reset, booked an appointment, or triggered a security event. The message completes something they started.
A message is promotional when it exists because you decided to send it. The recipient didn't ask for it at that moment, however welcome it might be.
Transactional | Promotional | |
|---|---|---|
Cause | User action | Your campaign calendar |
Consent standard | Prior express consent (lower bar) | Prior express written consent (US marketing standard) |
Content rule | Strictly informational | Marketing permitted |
Opt-out | Must be honoured; practice varies by market | Required in every message |
Timing limits | Generally exempt — an OTP must arrive now | Quiet hours enforced |
Typical examples | OTP, order confirmation, shipping update, appointment reminder, fraud alert | Sale announcement, new product launch, abandoned cart offer, win-back |
The critical nuance most guides get wrong: transactional does not mean consent-free. In the US, informational texts still require prior express consent — typically satisfied when a customer gives you their mobile number in the course of a transaction. What transactional messages are exempt from is the higher prior express written consent standard that marketing requires. Those are different thresholds, not the presence and absence of one.
The Line You Must Not Cross
This is the most expensive mistake in SMS marketing, and it's easy to make with good intentions.
Your shipping notification is performing well. Someone suggests adding "Take 10% off your next order with code SHIP10." It seems harmless — the customer is already engaged, the offer is relevant.
That single line reclassifies the message. It is now promotional, which means it required prior express written consent you may not have, and it must carry opt-out language it probably doesn't. You have converted a compliant message into a non-compliant one, at scale, across every order you ship.
Keep the transaction pure. If you want to promote, send a separate message to subscribers who consented to promotional contact — which is exactly the kind of sequencing a journey builder is for. The delivery confirmation goes out as a transactional message; a follow-up offer goes out two days later, to the promotional-consented segment only.
Consent Rules Vary Significantly by Market
Most SMS guidance is written for the US and silently assumes those rules apply everywhere. They don't, and the differences are operationally significant.
United States (TCPA). Marketing texts require prior express written consent. Statutory damages run to $500 per violation, or up to $1,500 where the violation is wilful — so a single non-compliant blast to 10,000 recipients carries theoretical exposure in the millions. Separately, business messaging over standard 10-digit numbers requires 10DLC registration: you register your brand and campaign with the carriers, and unregistered traffic is heavily filtered or blocked outright. This is now a practical prerequisite, not an optimisation.
India (TRAI DLT). India operates one of the strictest regimes globally. Senders must register on a DLT (Distributed Ledger Technology) platform, register each sender ID, and pre-register message templates before sending. Transactional, service, and promotional traffic run on formally separate routes. Promotional messages are restricted to 9am–9pm and are blocked to numbers registered on the Do Not Disturb registry. Unregistered templates simply don't deliver.
United Kingdom and EU. Marketing consent is governed principally by the ePrivacy rules — PECR in the UK — rather than GDPR alone, though GDPR governs the underlying personal data. Consent must be freely given, specific, and informed, with a narrow "soft opt-in" for existing customers buying similar products.
Canada (CASL). Express or implied consent, with meaningful penalties and a requirement to retain consent records demonstrating when and how it was obtained.
The practical implication for any business sending across borders: consent, sender registration, and timing rules must be tracked per market, not globally. Storing the timestamp, source, and scope of every opt-in is what makes that possible — and what you'll need if consent is ever challenged. Our documentation covers consent field configuration.
This guide is not legal advice. Requirements change and vary by jurisdiction — confirm with qualified counsel before launching an SMS programme.
Sender Identity and Registration
What number your message comes from affects both deliverability and cost.
10-digit long codes (10DLC) are the standard for US business messaging now, requiring brand and campaign registration. Throughput is tied to your trust score.
Short codes are 5–6 digit numbers with high throughput and strong deliverability, at meaningfully higher cost and with a multi-week provisioning process. Note that shared short codes were phased out by US carriers — the practice of multiple brands using one short code is no longer viable, despite still appearing in older guidance. Short codes are dedicated.
Alphanumeric sender IDs display your brand name instead of a number. Widely supported outside North America, generally unavailable in the US, and typically unable to receive replies — which makes them unsuitable where two-way conversation matters.
Toll-free numbers support messaging in the US with their own verification process, and sit between long codes and short codes on throughput.
Message Mechanics That Affect Cost
A detail that catches teams out on their first invoice.
A single SMS segment is 160 characters using the standard GSM-7 alphabet. Include a character outside that set — most emoji, many accented letters, non-Latin scripts — and the message switches to UCS-2 encoding, dropping the limit to 70 characters per segment. Longer messages are split and billed per segment.
The practical consequence: one emoji can more than double the cost of a campaign. Test how your message encodes before sending at volume, and be aware that link shorteners, opt-out language, and personalisation tokens all consume segment budget.
When to Use Each Type
Transactional works best for
One-time passwords and verification codes — the canonical case, where latency is the entire product
Order and delivery updates — these reduce support contacts more reliably than almost anything else you can send
Appointment reminders — high ROI for service businesses through reduced no-shows
Security and fraud alerts — where SMS's interruptive quality is precisely what you want
Account and billing notifications — failed payments, plan changes, expiry warnings
For SaaS and app teams, verification and security alerts usually justify SMS on their own. For ecommerce brands, order status messaging typically delivers more measurable value than promotional sending does.
Promotional works best for
Genuine time-boxed offers — where urgency is real, not manufactured
Restock and back-in-stock alerts — requested by the user, so engagement is high
Cart recovery — though email often performs better for anything requiring consideration
Loyalty and VIP communication — smaller lists, higher relevance, lower complaint risk
The honest guidance: promotional SMS rewards restraint more than any other channel. The list that receives two well-targeted messages a month outperforms the one receiving eight, because opt-outs are permanent and re-permissioning is far harder than re-subscribing. Behavioural segmentation is what lets you send less and achieve more.
Consider whether SMS is the right channel at all
In markets where WhatsApp is dominant, WhatsApp Business messaging often delivers better economics and richer formatting than SMS for the same use cases, with its own template approval regime in place of DLT or 10DLC registration. WhatsApp automation is worth evaluating before committing to SMS-first, particularly for conversational use cases where replies are expected.
Timing and Quiet Hours
Promotional SMS is subject to timing restrictions that transactional messages are exempt from — an OTP must arrive when requested, at 3am if that's when the user requested it.
US rules restrict marketing calls and texts to 8am–9pm in the recipient's local time, not yours. India restricts promotional messaging to 9am–9pm. Other markets vary.
Two implementation notes:
Use the recipient's timezone, not your own. A list spanning three timezones sent at a single absolute moment will violate quiet hours for someone.
Set platform-level frequency caps. As targeting improves, the temptation to send more grows with it. Caps enforced at the platform level protect you regardless of how many campaigns a contact qualifies for — over-sending is one of the biggest mistakes in customer retention precisely because it feels productive while it's happening. Our SMS best practices guide covers cadence in more detail.
Deliverability and Measurement
SMS deliverability works differently from email, and some widely repeated statistics don't survive scrutiny.
Be sceptical of "98% open rates." SMS has no open tracking — there is no pixel and no read receipt on standard SMS. Figures like this conflate delivery with reading. Carriers confirm delivery to the handset; nobody can tell you whether it was read. Measure what you can actually observe: delivery rate, click-through on tracked links, conversion, and opt-out rate.
The metrics that matter:
Metric | What it tells you |
|---|---|
Delivery rate | Carrier acceptance — drops signal filtering or bad numbers |
Click-through rate | The only reliable engagement signal available |
Opt-out rate | The health metric; rising opt-outs mean frequency or relevance problems |
Conversion | What the programme is actually worth |
Cost per segment | Encoding and length efficiency |
Track link performance in campaign reporting and treat opt-out rate as your early warning system — it moves before revenue does.
Deliverability fundamentals: keep your list to genuinely opted-in numbers, register your sender identity properly for each market, avoid public URL shorteners (frequently filtered by carriers), and remove numbers that hard-bounce. Honour opt-outs immediately and automatically — a delayed STOP is both a compliance failure and a complaint generator.
Bringing SMS Into a Wider Journey
The reason to unify rather than silo comes down to a failure mode most teams recognise.
Your SMS platform doesn't know the customer opened your email. Your email platform doesn't know they replied to an SMS. So the customer receives a "complete your purchase" text for an order that already shipped, or a promotional blast an hour after a support conversation about a delivery problem.
A shared customer profile prevents this. It also enables sequencing that's genuinely useful: a failed payment notification that escalates to SMS only if the email goes unopened, or a promotional message suppressed automatically for anyone with an open support ticket. Unified segmentation across channels is what makes consent itself coherent — knowing that someone consented to transactional SMS but not promotional, and to marketing email but not SMS, requires one profile rather than four systems each holding part of the answer.
This matters commercially as much as operationally. Personalised sequencing across channels consistently outperforms single-channel sending, and for agencies managing multiple clients, one consent model across channels is the difference between scalable and unmanageable. See our customer case study for a production account.
Common Mistakes
1. Mixing content types. Adding a coupon to a delivery notification reclassifies the message and voids your exemption. This is the single most common and most costly error.
2. Treating one consent as covering both. Consent to order updates is not consent to marketing. These are separate permissions under US, EU, and Indian rules alike, and conflating them is a direct violation.
3. Assuming US rules apply globally. India's DLT registration, EU soft opt-in rules, and Canadian consent records are all materially different. A single global consent model will be non-compliant somewhere.
4. Sending in your own timezone. Quiet hours follow the recipient. A single absolute send time across multiple timezones guarantees a violation.
5. Delaying opt-out processing. STOP must be honoured immediately and permanently. Manual processing is a liability.
6. Using public link shorteners. Shared shortener domains carry the reputation of everyone using them and are frequently filtered. Use a branded domain.
7. Not testing message encoding. One emoji can drop your segment limit from 160 to 70 characters and double your costs without anyone noticing until the invoice arrives.
8. Over-sending because targeting improved. Better segmentation should mean fewer, better messages. SMS opt-outs are effectively permanent.
Frequently Asked Questions
Do I need consent to send transactional SMS?
In most jurisdictions, yes — but at a lower standard than marketing requires. In the US, providing a mobile number during a transaction generally constitutes prior express consent for related informational messages, whereas marketing requires prior express written consent. "Transactional" means a lighter consent standard, not an absence of one. You must still honour opt-out requests.
Can I send promotional SMS to people who opted in for transactional alerts?
No. These are separate permissions. Someone who provided a number for order updates has not consented to marketing, and sending it is a violation under TCPA, PECR, and India's DLT rules alike. Collect promotional consent separately and record it explicitly.
What is the difference between SMS and MMS?
SMS is text-only, 160 characters per segment on the standard alphabet. MMS carries images, video, and audio with a much higher character allowance. MMS costs more per message and tends to engage better for visual promotional content, while SMS suits fast transactional alerts. MMS support and pricing vary considerably by country.
How do I ensure high SMS deliverability?
Register your sender identity correctly for each market — 10DLC in the US, DLT in India. Keep your list to genuinely opted-in numbers. Avoid public link shorteners. Suppress hard bounces and process opt-outs automatically. Watch your opt-out rate as the leading indicator; carriers filter on aggregate sender behaviour, so problems compound quietly before they become visible.
What is 10DLC and do I need it?
10DLC is the US framework for business messaging over standard 10-digit numbers. You register your brand and each campaign with the carriers, receiving a trust score that determines throughput. If you send business SMS to US numbers, registration is effectively mandatory — unregistered traffic is filtered or blocked.
What is DLT registration in India?
India's TRAI framework requires senders to register on a DLT platform, register sender IDs, and pre-register message templates before sending. Transactional, service, and promotional traffic use formally separate routes with different rules, and promotional sending is restricted to 9am–9pm and blocked to Do Not Disturb registrants. Unregistered templates do not deliver.
Are shared short codes still available?
No — US carriers phased out shared short codes, so multiple brands can no longer use one code. Guidance still recommending them is out of date. Current options are dedicated short codes, registered 10DLC long codes, or verified toll-free numbers.
How much does SMS cost?
Per-message pricing varies by destination country, route, and volume, and multi-segment messages are billed per segment. Budget separately for platform costs and carrier costs, plus registration fees for short codes or DLT. NevTan Engage includes core capabilities on a free plan, with paid tiers scaling by contact volume and channel usage.
Should transactional and promotional SMS use the same sender number?
Generally not, where volume justifies separating them. Different sender identities isolate reputation, so a promotional campaign generating opt-outs cannot degrade delivery of your OTPs — the same logic as separating email subdomains.
Run Both, Without Getting Them Confused
Transactional and promotional SMS are different products sharing a delivery mechanism. Transactional earns attention because it was requested. Promotional borrows attention and must repay it. Blurring them costs you the legal protection of the first and the goodwill of the second.
NevTan Engage handles both inside one journey: transactional triggers for order updates and verification, promotional campaigns to a separately consented segment, with consent state, opt-outs, quiet hours, and frequency caps enforced at the platform level rather than remembered per campaign. Because email, SMS, push, and WhatsApp share one customer profile, you can see what each contact consented to on each channel — and what they've already received.
Start free — no credit card required — or review the plans as your volume grows.
