SMS Marketing Laws for Real Estate Agents: What You Need to Know in 2026
A plain-English guide to SMS marketing laws for real estate agents in Australia, the US, Canada, and the UK — what consent means and what it costs to get it wrong.

SMS is the highest-response channel in real estate prospecting. Open rates sit well above email, response rates are faster, and the medium reaches people where they actually spend their time. But SMS is also the channel most agencies are running without a clear understanding of the legal framework governing it. That combination — high performance, low legal awareness — creates both a significant opportunity and a meaningful risk.
The agencies that treat SMS compliance as a background concern are not just exposing themselves to regulatory penalty. They are degrading their own deliverability. Mobile carriers now actively monitor sending behaviour, and campaigns that generate complaint rates above certain thresholds are throttled or blocked entirely — sometimes at the domain or number level, which means legitimate future messages suffer for past non-compliance. Getting SMS right from the start is not just a legal matter. It is a commercial one.
Why Compliance Is a Business Problem, Not Just a Legal One
Before walking through the jurisdictional rules, it is worth understanding what non-compliance actually costs an agency in practice. The most immediate cost is not a fine — it is deliverability damage. When contacts mark messages as spam, or when your sending number accumulates opt-out requests at a high rate, carriers flag your traffic as low-quality. Subsequent messages from the same number or domain go to fewer inboxes, arrive later, or never arrive at all. For an agency running a database outreach programme, that degradation can quietly kill campaign performance over weeks without anyone realising why response rates are falling.
The second cost is relational. Contacts who feel they are being messaged without permission do not simply opt out — they form a negative impression of the agency and, increasingly, leave reviews or make regulatory complaints. In a profession where referral and local reputation are core growth drivers, that erosion is real. Building a compliant programme is also building a programme that contacts experience as professional and trustworthy.
Australia: The Spam Act 2003 and the 2026 Sender ID Rules
Australia's primary framework for SMS marketing is the Spam Act 2003, administered by the Australian Communications and Media Authority. The Act establishes three obligations for any commercial electronic message, including SMS: the sender must have consent to contact the recipient, the message must clearly identify the sender, and every message must include a functional unsubscribe mechanism that is honoured promptly.
Consent under the Spam Act can be express — the contact explicitly agreed to receive marketing messages — or inferred from an existing business relationship, such as a property enquiry or open home attendance. Inferred consent is not unlimited. It applies when the contact's conduct makes it reasonable to conclude they would expect to receive messages from the agency, and it lapses when the relationship becomes dormant.
The most significant regulatory change in 2026 is the Australian Communications and Media Authority's Sender ID registration requirement, which came into effect in July. Agencies sending SMS that displays a named Sender ID — for example, the agency brand name rather than a phone number — are now required to register that Sender ID through the SMS Sender ID Registry. Unregistered Sender IDs are blocked at the carrier level. For agencies that have been using branded Sender IDs without going through the registration process, this is an immediate action item — the ACMA Sender ID compliance guide covers the registration process in full.
United States: TCPA and the High Cost of Getting It Wrong
The United States operates under the Telephone Consumer Protection Act, which treats marketing SMS with significant rigour. The TCPA requires express written consent before sending any marketing text message to a mobile number — inferred consent is not sufficient. That consent must be documented and retrievable if a dispute arises. Opt-out requests must be honoured immediately, and a contact who has opted out cannot be re-enrolled in marketing communications without providing fresh consent.
The penalty structure under the TCPA is what makes non-compliance genuinely dangerous. Violations can attract damages of between $500 and $1,500 per individual message, and class action litigation under the TCPA is well-established. An agency that sends a campaign to 2,000 contacts without verified consent is not facing one penalty — it is facing up to 2,000. Several US real estate brokerages have settled TCPA class actions for amounts that exceeded the annual revenue of their prospecting programmes. The financial exposure is not abstract.
Canada: CASL and One of the Strictest Frameworks Globally
Canada's Anti-Spam Legislation is widely regarded as one of the strictest commercial messaging regimes in the world. CASL distinguishes between express consent — where the contact has clearly opted in to receiving commercial electronic messages — and implied consent, which can arise from an existing business relationship but has a defined duration of two years from the date of the most recent transaction or enquiry.
CASL requires that every commercial electronic message clearly identify the sender, provide contact information, and include a functional unsubscribe mechanism that processes opt-out requests within ten business days. The key difference from many other jurisdictions is that the default position under CASL is that you do not have consent unless you can demonstrate that you do. The burden of proof sits with the sender.
United Kingdom and Europe: GDPR and PECR
In the United Kingdom and across the European Union, SMS marketing operates under a layered framework. The General Data Protection Regulation establishes the rules for processing personal data — including the obligation to have a lawful basis for holding and using contact information. The Privacy and Electronic Communications Regulations add a further requirement specific to direct marketing: for individuals, opt-in consent is required before sending marketing SMS unless a soft opt-in applies.
The soft opt-in under PECR allows an organisation to send marketing messages to a contact who provided their details in the course of a similar enquiry, provided that contact has been given a clear opportunity to opt out of future marketing. For a real estate agency, this means a contact who registered for an appraisal or made a property enquiry can potentially be messaged about similar services — but only if they were given a conspicuous opt-out option at the point of data collection and have not since exercised it.
The Three Rules That Apply Everywhere
Across all four regulatory frameworks, three principles are universal. Every agency running an SMS programme needs a legitimate basis to contact each person on their list — an identifiable interaction, a documented consent record, or a defined business relationship. Every message must clearly identify who is sending it, including a name or brand the recipient can recognise. And every programme must include a working opt-out mechanism, with requests processed promptly and recorded in a way that prevents future messages from reaching opted-out contacts.
If you are focused specifically on the Australian context, the complete guide to SMS marketing legality in Australia covers the Spam Act, consent categories, and enforcement precedents in more depth. Where agencies most commonly fail is not in the rules themselves but in the operational discipline required to follow them. Consent captured at an open home sign-in needs to be recorded in the CRM and linked to that contact's profile. Opt-out requests received via SMS reply need to be processed within the required window and propagated across every sending system. Audit trails need to exist. These are not complex requirements, but they require the right systems to execute consistently at scale.
Voqo handles consent tracking, opt-out processing, and Sender ID registration automatically — so your SMS programme operates inside the legal framework from day one. Learn how Voqo works.
See it in action
15 minutes with our founders. We'll show you how it works and tell you straight if it's a fit.



