All posts
The Global SMS Regulation Guide for AI Agent Builders
GuideBy Dial Engineering·12 min read·June 17, 2026·1

The Global SMS Regulation Guide for AI Agent Builders

10DLC is a US domestic regulation. It applies when your US long code sends to a US number - not when you send to Israel, India, or anywhere outside the US. But the destination country has its own rules. Here is every major market mapped, with the exact regulation name and enforcement type.


If you send SMS from a US number to an Israeli recipient, do you need 10DLC registration?

No. And that surprises most people who have been told "10DLC is required for all A2P SMS."

10DLC is a US domestic regulation. It applies when a US long code sends to a US number. When a message routes internationally - US to Israel, US to India, US to Germany - it exits US carrier networks via international SS7/GSMA interconnects, and those gateways do not check The Campaign Registry. US carriers enforce 10DLC on domestic routing only. International routes bypass that filtering layer entirely. This is why US to Israel SMS works without 10DLC.

But that does not mean international SMS has no rules. It means the rules are different, and they belong to the destination country.

This guide maps both sides: what the origin country requires, and what the destination country requires, for every major market.


The Two-Axis Framework

Think of SMS compliance as two independent axes: origin country and destination country. Each has its own requirements. The compliance burden for any given message is the union of both.

Origin-side rules are enforced by the sending country's carriers or imposed by its laws. 10DLC is an example - but it only applies to domestic US traffic. If your UK number sends internationally, Ofcom's RC bundle requirement travels with it. CASL consent obligations from Canada apply regardless of where the recipient is.

Destination-side rules are enforced (or legally imposed) by the receiving country. They fall into two types: technical enforcement (carrier-level blocking of unregistered traffic) and legal/consent requirements (traffic passes but you are liable if you did not get consent or follow the rules).

The origin and destination requirements are independent. You comply with both.


Origin-Side Requirements

OriginFrameworkWhat to RegisterScope
United States10DLC / The Campaign Registry (TCR)Brand + campaign per use caseUS domestic only (US long code to US numbers)
CanadaCRTC + CASLA2P long code registration (new numbers from March 2025)All destinations; CASL consent obligations follow the sender
United KingdomOfcom RC bundleRC bundle approval for long codesAll destinations
EU countriesGDPR + national ePrivacyConsent recordsAll destinations
AustraliaACMA Spam ActSender ID registration (mandatory Dec 2025)All destinations

The practical implication: if you send from a US long code to a US number, you need 10DLC. If you send from a US long code to Israel, India, or anywhere else outside the US, 10DLC is not enforced - but the destination country's rules apply.


Destination-Side: The Three Tiers

Not all destination-country requirements are created equal. Some countries technically block unregistered traffic at the carrier level. Others impose legal liability without blocking. Others have no sector-specific SMS regulation at all.

SMS Regulation Tiers: Country Count vs. Traffic Weight

6% of destinations drive 70% of global A2P traffic — and they all require mandatory registration

The chart above shows the mismatch: Tier 1 countries are only about 6% of global destinations, but they represent roughly 70% of global A2P SMS traffic. If you send to US, Indian, UK, Chinese, Canadian, Australian, UAE, Saudi, Brazilian, or Singapore recipients, you are operating in Tier 1. Get the registrations done before launch.


Tier 1 - Mandatory Registration (traffic blocked without it)

CountryRegulatorWhat You RegisterKey Details
United StatesFCC / TCR (10DLC)Brand + campaign100% carrier blocking since Feb 2025; short codes and toll-free have separate tracks
IndiaTRAI (DLT platform)Entity (PEID) + Sender Header + every message templatePromotional only 9AM-9PM IST; URLs must be whitelisted on DLT
ChinaMIITTemplate + business license; only 106 sender IDsRequires Chinese local entity; effectively blocked for foreign companies without one
United KingdomOfcomRC bundle for long codes; Sender ID RegisterUnregistered alpha sender IDs blocked from Dec 2025
CanadaCRTCA2P long code registration (new numbers)Plus CASL express consent
AustraliaACMAAlphanumeric Sender ID RegisterMandatory from Dec 2025; unregistered IDs blocked
UAETRAAlphanumeric sender ID; "AD-" prefix for promoInternational companies: transactional only; promotional prohibited
Saudi ArabiaCITCType B Class Licence + sender ID; "-AD" suffix for promoNo URLs unless pre-safelisted
BrazilANATEL + LGPDSender ID pre-registrationPromo 8AM-8PM weekdays; "PARE" opt-out required
TurkeyBTKURL safelistAll international A2P with URLs blocked from April 2026
SingaporeIMDA / SSIRSender ID registrationIncreasingly mandatory depending on use case

These countries do not technically block unregistered traffic at the carrier level, but violations carry significant legal exposure.

European Union (all 27 member states + EEA)

GDPR applies in every EU country. Beyond GDPR, the ePrivacy Directive is implemented nationally and adds SMS-specific rules:

  • Germany (TTDSG): explicit consent required; no soft opt-in
  • France: promotional SMS restricted to 8AM-8PM Monday-Saturday; prohibited on Sundays and public holidays
  • Italy: Garante has issued seven-figure fines for consent violations
  • Spain, Netherlands, Poland, Sweden: GDPR + national ePrivacy; explicit consent throughout
  • Israel

    Israel has its own A2P SMS rules under the Communications Law (1982) and Privacy Protection Law (1981), enforced by the Ministry of Communications and Privacy Protection Authority:

  • Explicit consent required
  • Messaging window: 8:00-22:00 Sunday through Thursday only
  • Opt-out via "HASER" (Hebrew) or "STOP" (English)
  • 7-year opt-out record retention
  • Check national Do-Not-Call registry before each campaign
  • No carrier-level technical blocking is documented; enforcement is legal and contractual
  • Asia-Pacific

    CountryFrameworkKey Rules
    JapanAnti-Spam Act + APPIOpt-in consent; URLs heavily filtered; no pre-registration needed but content restrictions are strict
    South KoreaPIPA + KCC rulesOpt-in consent; only numeric sender IDs; messages labeled "[international]"; gambling/adult/crypto prohibited
    PhilippinesNPC + SIM Registration ActSIM registration requirement affects delivery; consent required
    MalaysiaMCMCConsent; carrier registration recommended
    ThailandNBTCConsent; promo only 8AM-9PM
    IndonesiaKominfoLetter of Authorization + sender registration with local operators
    VietnamMICSender registration; promo only 7AM-11PM
    PakistanPTASender registration required for A2P

    Americas (outside US/Canada)

    CountryFrameworkKey Rules
    MexicoIFTExplicit consent; 8AM-9PM time window
    ColombiaMinTICOpt-in; time restrictions
    ArgentinaPDPAExplicit consent

    Africa

    CountryFrameworkKey Rules
    South AfricaPOPIA + ECT ActOpt-in consent; electronic communications rules apply
    NigeriaNCCOpt-in; NCC-registered senders preferred by carriers
    EgyptNTRASender registration with local carrier recommended
    KenyaCommunications AuthorityConsent; local operator registration recommended
    GhanaNCAConsent + local carrier pre-registration recommended

    Tier 3 - General Privacy Law Only

    Most remaining destinations in the Dial pricing list fall here. No carrier-level blocking, no sector-specific SMS regulation - general national privacy and consumer protection law applies. This includes most of the Caribbean, Pacific islands, Central American countries (outside Mexico), most of Sub-Saharan Africa outside the large markets above, most of Central Asia, and the Balkans. Traffic passes. Obtain consent, honor opt-outs, and you are covered.


    Common Route Combinations

    Origin to DestinationRegulation Required
    US to US10DLC required (US domestic enforcement) + prior express written consent
    US to IsraelNo 10DLC (international route bypasses enforcement) + Israeli consent/hours rules (legal, no carrier blocker)
    US to IndiaNo 10DLC + DLT entity/header/template registration (technical blocker at Indian carrier level)
    US to UKNo 10DLC + RC bundle via UK carrier (technical) + PECR consent (legal)
    US to EUNo 10DLC + GDPR consent per country (legal)
    US to AustraliaNo 10DLC + ACMA Sender ID registration (technical from Dec 2025)
    US to ChinaNo 10DLC + MIIT registration + local entity (effectively blocked without Chinese entity)
    US to CanadaNo 10DLC + CASL express consent (legal) + CRTC A2P registration if using Canadian long codes
    US to UAENo 10DLC + TRA sender ID registration (technical)
    US to Saudi ArabiaNo 10DLC + CITC Type B licence (technical)
    US to JapanNo 10DLC + opt-in consent (legal) + avoid URLs in messages
    US to BrazilNo 10DLC + ANATEL sender ID registration (technical) + LGPD consent (legal)
    US to South KoreaNo 10DLC + opt-in consent (legal) + numeric sender IDs only
    US to South AfricaNo 10DLC + POPIA consent (legal)
    US to MexicoNo 10DLC + IFT consent rules (legal)

    2025-2026 Enforcement Deadlines

    Several major markets hardened enforcement in the last 12 months or are doing so now. If you have been operating in these markets without registration, act immediately:

    DateChangeMarket
    Feb 1, 2025100% blocking of unregistered 10DLCUnited States
    March 26, 2025New Canadian long code A2P registration requiredCanada
    April 2025International A2P with URLs blockedTurkey
    Dec 5, 2025All unregistered brand traffic blockedChina
    Dec 15, 2025SMS Sender ID Register mandatoryAustralia
    Dec 15, 2025UK mandatory Sender ID regimeUnited Kingdom
    Ongoing 2026PECR penalty ceiling rises to GBP 17.5MEuropean Union / UK

    Practical Compliance Checklist

    Before launching SMS from any Dial number to any destination, run through these:

  • Sending to a US number from a US long code? 10DLC brand + campaign registered with TCR. (10DLC is US domestic only - international routes are not affected.)
  • Destination is India? DLT entity (PEID), sender header, and every message template registered. Promotional window is 9AM-9PM IST only.
  • Destination is UK? RC bundle required. Alphanumeric sender ID registered if you use one.
  • Destination is Australia? Sender ID registered in ACMA Sender ID Register.
  • Destination is UAE or Saudi Arabia? TRA/CITC registration complete. Promotional messages require "AD-" or "-AD" prefix. Check time windows before sending.
  • Destination is Brazil? Sender ID pre-registered with ANATEL. "PARE" keyword supported for opt-out.
  • Destination is EU (any country)? GDPR consent documented. France/Germany national rules checked.
  • Destination is Israel? Consent obtained. Messaging only 8AM-10PM Sunday-Thursday. "HASER"/"STOP" opt-out supported. Do-Not-Call registry checked.
  • Destination is Japan? Opt-in consent documented. Avoid sending URLs - they are filtered.
  • Destination is South Korea? Numeric sender IDs only. Opt-in consent documented.
  • All other destinations? Obtain consent, honor opt-outs, respect local time restrictions. General privacy law applies.
  • The registrations that cause hard delivery failures - 10DLC (for US domestic), DLT, ACMA Sender ID, TRA - are the ones to do before your first send, not after. The consent-only tiers (EU, Israel, Japan) will not block your messages, but they expose your customers to significant legal liability if consent workflows are not in place.

    Did you enjoy this post?

    1 claps