Why Carriers Filter Your SMS, and How to Avoid It

How does carrier SMS filtering work?

Carriers inspect business text traffic in their networks and block messages that look unregistered, deceptive, or unwanted before they reach the handset. Filtering decisions combine sender registration status, message content, links, and complaint signals.

AT&T, T-Mobile, and Verizon do not publish their filter logic, and it changes as spammers adapt. What is published is the policy framework the filters enforce: the CTIA Messaging Principles and Best Practices (May 2023 edition), CTIA's Messaging Security Best Practices (October 2025), and each carrier's code of conduct. Aligning with those documents is the most reliable way to stay out of filters.

Filtered messages usually fail with a carrier error code in your provider's delivery report (for example, Twilio's 30007 "message filtered"), rather than silently arriving late.

What are the main reasons messages get filtered?

Most filtering traces back to a handful of causes: missing registration, content that does not match the registration, risky links, phishing-like wording, and messaging people who did not consent.

Why does registration matter so much?

Registration is the first filter. Since February 1, 2025, AT&T, T-Mobile, and Verizon block unregistered application-to-person traffic from 10-digit numbers entirely (Telnyx).

Registration also creates a record carriers compare your traffic against. If your campaign says "appointment reminders for patients" and your messages advertise a sale, that mismatch is itself a filtering and enforcement trigger. Registration is done through a messaging provider and The Campaign Registry (TCR); see the registration checklist.

How do links affect SMS filtering?

Links are one of the strongest filtering signals. Public, shared URL shorteners are heavily filtered because the same domains carry phishing, while links on a brand's own established domain are treated as lower risk.

• Use your own domain, and keep it consistent with the brand name in the message.
• If you need short links, use a dedicated branded short domain rather than a shared public one.
• Declare embedded links during campaign registration; undeclared links are a review and enforcement issue.
• Make sure the destination page is live, secured with SSL, and matches the message.
• Check the domain's reputation and DNS health; the free Domain Health tool checks SSL and blacklist status.

What content triggers SMS filters?

Content that imitates phishing or falls into restricted categories is the main content trigger. Ordinary marketing words are not banned, but combined with an unknown sender, a shortened link, and urgency they add risk.

• Phishing patterns: "verify your account", "confirm your identity", requests for passwords, card numbers, or codes.
• Restricted categories: cannabis, high-risk lending, debt relief, gambling, and similar content that is disallowed or restricted on 10DLC (Twilio).
• Missing brand identification: every message should name the sender.
• Deceptive formatting: misleading sender claims, fake "reply to claim" prizes, or disguised links.

Earlier versions of this guide listed single words such as "free" or "offer" as automatic triggers. That overstates it. Carriers evaluate patterns and sender context, so an identified, registered brand can send a normal promotion. Focus on clarity and honesty, not keyword avoidance.

How do opt-outs and complaints affect filtering?

Ignoring opt-outs produces complaints, and complaints drive both filtering and carrier enforcement. Process every opt-out, not just the word STOP.

Under FCC rules in effect since April 11, 2025, consumers may revoke consent by any reasonable means, and you must honor the request within 10 business days (FCC DA 25-312). CTIA guidance allows one confirmation message after an opt-out and nothing further. The FCC's separate "revoke-all" requirement, which would apply one opt-out to every message type from the same sender, has been delayed to January 31, 2027 (FCC DA 26-12). Best practice is still to stop immediately.

T-Mobile also passes through fines for violations, including $10,000 for repeated content violations and $2,000 per phishing or smishing incident (Bandwidth T-Mobile 10DLC page, updated August 2026).

How do you avoid carrier filtering?

Register accurately, send only to people who opted in to your brand, and make each message clearly identifiable and consistent with your campaign. That covers most filtering risk.

1. Register the brand and campaign, and keep the registered description current.
2. Collect first-party, documented consent; never text purchased or shared lists.
3. Start every message with your brand name.
4. Use links on your own domain or a dedicated branded short domain.
5. Declare links, phone numbers, and sensitive content in the campaign.
6. Honor opt-outs in any reasonable form, promptly.
7. Test new templates on handsets across the major networks before a large send.
8. Watch delivery reports for carrier filtering error codes and investigate spikes.

What should you do if your messages are already being filtered?

Pause the affected template, find the cause in your delivery reports, and fix the registration or content before resuming. Resending the same content usually produces the same result.

1. Check that the brand and campaign are active and the numbers are assigned to the campaign.
2. Compare the filtered messages with the registered use case and samples.
3. Replace public shorteners and check link domains for blacklist listings.
4. Remove anyone without documented consent and process pending opt-outs.
5. If content or use has changed, update the campaign through your provider.
6. Resume with a small send and confirm delivery before scaling.

Full Percent's SMS and 10DLC compliance service includes forbidden-word scanning, consent-form language, and registration prep aligned with TCPA and CTIA guidance.

Stephen Ventura founded Full Percent in Boca Raton, Florida. He has built email systems since 1997 and SMS platforms since before the iPhone. stephenventura.com