How to Collect SMS Opt-In Consent for Real Estate Leads (The Right Way)

To legally text real estate leads in the US, you must collect express written consent under the TCPA before sending any marketing messages — and that consent must be documented, specific to SMS, and kept on record.

Most agents know they need to 'get consent somehow.' What trips them up is the specifics: what the disclosure actually has to say, where it has to appear, and what records prove you collected it. A vague checkbox buried in a privacy policy won't protect you. This guide walks through each lead source — IDX forms, open house sign-in sheets, and paid lead platforms like Zillow and Realtor.com — and shows you exactly what compliant opt-in consent looks like at each touchpoint.

What Is 'Express Written Consent' Under the TCPA?

The Telephone Consumer Protection Act (TCPA) requires express written consent before you send marketing text messages using an auto-dialer or pre-recorded message. The FCC's interpretation of 'written' includes electronic consent — a checked box on a web form qualifies — but the consent must meet specific standards.

For consent to be valid under the TCPA, it must be:

• Clear and conspicuous — the disclosure must be easy to find and read, not hidden in fine print
• Specific to SMS marketing — a general terms-of-service agreement does not cover it
• Affirmative — the lead must take a deliberate action (check a box, sign their name); pre-checked boxes do not count
• Tied to a specific sender — the disclosure must name you or your company, not just 'third parties'
• Not a condition of purchase — you cannot require someone to consent to marketing texts in order to access a home search or listing

TCPA violations can result in statutory damages of $500–$1,500 per message. That math gets uncomfortable fast if you're running drip campaigns to unconsented lists. This isn't a bureaucratic formality — it's straightforward financial risk management.

What Does a Compliant SMS Opt-In Disclosure Actually Say?

There is no single government-mandated script, but the disclosure needs to cover several elements to hold up. Here is a template you can adapt:

Every compliant disclosure should include these components:

How to Add SMS Opt-In Language to Your IDX or Website Forms

Your IDX lead capture form — whether it's a 'Save this search' prompt, a property inquiry form, or a home valuation widget — is your highest-volume consent touchpoint. Getting this right matters more than any other single step.

1. 1Add an unchecked checkbox directly below the phone number field. Do not use a pre-checked box — it will not hold up legally.
2. 2Place the full disclosure text immediately next to or below the checkbox, in readable font size. Do not link out to it; it must be visible without an extra click.
3. 3Make the checkbox optional (not required to submit the form). Consent cannot be a condition of accessing the service.
4. 4Configure your CRM or lead management tool to record whether the box was checked, along with a timestamp and the IP address of the submission.
5. 5If your IDX provider does not allow custom form fields or disclosure language, contact them about a workaround or consider a form overlay/pop-up that collects consent before or after the IDX form submission.

Common IDX platforms like Showcase IDX, iHomeFinder, and similar tools have varying levels of form customization. If your platform won't let you add proper opt-in language, that's a compliance gap worth addressing before you scale any SMS campaigns.

How to Collect SMS Consent at Open House Sign-In Sheets

Open house sign-in sheets are a common lead source, but most agents use a template that says nothing about texting. Collecting a phone number at an open house does not constitute consent to send marketing texts — even if the person hands you the number voluntarily.

For paper sign-in sheets, add a dedicated opt-in line:

For digital sign-in tools (like Open Home Pro, Spacio, or a custom iPad form), the same rules as web forms apply: unchecked checkbox, visible disclosure, saved record. The advantage of digital tools is that the timestamp and confirmation are logged automatically.

Keep your paper sign-in sheets. Scan them and store them. If a TCPA dispute ever arises, a signed paper sheet with the opt-in box checked is strong evidence. 'I'm pretty sure they said it was okay' is not.

What About Paid Leads From Zillow, Realtor.com, and Similar Platforms?

This is where agents get into the most trouble. Zillow and Realtor.com collect consent from leads on their own platforms — but that consent is typically to receive communications from the platform or to be connected with an agent, not specifically to receive marketing texts from you by name.

Before you text a paid lead from any third-party platform, you need to:

• Read the platform's terms of service and their consent disclosure language carefully
• Determine whether their disclosure names you as the sender (it almost never does)
• Verify whether their consent language covers automated or bulk SMS marketing specifically
• If in doubt, collect your own consent before texting — either via an initial opt-in text that requires a reply, or through a separate web form

A safe approach with paid leads: when you receive the lead notification and make first contact (often via phone or email), include a simple opt-in request. For example: 'I'd like to send you property updates by text — reply YES to this message to opt in, or let me know your preferred contact method.' That reply becomes your consent record.

Do not assume that because a platform sold you the lead, you have permission to text them. The TCPA liability sits with the sender — you.

Single Opt-In vs. Double Opt-In: Which Do You Need?

Single opt-in with a compliant disclosure meets the TCPA standard. Double opt-in is not legally required, but it creates a stronger paper trail and tends to produce more engaged lists — people who confirm twice are more likely to actually want your messages. For paid leads or any imported list where you're not 100% certain of the original consent quality, double opt-in is a smart extra step.

How to Keep Opt-In Records That Actually Protect You

Consent records are only useful if you can produce them quickly and clearly. Here's what to store for each opted-in contact:

• The phone number that was submitted
• The date and time of opt-in
• The source (which form, which open house, which platform)
• The exact disclosure language that was presented at the time of opt-in
• For web forms: IP address of the submission
• For paper forms: a scanned copy of the signed sheet
• For double opt-in: the confirmation reply and its timestamp

Your CRM should be doing most of this automatically if it's configured correctly. If you're using InfinitySMS, you can add contact notes and source tags to every lead record so the context travels with the contact. The 10DLC registration and sending infrastructure is handled on our end — but the consent documentation lives in your CRM or contact records, because it's your relationship with your lead.

How InfinitySMS Fits Into Your Compliance Setup

InfinitySMS handles the carrier-side compliance layer: 10DLC brand and campaign registration, message throughput, STOP/HELP/UNSUBSCRIBE keyword processing, and opt-out list management. These are the things that happen between your send button and the lead's phone.

What InfinitySMS does not do — and cannot do on your behalf — is reach back in time and collect consent from your contacts. That step happens before the message is sent, at your lead capture touchpoints. The two layers work together: proper opt-in practices protect you legally; proper 10DLC registration protects your deliverability and keeps your messages out of carrier spam filters.

Pricing is straightforward: $99/month flat plus $0.02 per message sent. No per-seat fees, no credit expiry. For a team sending 2,000 messages a month, that's $99 + $40 = $139 total. For an individual agent sending 500 messages, it's $99 + $10 = $109. The math is simple on purpose.