By Sagar Shankaran, Founder of CallSphere
TCR brand registration, campaign use case, EIN aged 15+ days, opt-in URL live and carrier-verifiable - 10DLC in 2026 is more strict than ever. Here is the exact submit-once-clear-once playbook for AI SMS deployments.
Key takeaways
10DLC registration in 2026 is the gatekeeper for any AI-powered SMS deployment in the US. The Campaign Registry (TCR) added Authentication+ for public companies in August 2025 and tightened EIN-age and opt-in URL checks for everyone. The result is a one-shot bar that costs maybe $20 in fees but consumes one to four weeks of carrier review queue if you submit anything ambiguous.
A2P (Application-to-Person) 10DLC is the carrier-sanctioned path for high-throughput SMS from a 10-digit long code. It replaced the messy "shared shortcode" era and superseded most personal long-code use for business messaging. The Campaign Registry is the central authority - one TCR enrollment, propagated to all major US carriers (AT&T, T-Mobile, Verizon, US Cellular).
The 2026 process has three layers. First, register your business as a Brand: legal name, EIN (must be at least 15 days old), address, website with company details, vertical. Second, register one or more Campaigns: use case (Customer Care, Marketing, 2FA, etc.), sample messages, opt-in URL (must be live and carrier-verifiable), opt-out language, expected volume. Third, attach the campaign to your phone numbers via your CSP (Twilio, Bandwidth, etc.).
Fees in 2026: TCR brand vetting starts at $4 standard, $40 enhanced. Authentication+ for public companies adds $12.50. Campaign vetting is $19.50 manual review per campaign. Carrier surcharges add roughly $1.50 to $10 per month per campaign in pass-through fees.
Hear it before you finish reading
Talk to a live CallSphere AI voice agent in your browser — 60 seconds, no signup.
flowchart TD
A[Verify EIN aged 15+ days] --> B[Submit Brand to TCR]
B --> C{Public company?}
C -->|Yes| D[Authentication+ verification]
C -->|No| E[Standard brand vetting]
D --> F[Brand approved]
E --> F
F --> G[Create Campaign use case]
G --> H[Provide opt-in URL]
H --> I{URL carrier-verifiable?}
I -->|No| J[Fix URL]
J --> H
I -->|Yes| K[Submit campaign]
K --> L[Carrier review 1-4 weeks]
L --> M[Attach campaign to DIDs]
M --> N[SMS goes live]
Common rejection reasons in 2026: opt-in URL is behind a login wall, sample messages do not include opt-out language, campaign use case does not match actual sample content, EIN is younger than 15 days.
CallSphere submits 10DLC registrations on behalf of every tenant that activates SMS. Our onboarding flow collects EIN, business address, opt-in URL, and sample messages, then automatically files the brand and campaign through Twilio's TCR integration. We default tenants to a Mixed use case (Customer Care + Notifications) on Healthcare AI and a Customer Care use case on Salon AI; Sales Calling AI tenants who need outbound SMS register a Marketing campaign separately. Our 115+ DB tables track every brand and campaign through the approval lifecycle. HIPAA + SOC 2 controls cover the metadata; we never share PHI in sample messages submitted to TCR. Scale ($1499/mo) tenants get white-glove campaign re-vetting if a use case shifts. The 22% affiliate program credits SMS-driven plan upgrades.
How long does 10DLC really take in 2026? Brand vetting: 1 to 5 business days for standard tier. Campaign approval: 1 to 4 weeks depending on use case complexity. Mixed and Marketing campaigns get more scrutiny than Customer Care.
What use case should AI SMS pick? Customer Care for inbound-driven AI receptionist replies; 2FA for verification flows; Mixed for two-way conversational AI; Marketing for outreach. Mixed has the highest scrutiny but covers the most patterns.
Still reading? Stop comparing — try CallSphere live.
CallSphere ships complete AI voice agents per industry — 14 tools for healthcare, 10 agents for real estate, 4 specialists for salons. See how it actually handles a call before you book a demo.
Why is my opt-in URL rejected? Top reasons: URL is behind a login, URL returns 404, the page does not show explicit opt-in language, the page does not match the sample messages. Use a clean public landing page.
What is Authentication+? A new TCR identity verification tier introduced August 2025 for publicly traded companies. Adds $12.50 to the brand vetting cost and runs deeper checks against public business records. Required for public companies as of 2026.
Does CallSphere handle 10DLC for me? Yes, on all paid plans. We submit the brand and campaign through Twilio's TCR integration and surface status in the admin console. Rejections come back with the specific carrier reason so you can fix and resubmit.
Start a 14-day trial with managed 10DLC, browse pricing for SMS-included plans, or book a demo. Partners earn 22% via the affiliate program.
Written by
Sagar Shankaran· Founder, CallSphere
Sagar Shankaran is the founder of CallSphere, where he builds production AI voice and chat agents deployed across healthcare, hospitality, real estate, and home services. He writes about agentic AI, LLM engineering, and shipping voice agents that handle real calls in production.
See how AI voice agents work for your industry. Live demo available -- no signup required.
A VoIP telephone number is a phone number that routes calls over the internet instead of copper lines. Learn what a VoIP number is, how to get one, what it costs, and how to pair it with an AI voice agent in 2026.
Using GPT-Realtime-2 for healthcare voice agents. BAA scope, PHI handling, retention, logging, and why a managed platform usually wins this build.
AI Control Tower is the governance layer for ServiceNow's Project Arc — policy, monitoring, and audit logs for autonomous agents. Here is how it works.
CAISI announced new agreements with Google DeepMind, Microsoft, and xAI in May 2026. What gets tested, what changes for enterprise AI buyers, what to watch.
The 2024 NPRM proposes mandatory penetration tests every 12 months and vulnerability scans every 6 months. Here is how an AI voice agent should be tested in 2026.
Six-domain AI vendor diligence: financial, security, privacy, operational, legal, ethics. Plus 30+ specific questions, SOC 2 / ISO 27001 baselines, and review cadence.
© 2026 CallSphere LLC. All rights reserved.