SMS Marketing Laws in Australia: What Small Businesses Need to Know

  • Get explicit permission through signup forms or Text to Join before sending promotional text messages. This creates a clear paper trail that ensures full compliance with anti-spam laws and protects the business from costly legal penalties.
  • Include your business name and a clear stop keyword at the end of every marketing text message. Providing these transparent details builds subscriber trust and automatically satisfies legal identification rules while giving people an instant way to unsubscribe.
  • Register a branded text sender name with the official communications registry before launching campaigns. Completing this step prevents mobile networks from labeling messages as unverified or blocking the texts before they reach customers’ phones.
  • Keep promotional pitches out of factual updates like order confirmations or appointment reminders. Blending marketing offers with transactional text messages triggers strict commercial laws, requiring the entire message to feature complex opt-out options.
  • Be mindful of send times. Take time zones into account to avoid early morning or late night messages that could annoy subscribers and cause them to opt out.

You’ve built your SMS subscriber list and your first text message is ready to go. Your finger is hovering over the send button, but do you actually know the rules? Sending non-compliant texts in Australia can result in serious penalties, and the Australian Communications and Media Authority (ACMA) is not shy about enforcing them.

Constant Contact’s Q1 2026 Small Business Now report found that 44% of small business owners rank customer engagement as their top marketing challenge. SMS marketing tools can help solve that problem, but only if you send your messages the right way. In this guide, we’ll cover everything you need to know about how to legally send marketing text messages in Australia, including the Spam Act 2003, consent requirements, and the new Sender ID Register.

What are SMS marketing laws in Australia?

SMS marketing laws in Australia are the rules that govern how businesses can send commercial text messages to individuals’ mobile phones. Several pieces of legislation work together to protect consumers and set clear expectations for businesses.

Here are the key regulatory components:

  • Spam Act 2003 (the Act): The primary federal legislation regulating all commercial electronic messages, including SMS. It sets the three core requirements every marketing text must meet: consent, sender identification, and a functional unsubscribe mechanism.
  • ACMA (Australian Communications and Media Authority): The government body that enforces the Spam Act, investigates complaints, and can issue penalties for non-compliance.
  • Privacy Act 1988: Governs how organisations collect, store, and handle personal information, including mobile numbers. The Australian Privacy Principles (APPs) sit within this Act.
  • Office of the Australian Information Commissioner (OAIC): The regulator responsible for enforcing the Privacy Act and the APPs.
  • Do Not Call Register Act 2006: Maintains a register of numbers that cannot receive unsolicited telemarketing calls. The DNCR primarily targets voice calls rather than SMS, but checking your list against the register is considered good practice.

Compliance protects your reputation and builds lasting trust with your customers. A subscriber who opted in and knows they can opt out at any time is far more likely to engage with your texts than someone who feels spammed.

The rules apply to every business in Australia that sends commercial text messages, whether you’re a gym owner, a salon operator, a restaurateur, or one of the other countless types of small businesses.

Types of commercial messages under the Spam Act

Not every text your business sends is treated the same under the law. Understanding these categories helps you apply the right level of compliance to each message you send.

Promotional messages

Promotional messages are texts sent to market or promote goods, services, or special offers. These require full compliance with all three Spam Act requirements: consent, sender identification, and an unsubscribe option. If your message is designed to drive a sale or encourage a visit, it’s promotional.

Here are some example texts:

  • “Hi Sarah, 20% off all treatments this weekend at [Salon Name]. Book now at [link]. Reply STOP to opt out.”
  • “[Gym Name]: Your free guest pass expires Friday. Bring a mate and train together. Reply STOP to unsubscribe.”

Transactional messages

Transactional messages facilitate or confirm a transaction the recipient initiated. Under the Spam Act, messages that are purely factual and relate to an existing transaction are generally treated differently from promotional content, but they must still include accurate sender identification.

Here are some example texts:

  • “Your booking at [Restaurant Name] for 7:30pm on 14/06/2026 is confirmed. See you there.”
  • “Order #4521 has been dispatched and will arrive within 2 business days.”

Informational messages

Informational messages provide factual updates about an existing relationship. They may fall outside the Spam Act’s scope if they contain no promotional content, but the safest approach is to treat any message to customers as requiring sender identification at a minimum.

Here are some example texts:

  • “Our trading hours are changing from 1 July. We’ll now open at 8am weekdays. [Business Name].”
  • “Scheduled maintenance on Saturday 21/06/2026, 6am-10am AEST. Some services may be temporarily unavailable.”

Mixed-purpose messages

Mixed-purpose messages combine transactional and promotional content in a single text. If any promotional element is present, the entire message is treated as a commercial message under the Spam Act and requires full compliance.

Here are some example texts:

  • “Your order from [Store Name] has shipped! Track it here: [link]. Plus, enjoy 15% off your next purchase with code THANKS15. Reply STOP to opt out.”

When in doubt, treat the message as promotional and apply all three Spam Act requirements. It’s always safer to over-comply than risk a fine.

How to build a compliant SMS marketing program

Setting up a legally compliant SMS marketing program in Australia doesn’t have to be complicated. These four steps cover the essentials, and each one protects your business while helping you build a stronger subscriber list.

Are you confident that every person on your SMS list actually asked to be there? Under the Spam Act, you need either express consent (the subscriber actively opted in) or inferred consent (an existing business relationship implies permission). Express consent is always the safest approach.

Pre-ticked boxes and bundled consent do not count. Your opt-in must be clear, specific, and separate from other terms and conditions. You also need to keep records of when and how each subscriber gave consent, because the burden of proof falls on your business if a complaint is lodged.

According to a Constant Contact study of 37,000 customers, 53% of the most successful businesses use sign-up forms to grow their lists. Proper opt-in tools are how businesses grow their audiences, and they create the documented consent trail you need. Constant Contact’s sign-up forms and Text to Join feature create a documented consent trail, so you have proof of every opt-in if you ever need it.

Step 2: Identify your business in every message

The Spam Act requires every commercial message to clearly identify who sent it and include accurate contact information. In practice, this means including your business name and a way for the recipient to contact you (such as a phone number, email address, or website).

The new SMS Sender ID Register adds another layer. From 1 July 2026, businesses sending texts with a branded sender name must register that name with ACMA. This applies when your business name appears in place of a phone number. Messages from unregistered sender IDs will be labelled “Unverified” by carriers.

Step 3: Include a working unsubscribe mechanism

Every commercial SMS must include a clear and functional way to opt out. The most common method is “Reply STOP to unsubscribe.” Unsubscribe requests must be honoured promptly once received.

This one is straightforward, but it trips up more businesses than you would expect. Constant Contact handles STOP keyword processing automatically, removing opted-out contacts from your SMS list so you never accidentally text someone who has unsubscribed.

Step 4: Register your SMS sender ID

This is a brand new requirement. From 1 July 2026, businesses that send SMS using an alphanumeric sender ID (for example, “JoesPizza” instead of a mobile number) must register with ACMA’s SMS Sender ID Register.

If you’re reading this before the deadline, you’re already a step ahead. Check whether your current setup uses a branded sender ID. If it does, plan to register before July. If you use a standard mobile number, this requirement may not apply to you, but keep an eye on ACMA’s guidance as the rules take effect.

How to audit your SMS marketing for compliance

Your compliance situation may look different depending on how long you have been sending texts and how your subscriber list was originally built. A quick audit now saves a lot of stress later.

Start by checking that every subscriber on your SMS list has a documented opt-in. Flag any contacts who were added without explicit consent (for example, imported from a purchased list or added through a non-compliant form). Remove any contacts without verified consent. Yes it stings to shrink your list, but a smaller list of people who definitely want to hear from you outperforms a large non-compliant one every time.

Check your message content

Pull up your most recent SMS campaigns and cross-check them against the three Spam Act pillars. Does each message clearly identify your business? Does it include a functional unsubscribe option? Was it sent only to subscribers who gave consent?

If you find gaps, fix them before your next send. A quick review takes minutes and can prevent a complaint that takes weeks to resolve.

Verify your sender ID registration

If you use a branded sender ID, confirm that you have registered with ACMA or have a plan to register before 1 July 2026. Constant Contact’s compliance settings guide you through number registration and sender ID configuration, so you can tick this off your list without chasing paperwork.

Key SMS compliance guidelines for Australian small businesses

Know the specific rules and penalties before you send your next campaign. The stakes are real, and the regulators are active.

Penalties under the Spam Act 2003

ACMA can issue infringement notices and seek civil penalties through the Federal Court for breaches of the Spam Act. Penalties for serious or repeated contraventions can reach into the millions of dollars for bodies corporate. ACMA has pursued enforcement action against businesses of all sizes, and it regularly publishes outcomes as a deterrent.

The Spam Act 2003 sets out the full penalty schedule. ACMA’s enforcement page details recent actions and compliance priorities.

Privacy Act obligations for SMS data

The Privacy Act 1988 applies to organisations with annual turnover above AU$3 million, as well as certain other entities (including health providers and credit providers). Reform is expected to extend coverage to all businesses, so it is worth complying regardless of your turnover.

The Australian Privacy Principles (APPs) require transparent collection practices, secure storage of personal data, and the right for individuals to access and correct their information. In practical terms, you need a privacy policy that explains how you collect and use mobile numbers for marketing. The OAIC provides guidance on meeting your APP obligations.

Do Not Call Register considerations

The Do Not Call Register (DNCR) primarily covers voice telemarketing calls rather than SMS marketing. However, checking your subscriber list against the register is considered good practice. It reduces complaint risk and demonstrates that your business takes consent seriously.

SMS marketing best practices in Australia

What does a well-run SMS program actually look like beyond the legal minimums? These practices can help you get better results while keeping you firmly on the right side of the rules.

  • Time your texts thoughtfully: Send during standard business hours in the recipient’s time zone. A flash sale text at 6am AEST will annoy your subscribers in Sydney, and it will arrive even earlier for your customers in Perth (AWST).
  • Keep messages concise: Aim for under 160 characters to avoid splitting into multiple SMS segments, which increases your cost per message.
  • Personalise where possible: Use the subscriber’s first name and tailor content based on their purchase history or preferences. A yoga studio sending class reminders based on a member’s usual schedule feels helpful, not pushy.
  • Segment your list: Group subscribers by location, interest, or engagement level. A restaurant in Melbourne’s inner north does not need to text customers on the Gold Coast about a Tuesday lunch special.
  • Pair SMS with email: Use texts for time-sensitive alerts (such as flash sales and appointment reminders) and email for longer content. A multi-channel approach respects subscriber preferences and keeps your message frequency in check.
  • Test before you send: Preview your messages across devices and double-check that links work, the unsubscribe option functions, and your sender ID displays correctly.
  • Monitor opt-out rates: A rising unsubscribe rate signals that your frequency or content needs adjustment. Treat it as feedback, not failure.
  • Keep consent records current: Regularly clean your SMS list to remove inactive or unverified subscribers. A tidy list is a compliant list.

Paying attention to SMS marketing best practices will protect your business and improve your results at the same time.

Common SMS marketing compliance mistakes

Even well-meaning businesses slip up. Here are the most common mistakes and how to fix them before they become problems.

  • The mistake: Sending texts to people who have not explicitly opted in.
  • How to fix it: Implement a clear opt-in process where subscribers confirm their consent before receiving marketing messages. Never import contacts from purchased lists or third-party sources.
  • The mistake: Using a generic or unclear sender name.
  • How to fix it: Always identify your business name clearly in every message. If you use a branded sender ID, register it with ACMA before 1 July 2026.
  • The mistake: Making it difficult to unsubscribe.
  • How to fix it: Include “Reply STOP to opt out” in every marketing text and process unsubscribes promptly. Burying the opt-out option or ignoring STOP replies is a fast path to an ACMA complaint.
  • The mistake: Sending texts at antisocial hours.
  • How to fix it: Schedule campaigns during business hours in the recipient’s local time zone. Avoid early mornings, late evenings, and public holidays.
  • The mistake: Assuming transactional messages can include promotions freely.
  • How to fix it: If your transactional text includes any promotional content (such as a discount code or upsell), treat the entire message as a commercial message and apply full Spam Act requirements.

Frequently asked questions about SMS marketing laws in Australia

Yes. The Spam Act 2003 requires either express or inferred consent before you send any commercial electronic message, including SMS. Express consent, where the subscriber actively opts in, is always the safest approach. Inferred consent applies in limited circumstances (for example, an existing business relationship), but it has stricter boundaries.

ACMA can investigate complaints, issue infringement notices, and pursue civil penalties through the Federal Court. Penalties for bodies corporate can reach into the millions of dollars for serious or repeated contraventions. Individuals can also face significant fines.

Does the Spam Act apply to transactional texts?

Purely transactional messages (such as order confirmations and appointment reminders) are generally treated differently from promotional content under the Spam Act, but they must still identify the sender. If any promotional content is included, the entire message is treated as commercial and all three Spam Act requirements apply.

What is the SMS Sender ID Register?

From 1 July 2026, businesses that send texts using a branded sender name instead of a phone number must register that name with ACMA. The register aims to reduce SMS scams by verifying legitimate business senders. Unregistered sender IDs will be labelled “Unverified” by carriers.

Can I buy a list of mobile numbers and text them?

No. Purchased lists do not have valid consent. Sending marketing texts to purchased contacts violates the Spam Act and is one of the most common triggers for ACMA enforcement action. Build your list organically through sign-up forms, in-store opt-ins, and Text to Join.

Stay compliant and grow your audience with Constant Contact’s SMS marketing tools

Now that you know the rules, you need tools that make compliance straightforward from day one.

Constant Contact’s SMS marketing tools are built with compliance in mind. Consent management, automatic opt-out processing, and clear sender identification are all handled within the platform. That means you can focus on writing messages that engage your customers, rather than worrying about ticking every legal box.

Here is what you get:

  • Built-in consent tracking for SMS subscribers
  • Automatic STOP keyword processing that removes opted-out contacts instantly
  • SMS and email in one platform for multi-channel campaigns
  • Segmentation tools to target the right subscribers with the right messages
  • AI writing assistance for quick, compliant message drafting

Ready to start sending compliant SMS campaigns? Sign up for a free trial to see how it works. Already a Constant Contact customer? Add SMS to your current plan and start sending today. If you’re already a Premium subscriber, you can send up to 500 messages a month for free.

Share with your network
Avatar photo

Whitney Filloon is a writer, content strategist, and former Vox Media journalist who has worked with enterprise brands like Skype and Microsoft and helped dozens of small businesses figure out their "secret sauce".

Related Articles

Sign up free