The crowdfunding campaign hits its goal. Eighteen months later the collectible ships, and somewhere in between the creator has collected a few thousand phone numbers from backers who wanted shipping updates.
Then comes the next campaign, and the obvious move is to text everyone who backed the last one. They liked the thing. They gave their number. What could possibly be wrong with telling them about the sequel.
Quite a lot, as it happens, and the price tag is calculated per message.
Consent Is Narrower Than It Feels
The federal rules covering automated calls and texts generally require clear, specific, written agreement before a business sends marketing content to a mobile number.
Specific is doing a lot of work in that sentence. A number collected so a backer could receive fulfillment updates has agreed to fulfillment updates. It has not agreed to campaign announcements, convention appearance notices, or a heads-up about the limited variant dropping Friday. Buying something does not constitute consent to be marketed to. Neither does a pre-checked box in a pledge flow, and neither does a line in the terms nobody read.
This trips up small operations more than large ones, and not because small operations are careless. It trips them up because the relationship genuinely feels warmer. These are backers. They chose to be there. The instinct that they would obviously want the update is usually correct, and it is entirely separate from whether the message is permitted.
The Math Is Worse Than It Looks
The reason this matters more than a typical regulatory footnote is how damages get counted.
Statutory damages under the relevant federal statute run per message, not per campaign. A single text sent to four thousand backers on a list with no documented consent is not one violation. It is four thousand, and it comes with a clearly defined group of people who all received the same message on the same day.
That structure is why this area attracts organized litigation rather than occasional complaints. There are people who maintain phone numbers specifically to document inbound marketing messages, and firms that build cases around exactly the kind of list a growing creator business accumulates without thinking about it.
Reasonable telemarketing compliance practice for a small operation is not complicated, but it does have to actually exist somewhere other than in someone’s head.
Old Numbers Change Hands
Here is the failure that catches people who did everything right.
A backer signs up in 2023. They consent properly, on a form that says exactly what they are agreeing to. The record is airtight. In 2025 they switch carriers and let the number go. The carrier reassigns it to somebody else.
The next campaign text arrives at a stranger who has never heard of the project. The original consent was genuine. It just does not travel with the number.
Any list built more than a couple of years ago is quietly filling up with these. Nobody notices, because the messages still send and the delivery reports still look fine. Validating numbers against reassignment data before a send is the only thing that catches it, and it is exactly the sort of unglamorous maintenance that never makes it onto a launch checklist.
Blocking Too Much Costs Real Money
There is an opposite mistake worth knowing about, because the instinct after reading any of this is to stop texting anyone.
When permission is unclear, the safe move is to leave people alone. Sensible one record at a time. Applied across a whole list, it removes people the business was entirely entitled to contact: backers who consented properly, customers awaiting an order update, anyone due a message about something they already paid for.
One provider in the contact governance space claims businesses can recover up to 45 percent of their contactable audience once permissions are evaluated properly instead of through blanket removal. That number comes from a company selling the solution, so weigh it accordingly. The mechanism behind it is not in dispute.
For a creator, that suppressed group is the most valuable part of the audience. They are the repeat backers, the people who buy the deluxe tier, the ones who tell three friends. Losing them to a compliance panic nobody planned is a genuine cost that shows up nowhere, because unsent messages generate no metrics.
Catch It Before, Not After
There is a meaningful difference between checking a list afterward and checking it at the moment of sending.
Reviewing campaigns after they go out identifies problems that already happened. The message reached someone, and now there is a record of it on their phone, which is also evidence.
Evaluating each number at the point of send and blocking the ones that fail means nothing improper leaves the building. For a small operation this is usually a platform feature rather than a process, which is worth checking before picking one.
The Twenty-Minute Version
Nobody running a two-person operation is going to build a compliance program. The workable version fits on one page.
Record what each person agreed to, when, through which form, and store it somewhere retrievable by number rather than as a spreadsheet export nobody can search.
Honor opt-outs everywhere at once. Someone who replies STOP to the campaign texts should not keep hearing from the merch store on a different platform.
Check numbers for reassignment before sending to a list that has been sitting for a year or more.
Respect time windows, which vary by state.
Hold any third party sending on your behalf to the same standard, because handing the sending to a vendor does not hand over the liability.
One Question Before The Next Send
Pick a number from the list at random. Try to answer: when did this person consent, on which form, to what exactly, and has the number been checked since.
If that takes an afternoon and the answer comes from documentation, things are in decent shape. If it takes a week and half of it is reconstructed from memory, that gap is the exposure, and it exists whether or not anyone has complained yet.
The list is an asset right up until the moment it becomes the opposite, and the difference between those two states is mostly recordkeeping nobody wanted to do.
