← Back to blog

SMS Marketing in Australia: 2026 Compliance Guide

August 13, 2026
SMS Marketing in Australia: 2026 Compliance Guide

SMS marketing in Australia is legal, but three things must be in place before you send a single message: lawful consent, clear sender identification, and a working opt-out mechanism. Since July 1, 2026, there is a fourth obligation for branded campaigns: register your Sender ID with the Australian SMS Sender ID Register, or your messages will display as "Unverified" to recipients.

Three immediate must-dos:

  1. Confirm you have documented consent for every number on your list.
  2. Include your business name and a working "Reply STOP" instruction in every marketing message.
  3. If you use a branded Sender ID (your business name instead of a phone number), register it with ACMA before sending.

Australia-friendly platforms to shortlist:

  • ClickSend — API-first, flexible pricing, good for developers and automation-heavy teams.
  • MessageMedia — local Australian support, compliance-focused tooling built for ANZ.
  • Twilio — enterprise-grade APIs for teams needing global scale and deep programmability.
  • SMSBroadcast — simple bulk sending, local delivery focus, suited to small and medium businesses.

Pro Tip: Before you touch a platform, audit your existing contact list first. Sending to unverified or unconsented numbers is the fastest way to trigger an ACMA complaint.

Industry benchmarks frequently cite very high open rates for SMS, which is why Australian businesses from retail to professional services are adding it to their outreach mix. The rest of this guide covers exactly how to do it right.


Key Takeaways

SMS marketing in Australia is legal under the Spam Act 2003 if you have documented consent, identify your business in every message, and process opt-outs within 5 working days.

PointDetails
Spam Act 2003 complianceEvery commercial SMS needs consent, sender ID, and a working opt-out before you send.
Sender ID registration (July 2026)Register branded Sender IDs with ACMA or messages display as "Unverified" to recipients.
Consent must come firstYou cannot text someone to ask for consent; collect it via web form, in-store, or phone call.
Opt-out processingProcess every "Reply STOP" within 5 working days and add the number to your suppression list immediately.
Raki Solutions for B2B teamsFor managed multichannel outbound including compliant SMS flows across APAC and ANZ, Raki Solutions handles execution end-to-end.

Table of Contents

What does SMS marketing actually cover?

SMS marketing is the practice of sending promotional or transactional text messages to customers who have opted in to receive them. The distinction between message types matters legally, not just operationally.

Promotional messages advertise a product, service, sale, or event. They require express or inferred consent under the Spam Act 2003 and must include an opt-out mechanism.

Transactional messages confirm an action the customer already took: an order shipped, an appointment confirmed, a password reset sent. These generally carry lower compliance risk, but they can still become commercial if you add a promotional element.

Conversational messages are two-way exchanges, such as a customer replying to a booking confirmation or a service business following up on a quote. Two-way SMS workflows are increasingly common in service industries and require the same consent foundations.

Common use cases Australian businesses run:

  • Flash sale announcements and seasonal promotions
  • Appointment reminders and booking confirmations
  • Order dispatch and delivery updates
  • One-time passwords (OTPs) and account alerts
  • Post-purchase review requests
  • Re-engagement campaigns for lapsed customers

That last point catches businesses off guard. A message that says "Your quote is ready — call us on 03 XXXX XXXX" contains a business phone number and is therefore commercial. Consent is required.

Pro Tip: Label every message type in your platform before you build campaigns. Promotional, transactional, and conversational messages may need different consent records and opt-out handling.


Yes, and the rules are straightforward once you understand the framework. The Spam Act 2003 governs all commercial electronic messages in Australia, including SMS and MMS. A commercial electronic message is any message that offers, advertises, or promotes a business, good, or service.

Three obligations apply to every commercial SMS:

  1. Consent — you must have the recipient's permission before sending.
  2. Identification — every message must clearly identify who sent it.
  3. Unsubscribe — every message must include a functional way to opt out.

Fail any one of these and you are in breach, regardless of message volume or intent.

What counts as a commercial message?

The definition is broader than most businesses expect. A message is commercial if it contains a promotional offer, a business phone number, a website link, or any content that could reasonably be read as advertising. Compliance specialists note that even short, factual-sounding messages often cross this line.

Enforcement and penalties

The Australian Communications and Media Authority (ACMA) enforces the Spam Act and has broad investigative and penalty powers. ACMA enforcement actions have resulted in significant financial penalties for large-scale violations in recent years. ACMA can issue formal warnings, infringement notices, and pursue civil penalty orders through the Federal Court.

Compliance checklist:

  • Consent obtained and documented before sending
  • Business name visible in every message
  • Opt-out instruction included in every marketing message
  • Opt-out requests processed within 5 working days
  • Branded Sender ID registered (if applicable, from July 1, 2026)
  • Suppression list maintained and applied before every send
  • Privacy Act obligations met for personal information handling

What changed with the SMS Sender ID Register from July 1, 2026?

A Sender ID is the name or number that appears in the "From" field of a text message. Many businesses use their brand name (e.g., "ACME Retail") rather than a phone number. From July 1, 2026, any business sending branded text messages must register that Sender ID with the SMS Sender ID Register. Unregistered branded IDs are flagged as "Unverified" by mobile carriers, which reduces consumer trust and can suppress open rates.

The register is operated by ACMA. Carriers use verification status to group and route messages, so unverified IDs are more likely to be deprioritized or labeled as suspicious.

How to register your Sender ID

  1. Confirm your business has an active ABN.
  2. Visit the ACMA Sender ID registration page and follow the application steps.
  3. Provide your business name, ABN, and the exact Sender ID string you intend to use.
  4. Wait for ACMA confirmation before sending branded messages at scale.
  5. Keep a record of your registration date and confirmation reference.

What if you use a phone number instead?

If your messages send from a standard local or long-code number rather than a branded name, Sender ID registration does not apply. This is a practical workaround for small businesses that want to avoid the registration process, though it means recipients see a number rather than your brand name.

Key considerations:

  • Branded Sender IDs cannot receive replies; a local number enables two-way messaging.
  • Registration applies per Sender ID string, so "ACME" and "ACME Retail" are separate registrations.
  • Aggregators and SMS platforms often handle registration on your behalf; confirm this with your provider before assuming it is done.

Pro Tip: Send a test message to your own mobile before any large campaign. Check whether your Sender ID displays as verified or unverified. If it shows "Unverified," pause and complete registration before scaling.


Consent is the foundation of every compliant SMS campaign. Get it wrong and every message you send is a potential Spam Act breach.

Express consent is explicit, documented permission. A customer ticks a checkbox on your website, signs up via a text-to-join keyword, or verbally opts in at point of sale with a written record kept.

Inferred consent applies when there is an existing business relationship and the message relates to that relationship. A customer who bought from you last month may have inferred consent for a follow-up message about their purchase, but not for an unrelated promotion.

You cannot send an SMS to ask for consent. This is a hard rule under the Spam Act: consent must be collected through another channel first, such as a web form, a face-to-face signup, or a phone call where the customer verbally agrees.

  • Web opt-in form with a clear checkbox (pre-ticked boxes do not count)
  • Text-to-join keyword (customer texts a keyword to your number)
  • In-store paper signup with a clear description of what they are signing up for
  • Checkout flow with an explicit SMS marketing opt-in field
  • Phone call with a verbal opt-in recorded and logged

Unsubscribe requirements

Every marketing SMS must include an opt-out instruction. The standard in Australia is "Reply STOP." The rules:

  1. The opt-out must be free for the recipient.
  2. You cannot require the recipient to provide additional information to unsubscribe.
  3. You must process opt-out requests promptly, generally within a few working days as recommended by ACMA guidance.
  4. Once someone opts out, they should be added to your suppression list immediately.

"Reply STOP to unsubscribe" is the minimum required wording. Adding a cost ("Reply STOP — standard rates apply") is acceptable only if that cost is genuinely incurred; implying a cost that does not exist is misleading.

Sample opt-in wording:

"Yes, I'd like to receive SMS updates and offers from [Business Name]. Message frequency varies. Reply STOP to unsubscribe."

Sample opt-out confirmation:

"[Business Name]: You've been unsubscribed. No further messages will be sent. Questions? Call 1300 XXX XXX."

Record-keeping basics

Store for each subscriber: phone number, consent type (express or inferred), timestamp, source (web form, POS, event), and a reference link to the stored evidence. The Spam Act 2003 does not specify a minimum retention period, but ACMA recommends keeping records for as long as you send to that number, plus a reasonable period afterward.

Hands handling digital compliance records on devices

Pro Tip: Export your consent records monthly and store them in a separate location from your SMS platform. If a platform account is suspended or closed, you still need to produce consent evidence.


How do you grow a compliant SMS subscriber list in Australia?

List quality beats list size every time. A smaller list of genuinely consented subscribers will outperform a large, poorly sourced one on every metric, and it carries far less legal risk.

  1. Web opt-in forms — place them on high-traffic pages (checkout, contact, booking confirmation). State clearly what subscribers will receive and how often.
  2. Text-to-join keywords — promote a keyword (e.g., "Text JOIN to 0400 XXX XXX") in-store, on receipts, or in email footers.
  3. In-store signups — paper forms or tablet-based digital forms at point of sale, with staff trained to explain what the customer is signing up for.
  4. Receipt opt-ins — printed or emailed receipts with a clear opt-in prompt and a QR code linking to a web form.
  5. Event signups — collect numbers at trade shows or pop-ups with a physical form that includes consent language.

For practical retail engagement tactics, this checklist for text message engagement covers common opt-in placements and timing strategies.

Migrating an existing list safely

If you have an existing contact database, do not assume everyone on it has given SMS consent. Run a re-permission campaign via email or another channel before sending marketing SMS to that list. Steps:

  1. Segment contacts by whether you have documented SMS consent.
  2. For contacts with no SMS consent record, send a re-permission email asking them to opt in via a web form.
  3. Remove anyone who does not respond or actively declines.
  4. Document the re-permission process and its outcome.
  5. Apply the resulting suppression list before your first SMS send.

Suppression list hygiene

  • Add every "Reply STOP" response to your suppression list within 24 hours.
  • Deduplicate numbers before each send to avoid double-messaging.
  • Remove bounced or invalid numbers after two consecutive delivery failures.
  • Check your list against the Do Not Call Register if you are also running voice campaigns; the registers are separate but overlap in practice.

Pro Tip: Small-business playbooks recommend 2–4 marketing messages per month as a conservative cadence. Starting there protects deliverability and keeps opt-out rates low while you learn what your audience responds to.


Which SMS platform should you use in Australia?

The right platform depends on your technical capability, message volume, compliance needs, and whether you want a self-serve tool or managed execution. The table below compares the main options available to Australian businesses.

ProviderBest forPricing modelCompliance featuresSender ID supportIntegrationsAU support
Raki SolutionsB2B teams wanting managed outbound with SMS integrated into a multichannel pipelineFixed-fee monthly; tiered by guaranteed qualified meetingsFull campaign setup, consent workflow design, suppression managementManaged as part of campaign setupEmail, LinkedIn, CRM outreach combinedAustralia-based; dedicated account management
ClickSendDevelopers and teams needing API-driven SMS with flexible per-message pricingPay-as-you-go and volume plans; per-message pricingOpt-out automation, delivery reportingSender ID registration supportREST API, Zapier, CRM integrationsAU-hosted; local support available
MessageMediaBusinesses wanting a local ANZ provider with compliance-focused toolingVolume-based plans; local pricingConsent tracking, automated opt-out, compliance guidesANZ Sender ID workflow supportCRM, e-commerce, marketing platformsStrong local AU/NZ presence
TwilioTeams needing global scale, advanced programmability, and broad channel supportPay-as-you-go API pricing; per-message ratesProgrammable opt-out, compliance APIsSender ID and registration supportExtensive: Salesforce, HubSpot, 200+ integrationsGlobal support; AU region available
SMSBroadcastSmall to medium businesses wanting simple bulk sending and local deliverySimple per-message or bundle pricingBasic opt-out handlingLocal number and Sender ID optionsLimited; focused on simplicityAustralian-based, local support

Buying checklist: minimum features to require

  • Automated suppression list management (STOP replies removed immediately)
  • Delivery receipts and bounce reporting
  • Sender ID registration support or guidance
  • Consent record export capability
  • Australian data residency or clear data handling policy
  • Opt-out processing within 5 working days (confirm this is platform-enforced)

Questions to ask any vendor before signing

  1. Does your platform support the Australian SMS Sender ID Register process?
  2. Where is subscriber data stored, and does it comply with the Australian Privacy Act?
  3. Can I export consent records and suppression lists at any time?
  4. What happens to my data if I cancel my account?
  5. Do you provide compliance documentation I can use in an ACMA audit?

Self-serve platform vs. managed service

Self-serve platforms (ClickSend, MessageMedia, Twilio, SMSBroadcast) give you control and lower per-message costs, but compliance setup, list management, and campaign strategy are your responsibility. A managed service handles execution, compliance workflows, and optimization for you, at a higher cost but with less internal overhead. For B2B teams running SMS as part of a broader outbound strategy, outsourcing to a specialist often produces faster results than building in-house capability from scratch.


What makes an SMS message actually work?

The 160-character GSM-7 limit is not just a technical constraint. It is a discipline that forces clarity. Messages that stay within a single 160-character segment cost less to send, deliver more reliably, and tend to perform better because they get to the point.

Message structure that converts

Every marketing SMS should contain four elements:

  1. Sender identification — your business name at the start if your Sender ID is a number.
  2. Hook — the offer or reason to act, in the first sentence.
  3. CTA — one clear action (shop, book, call, reply).
  4. Opt-out — "Reply STOP to unsubscribe" at the end.

Use a link shortener for URLs to save characters, but avoid generic shorteners (bit.ly) for branded campaigns. Branded short links (yourstore.co/sale) look more trustworthy and are trackable.

Ready-to-use SMS templates for Australian businesses

Welcome message: "Hi [Name], welcome to [Brand]! As a subscriber, you'll get exclusive offers first. Reply STOP to unsubscribe."

Flash sale: Shop now: [link]. Reply STOP to unsubscribe."*

Appointment reminder: "[Brand]: Reminder — your appointment is tomorrow at 2PM. Reply YES to confirm or call 03 XXXX XXXX to reschedule. Reply STOP to unsubscribe."

Delivery update (transactional): "[Brand]: Your order #1234 has been dispatched and will arrive by Friday. Track here: [link]."

Opt-in confirmation: "[Brand]: You're now subscribed to SMS updates. Expect 2–4 messages/month. Reply STOP anytime to unsubscribe."

Re-engagement: "[Brand]: We miss you! Expires Sunday. Reply STOP to unsubscribe."

Post-purchase review request: "[Brand]: Thanks for your recent purchase! Got 60 seconds? Leave us a review: [link]. Reply STOP to unsubscribe."

Service quote follow-up: "[Brand]: Following up on your quote from Monday. Happy to answer questions — call 03 XXXX XXXX or reply here. Reply STOP to unsubscribe."

For service businesses, SMS quote follow-up workflows can significantly improve response rates compared to email alone.

Pro Tip: Never use ALL CAPS in SMS messages. It reads as aggressive and increases opt-out rates. Use sentence case and a conversational tone, even for promotional messages.

Timing and frequency

  • Send between 9 AM and 8 PM in the recipient's local time zone.
  • Avoid public holidays unless the message is directly relevant (e.g., a holiday sale).
  • Stick to 2–4 marketing messages per month until you have data showing your audience tolerates more.
  • Trigger-based messages (abandoned cart, appointment reminder) can send outside normal cadence because they are contextually relevant.

How much does SMS marketing cost in Australia, and what ROI can you expect?

Per-message costs in Australia typically range from low single-digit cents to higher amounts depending on volume, provider, and plan type. Local provider pricing varies, with bulk plans offering lower per-message rates and pay-as-you-go options suiting lower-volume senders.

Cost components to budget for

A simple ROI worked example

Assume a retail business sends a flash sale SMS to 1,000 opted-in subscribers:

  1. Cost: 1,000 messages × 6¢ = $60 in message costs, plus $20 platform fee = $80 total.
  2. Industry open rates are very high for SMS, meaning the vast majority of recipients read the message.
  3. A conservative 5% click-through rate = 49 clicks to the offer page.
  4. A conservative 20% conversion rate on clicks = ~10 purchases.
  5. Average order value of $80 = $800 in revenue.
  6. ROI: ($800 revenue minus $80 cost) / $80 cost = a very strong return on that campaign.

These are conservative assumptions. Time-sensitive promotions, strong offers, and well-segmented lists routinely outperform them. SMS tends to deliver the highest ROI for:

  • Flash sales and limited-time offers (urgency drives immediate action)
  • Appointment reminders (reduces no-shows, which have a direct cost)
  • Black Friday / Cyber Monday campaigns
  • Re-engagement of lapsed customers with a specific incentive

What metrics should you track, and how do you run useful tests?

Core KPIs for SMS campaigns

  • Delivery rate — percentage of messages successfully delivered. Below 95% suggests list hygiene issues.
  • Open rate — industry benchmarks sit near 98% for SMS; a significant drop signals a Sender ID or carrier issue.
  • Click-through rate (CTR) — percentage of recipients who clicked a link. Varies widely by offer and audience.
  • Conversion rate — percentage of clickers who completed the desired action.
  • Opt-out rate — above 1–2% per campaign is a red flag; pause and review message relevance and frequency.
  • Complaint rate — any ACMA complaints should trigger an immediate compliance review.
  • ROI per campaign — revenue attributed to the campaign divided by total send cost.

When to pause a campaign

Review the message content, the consent quality of the list segment, and the timing. Sending to a poorly consented list is the most common cause of high opt-out rates.

A/B test ideas that actually move the needle

  1. Send time — 10 AM vs. 6 PM for the same offer to the same audience segment.
  2. Message length — under 100 characters vs. 140–160 characters.
  3. CTA wording — "Shop now" vs. "Claim your offer" vs. "See the deal."
  4. Personalization — first name included vs. no personalization.
  5. Link placement — link at the end vs. link in the middle of the message.
  6. Offer framing — percentage discount vs. dollar amount off.

Run one variable at a time with a minimum segment size of 200 per variant to get statistically meaningful results. Track results for 48 hours before declaring a winner.

Cross-channel attribution

Tag your SMS links with UTM parameters so Google Analytics (or your analytics platform) can attribute conversions to the SMS channel. Use a consistent naming convention: utm_source=sms&utm_medium=text&utm_campaign=flash-sale-june. This lets you compare SMS performance against email, paid, and organic in the same dashboard.

Pro Tip: Build your sales development playbook to include SMS as a tracked channel from day one. Retrofitting attribution after campaigns have run means losing the data that would have justified scaling.


Compliance checklist and record-keeping for ACMA audits

A compliance audit is not a theoretical risk. ACMA investigates complaints and can request records at any time. The following checklist and record template give you what you need to respond confidently.

Step-by-step compliance checklist

  1. Consent captured and documented for every subscriber before first send.
  2. Consent type recorded (express or inferred) with timestamp and source.
  3. Sender ID registered with ACMA (if using a branded name from July 1, 2026).
  4. Every marketing message includes business name and "Reply STOP" instruction.
  5. Suppression list applied before every campaign send.
  6. Opt-out requests processed within 5 working days.
  7. Personal information handled under the Australian Privacy Act (collection notice provided, data not shared without consent).
  8. Do Not Call Register checked for any numbers also used in voice outreach.
  9. Campaign records retained with message content, send date, and list segment used.
  10. Platform data residency confirmed as compliant with Australian Privacy Act requirements.

Subscriber record template

FieldWhat to store
Phone numberFull number in international format
Consent typeExpress or inferred
Consent timestampDate and time of opt-in
Consent sourceWeb form, POS, event, phone call
Evidence referenceURL or file path to stored form export or recording
Opt-out dateDate STOP received (if applicable)
Suppression appliedDate added to suppression list

Store these records in a system separate from your SMS platform. If your platform account is closed or suspended, you still need to produce this evidence.

Pro Tip: Automate consent record exports on a monthly schedule using your platform's API or export function. Store them in a cloud folder with access-controlled permissions. This takes 30 minutes to set up and eliminates the scramble if ACMA ever queries a campaign.


How to send your first compliant SMS campaign in 5 steps

A small business can go from zero to first compliant send in under a week. Here is the sequence:

  1. Pick a platform (Day 1–2). Choose based on your technical capability and volume. SMSBroadcast or MessageMedia suit most small businesses starting out. Developers with integration needs should evaluate ClickSend or Twilio. B2B teams running multichannel outbound should consider a managed service.

  2. Collect and verify consent (Day 2–4). Set up your opt-in mechanism (web form, text-to-join, or in-store signup). Do not import any existing list without confirming documented SMS consent for each number. Run a re-permission campaign via email for any contacts without a clear consent record.

  3. Register your Sender ID if applicable (Day 2–3, parallel). If you plan to use a branded name as your Sender ID, start the ACMA registration process immediately. Registration takes time, and sending with an unregistered branded ID after July 1, 2026 will flag your messages as "Unverified."

  4. Draft and test messages (Day 4–5). Write your first campaign using the templates in this guide. Send test messages to your own number and at least two colleagues. Check that the Sender ID displays correctly, the opt-out link works, and the message renders cleanly on both iOS and Android.

  5. Send a small pilot and monitor (Day 5–7). Start with a segment of 100–200 subscribers. Track delivery rate, opt-out rate, and any replies for 48 hours before sending to your full list. If opt-out rate exceeds 2%, pause and review before scaling.

Pilot metrics to watch before scaling:

  • Delivery rate above 95%
  • Opt-out rate below 1%
  • No carrier filtering or "Unverified" flags on your Sender ID
  • At least one measurable conversion (click, booking, purchase)

For practical outreach tactics that complement SMS in a multichannel sequence, the cadence and timing principles transfer directly.


The strategic case for SMS in B2B outbound: a publisher perspective

Most B2B outreach conversations focus on email and LinkedIn. SMS sits in the background, underused and often misunderstood as a consumer channel. That framing is wrong, and it is costing Australian B2B teams real pipeline.

In ANZ markets, decision-makers are reachable by phone and responsive to direct, respectful contact. A well-timed SMS, sent after an email and before a call, does something neither of those channels does alone: it creates a moment of personal acknowledgment that is hard to ignore. Not because it is intrusive, but because it is rare. Most of your competitors are not doing it.

Person viewing SMS message on smartphone outdoors

The compliance framework matters here more than in consumer marketing, because B2B contacts are often reached through inferred consent tied to a business relationship. That relationship must be genuine and documented. Sending SMS to a cold list of scraped numbers is not B2B outreach; it is a Spam Act breach waiting to happen.

The right model for most B2B teams is a managed multichannel sequence where SMS is one touch in a coordinated flow alongside email and calls, not a standalone blast. That is exactly where a managed service outperforms a self-serve platform: the sequencing, timing, and compliance infrastructure are handled by people who run these campaigns every day. For teams expanding into APAC or ANZ without an established local presence, building that infrastructure in-house from scratch is the slowest and most expensive path to pipeline.


Raki Solutions: managed outbound for B2B teams in APAC and ANZ

The platforms compared in this guide are self-serve tools. They are the right choice if you have the internal capacity to manage compliance, build sequences, and optimize campaigns. Many Australian B2B teams do not, especially when expanding into new APAC markets where they lack local relationships and established outreach infrastructure.

Raki Solutions

Raki Solutions is a different route to the same goal: qualified meetings and pipeline growth, without building the outreach machine yourself. Rather than licensing a platform and figuring out consent workflows, Sender ID registration, and multichannel sequencing in-house, you get a dedicated SDR team that handles all of it, including compliant SMS flows integrated into a broader email, LinkedIn, and phone outreach strategy. The model is fixed-fee and results-guaranteed, with agreed qualified meeting targets built into every engagement.

For B2B companies targeting ANZ expansion, that combination of local market knowledge, multichannel execution, and compliance infrastructure is what separates a managed SDR service from a platform subscription. If your team is ready to move from platform evaluation to pipeline results, book a discovery call with Raki Solutions to see what a structured outbound program looks like for your market and offer.

This article is general information, not a substitute for advice from a qualified lawyer. Consult a qualified legal professional about your own circumstances before acting on anything here.

Sources

For compliance reading, registration steps, and enforcement history, these are the primary sources to consult:

Consult business.gov.au for plain-language compliance guidance, legislation.gov.au for the legal text, and acma.gov.au for registration and enforcement history.