Somewhere in your intake stack there is a form that says something like “by submitting this form you agree to be contacted.” That sentence was probably written by a web developer in an afternoon, and it is now the only thing standing between your firm and a class action complaint filed by a plaintiff lawyer who does exactly what you do for a living.
Texting is the reason this matters more in 2026 than it did five years ago. Prospects who ignore a phone call from an unknown number will answer a text in under two minutes. Firms that add SMS to their intake flow routinely see contact rates on web leads climb from roughly one in three to two in three, because the medium meets people where they already are. That is real money. It is also a regulated channel, and the rules that govern it are stricter than the ones that govern your phone room.
This is an operational guide, not legal advice. Your ethics counsel and your state bar have the final word, and the specifics differ by state. What follows is what we see working and failing on real law firm intake systems, and what a partner should be asking the marketing team to fix this month.
Why Texting Beats Calling on Speed to Lead
The economics of intake are simple. A web form lead that gets a response in five minutes converts to a signed matter at several times the rate of one answered in an hour, and the curve falls off hard after the first thirty minutes. Most firms already know this. The problem is that a call is a synchronous demand on the prospect. They have to stop what they are doing, in a moment when they may be at work, in a hospital hallway, or sitting in a body shop parking lot.
A text is asynchronous. It sits there. It gets read. Three practical advantages show up in the numbers.
- Read rates. A text from a business gets opened within minutes in the overwhelming majority of cases. A voicemail from an unknown number frequently never gets played at all.
- Recovery of dead leads. Leads that went to voicemail twice and would otherwise be marked unreachable often reply to a single short text. On the intake logs we audit, this segment alone is usually worth five to ten percent of total signed matters.
- Documentation. Every exchange is written, timestamped, and searchable. When a prospect later disputes what your intake specialist promised, you have the thread.
None of that helps if the channel is switched off because someone sent a message to a number that never agreed to receive one. The measurement side of this, how you know your response times and contact rates rather than guessing at them, is covered in our piece on call tracking and speed to lead for law firms. Consent is the permission layer underneath that machinery.
What Express Written Consent Actually Requires
Under the Telephone Consumer Protection Act, any marketing text sent using an automated system requires prior express written consent from the recipient. Statutory damages run five hundred dollars per message, trebled to fifteen hundred dollars for willful or knowing violations, with no cap. A single bad campaign to twenty thousand numbers is arithmetic that gets a managing partner’s attention quickly. The FCC maintains a plain language explanation of the current rules on unwanted calls and texts in its consumer guide to robocalls and texts, and it is worth reading once with your own forms open beside it.
Express written consent is a term of art. It is not the same as a prospect handing you their cell number. It is not the same as a checkbox that says “I agree to the terms.” A disclosure that holds up has four components, and most law firm forms are missing at least two of them.
The Four Parts a Disclosure Needs
- A clear statement that the consumer is agreeing to receive text messages, naming the specific business that will send them. “Our partners” and “our network” are the two phrases that turn a defensible form into a liability. Name the firm.
- Disclosure that automated technology may be used, if it will be. Your intake platform almost certainly qualifies. Say so.
- A statement that consent is not a condition of purchase or service. For a law firm this reads as consent not being required to hire the firm or to have the case evaluated. If your form blocks submission unless the box is ticked, you have failed this element and created a bad fact for a jury at the same time.
- Message frequency, data rate, and opt out language. Standard phrasing covers message and data rates applying, frequency varying, and the recipient being able to reply STOP to stop or HELP for help.
Put the whole thing in readable type. Nine point gray text under a button is the single most common defect we find, and it is the one opposing counsel screenshots first. If a fifty five year old prospect on a phone in daylight cannot read it, it is not conspicuous, and conspicuousness is the whole point.
Checkbox Placement, Pre Ticking, and Bundling
Three design decisions decide whether your consent record survives contact with a challenge.
Unchecked by default, always. A pre ticked box is not an affirmative act by the consumer. Some platforms still ship this way. Check your form today, in a private browser window, and look at the actual rendered state rather than the settings panel.
Separate the SMS consent from everything else. Bundling text consent into the same checkbox as your privacy policy acceptance destroys the argument that the consumer specifically agreed to texts. One checkbox, one purpose. If you also want email marketing consent or a recorded call disclosure, those get their own controls.
Place the disclosure above the submit button, not below it. Consent should be visible at the moment of the act, not discoverable afterward by scrolling. On mobile this often means the disclosure sits between the last field and the button, which conversion people hate because it adds vertical distance. Accept the friction. In practice the completion rate cost is one to three percent, and the downside it prevents is measured in six figures.
One more tradeoff worth naming honestly. Every additional checkbox costs conversions. We have tested this on live law firm forms and the effect is real but small, and it is smallest when the disclosure is written in plain language rather than legalese. “Text me about my case” converts better than a wall of statutory recitation, and you can carry the required elements in a short paragraph beneath it.
One Consent Does Not Cover Every Message
There is a meaningful distinction between transactional and marketing messages, and firms get burned by ignoring it.
A text responding directly to an inbound inquiry, confirming an appointment, or sending a document link is generally treated as transactional. A text months later announcing that the firm now handles a new mass tort is marketing, and it requires marketing consent that a prospect who filled out a car accident form in 2023 never gave you.
Two rules keep this clean. First, tag every contact record with the consent type, the source URL, and the date. Second, do not run a marketing blast against your entire CRM because the list is sitting there. This is precisely the scenario where mass tort marketing and paid intake velocity creates pressure to reuse old data, and it is where the largest TCPA exposures in legal marketing have originated.
Revocation deserves its own note. Under the FCC rules that took effect in 2025, a consumer can revoke consent through any reasonable means, and you must honor it within ten business days. Reasonable means includes replying with words other than STOP. “Quit,” “cancel,” “unsubscribe,” “opt out,” and “revoke” all count, and a plain sentence like “please stop texting me” counts as well. If your platform only listens for the literal word STOP, you have a compliance gap that no lawyer reviewed and no developer flagged. Test it with a real phone this week.
Record Retention That Actually Defends You
The consent you can prove is the only consent you have. The federal statute of limitations for TCPA claims is four years, so keep records for at least five. For every lead, capture and store the following.
- The exact disclosure text that was displayed, versioned. If you edit the language, keep the old version and the date range it was live.
- Timestamp of submission, in a stated time zone.
- IP address and user agent.
- The full URL of the page the form was on, including query parameters, so you can reconstruct the campaign.
- The checkbox state as submitted.
- The complete message log, including every opt out request and the timestamp you honored it.
Screenshots of your current form are not a record. They prove what the page looks like today, not what it said the day that particular lead submitted it. The versioned disclosure snapshot is the piece almost everyone skips, and it is the piece that ends the argument.
Store this where it survives a vendor change. Firms switch intake platforms every few years, and consent records living only inside a tool you no longer pay for are effectively gone. Export to your own storage on a schedule.
The Mass Intake Patterns That Draw Complaints
Complaints and demand letters cluster around a short list of behaviors. Every one of these appears regularly in law firm marketing.
- Purchased or rented lead lists. The seller’s consent form said “our marketing partners,” you were never named, and the consumer has no idea who you are. This is the single largest source of legal industry TCPA exposure.
- Shared lead forms with long partner lists. A hyperlinked list of two hundred companies buried behind “partners” has repeatedly failed to qualify as consent to any one of them. The FCC’s one to one consent rule that would have codified this was vacated by the Eleventh Circuit in January 2025, so the older standard still applies, but designing to the stricter rule costs you almost nothing and removes the fight entirely.
- Texting from an unregistered number. Separate from the TCPA, carriers require 10DLC brand and campaign registration for application to person messaging in the United States. Unregistered traffic gets filtered or blocked, and your intake team spends weeks wondering why replies stopped coming.
- Aggressive follow up cadences. Seven texts in forty eight hours reads as harassment to a person in the worst week of their life. Three to four touches over the first week, then stop, performs nearly as well and generates a fraction of the complaints.
- Texting after hours. The federal window runs 8am to 9pm in the recipient’s time zone, and several states are tighter. Set the time zone from the area code and enforce a quiet hours rule in the platform, not in a policy document nobody reads.
- Messages that read like solicitation. The content itself is a bar issue as much as a TCPA issue. Attorney advertising rules apply to text messages, including required labeling in many states, and direct solicitation restrictions apply with particular force to accident victims. The broader framework is in our overview of ABA compliant law firm marketing rules.
Carrier Filtering Is the Enforcement You Feel First
Long before a demand letter arrives, the carriers punish you. High opt out rates, low reply rates, and template messages that match known spam patterns push your traffic into filtering. Delivery quietly drops. Nobody gets an alert. We have seen firms lose more than half their message delivery for a month without noticing, because the platform reported messages as sent rather than as delivered. Watch delivered rate and opt out rate weekly. An opt out rate above two to three percent means your list quality or your cadence is wrong.
A Two Week Fix List
If you do nothing else, do these in order.
- Open every live form on the site, including landing pages your agency built and forgot, and inventory the consent language on each. Firms routinely find nine forms when they expected three.
- Rewrite the disclosure to include all four required elements, name the firm explicitly, and unbundle the checkbox.
- Confirm the box is unchecked by default and that the form still submits when it is left unchecked.
- Send STOP, then “please stop,” from a real phone and confirm both suppress future messages.
- Verify 10DLC registration is current and matches the sending numbers actually in use.
- Turn on quiet hours by recipient time zone.
- Confirm your platform stores disclosure version, timestamp, IP, and source URL per lead, and set up a monthly export to firm controlled storage.
That is a week of work for one competent person, and it converts an unexamined liability into a documented system.
Get the Consent Layer Right Before You Scale the Volume
Texting is the highest leverage change most firms can make to intake this year. It is also the one channel where moving fast without the paperwork creates an exposure larger than the marketing budget that produced it. The firms that win here do both, a fast text within five minutes of the form hitting the CRM, and a consent record they could hand to opposing counsel without flinching. Rubiks builds and audits law firm intake systems, forms and consent language and speed to lead measurement together, and we will tell you plainly which of your forms is the problem. Talk to Rubiks and we will start with an inventory of every form on your site and what each one actually says.