# Is it legal to send bulk SMS without KYC?

> KYC is a duty of regulated financial firms, not of people who send text messages. What the law regulates is consent, content and sender rules, and those fall on you wherever your provider is.

Updated 2026-09-21. Level: Intermediate. By SMSMeteor.

## Key takeaways

- KYC is a duty of regulated financial firms, not of SMS senders.
- Consent, opt-out, hours and honest identification bind the sender everywhere.
- Registration programmes such as 10DLC and DLT need a legal entity.
- A no-KYC provider enforces content rules instead of identity.

## The short answer

Yes. No law requires you to hand over identity documents to send a text message, and none requires a messaging provider to collect them. Identity checks at SMS providers are a commercial policy. What is regulated, almost everywhere, is the message itself: who agreed to receive it, what it says, who it claims to come from and when it arrives. Those rules bind you as the sender whether or not your provider knows your name. This guide is general information, not legal advice.

## Where KYC comes from

Know-your-customer duties come from anti-money-laundering law. They apply to banks, payment institutions, exchanges and other regulated financial businesses, which must identify customers before moving money for them. Handing text messages to mobile operators is a telecommunications service, outside that perimeter. Providers that ask for a passport do so to reassure carriers and to filter customers by paperwork, not because a statute tells them to.

## What the law asks of the sender

- Consent for marketing. In the United States the TCPA requires prior express written consent for automated promotional texts, with statutory damages per message. In the European Union and the United Kingdom, the ePrivacy rules (PECR in the UK) require consent or an existing customer relationship, alongside the GDPR for the data itself. Most other countries have an equivalent.

- A working opt-out in every marketing message.

- Permitted hours. Many countries restrict promotional texts to daytime: 8 a.m. to 9 p.m. in the United States, 8 a.m. to 8 p.m. and not on Sundays in France, 8 a.m. to 8 p.m. in Nigeria.

- Honest identification. Pretending to be a bank, a carrier or a public service is fraud everywhere.

None of this depends on your provider's onboarding. A sender who respects it is lawful on a no-KYC gateway; a sender who ignores it is unlawful on a fully verified one.

## Registration programmes are not KYC

Some markets run sender registration schemes: 10DLC brands and campaigns in the United States, DLT entities, headers and templates in India, sender ID registration in the Gulf, Turkey, Nigeria and others. They are carrier or regulator programmes that attach a legal entity to a sender name. A no-KYC account cannot enrol you in the ones that require an entity, so you get the unregistered behaviour of the destination: a numeric or shared sender instead of your brand. Delivery continues; branding does not. See the guides on [10DLC](https://smsmeteor.com/guides/10dlc-and-international-senders) and [India](https://smsmeteor.com/guides/bulk-sms-to-india-dlt).

## What a provider must still do

A provider without identity checks still has to keep abusive traffic off its routes, or it loses them. The instruments are an acceptable use policy that names prohibited traffic, content filtering for phishing patterns, monitoring of complaint signals, and closing accounts that break the rules. That is how [no-KYC works here](https://smsmeteor.com/no-kyc-sms): the policy governs content, not people.

## A sender's checklist

- Keep the consent source and date next to every marketing number.

- Put a STOP keyword or an opt-out link in every promotional message.

- Schedule by the recipient's local time and keep default quiet hours on.

- Identify yourself in the first words of the text.

- Separate transactional and promotional streams; never flag an offer as transactional.

---
Source: https://smsmeteor.com/guides/is-bulk-sms-without-kyc-legal (HTML). Generated by SMSMeteor from the same data as the page. Summary of the whole site: https://smsmeteor.com/llms.txt