How Do You Automate SMS Marketing Campaigns and Stay Spam Act Compliant?

Detailed Explanation

SMS marketing in Australia sits under the Spam Act 2003, which the Australian Communications and Media Authority (ACMA) enforces. Unlike the US, where carriers themselves block "application-to-person" text traffic that hasn't been registered through a scheme called A2P 10DLC, Australian carriers don't run an equivalent gatekeeping system — there's no brand or campaign registration step standing between an automated SMS platform and a customer's phone. That makes the Australian compliance problem look different in shape from the US one: instead of a mandatory technical registration prerequisite, the requirements are about how you send, not whether you're allowed to send at all once you've built the automation.

Three things the Spam Act requires of every commercial electronic message, texts included:

1. Consent — express consent (an explicit opt-in) or reasonably inferred consent from a genuine existing relationship, for that specific recipient, obtained the right way (not purchased or scraped as a list).
2. Clear sender identification — the message needs to make it reasonably clear which business sent it.
3. A functional unsubscribe — a free, low-friction way to opt out, honoured promptly and permanently.

Once those three requirements are built into the automation itself, running SMS marketing campaigns is the more familiar part: connecting a platform to your customer list and triggering sends based on segments, schedules, or events, the same way email marketing automation works.

Setting Up SMS Marketing Automation

1. Build consent capture before building anything else. Capture explicit opt-in at the point of collection — a checkbox at checkout (not pre-ticked), a keyword-based opt-in like texting JOIN to a number, or a signup form — and record the timestamp, method, and wording shown at the time. If you're relying on inferred consent from an existing customer relationship instead, document the relationship and how the number was obtained, since this is the weaker and more commonly challenged basis for consent.

2. Treat marketing consent as separate from transactional consent. A customer who agreed to receive an order-shipped text hasn't necessarily consented to a promotional discount text — the Spam Act's disclosure and consent expectations apply more strictly to marketing messages than to service or transactional messages, mirroring the same recorded-consent discipline used for transactional SMS and WhatsApp messaging.

3. Segment your list and trigger sends from real customer data. Connect your SMS platform to the CRM or e-commerce platform holding purchase history, engagement, and preference data, the same way email marketing automation pulls from that data — a flat, unsegmented blast to an entire list performs worse and drives more opt-outs than messages triggered by relevant behaviour (a past purchase category, cart abandonment, a loyalty-tier milestone).

4. Build sender identification and unsubscribe into every template, not as an afterthought. Every marketing text needs to clearly identify your business and include a working opt-out — a return-text STOP mechanism is sufficient under ACMA guidance — and the platform needs to honour it immediately and permanently across the whole list, not just that campaign.

5. Respect quiet hours and frequency caps in the automation logic itself. There's no single legislated sending window for SMS marketing in Australia the way there is for some other channels, but building a reasonable sending-window restriction and a frequency cap per customer per week directly into the platform's automation rules — rather than relying on a marketer to remember not to schedule a send at 6am — is good practice and reduces spam complaints.

6. If you also market by SMS into the US, handle that traffic as a separate compliance track. A business messaging US numbers needs A2P 10DLC brand and campaign registration through The Campaign Registry for that US-bound traffic specifically, regardless of where the business itself is based — this doesn't apply to Australian-only sending, but it's a real, separate requirement the moment US recipients are in scope.

Things to Consider

• This is a distinct problem from transactional SMS. How do you automate SMS and WhatsApp messages to customers covers appointment reminders, order updates, and support messaging — generally held to a more permissive consent standard than marketing. Don't assume a customer's consent to one covers the other.
• Inferred consent is narrower than most businesses assume. The Spam Act's inferred-consent basis depends on a genuine existing relationship and how the number was actually obtained — it doesn't stretch to cover a purchased list, a scraped list, or a number collected for an unrelated purpose. When in doubt, treat express opt-in as the safer basis to build automation around.
• The ACMA actively enforces the unsubscribe requirement, with real penalties. Making it hard to opt out — requiring an account login, charging more than a standard message cost, or simply not honouring STOP requests promptly — is exactly the pattern the ACMA has taken enforcement action over, including a multi-million-dollar infringement notice against a major bank.
• Australia's lack of a carrier-registration scheme doesn't mean carriers never filter or block traffic. Australian carriers and spam-filtering systems can still throttle or block traffic that looks like unsolicited bulk messaging based on sending patterns and complaint rates — there's just no formal registration step to complete in advance the way A2P 10DLC requires in the US.
• A2P 10DLC still applies, separately, if you message US numbers. If your customer base includes people on US phone numbers, that segment of your sending is subject to US carrier rules regardless of where your business is registered — check current requirements with your SMS platform before assuming Australian compliance alone covers it.
• For a customer who's opted out of texts entirely, physical mail carries none of this consent regime. See how do you automate triggered direct mail from your CRM data for a channel that reaches a customer without SMS-specific consent requirements applying.

Common Mistakes

• Relying on inferred consent for a purchased or scraped contact list. Inferred consent depends on a genuine existing relationship — a list acquired from a third party doesn't meet that bar, and sending marketing texts to it is exactly the kind of conduct the Spam Act targets.
• Treating transactional-message opt-in as covering marketing sends. Sending a promotional text to someone who only agreed to receive shipping updates is both a consent problem and a fast route to spam complaints and opt-outs.
• Building an unsubscribe mechanism with friction attached. Requiring an account login, extra personal information, or a non-obvious process to opt out is precisely what the ACMA has penalised businesses for — a plain STOP reply needs to work, immediately.
• Assuming Australian rules are the same as the US's, or that a US-focused SMS platform's default settings suit an AU business. A2P 10DLC registration is a US-specific requirement with no Australian equivalent — don't build compliance workflows around a US registration step that isn't relevant to Australian-only sending, and don't skip the Spam Act's consent and unsubscribe requirements just because a platform's default onboarding was built for a US audience.
• Not treating STOP requests as immediate and permanent. A delayed or incomplete opt-out mechanism is both a compliance breach and the fastest way to generate spam complaints against your sending number.