FCC Scraps "Revoke All" and Lets Businesses Choose How Consumers Opt Out

What happened

In 2024, the FCC adopted rules under the Telephone Consumer Protection Act (TCPA) requiring businesses to honor opt-outs made by "any reasonable method." It also required that an opt-out from one type of robocall or robotext apply to all calls and texts that require consent. Most of those rules took effect in April 2025. The "revoke all" piece was put on hold by waiver, most recently until January 31, 2027.

The new order replaces that piece. According to analysis by Nixon Peabody, the change responds to a broad coalition of banks, utilities, healthcare groups and consumer advocates that asked the FCC to reconsider.

What changed

Category-specific opt-outs. For informational robocalls and robotexts, a business may treat an opt-out as applying only to the category of messages the consumer rejected. The FCC's own example: a customer who opts out of payment reminders need not also lose fraud alerts, authentication codes, appointment reminders or outage notices.

Marketing is the exception. An opt-out in response to a marketing call or text revokes consent to all future marketing calls and texts from that business.

Exclusive opt-out methods. A business may designate one or more of three methods as the exclusive way to revoke consent:

1. An automated interactive voice or key-press opt-out during a call.
2. A reply text using any of the standard words "stop," "quit," "end," "revoke," "opt out," "cancel" or "unsubscribe."
3. A website or phone number the business designates for opt-outs.

The method must be clearly and conspicuously disclosed on each call or in each text. For texts, naming one keyword is enough, but the business must still honor all seven. A business that does not designate a method stays under the "any reasonable means" standard.

Fraud alerts. Financial institutions using the fraud-alert exemption may contact wireless numbers obtained from a "reliable source," not only numbers the customer provided directly. The three-message-per-event limit still applies.

What comes next

The rules take effect 30 days after Federal Register publication. The FCC rejected a request for a 12-month runway. The Further Notice asks whether the FCC should shorten the 10-business-day deadline to honor opt-outs to seven, require two-way texting, require a "revoke all" option as a condition of category-specific opt-outs, and clarify how opt-outs apply across affiliates. Comments are due 30 days after publication.

For a fuller summary, see Nixon Peabody's alert on the new FCC opt-out rules.

What this means for you

1. Designate an exclusive method. Until you do, any reasonable revocation counts. Designating one narrows the room for litigation over ambiguous opt-outs.
2. Update every script and template. The benefit depends on disclosure on every call and every text.
3. Recognize all seven keywords, even if you display only one.
4. Define your message categories. Keep fraud alerts, reminders and notices distinct, and make sure your systems can suppress one without the others.
5. Keep marketing out of informational messages. Mixing them puts the whole message in the marketing category.
6. Bring in your vendors now. Thirty days is not long.

The new flexibility is real, but only for businesses that take the steps to use it.