SHAFT stands for sex, hate, alcohol, firearms, and tobacco: the content categories that US wireless carriers restrict in business text messaging. Many SHAFT businesses can text customers, but only with an approved, properly registered campaign, a real age gate, and a messaging provider that supports their category. Many general-purpose platforms simply refuse these businesses, which is why so many owners assume texting is off the table.
This guide is for businesses in regulated or age-restricted categories: alcohol brands and bars, tobacco and vape shops, firearm retailers, ranges and instructors, dispensaries and CBD brands, adult products, and the agencies that market them. You will learn why approval depends on your provider, how age gating must work, what carriers fine, and how to get a SHAFT campaign approved.
Key takeaways
- SHAFT rules come from carrier codes of conduct and platform policies, not a single federal law, and they apply even when your product is legal.
- What is allowed depends heavily on your messaging provider. Twilio's published policy bars firearms on all number types, while specialized providers get age-gated firearm, alcohol, and tobacco campaigns approved with carriers.
- Approval takes an accurate registration, a compliant opt-in with a full date-of-birth age gate, and content that follows federal and state law.
- The "sex" category also catches legitimate sexual health and men's health clinics; they can be approved with a clear medical registration and discreet, clinical messages.
- Cannabis, CBD, kratom, and paraphernalia remain the hardest categories; major platforms bar them regardless of state legality.
- A yes/no "Are you 21?" question is not an age gate. Carriers expect a date-of-birth entry at consent.
- T-Mobile fines SHAFT violations that do not follow law and regulation, and repeated violations can get a sender cut off.
What does SHAFT mean in SMS?
SHAFT is shorthand used by carriers and messaging providers for content that needs extra control or is not allowed in application-to-person (A2P) texting:
- Sex: adult content and services, and in practice often sexual health and other adult-adjacent businesses, including medical ones
- Hate: content promoting hate, violence, or discrimination
- Alcohol
- Firearms
- Tobacco
In practice, the list has grown. Platforms group vaping and e-cigarettes with SHAFT, and treat cannabis, CBD, and kratom as banned categories of their own.
These rules sit on top of the normal texting requirements: registration (A2P 10DLC registration), consent (SMS opt-in), and the TCPA. Industry guidance in the CTIA Messaging Principles and Best Practices sets the general framework; carriers enforce it through registration reviews, filtering, and fines.
Why approval depends on your provider
Carriers set the rules, but your messaging provider decides which businesses it will register and how it presents them to carriers. Providers fall into roughly two groups:
- General-purpose platforms that decline whole categories. Twilio, one of the largest, publishes its forbidden message categories, summarized in the table below. Many CRMs and texting apps run on platforms like this, so they inherit the same limits.
- Specialized providers that work with carriers on SHAFT registrations and exemptions. OtterText, for example, focuses on the firearms industry and reports approving more than 850 firearm, alcohol, and tobacco brands since 2022. The NSSF, the firearm industry trade association, has published guidance on compliant text marketing for its members.
So "can my business text?" is often really "which provider will register us, and is our opt-in and content built to pass?" We help SHAFT-regulated businesses get approved, working through providers that support their category rather than general-purpose platforms.
Sexual health businesses fall under the "S"
The sex category does not only catch adult entertainment. Legitimate medical businesses whose services involve sexual health, such as men's health and sexual wellness clinics, often get flagged by carrier review because of the subject matter, even though nothing they send is explicit. These businesses can text: the registration has to explain the medical nature of the business clearly, the opt-in has to be clean and age-gated where required, and the messages have to stay clinical and discreet.
We set this up for PhalloFILL, a national non-surgical provider network in men's sexual health, as part of the capture and follow-up system behind more than 9,000 sales conversations every month. If you run a sexual health practice, the same rules from our HIPAA compliant text messaging guide apply on top: never put treatment details in a plain text.
One general-purpose policy, for reference
Here is how Twilio's published policy treats each category. Treat it as an example of a strict provider, not the rule for every carrier route.
| Category (Twilio policy) | Standard 10-digit number (10DLC) | Toll-free | Short code | Notes |
|---|---|---|---|---|
| Alcohol | Allowed with age gating | Allowed with age gating | Allowed with age gating | Date-of-birth entry required at consent |
| Tobacco | Not allowed | Not allowed | Allowed with age gating | Short code only |
| Firearms | Not allowed | Not allowed | Not allowed | Regardless of age gating; gun advocacy groups are not treated as firearms |
| Vape and e-cigarettes | Not allowed | Not allowed | Not allowed | Regardless of age gating |
| Sex and adult content | Not allowed | Not allowed | Not allowed | Explicit content is banned; legitimate sexual health businesses can be approved through the right provider (see below) |
| Hate | Not allowed | Not allowed | Not allowed | Blocked outright |
| Cannabis, CBD, kratom, paraphernalia | Not allowed | Not allowed | Not allowed | Applies to the business type, regardless of state legality or message content |
Two details from general-purpose policies surprise most owners:
- The restriction can follow the business, not just the message. Twilio's policy says cannabis, CBD, kratom, and paraphernalia businesses cannot use SMS for any purpose, including two-factor codes, even if a specific message never mentions the product.
- Prescription drugs are restricted too. The same policy forbids promotional messages for drugs that require a prescription, even from licensed providers, and requires an 18+ date-of-birth age gate where that content is allowed. Clinics marketing hormone, weight loss, or other prescription treatments by text should keep messages about appointments and services, not drugs. Our guide to HIPAA compliant text messaging covers the patient privacy side.
How age gating must work
Where a category is allowed with age gating, carriers expect a real check at the moment of consent:
- The person enters a full date of birth on the opt-in form or in the text flow.
- Anyone under the legal age (21 for alcohol in the US) is not subscribed.
- A checkbox or a yes/no question ("Are you 21 or older?") does not count. Twilio's policy and carrier rules both say so explicitly.
- Keep the date of birth with the consent record, as described in our SMS opt-in guide.
An age gate does not make a banned category allowed. It only opens the categories that permit it.
What happens if you break SHAFT rules?
Enforcement comes from carriers and your messaging provider:
- Filtering and blocking. Messages that look like restricted content get filtered silently, so your texts may never arrive.
- Registration rejection. Campaigns in banned categories are rejected during 10DLC review.
- Carrier fines. T-Mobile's non-compliance fines, summarized by Vonage, include $500 per violation for SHAFT content that does not follow federal and state law and regulation (such as missing age gates), with higher tiers for illegal content and phishing. Providers typically pass these fines to the sender.
- Suspension. Repeated violations can get your number, your campaign, or your whole account shut off.
How to get a SHAFT campaign approved
- Choose a provider that supports your category. If your current platform declines SHAFT businesses, no registration wording will fix that. Work with a provider that registers your category with carriers.
- Register accurately. Describe your business and messages honestly. Misclassifying to get approved leads to filtering, fines, and suspension later.
- Build a compliant, age-gated opt-in. Full date of birth at consent, clear consent language, privacy policy, and SMS terms. See our SMS opt-in guide.
- Keep content within the law. No messages that break federal or state rules for your product, and nothing that encourages illegal sales.
- Monitor after approval. Complaints and opt-out spikes get campaigns reviewed again.
Other channels to pair with SMS
Whether or not texting is approved for your category, these channels are worth building, within their own rules:
- Email. Twilio itself points restricted categories toward email, with age gating and only where the product is legal. Email has its own law (CAN-SPAM) but no carrier filter.
- Voice calls. Twilio notes that voice is not subject to the same carrier content restrictions as SMS, but the TCPA still applies, including consent rules for automated and prerecorded calls.
- Apple Messages for Business and in-app messaging. These are customer-initiated channels with their own platform policies. Check them before relying on them.
- Service messages without the product. For allowed categories, keep texts to orders, reservations, events, and account updates. Promotional content is where most violations happen.
- First-party data and loyalty programs. Build an email list and an age-verified customer list you own.
Do not try to disguise restricted content with misspellings or code words. Carriers look for exactly that, and it turns a gray area into a clear violation.
A SHAFT compliance checklist
- Confirm your messaging provider supports your category, in writing, before you build a texting program.
- Register the campaign with an accurate description of your business. Misclassifying to get approved creates bigger problems later.
- Add a date-of-birth age gate at consent where your category requires it.
- Keep promotional texts away from banned products, including prescription drugs.
- Use branded links, not public URL shorteners, which platforms filter.
- Honor STOP immediately and keep consent records with date of birth.
- Have counsel review state rules for your product category.
Texting compliance is part of every follow-up and sales system we build, including getting SHAFT-regulated businesses registered and approved through providers that support their category. Where a category truly cannot text, we build the follow-up around email, calls, and owned channels, and make sure every lead still lands in the CRM with a clear next step. The same rules come up with missed call text back and text appointment reminders, so check them before you automate.
This is general information, not legal advice. Platform policies change; confirm current rules with your messaging provider.
Frequently asked questions
What does SHAFT stand for in SMS?
Sex, hate, alcohol, firearms, and tobacco. It is carrier shorthand for content that is restricted or banned in business text messaging. Platforms also group vaping, cannabis, CBD, and kratom with these restricted categories.
Can alcohol brands use SMS marketing?
Generally yes, on standard business numbers, toll-free, and short codes, if they use a real age gate that collects a full date of birth at consent and only text people of legal drinking age. A yes/no age question is not enough.
Can cannabis or CBD businesses send text messages?
Not on major US messaging platforms. Twilio's policy bars cannabis, CBD, kratom, and paraphernalia businesses from SMS for any purpose, regardless of state legality or message content. Email with age gating is the common alternative where the product is legal.
Can firearm businesses text customers?
Often yes, with the right provider. General-purpose platforms like Twilio decline firearm businesses, but specialized providers register firearm retailers, ranges, and instructors with carriers using an age-gated opt-in, and report hundreds of approved brands. The keys are a provider that supports the category, a full date-of-birth age gate, and content that follows the law.
What is an SMS age gate?
A step at consent where the person enters their full date of birth, and anyone under the legal age is not subscribed. Carriers do not accept a checkbox or a yes/no question as an age gate.
If you run a SHAFT-regulated business and want texting approved and working within the rules, book a call.