How to build an SMS subscriber list the right way and legally

A good SMS list is one of the most valuable assets a small business can own, because it reaches people directly and reliably. A bad one is a liability that gets you complaints, opt-outs and, at worst, a penalty under the Spam Act 2003. The difference is entirely in how you build it. A list of people who chose to hear from you performs and stays clean. A list of numbers you scraped, bought or assumed does neither.

Here is how to build a list that is legal, that people actually want to be on, and that keeps working.

Consent is the foundation, not an afterthought

Australian law is clear that commercial SMS needs consent. The safe and simple standard to aim for is express consent, where the person actively and knowingly agreed to receive marketing texts from you. Not "did not object". Not "gave you their number for a booking". Actively agreed.

There is a narrower category, inferred consent, that can apply where there is a genuine ongoing business relationship, but it is easy to lean on too heavily and it does not stretch to promotional blasts. If you build your list on express consent from the start, you never have to argue the edges. A number joins the list because its owner chose to, and you can show when and how.

You are on the list. Kirra Cafe will text you the occasional offer, no more than twice a month. Reply STOP any time to leave. Welcome.

That welcome message is doing real work. It confirms the sign-up, sets the expectation for frequency, and states the opt-out. A person who knows what they signed up for is far less likely to complain later.

The methods that actually collect consent

You need ways for people to opt in that are easy in the moment and that record the consent for you. Three work particularly well for small business.

Keyword sign-ups

A keyword sign-up lets a customer text a word to your number to join, for example "text JOIN to opt in". It is ideal in a physical space, on a receipt, on a sign at the counter, or read out at the till. The act of texting the keyword is itself the record of consent, which makes it clean. SMS365 supports keyword auto-responders, so the moment someone texts JOIN they get an automatic welcome and are added to the list with the consent recorded. We covered the mechanics in how text JOIN campaigns work.

Hosted opt-in forms and QR codes

A hosted opt-in form is a simple web page where a customer enters their number and agrees to receive messages. Pair it with a QR code on a table talker, a poster or a flyer, and a customer can join in seconds by pointing their phone at it. This suits any business with foot traffic, and it captures consent explicitly with a tick box. Our guide to QR code sign-ups shows how to turn foot traffic into a list.

At the point of sale or booking

When someone is already giving you their details, ask if they would like to receive offers by text, and record their answer. The key word is ask. A number collected for a booking is not consent to market. A number collected for a booking, plus a clear question and a yes, is.

Give people a reason to join

Consent is the legal requirement. A reason to join is what makes the list grow. Nobody hands over their number to receive marketing for its own sake, so offer something concrete and immediate.

• A one-off welcome offer: "Join our list and get 10% off your next visit."
• Genuine early access: "Subscribers hear about sales a day before anyone else."
• Useful, not just promotional: a cafe texting the day's specials, a bottle shop texting when a sought-after drop lands.

Set the expectation for frequency at sign-up and then keep to it. "No more than twice a month" is a promise. Break it and people leave. Keep it and they stay for years.

Keep the list clean as it grows

A list is not a set-and-forget asset. It needs maintaining, and most of the maintenance is about respecting the exits as carefully as the entries.

• Honour every opt-out immediately. When someone replies STOP they must come off the list at once. SMS365 does this automatically and keeps the consent and opt-out record, so you are not relying on someone remembering to remove a number by hand.
• Do not re-add people who left. A number that opted out and gets messaged again is the surest route to a complaint.
• Let people re-join. START brings someone back if they change their mind, and the record reflects it.
• Watch your opt-out rate. A spike after a send is a signal the message was off, too frequent, or went to the wrong segment. Treat it as feedback.

What not to do

Some shortcuts feel efficient and are not worth it. Do not buy lists. A purchased list has no consent, the numbers do not know you, and the complaint rate is high. Do not upload every number in your phone or your accounting system and call it a list, because a booking or an invoice is not consent to market. Do not hide the opt-out or make it hard, because a broken opt-out is both illegal and a guarantee of complaints.

If you are unsure whether you already have the right to text a particular group of customers, our guide on whether you have consent to text customers works through the common situations.

Slow and clean beats fast and dirty

A list built on real consent grows more slowly than a list you bought, and it is worth many times more. The people on it opened your message because they chose to be there, so your response rates hold up, your opt-outs stay low, and you sleep well knowing every number can be accounted for.

Put a keyword sign-up and a QR-linked opt-in form in front of your customers, give them a real reason to join, set the frequency honestly, and honour every exit. Do that and in a year you will have a list that is small, clean, engaged and entirely yours, which is exactly the kind of list that makes SMS marketing pay.