“Message and Data Rates May Apply”: What It Means and Why It Matters

By [Author name, role] | Last updated: [date] | Reviewed by: [compliance reviewer, if any]

You’ve seen this line a hundred times. It sits under the sign-up box for a store discount, in the welcome text from your pharmacy, and in the fine print of a contest entry. Most people scroll past it. Most businesses paste it in without thinking about it.

It’s worth a closer look, though. For a customer, it explains whether a text could cost money. For a business, it’s one of the disclosures that decides whether your SMS program gets approved, or gets blocked.

This article is general information, not legal advice. If you run a texting program, have a lawyer review your consent language.

What the phrase actually means

It’s a warning, not a charge. “Message and data rates may apply” tells the person signing up that their mobile carrier might bill them for the texts they send and receive, and for any data used when they tap a link.

The business isn’t collecting that money. The carrier is, and only if the person’s plan doesn’t already cover it. Someone with an unlimited plan will probably never see a charge. Someone on a prepaid or capped plan might.

Why you keep seeing it

The disclosure comes mainly from industry rules. CTIA, the wireless industry association, publishes messaging guidelines that expect businesses to be upfront about costs when people opt in. Carriers apply those expectations when they review and approve a business’s texting campaigns.

The TCPA is a related but different thing. It’s the US law that governs consent for marketing texts, and it demands clear disclosure at the point of sign-up. It doesn’t spell out this exact sentence, but leaving out cost and program details makes your consent harder to defend if someone challenges it. In practice, the line is cheap protection.

For customers: when you might actually pay

Most people won’t, but these are the situations where it can happen:

• A limited texting plan. Once you pass your monthly allowance, each text can be billed, including ones businesses send you.
• Tapping links on mobile data. A link in a text opens a web page, and that uses data. On a capped plan, with no Wi-Fi, it counts against your limit.
• Roaming. Receiving texts abroad can cost more depending on your carrier.

To avoid surprises, check what your plan includes, use Wi-Fi when opening links, and reply STOP if you don’t want a program’s messages anymore. If a charge looks wrong, your carrier is the one to ask. The business can’t see or change your bill.

For businesses: where the disclaimer has to appear

Put it wherever someone agrees to receive texts:

• The opt-in form or landing page
• The first confirmation or welcome message
• Your SMS terms and conditions
• Replies to keywords people text in to join

Then make it visible. A tiny font, low-contrast text, or a line buried three clicks deep doesn’t count as disclosure in any meaningful sense, and carrier reviewers do reject forms for this. If a customer later says they never knew about possible charges, you want to be able to point to a clear screen they saw.

What a complete opt-in disclosure includes

A solid opt-in usually covers:

1. Your brand or program name
2. What kind of messages people will get
3. How often (an estimate is fine, for example “up to 4 per month”)
4. “Message and data rates may apply”
5. How to opt out (Reply STOP)
6. How to get help (Reply HELP)
7. Links to your terms and privacy policy

Here’s example wording you can adapt:

By signing up, you agree to receive recurring text messages from [Brand] about [order updates / offers]. Message frequency varies. Message and data rates may apply. Reply STOP to cancel or HELP for help. Terms: [link]. Privacy: [link].

For marketing texts, also state that agreeing isn’t required to make a purchase.

Don’t skip carrier registration

Good disclosure language matters most at registration. In the US, businesses sending texts from standard 10-digit numbers register through A2P 10DLC, and businesses using toll-free numbers go through toll-free verification. In both cases, the reviewer looks at your opt-in flow. If the disclosures are missing or hard to find, the campaign can be rejected or delayed, and unregistered traffic may be blocked outright.

So treat the wording as part of your launch checklist, not an afterthought.

Common mistakes

• Putting the disclaimer only in the terms page and not on the form itself
• Forgetting it in the welcome message
• Leaving out frequency, STOP, or HELP
• Changing the program (new message types, higher volume) without updating the opt-in language
• Keeping no record of when and how each person agreed

Where MessageBlink fits

If your team works in Salesforce, MessageBlink is a native messaging app that handles SMS and WhatsApp inside the CRM. It records opt-ins and opt-outs on the contact record and skips people who’ve unsubscribed. That doesn’t write your disclosure for you or guarantee compliance, since that still depends on your copy and your process, but it keeps consent records in one place, which helps when someone asks you to prove it.