FCC Replaces “Revoke All” Rule With Category-Specific Opt-Out Framework

On October 1, the FCC announced the replacement of its previously adopted “revoke all” rule, which required callers to treat requests to revoke consent to receive one type of message to apply to all other types of messages from the same caller with a narrower rule that permits category-specific revocations for informational robocalls and robotexts.

Previously released as a draft on September 9^th, the revised Report and Order and Further Notice of Proposed Rulemaking sets forth a framework that preserves broad protection for telemarketing opt-outs while allowing callers and texters to continue unrelated informational communications where the consumer’s request reasonably indicates a narrower intent.

What Was the “Revoke All” Rule?

The FCC’s consent-revocation framework builds on its 2015 TCPA Declaratory Ruling, which recognized that consumers may revoke prior express consent through any reasonable means that clearly conveys a desire to stop receiving calls or texts.

In its February 2024 TCPA Consent Order, the FCC codified and expanded that principle. Among other things, the Commission required callers to honor company-specific do-not-call and consent-revocation requests within a reasonable time, not exceeding 10 business days, and initially adopted a broad interpretation of revocation: a request made in response to one type of robocall or robotext would apply to all future communications from that caller requiring consent.

That broad mandate became known as the “revoke all” rule. In practical terms, a customer who opted out after receiving a payment reminder could have been treated as withdrawing consent not only for payment reminders, but also for unrelated fraud alerts, multifactor-authentication messages, appointment reminders, and other informational communications from the same entity.

Most of the 2024 consent-revocation rules took effect on April 11, 2025. The FCC, however, waived the effective date of the global “revoke all” component because affected entities needed additional time to reconfigure systems and processes capable of applying opt-outs across unrelated message streams.  The waiver was subsequently extended, most recently through January 31, 2027. Thus, the global-revocation provision never took effect before the FCC replaced it in the September 30, 2026 Report and Order, released October 1, 2026.

The Revised Category-Based Rule

Under the revised rule, a caller or texter may interpret a consumer’s revocation request made in response to an informational robocall or robotext as applying only to the specific category of informational communications to which the request was directed.

The rule is permissive, not mandatory. A business may continue to apply a consumer’s opt-out more broadly across all message categories if it chooses, but it is no longer required to do so solely because the consumer revoked consent in response to one informational message type.

For example, if a consumer replies “STOP” to an automated payment-reminder text, the sender may treat that request as an opt-out from payment reminders while continuing to send other consent-based informational communications, such as fraud alerts, security notifications, multifactor-authentication codes, appointment reminders, or utility-outage notices.

Key Distinction:  Informational vs. Marketing

The category-specific rule is limited to communications that are informational and do not contain advertising or telemarketing. Callers should therefore maintain a meaningful operational distinction between informational programs and marketing campaigns.

For marketing calls, the revocation rules remain broad; if consent to one marketing message is withdrawn, it must be interpreted as a revocation of all marketing messages.  The revised rule does not authorize a caller to treat a marketing opt-out as merely campaign-specific.  A consumer who revokes consent in response to a telemarketing or advertising message must remain suppressed from future telemarketing robocalls and robotexts from the caller, while purely informational communications may continue if independently permissible.

Defining Categories

The Order does not provide a comprehensive definition of “category.” Instead, the FCC’s examples, including payment reminders, fraud alerts, multifactor-authentication codes, appointment reminders, and utility-outage notices, indicate that categories should correspond to recognizable types of communications with distinct consumer purposes.

Businesses using category-specific opt-outs should adopt definitions that are operationally clear, consistently applied, and capable of being explained if challenged. Overly granular categories designed to preserve substantially similar or functionally interchangeable messages could create risk that the caller has failed to honor the consumer’s objectively expressed intent.

A sound approach is to identify categories by the message’s principal purpose, rather than by internal campaign name, vendor, delivery channel, or minor content variation. For example, “payment-due reminders” may be a defensible category, whereas separate categories for “payment reminder—first notice” and “payment reminder—second notice” may not reflect a meaningful distinction from the recipient’s perspective.

Other Opt-Out Changes

The 2026 Order also permits callers to designate one or more exclusive methods for revocation, provided the designated method is clearly and conspicuously disclosed in each applicable call or text. Approved methods include an automated voice or keypad opt-out mechanism, a reply text using specified keywords, or a designated website or telephone number.

The standardized reply keywords are “stop,” “quit,” “end,” “revoke,” “opt out,” “cancel,” and “unsubscribe.” If a caller does not properly designate and disclose an exclusive method, the baseline rule continues to require honoring revocation requests made through any reasonable means.

The existing 10-business-day outside deadline for honoring company-specific do-not-call and consent-revocation requests remains important. Category-specific treatment changes the scope of a qualifying informational opt-out; it does not eliminate the obligation to timely process and suppress communications within the affected category.

Compliance Considerations

The FCC’s revised TCPA consent-revocation rules—including the category-specific informational opt-out rule and the option to designate an exclusive revocation method—take effect 30 days after publication of the amended rules in the Federal Register.  As of the most recently available reporting, the Order had not yet been published in the Federal Register, so there is not yet a fixed calendar effective date; the FCC has said it will issue a Public Notice identifying that date.

In the meantime, organizations should reassess their consent and suppression architecture before relying on category-specific treatment.

-       Inventory every automated or prerecorded call and text program, distinguishing informational content from advertising and telemarketing.
‍

-       Create documented, consumer-facing message categories based on the communications’ principal purpose.
‍

-       Configure suppression systems to apply informational opt-outs across the appropriate category, channel, vendor, and business unit.
‍

-       Maintain an enterprise-level suppression rule for telemarketing consent revocations and company-specific do-not-call requests.
‍

-       Preserve records showing the triggering communication, opt-out language, date and time received, category assigned, suppression action, and date processed.
‍

-       Review third-party vendor agreements to ensure vendors receive prompt suppression updates and do not reintroduce opted-out recipients through another campaign or affiliate program.
‍

-       If using an exclusive revocation channel, confirm that the required method is clearly and conspicuously disclosed in every relevant call or text.

The practical result of the revised consent revocation rules will be a more workable consent-management regime for legitimate informational messaging, but only for organizations that can accurately classify their programs and reliably apply opt-outs at the correct level of scope