You have a loyalty list of a few hundred customers who opted in at the counter, a new drop landing Friday, and a text ready to send. Push it through a mainstream SMS platform and a chunk of it never shows up on a phone. No bounce, no error message, just silence. The dispensary down the street has the same problem. So does the CBD shop two doors down that assumed federal legality would matter to a carrier. It doesn't. This isn't a bug in your marketing software. It's a filter applied before your message ever reaches a phone, and it has nothing to do with whether cannabis is legal where you operate.
Why cannabis texts get filtered before they reach a phone
Most business SMS in the US runs through A2P 10DLC, the carrier-mandated system that gates "application-to-person" messaging sent from standard 10-digit numbers. To use it, a business registers a brand with The Campaign Registry, registers a campaign classified by industry and use case, and waits for carrier approval. Carriers then score every outbound message against a set of forbidden content categories the SMS industry calls SHAFT-C: Sex, Hate, Alcohol, Firearms, Tobacco, and Cannabis. A message that trips one of those categories gets throttled or blocked outright, regardless of whether the sender has a state cannabis license, a documented opt-in list, and a spotless compliance record.
The "C" was added specifically because cannabis is still a Schedule I controlled substance under federal law. That's true no matter how many states allow it: 24 states plus D.C. allow adult-use sales, and 38-plus states allow cannabis in some medical form. Carriers are not weighing in on drug policy. They are avoiding federal liability exposure on a network they don't want to police message-by-message, so the easiest move is to block the category wholesale. A dispensary with a perfectly compliant SMS program and a state license on the wall gets the same filter as a message advertising an unlicensed product.
CBD is federally legal. Carriers still don't care.
This is where operators get genuinely confused, and reasonably so. The 2018 Farm Bill removed hemp, defined as cannabis containing no more than 0.3% delta-9 THC on a dry-weight basis, from the federal controlled substances list. CBD derived from that hemp is federally legal. None of that changes how a carrier's content filter treats it. Carriers can't verify THC content from a text message, so CBD, hemp, and vape retailers get lumped into the same restricted bucket as cannabis, "soft restricted" at best, meaning extra vetting, extra fees, and still-poor delivery once approved.
Vape retailers run into a separate piece of federal law that gets misread constantly: the PACT Act, amended in 2021 to cover e-cigarettes and other electronic nicotine delivery systems. PACT Act restrictions are about shipping and delivery: it bars using USPS to ship vape products and requires an adult signature with ID check for private-carrier delivery. It does not regulate SMS marketing content. Carriers block vape promotional texts anyway, on their own initiative, as a liability-reduction move rather than because any statute tells them to.
What your SMS list needs before you send anything, on any channel
None of the above replaces the actual legal groundwork, and getting delivery to work doesn't make a non-compliant list compliant. Three things have to be true before a dispensary sends its first marketing text:
Consent. Every number on the list opted in specifically to receive texts from your business. Consent collected for one purpose (say, a loyalty punch card) doesn't automatically cover marketing texts unless your sign-up language said so.
Age verification. Most legal markets require 21+ verification before a cannabis business can market to someone. Collect date of birth at enrollment, whether that's a loyalty sign-up sheet at the register or a web form, and don't add anyone to a marketing list until that's on file.
Opt-out handling. STOP, UNSUBSCRIBE, CANCEL, END, and QUIT all have to trigger automatic suppression, not a manual process someone gets to eventually.
State rules add a layer on top of that baseline, and they vary. California is a useful example of how specific it gets: cannabis advertising placed in "broadcast, cable, radio, print, and digital communications" can only run where at least 71.6% of the audience is reasonably expected to be 21 or older, under audience-composition data licensees have to keep on file. Read the regulation's own scope language closely: it's written around mass-media placement, not one-to-one texts to a list of people who already gave you their number and their birthdate. That distinction matters operationally, but it's not a loophole from consent. This isn't legal advice; check with counsel on how your state's rules apply to your specific program. California isn't done tightening this area: Governor Newsom signed AB 2249 on August 31, 2026, banning cannabis packaging and advertising that uses cartoons, candy imagery, or anything else designed to appeal to minors. If your restock texts lean on playful branding language pulled straight from your packaging, that's worth a second look.
The drop-and-restock cadence that keeps people opted in
Assuming the list is clean, the content that performs without generating opt-outs or complaints tends to look less like an ad and more like a notification:
- Restock alerts for specific strains or products a customer has bought before, not a blast to the whole list every time inventory moves.
- New-drop announcements timed to when product actually lands, not a generic "check out our menu" send.
- Order-ready pickup pings for online or call-ahead orders. These read as transactional even when they carry a marketing message, because they're tied to something the customer did.
- Loyalty-tier updates, points balances, and threshold notices ("you're 2 purchases from your next reward").
Segment by purchase history where you can. A customer who's bought concentrates three times doesn't need a flower restock alert, and sending it anyway is how people hit STOP. Cap promotional-only sends, the ones with no transactional hook, to something the list can absorb without feeling marketed at every day.
How P2P routing changes the delivery math
Everything above is about the message and the list. The other half of the problem is the channel itself, and that's where the SHAFT-C filter lives. Android Texter routes outbound SMS through a real Android phone on a real consumer carrier line rather than through an aggregator's A2P pipeline. There's no brand registration, no campaign classification, no content filter scoring your restock text against a forbidden-category list, because the message is P2P (person-to-person) traffic, not A2P. A carrier sees a text from a personal 10-digit line, the same way it sees any text you'd send a friend, and delivers it accordingly.
For a dispensary running higher volume, one phone hits practical throughput limits fast. Android Texter's multi-device pairing lets one account distribute sends across several paired phones, so a five-hundred-message drop announcement doesn't all originate from a single line and trip a carrier's velocity filter.
What this doesn't do: reduce your TCPA exposure, verify anyone's age for you, or replace a documented opt-in process. The channel being open doesn't change what you're allowed to send or who you're allowed to send it to. Consent, age-gating, and opt-out handling are the operator's job regardless of what routes the message.
Frequently Asked Questions
Can I legally text CBD customers if CBD is federally legal?
Federal legality under the 2018 Farm Bill doesn't change how carriers filter content. CBD retailers are typically "soft restricted" under A2P 10DLC and get poor delivery even after campaign approval, because carriers can't verify THC content from a message and default to caution.
Does the PACT Act stop me from texting vape customers?
No. The PACT Act governs shipping and delivery of vape products, including a USPS shipping ban and adult-signature delivery requirements. It doesn't regulate SMS content. Carriers block vape marketing texts on their own initiative, not because the PACT Act requires it.
Do I need to collect date of birth before adding someone to my SMS list?
Most legal cannabis markets require 21+ verification before marketing to a customer. Collecting date of birth at enrollment, whether at the register or on a sign-up form, and holding it as part of your consent record is standard practice for staying inside that requirement.
Will registering a 10DLC campaign fix cannabis SMS deliverability?
Rarely. Cannabis and CBD campaigns that get approved at all are usually throttled hard once live, because the SHAFT-C content filter applies at the message level regardless of campaign status. Registration doesn't remove the category restriction.
Does using a phone-based SMS gateway reduce my TCPA exposure?
No, and treat any claim that it does with suspicion. TCPA consent requirements apply to the message regardless of the sending channel. A phone-based gateway opens the carrier-level A2P 10DLC gate; it does not touch your obligation to have documented consent, honor opt-outs, and avoid abusive frequency.
Getting your texts to actually arrive
The compliance work (consent, age verification, opt-out handling) doesn't get easier or harder based on what sends the message. What changes is whether the message arrives at all. If your dispensary has a clean, consented list and state-legal operations but your restock alerts are landing at a fraction of what you send through a mainstream SMS platform, the SHAFT-C filter is very likely why. Android Texter routes those messages as P2P SMS from a real phone, outside the A2P content gate, while leaving the consent and compliance work exactly where it already sits: with you.