AGE-GATED GUIDE

Age-Gated SMS Alcohol & Vape

Navigate age-verification requirements for alcohol and vaping SMS. Implement AT&T-compliant age-gating alongside TCR mixed use case registration standards.

Download Age-Gate Guide

Age-Gated SMS Compliance Landscape

Alcohol and vaping businesses deploying SMS marketing face three overlapping regulatory frameworks requiring simultaneous adherence. AT&T enforces stricter age-gated content policies effective 2025, requiring documented age verification mechanisms before campaign approval.

AT&T Age-Gate Requirements

AT&T requires age verification documentation submission during TCR campaign registration for alcohol and vaping products. Verification methods include third-party age-gate services or self-certification with audit readiness.

Age Verification Mandates

Federal minimum age 21 for alcohol, state-specific age requirements for vaping products (18-21 depending on jurisdiction). Verification must occur before consent capture and SMS opt-in process initiation.

TCR Mixed Use Case

Age-gated products register under TCR "Mixed" use case requiring special attribute declarations. Trust score calculation includes age verification documentation completeness as scoring factor.

Violation Risk: Organizations failing age verification requirements face TCR error 601 rejection (prohibited use case), AT&T campaign suspension within 48 hours, TCPA class-action exposure averaging $500 per violation for messaging minors, state-level enforcement actions with fines ranging $1,000-$10,000 per violation.

AT&T Age-Gated Content Enforcement

SMS programs promoting alcohol or vaping products require age-gated compliance controls addressing AT&T carrier-specific enforcement policies. Organizations must implement age verification before consent capture, maintain audit-ready documentation, and declare age-gated status during TCR registration.

  1. 1

    Implement Age Verification Before Consent

    Age verification must occur before displaying SMS opt-in form. Acceptable methods include third-party age verification services (Yoti, Jumio, IDology), government ID scanning with liveness detection, credit bureau verification matching name and birthdate to credit records, or knowledge-based authentication requiring answers to identity verification questions.

    Technical Detail: Age-gate implementation requires timestamp logging, verification method documentation, and 4+ year data retention for audit readiness. Pass/fail verification results must be logged with user identifier and timestamp.
  2. 2

    Document Age Verification Method

    AT&T requires age verification documentation submission during TCR campaign registration. Organizations self-certify age-gating implementation via dropdown selection in campaign registration form, then maintain audit-ready documentation including verification vendor contract, age-gate implementation screenshots, verification logging procedures, and data retention policies.

    Technical Detail: TCR campaign registration includes "Age-Gated Content" checkbox requiring affirmative selection for alcohol and vaping. Failure to declare age-gated status triggers TCR error 601 rejection.
  3. 3

    Update Consent Language with Age Verification Acknowledgment

    SMS consent forms must include age verification acknowledgment language confirming recipient verified age 21+ (alcohol) or state-specific minimum age (vaping). Example: "By opting in, I confirm I am 21 years or older and have completed age verification to receive promotional messages about alcoholic beverages from [Business Name]."

    Technical Detail: Consent timestamp must occur after successful age verification timestamp, creating auditable verification-then-consent sequence. Systems must prevent consent capture if age verification fails or expires.

Check Age-Gate Compliance

MyTCRPlus Use Case Selector identifies age-gated requirements and generates carrier-specific documentation checklists.

Select Use Case

Age Verification Implementation Methods

Organizations implement age verification through four carrier-accepted methods, each with distinct implementation requirements, cost structures, and audit documentation needs.

Verification Method Comparison

Third-Party Verification Services (Recommended)

Services like Yoti, Jumio, IDology provide API-based age verification with government ID scanning, facial recognition, and liveness detection. Pass rates 85-95% with 30-60 second verification time.

Cost: $0.50-$2.00 per verification | Audit Readiness: High (vendor maintains verification records)

Credit Bureau Verification

Match user-provided name and birthdate against credit bureau records (Experian, TransUnion, Equifax). Requires only name and birthdate input, no document upload. Pass rates 70-85%.

Cost: $0.25-$1.00 per verification | Audit Readiness: Medium (requires bureau data retention agreement)

Government ID Scanning (In-Person)

Point-of-sale ID scanning with date of birth extraction. Requires physical hardware scanner or mobile device camera with ID parsing SDK. Suitable for brick-and-mortar retail locations.

Cost: $500-$2,000 hardware + $0.10-$0.50 per scan | Audit Readiness: High (physical record with timestamp)

Self-Certification (Not Recommended)

User checks box confirming age 21+. Provides no verification, relies entirely on user honesty. High TCPA violation risk, may not satisfy AT&T requirements during manual review.

Cost: $0 (no verification) | Audit Readiness: Low (no verification audit trail)

Required Documentation for AT&T Compliance

AT&T manual review for age-gated campaigns may request verification documentation including:

Age Verification Vendor Contract: Service agreement with third-party age verification provider demonstrating active verification service.
Implementation Screenshots: Visual documentation showing age-gate appearing before SMS opt-in form, blocking consent capture until age verification completes.
Verification Logging Procedures: Documentation describing how verification attempts, results, timestamps, and user identifiers are logged and retained.
Data Retention Policy: Written policy confirming verification records retained minimum 4 years meeting TCPA statute of limitations requirements.

TCR Mixed Use Case Registration

Age-gated products register under TCR "Mixed" use case category, signaling combination of marketing and potentially age-restricted content. Campaign registration requires special attribute declarations and enhanced documentation compared to standard marketing campaigns.

Use Case Selection During Registration

TCR registration form includes "Use Case" dropdown with following selections relevant to age-gated content:

Recommended

Mixed (Marketing and Promotional)

Appropriate for age-gated marketing including alcohol promotions, vaping product announcements, and loyalty programs with age restrictions. Trust score typically 50-75 requiring manual review 3-7 business days. Throughput allocation 600 msg/min.

Alternative

Marketing

Standard marketing use case without age-restricted declaration. May trigger TCR error 601 rejection during AT&T manual review if age-gated content detected in sample messages. Use only if messages contain no alcohol or vaping references.

Required Special Attributes

TCR campaign registration includes special attributes checkboxes requiring affirmative selection for age-gated content:

Age-Gated Content: Affirmative declaration that campaign promotes products with age restrictions. Triggers enhanced manual review requiring age verification documentation submission.
Affiliate Marketing: Optional selection if messages promote third-party alcohol or vaping brands. Requires disclosure of affiliate relationships in privacy policy.

Sample Message Requirements

TCR registration requires 3-5 sample messages demonstrating typical campaign content. Age-gated campaigns must include:

Example Compliant Sample Messages:

"[Brand Name]: New craft IPA launch! 21+ only. Show this text for $2 off your first pint. Tap the link to verify age: [URL]. Reply STOP to opt-out. Msg&data rates apply."

Age disclosure present

"[Vape Shop]: Flash sale on premium pods. Must be 21+ to purchase. Click to shop: [URL]. Reply HELP for assistance, STOP to unsubscribe. Msg&data rates may apply."

Age requirement stated
Validate Sample Messages

Implementation Roadmap

Organizations achieve age-gated SMS compliance through phased deployment addressing age verification, consent capture, and TCR registration within 30-45 day implementation window.

1

Age Verification Implementation (Week 1-2)

Select age verification vendor, integrate API into consent capture workflow, implement verification-before-consent logic requiring successful age verification before displaying SMS opt-in form. Test verification flow with pass and fail scenarios.

Timeline: 7-14 days for vendor selection, API integration, and verification flow testing.
2

Consent Form Updates (Week 2-3)

Update SMS consent language with age verification acknowledgment, implement verification timestamp logging, configure consent database to require age verification record before accepting SMS opt-in. Update privacy policy with age-gated section.

Timeline: 5-7 days for consent language updates, database schema changes, privacy policy revision.
3

TCR Registration (Week 3-4)

Submit TCR campaign registration under Mixed use case, select Age-Gated Content attribute, provide sample messages with age disclosures, upload age verification vendor contract and implementation documentation. Monitor approval status.

Timeline: 3-7 business days manual review after submission (trust score 50-74), 24-48 hours if trust score 75+.
Download Implementation Checklist

Frequently Asked Questions

Do I need age verification for alcohol and vaping SMS?
AT&T requires age verification documentation for alcohol and vaping SMS marketing effective 2025. Organizations must implement verification before consent capture, maintain audit-ready verification records, and declare age-gated status during TCR registration. Failure to implement age-gating triggers TCR error 601 rejection and potential TCPA violations for messaging minors.
Which TCR use case applies to alcohol and vaping messaging?
Alcohol and vaping businesses register under TCR "Mixed" use case signaling marketing content with age restrictions. Campaign registration requires Age-Gated Content attribute selection, age verification vendor documentation submission, and sample messages including age disclosure language (21+ only, must be 21+ to purchase). Trust score typically 50-75 triggering 3-7 day manual review.
What are the penalties for age-gated SMS violations?
Organizations messaging minors face TCPA class-action liability averaging $500 per violation, state-level enforcement actions with fines ranging $1,000-$10,000 per violation, AT&T campaign suspension within 48 hours, trust score degradation triggering extended manual review for future campaigns. Federal Trade Commission may pursue enforcement for alcohol marketing to minors with penalties up to $43,792 per violation.
Can I use self-certification instead of third-party verification?
Self-certification (checkbox confirming age 21+) provides no verification audit trail and may not satisfy AT&T requirements during manual review. While technically permissible for low-risk scenarios, self-certification creates TCPA class-action exposure for messaging minors who dishonestly certify age. Third-party verification services recommended for TCPA risk mitigation and AT&T compliance confidence.
How long must I retain age verification records?
TCPA statute of limitations requires 4-year minimum retention for age verification records including verification timestamps, pass/fail results, verification method used, and user identifiers linking verification to consent records. Organizations should retain verification records indefinitely for maximum audit readiness and TCPA defense documentation.
Does MyTCRPlus provide age verification services?
MyTCRPlus provides compliance guidance, implementation checklists, and TCR registration support but does not offer age verification services directly. Organizations should contract with third-party age verification vendors (Yoti, Jumio, IDology) for verification functionality. MyTCRPlus Use Case Selector identifies age-gate requirements and generates vendor selection criteria based on business model.

Related Resources

Use Case Selector

Interactive decision tree identifying Mixed use case requirements and age-gated attribute declarations.

Message Validator

Real-time validation detecting missing age disclosures and SHAFT policy violations in sample messages.

Consent Templates

Pre-validated consent language with age verification acknowledgment for alcohol and vaping businesses.

Simplify Age-Gated SMS Compliance

MyTCRPlus Age-Gated Compliance Kit includes age verification vendor criteria, consent templates with verification acknowledgment, and TCR Mixed use case registration guidance.

Download Compliance Kit

Disclaimer: This content provides general information about age-gated SMS compliance requirements and does not constitute legal advice. Compliance obligations vary based on business model, state jurisdiction, message content, and applicable federal/state alcohol and tobacco regulations. Organizations should consult qualified legal counsel for guidance specific to their messaging programs. MyTCRPlus does not provide legal advisory services, age verification services, or regulatory representation.