SurFox AI
Sales Strategy

Texting Candidates: What Actually Gets a Reply, and What the Law Actually Requires

Tom Bauer· Founder & CEO, SurFox AI
Published September 4, 2026
Updated September 4, 2026
12 min read

Text gets read. Recruiters have known this for years, and the data backs it up. What has changed is that candidates have also learned to distrust an unknown number offering them work, because so many of those numbers belong to scammers.

At the same time, most staffing firms texting applicants have never checked which consent standard applies to them. TCPA violations carry statutory damages per message, several states have stacked stricter rules on top of federal law, and a text that reads as normal to a recruiter can be the exact message a court has already ruled illegal.

This post covers both halves: what earns a reply, and what the law actually requires before you send that first text.

Key Takeaways

  • Candidate texts achieve response rates of 60% to 70%, against roughly 5.4% for a first-touch cold email (GoHire benchmarks; Pin Research, 2024).
  • TCPA violations carry statutory damages of $500 per negligent text and up to $1,500 per willful violation, and damages accrue per message (47 U.S.C. 227).
  • FTC data shows consumers lost $470 million to text-based scams in 2024, up from $90 million in 2020 (FTC, 2024).
  • Carriers began automatically blocking unregistered A2P 10DLC business texts on February 1, 2025, with unregistered traffic seeing delivery failure rates above 40%.
  • A three-touch automated interview reminder sequence cuts candidate no-shows by 35% to 50% (EZ Texting workflow research).

Does Texting Candidates Actually Work

Yes, by a wide margin, but it works best as a channel for engaged applicants rather than cold outreach.

Candidate SMS achieves open rates near 98%, compared to roughly 20% for recruiting email, and candidates typically respond within 90 seconds to 3 minutes of receiving a text (CTIA industry data; SHRM CDW case study). Response rates for consented candidate texting run 60% to 70%, against a 5.4% first-touch reply rate for cold email that decays to about 1.5% by the fifth attempt (Pin Research, 2024). Phone calls fare worse still, with voicemail listen rates under 20% and cold calls increasingly ignored outright.

MetricSMSEmailCold Calls
Open rate~98%~20%N/A (voicemail listen rate under 20%)
Response rate60% to 70%5.4% first touch, decaying to 1.5%Very low, declining
Time to response90 seconds to 3 minutesHours to daysDelayed or ignored
Opt-out rate25x lower than email when consentedStandard baselineImmediate call blocking

Candidate preference follows the same pattern. Jobvite's Job Seeker Nation study found 64% of job seekers who received a recruiting text after applying preferred SMS for ongoing communication over email or phone calls. GoHire data found agencies using structured SMS workflows, single-ask questions under 160 characters with clear sender identification, saw 92% of qualified candidates self-schedule an interview within 24 hours, and a SHRM case study at CDW recorded an 87% response rate with a 3-minute average response time.

The consistent finding is that SMS works because candidates already opted in by applying, not because texting is inherently more persuasive. It is the highest-performing channel for people who already raised their hand. If you want the research on which screening methods actually predict who to move forward once someone replies, see what actually predicts a good hire.

The "3 Text Rule": Folklore or Real Cadence Science

The claim is specific: stop texting a candidate after two to three unanswered messages, and either drop the channel or fall back to email.

It comes from vendor trade blogs, notably GoHire, not from a peer-reviewed study or a controlled trial. Like the 5 C's and the 80/20 interviewing rule, it is a practitioner heuristic, not an academic finding, and it should be labeled as one.

That said, the mechanism behind it holds up better than most folklore rules do. Carriers track opt-out velocity and delivery failure rates against every business number, and repeatedly texting someone who never replies measurably damages that number's reputation score, which can get future messages throttled or dropped. So while "exactly three" is not a validated threshold, the underlying caution is grounded in how carrier filtering actually works.

The more useful research sits in multi-channel sequencing rather than a single-channel touch count. The pattern that holds: cap total outreach at 3 to 6 touches spaced 2 to 5 business days apart across whatever channels you are using, introduce SMS after a candidate has already engaged, and stop past 6 attempts, since conversion drops sharply and opt-outs climb. That is a cadence limit, not a texting-specific rule, and it is a better standard than "three texts" alone.

Why Candidates Think Your Text Is a Scam

This is not a complaint about candidate paranoia. It is a rational response to scale.

FTC data shows consumers reported losing $470 million to text-based scams in 2024, a fivefold jump from $90 million in 2020. Fake job offers are one of the two most-reported categories of text fraud nationwide, alongside fake delivery notices. Within that, "task scams," unsolicited texts offering remote work rating products or completing repetitive tasks, quadrupled from about 5,000 reports in 2023 to roughly 20,000 in the first half of 2024 alone. Job scam losses topped $500 million in 2023, with a median loss of $1,500 per victim.

Given that volume, candidate suspicion of an unknown recruiting text is a rational baseline, not a failure of trust. What separates a legitimate message from a scam is specific and learnable.

SignalFraud Red FlagLegitimate Standard
IdentificationGeneric greeting, no sender nameCandidate first name, recruiter full name, agency name
PlatformPushes to Telegram, WhatsApp, or SignalStays on SMS, official email, or the ATS portal
Job detailsVague ("earn $500/day rating apps")Specific title, location, shift, and application reference
MoneyRequests payment for equipment or "unlocking" tasksNever charges applicants anything
LinksPublic shorteners (bit.ly, tinyurl)Simple reply triggers ("Reply YES") or a branded ATS link
ProcessOffers a job over text with no interviewSchedules a real screening call before any offer

The practical fix is to make every message you send match the legitimate column on sight: full names, a specific job reference, no payment request, no link shortener, and a simple response prompt instead of a demand to move to another app.

What the Law Actually Requires

This section is general information, not legal advice. Requirements vary by state, and this area has active, unresolved circuit splits, so confirm anything here with employment counsel before building a texting policy on it.

Marketing versus informational

Under the TCPA, texts are legally treated as calls, and the required consent standard depends on whether a message is informational or telemarketing. A text tied to an active job application, an interview confirmation, shift logistics, or a status update on a role the candidate applied for is generally treated as informational. In Andersen v. Nexa Mortgage, LLC (E.D. Cal., 2024), the court held that texts recruiting a specific individual, discussing pay and role details, are not solicitations or telemarketing under federal do-not-call rules, because they do not promote the sale of goods or services. Mass cold texts to a purchased or scraped list, or general marketing of your agency's services, fall into the stricter telemarketing category.

Does applying count as consent?

Generally yes, for the specific role applied to. Submitting a phone number on an application is treated as prior express consent to receive texts about that application. But the Ninth Circuit's decision in Loyhayem v. Fraser Financial & Insurance Services (2021) held that non-emergency recruitment texts to cell phones require prior express consent regardless of whether the message is informational or promotional, so "they applied, so anything goes" is not accurate. Consent has scope. A candidate who applied to one role in 2023 has not consented to texts about unrelated openings in 2026, and contacts inactive for more than 18 months should generally be re-engaged by email before resuming texts.

The law here is genuinely unsettled right now. In Bradford v. Sovereign Pest Control of TX, Inc. (5th Cir., February 25, 2026), the court applied the Supreme Court's Loper Bright and McLaughlin v. McKesson rulings curtailing deference to federal agencies and rejected the FCC's long-standing requirement of prior express written consent for telemarketing, holding that the statute's plain text requires only prior express consent, whether oral or written. That case concerned prerecorded calls rather than texts, but the TCPA treats texts as calls and the same consent provision governs both, so the reasoning carries. It also creates a live split between circuits, and how it resolves will change what consent means for texting outside Texas, Louisiana and Mississippi.

Opt-outs

Systems must recognize STOP, UNSUBSCRIBE, CANCEL, END, and QUIT, and honor them immediately. FCC guidance requires opt-outs to be processed across all internal systems within 10 business days, and CTIA carrier policy expects immediate suppression on receipt of STOP. Opt-outs submitted by any reasonable method must sync to your suppression list. Failing to sync that list across tools is reportedly the leading cause of TCPA class actions, and the 2026 Palm Beach Tan settlement, $2.5 million with individual class members eligible for up to $1,500 per post-stop text, illustrates the exposure of getting this wrong.

Quiet hours and state rules

Federal rules restrict business texting to 8:00 AM to 9:00 PM in the recipient's local time zone. Several states are stricter.

StateQuiet HoursNotable Provision
Florida (FTSA)8:00 AM to 8:00 PM$500 to $1,500 per text, fee-shifting, and a 15-day safe harbor requiring the recipient to text STOP before suing
Oklahoma (OTSA)8:00 AM to 8:00 PMMirrors Florida rules but without fee-shifting
Washington (CEMA)Standard state windows$500 per text plus Consumer Protection Act treble damages; Aaland v. CRST (2025) held recruitment texts to prospective workers are commercial
Maryland8:00 AM to 8:00 PMRequires prior express written consent for automated commercial messaging

Damages. TCPA violations carry statutory damages of $500 per negligent text and up to $1,500 per willful violation, and because damages accrue per message, an unconsented campaign to a few hundred numbers can generate exposure in the millions.

A2P 10DLC Registration and Carrier Filtering

Beyond the legal layer, carriers run their own technical gate. Application-to-Person 10-Digit Long Code, or A2P 10DLC, is the framework AT&T, T-Mobile, and Verizon use to verify business identity for text traffic sent from standard local numbers, administered through The Campaign Registry.

As of February 1, 2025, carriers began automatically blocking unregistered A2P traffic. Unregistered senders see delivery failure rates above 40%, while properly registered traffic with clean content typically delivers at 95% to 98%. Registering requires submitting your legal business name, EIN, address, and website at the brand level, then registering the use case, such as recruiting, with sample templates and opt-in language at the campaign level. Approval usually takes 1 to 7 business days, and submissions without a visible privacy policy or clear opt-in language are commonly rejected outright.

Even fully registered, compliant messages get silently dropped if content trips carrier spam filters. Phrases like "earn fast cash" or "no background check needed" can trigger financial-fraud filters, public link shorteners like bit.ly are widely blocked because scammers rely on them, emojis shift message encoding and cut the character limit from 160 to 70, and sending identical unpersonalized text to hundreds of numbers at once triggers velocity filters. None of this shows up as a bounce the way email does. It fails quietly, and the sender has no idea unless they are watching delivery rates directly.

Cadence and What to Actually Send

StageTimingChannel
First contactImmediately upon applicationSMS, automated
No-reply follow-up2 to 5 business days after prior touch, cap at 3 to 6 total attemptsSMS or email
Interview reminders48 hours, 24 hours, and 2 hours beforeSMS, automated
Status updatesEvery 4 to 5 days if a decision is pendingSMS

First contact: "Hi [First Name], this is [Recruiter Name] with [Agency Name]. Thanks for applying to the [Job Title] role. Are you still interested? Reply YES to continue."

Follow-up after no reply: "Hi [First Name], following up on the [Job Title] opening at [Agency Name]. Still want to move forward? Reply YES or STOP to opt out."

Interview scheduling: "Hi [First Name], this is [Recruiter Name] from [Agency Name]. We would like to schedule your interview for [Job Title]. Does [Day, Time] work? Reply YES to confirm or suggest another time."

Status update: "Hi [First Name], quick update on your [Job Title] application with [Agency Name]. We are still reviewing candidates and expect a decision by [Date]. Thanks for your patience."

Every message keeps the recruiter and agency name in the first line, states the specific job, and uses a plain reply prompt instead of a link. If a background check ends up factoring into a later decision, the adverse action steps that follow are covered in how to reject a candidate politely, which walks through the FCRA notice requirements in full.

Where SurFox AI Fits

None of the above is exotic advice. Most recruiters already know to identify themselves, keep messages short, and stop after a few unanswered texts. What is hard is doing it correctly, every time, for every applicant, while tracking consent scope, syncing opt-outs across every tool, and staying inside quiet hours across multiple state jurisdictions at once.

SurFox AI handles identification, consent and opt-outs on every message. See a 2-min demo →

SurFox AI is not built as a texting blaster. It runs the screening conversation itself over SMS, with sender identification, consent handling, and opt-out processing built into every message rather than left to a recruiter's memory. Every applicant gets the same compliant, consistent conversation, not just the ones a recruiter had time to text manually before moving to the next requisition. That does not remove the legal judgment calls above, which still require agency-level review of consent scope and state rules. It removes the operational risk of those rules being applied inconsistently across hundreds of applicants a week. If the volume itself is the problem, the triage side of it is here.

The Takeaway

Texting candidates works, and the data on response rates and speed is not close. The failure mode is not the channel, it is treating it casually: sending unidentified messages that read like the scams candidates have learned to fear, or texting without knowing which consent standard applies.

The "3 text rule" is a reasonable deliverability instinct dressed up as a hard number, and the real research points to a broader cadence cap of 3 to 6 touches, spaced days apart, across channels. The legal side is not optional reading. Statutory damages accrue per message, several states have stacked stricter rules on top of federal law, and at least one federal circuit split is actively unresolved. Getting texting right means getting identification, consent, and opt-out handling right on every message, not just the ones that happen to get noticed.

Text every applicant, compliantly, without a recruiter writing each one.

SurFox AI runs the screening conversation over SMS with sender identification, consent handling and opt-out processing built into every message, then routes the candidates who clear your criteria to a recruiter.

Frequently Asked Questions

What is the 3 text rule?

It is an informal guideline from SMS vendor trade blogs stating recruiters should stop texting a candidate after two to three unanswered messages. It has no academic origin, but the underlying caution is grounded in carrier deliverability data, since repeated unanswered texts damage a sending number reputation and increase opt-outs.

Is it unprofessional to text a candidate?

Not when the candidate applied and provided a phone number. Consented candidate texting achieves 60% to 70% response rates and near-98% open rates. Cold-texting someone who never applied or opted in is widely viewed as invasive and is routinely blocked as spam on candidate forums.

Is it normal for recruiters to reach out via text?

Yes. Roughly 52% of talent acquisition teams use centralized texting software for candidate communication, and CTIA reported 2.2 trillion SMS and MMS messages sent in the US in 2024, reflecting how standard the channel has become.

Are text messages offering jobs legit, and how can you tell?

Many are legitimate, but the channel also carries heavy fraud. The FTC reported $470 million in text scam losses in 2024. A legitimate message identifies the recruiter and agency by name, references a specific job, never asks for payment, and avoids pushing you to apps like Telegram or WhatsApp.

Do you need consent to text a job applicant?

Yes. Submitting a phone number on an application generally provides consent for texts about that specific role, but that consent has scope limits and does not cover unrelated future outreach or cold-sourced numbers. Marketing or promotional texts require a stricter written consent standard.

What is the best texting cadence for candidates?

Immediate automated contact upon application, then 3 to 6 total follow-up touches spaced 2 to 5 business days apart across channels. For scheduled interviews, a three-touch reminder sequence at 48 hours, 24 hours, and 2 hours before the interview has been shown to cut no-shows by 35% to 50%.

Why do compliant recruiting texts sometimes never arrive?

Carrier spam filters can silently drop messages that trip financial-fraud keyword filters, use public link shorteners, contain multiple emojis, or get sent identically to large batches of numbers at once. None of this produces a visible bounce, so a sender may not know delivery failed unless they track delivery rates directly.

Can a staffing agency get sued for texting candidates?

Yes. TCPA violations carry $500 to $1,500 in statutory damages per message, and several 2025 and 2026 settlements and court rulings, including a $2.5 million settlement over unprocessed opt-outs, show this is actively litigated. This is general information, not legal advice, and specific exposure depends on your state and your consent records, so review your texting program with counsel.

Tom Bauer, Founder & CEO, SurFox AI

Tom Bauer is the founder and CEO of SurFox AI. With 20+ years building and scaling sales teams across multiple industries, he founded SurFox AI to bridge the gap between what AI promises and what revenue operators actually need. He writes about AI-powered lead qualification and sales operations from direct operational experience - not theory.

About SurFox AI - SurFox AI is an AI-powered lead qualification platform that engages leads via SMS 24/7, surfaces buying signals automatically, and routes qualified prospects to sales teams with full conversation context.

Read the platform overview →

Related Insights

Sales Strategy

Too Many Applicants to Call: Triaging High-Volume Applicant Flow

Read More
Sales Strategy

Candidate Screening: The 5 C's, the 80/20 Rule, and What Actually Predicts a Hire

Read More
Sales Strategy

How to Reject a Candidate Politely (Templates, Timing, and What You Are Legally Allowed to Say)

Read More