What a real consent record looks like (they must produce it)

By MercPrivacy · Published 2026-08-02 · Updated 2026-08-05

The company texting you says you opted in. Consent is a record with required contents, and the sender is the party that must produce it. Here is what the record has to contain.

You asked the company texting you where it got your number, and the answer came back smooth and confident: you opted in. Everyone gets this answer. It arrives fast, it sounds official, and it is designed to end the conversation.

Here is what should end the conversation instead: a question. Opted in where, when, and to what, exactly? Consent to receive marketing texts is not a mood or a company's general recollection. It is a record, with specific required contents, and the company sending the texts is the party that has to produce it.

Most of them cannot. Knowing what the record is supposed to contain is how you find that out in one written request instead of six months of wondering.

## Consent is their homework, not yours

Start with the part almost nobody knows. In a dispute over marketing texts, you do not have to prove you never consented. Proving a negative is impossible, and the law does not ask it of you. The sender is the party claiming consent exists, so the sender is the party that has to show it.

That flips the usual power dynamic. "You opted in" works as a shield only while it stays vague. The moment the question becomes "produce the record," the shield has to be an actual object: a document with your number on it, the required disclosures in it, and an act by you agreeing to it. Either that object exists or it does not.

This is also why your half of the paperwork matters. You keep [the evidence file](https://mercprivacy.com/knowledge/the-evidence-file-what-to-keep) — the messages, the dates, your stop request. They keep the consent record. When your half is solid and their half is missing, the dispute is mostly decided before anyone argues.

## What "prior express written consent" actually requires

For marketing texts, the governing standard is prior express written consent, and every word in that phrase is doing work. In plain English, a valid record has to show:

- **A signature from you** — and electronic counts. A typed name, a checked box, a recorded click can all qualify, but it has to be an act you took, attached to the agreement language itself. - **The specific sender, named** — consent runs to an identified company. A record that never names the business now texting you does not cover that business. That is their problem, not yours. - **A clear statement that you agreed to receive marketing texts at your number** — not "communications," not "updates," not "offers from us and others." The disclosure has to make the marketing nature of the messages plain. - **A statement that consent is not a condition of purchase** — the agreement has to tell you that you could buy the product or use the service without signing up for the texts. - **Your phone number, supplied by you** — the actual number they are texting, not one guessed at or bought.

A record missing these elements is not prior express written consent. It is a lead file with ambitions.

## Why "you filled out a form" collapses

Vague consent claims share a shape: confident in summary, foggy in the specifics. The specifics are the record. Watch what happens when you press.

- **Which form?** Often they cannot say. Your number was bought, and the buyer never saw the form it supposedly came from. - **When?** A real record carries a date and time. "At some point" is not a timestamp. - **What did it say?** The disclosure language decides everything, and it is the thing least likely to survive a resale chain intact. - **Did it name them?** Lead forms name a quote site nobody remembers and gesture at "marketing partners." The company texting you today may be fourth in the chain of custody.

The further your number traveled from wherever it was first typed, the less likely anyone can produce a document naming today's sender. That is the quiet math behind [the quote-form economy](https://mercprivacy.com/knowledge/the-quote-form-trap): one submission, many claimants, and usually not one of them holding a record that satisfies the definition above.

> If the consent record exists, producing it is easy. If producing it is hard, it does not exist.

## Asking for the record, as strategy

Put the request in writing — a reply to the text, an email to their support address, anything that leaves a copy. Keep it short: "Please provide the record of my prior express written consent to receive these messages, including the date, the source, and the disclosure language I agreed to."

Then read the response for what it is rather than what it claims to be. A real answer contains a date, a source, and language. Evasion has its own vocabulary: "you're in our system," "a partner provided your information," "we've removed you as a courtesy." A courtesy removal is a company declining to answer the question, in writing, on a record you are now keeping.

Send STOP as well, and screenshot it. [Revocation works no matter what they hold](https://mercprivacy.com/knowledge/unwanted-texts-and-why-stop-matters) — even valid consent ends when you withdraw it, and a sender must honor the revocation within a reasonable time, capped at ten business days under current federal rules. Every marketing text after that stands on its own: $500 in statutory damages per message, up to $1,500 where the violation is willful or knowing, with no requirement that you prove a dollar of loss.

## What we'd do with this

Bring us the texts and the non-answers. We assess whether the record supports statutory recovery and run the process from there — the mechanics are at [how it works](https://mercprivacy.com/how-it-works). [Stephanie](https://mercprivacy.com/stephanie) can review your situation instantly and free, or call (830) 587-5011. We are not a law firm; when a matter requires legal representation, a licensed attorney is engaged.