Can Roofers Still Cold-Text Homeowners? The 2026 Rules for Texas and Colorado

Every storm season somebody in a roofing Facebook group posts the same idea: buy a list, blast 5,000 texts, book the ones who answer. It's cheap, it's fast, and for about a decade it mostly worked.

In 2026 it's the single most expensive mistake a roofing company can make — and the exposure isn't a fine from a regulator you'll never hear from. It's a private lawsuit, filed by a firm that does nothing else, priced per message.

Here's what actually changed, what you can still do, and the arithmetic that makes the decision for you.

What changed: Texas turned texts into telephone solicitation

The federal Telephone Consumer Protection Act (TCPA) has always been the floor. It requires prior express written consent for marketing calls and texts to cell phones, and it hands consumers a private right of action worth $500 per message, trebled to $1,500 for willful violations, with no cap on the total.

That floor didn't move much this cycle. The FCC's "one-to-one consent" rule — the one that would have killed shared lead-form consent — was vacated by the Eleventh Circuit in January 2025 and formally repealed later that year. A single clear opt-in can still cover more than one seller under federal law.

Texas moved instead. Effective September 1, 2025, SB 140 amended the state's mini-TCPA (Tex. Bus. & Com. Code ch. 302) so that "telephone solicitation" now includes SMS and MMS. Practical translation for a roofer working DFW, Houston, or the I-35 corridor:

• Sending marketing texts to Texas numbers makes you a seller who needs a registration certificate from the Texas Secretary of State — a $200 fee plus a $10,000 security bond — unless a statutory exemption fits you.
• Chapter 302 carries civil exposure up to $5,000 per violation, and the 2025 amendments tied related violations to the Deceptive Trade Practices Act, which opens the door to treble damages and attorney's fees.
• Texas also runs its own no-call list (ch. 304) that is separate from the federal registry, and its calling window is tighter than federal: 9 AM–9 PM Monday through Saturday, noon–9 PM Sunday.

Colorado is quieter but not open season. The Colorado No-Call List Act (C.R.S. 6-1-901 et seq.) requires telephone solicitors to register with the PUC's designated agent and scrub the state list, which pulls in national registry numbers quarterly. The Attorney General enforces it. Colorado has no statewide door-to-door license, but plenty of Front Range cities require a local solicitor's permit — Denver's fines start around $150 for a first offense.

The math that ends the argument

Forget the regulator. Do the plaintiff math on one 5,000-message cold blast to Texas numbers:

Those are statutory-damage figures, not predictions about what any particular blast triggers. But note what's missing from every row: proof of harm. TCPA and its state cousins don't require the homeowner to show they were injured — receiving the message is the violation. And nothing in that table counts the Chapter 302 registration exposure stacked on top.

Now put it against the upside. A roof at a $22,000 average ticket, at a 40% gross margin, nets roughly $8,800. One aggregated Texas claim wipes out eleven of them. That's not a risk-adjusted channel; that's a coin flip where heads pays for a truck and tails pays for a lawyer's kid's college.

What you can still legally do

Cold texting is one channel. The rest of the storm playbook is intact:

1. Knock. In-person canvassing isn't a telephone solicitation and isn't touched by the TCPA at all. It's governed by local permit rules and posted "no soliciting" signs — check with the city clerk before you work a new municipality, and honor the signs. This is the reason a scored route still matters: the constraint on knocking is your crew's hours, not statutory damages. We priced that out in door knocking vs. leads.

2. Mail. Direct mail sits outside TCPA and both state mini-TCPAs entirely. It's slower and it costs more per touch, but a targeted 400-piece drop on verified-hail, 15-plus-year roofs is legally boring — which is the point.

3. Call, carefully. Calling is still available if you do the unglamorous parts: scrub the federal DNC registry (refreshed at least every 31 days), scrub the Texas and Colorado state lists separately, register where required, honor the tighter Texas hours, dial manually rather than through an autodialer, keep an internal do-not-call list, and log every opt-out immediately. The FCC's revocation rules that took effect April 2025 mean a homeowner can revoke consent in any reasonable way — a "stop," a verbal no, a reply to any channel — and you have to honor it across channels.

4. Text people who asked you to. Existing customers and homeowners who gave you real prior consent are a different legal universe from a purchased phone list. Consent you can produce in writing is the whole ballgame.

5. Email. CAN-SPAM is a far lighter regime: accurate headers, a real physical address, a working unsubscribe honored within 10 business days. No per-message private right of action.

What this means for how you buy leads

The compliance question and the lead-quality question turn out to be the same question. If your outreach has to be either consented or non-telephonic, then who you knock, mail, and dial matters more than how many numbers you can blast.

That's the model we built to: verified storm exposure, parcel-level roof age, federal DNC screening on the numbers we surface, and door routes that give a crew a legally boring, high-density morning. We are not a dialer and we don't sell you a blast list — see the state-by-state field guides for Texas and Colorado for exactly what we screen and what stays on you.

Two things always stay on you: the state no-call lists we don't hold licenses for, and your own contract language. Those are yours to own, and a construction attorney in your state is cheaper than the first demand letter.

The bottom line

The cold-text era is over in Texas and it's narrowing everywhere else. The roofers who'll do fine are the ones who already stopped treating outreach as a volume problem — the ones working a smaller list of homes that actually qualify, on foot and by mail, with a phone used deliberately instead of automatically.

If you hold a RoofLeads territory, that list is already in your dashboard: filter to verified hail plus 15-plus-year roofs and build this week's routes from it. If your city is still open, check the map — one roofer per city gets it — and run the numbers on what a signed roof actually costs you on cost per job.

This article is general information, not legal advice. TCPA, Texas ch. 302/304, and Colorado's No-Call List Act are actively litigated and amended; verify current requirements with counsel in your state before launching any outreach program.