If your business operates in a restricted category, you’ve probably encountered the acronym before — often in the context of a campaign getting blocked or an account getting suspended. SHAFT stands for Sex, Hate, Alcohol, Firearms, and Tobacco, and it represents the content categories that U.S. carriers and the CTIA treat with heightened scrutiny in commercial SMS messaging.
For businesses in these categories — and adjacent ones like gaming that carriers treat with similar restrictions — SHAFT isn’t an obstacle to work around. It’s the regulatory environment you operate in. Understanding it precisely, and building your SMS program to work within it, is the difference between consistent delivery and unpredictable blocks.
Here’s what SHAFT actually means in practice, category by category, and what it takes to operate compliantly.
What SHAFT Is and Why It Exists
The CTIA (Cellular Telecommunications Industry Association) is the trade group that establishes content standards for commercial SMS messaging. SHAFT represents the categories of content the CTIA and carriers have determined require either outright prohibition or elevated compliance requirements — not because the underlying industries are inherently illegal, but because consumer protection considerations and regulatory complexity require additional controls.
Carriers enforce SHAFT standards independently and seriously. Violations can result in immediate campaign suspension, short code or toll-free number deregistration, permanent number blocking, and fines. T-Mobile, for example, implemented explicit fines for SHAFT content violations effective January 1, 2024 — $500 per violation for content violations, with higher penalties for more severe infractions. AT&T and Verizon have similar enforcement mechanisms.
The CTIA also conducts active audits. If your program is flagged through carrier filtering, consumer complaints, or a proactive audit, your entire messaging program — not just the offending campaign — can be suspended pending review.
Breaking Down Each Category
S — Sex and Adult Content
This category covers sexually explicit content, adult entertainment messaging, and related material. The prohibition is fairly absolute: sexually inappropriate content is blocked by carriers regardless of age verification or consent documentation.
What this means practically: businesses in the adult entertainment or dating space face carrier-level restrictions that go beyond consent and registration. Even with proper age gating and explicit consumer opt-in, explicit sexual content is not deliverable through standard SMS infrastructure.
There is a narrow path for some adult content categories through specifically designated short codes and carrier-approved programs, but these require proactive carrier engagement and approval — not standard registration.
H — Hate Speech
Hate speech is a flat prohibition with no compliance pathway. Content that promotes hatred, discrimination, or harassment on the basis of race, ethnicity, religion, gender, sexual orientation, national origin, or disability is blocked categorically. There is no age gate, no consent documentation, and no carrier program that makes this content deliverable.
For most legitimate businesses, the H category is not a practical operational concern. It becomes relevant in the context of user-generated content — businesses that allow customers to reply to SMS messages or submit content through SMS-linked forms need to have policies in place to prevent hate speech from being transmitted through their messaging infrastructure.
A — Alcohol
Alcohol is a SHAFT category with a compliance pathway. Businesses selling or promoting alcoholic beverages can send SMS campaigns if they implement proper age gating and obtain carrier approval for their program.
The specific requirements are non-negotiable:
Age gating must collect an actual date of birth. A checkbox asking “Are you 21 or older? Yes/No” does not meet the standard. Carriers require that consumers enter their full date of birth — day, month, and year — before being enrolled in an alcohol-related SMS program. The age gate itself must be visible to and testable by carriers during the registration review process.
The age threshold is 21, consistent with federal law for alcohol consumption. The age gate must enforce this threshold technically, not just state it.
Campaign registration must accurately describe the program. Your 10DLC campaign registration needs to clearly identify your business as an alcohol brand, describe your age verification process, and document your consent flow. Ambiguous or incomplete registration for alcohol brands triggers delays and additional scrutiny.
F — Firearms
Firearms represents one of the most restricted categories within SHAFT. Most mainstream SMS platforms will not support firearms-related messaging at all, and many carriers apply blanket restrictions.
There is a limited compliance pathway for legitimate firearms businesses: federal firearms licensees (FFLs), hunting retailers, and manufacturers can pursue carrier approval through designated short codes with explicit carrier-by-carrier registration. This process is significantly more involved than standard 10DLC registration and requires active carrier engagement.
Key restrictions even within approved programs: content cannot promote illegal modifications, cannot circumvent waiting periods or background check requirements, and must be clearly commercial in nature (not instructional in ways that could facilitate harm).
T — Tobacco
Tobacco (including cigarettes, e-cigarettes, vaping products, and cigars) can be sent through SMS with proper age verification — similar to alcohol, requiring a 21+ age gate with actual birthdate collection.
Gaming: The SHAFT-Adjacent Category
Gaming is not technically one of the five SHAFT letters, but carriers treat it with similar — and sometimes more aggressive — restriction. The reason is the overlap between gaming vocabulary and prohibited gambling content.
Carriers have determined that gaming companies present elevated risk because: the language of gaming (“spin,” “jackpot,” “bonus,” “lucky,” “win big”) is indistinguishable from gambling solicitation language without context, gaming companies may serve minors in jurisdictions with age restrictions, and the gaming sector has historically included operators who did facilitate illegal gambling.
The practical consequence is that gaming companies face SHAFT-level scrutiny without the relatively clear compliance pathway that alcohol and tobacco have established. A gaming company that routes through generic SMS infrastructure is operating without carrier-level recognition of their legitimate status.
Age-gating requirements apply to gaming programs with age-restricted content — and the same birthdate-collection standard applies: a checkbox is not sufficient.
Building a SHAFT-Compliant SMS Program
For businesses in any of these categories, there are five operational requirements for a functional SMS program:
1. Complete and accurate 10DLC registration. Your brand registration must accurately represent your business, and your campaign registrations must specifically identify your SHAFT category and describe your compliance controls. Under-disclosing is a worse outcome than over-disclosing — misrepresentation discovered during a carrier audit can result in permanent deregistration.
2. A technically functional age gate. For alcohol, tobacco, and age-restricted gaming: your age gate must collect a full date of birth, enforce the appropriate age threshold, and be demonstrably functional. Carriers test these. A non-functional or easily bypassed age gate is grounds for rejection or suspension.
3. Explicit, SHAFT-specific consent language. Your opt-in documentation must go beyond standard TCPA language. It should specifically identify the regulated nature of your program — “You are subscribing to receive [alcohol/age-restricted gaming/tobacco] promotions from [Company]. You must be 21 or older to receive these messages.” This language protects you legally and supports your carrier registration.
4. Content review before sending. Every campaign should be reviewed against carrier content standards before sending. For SHAFT categories, this means checking not just for obvious compliance violations but for contextual issues — language that might be fine in isolation but could read as gambling-adjacent in the context of a gaming message, for example.
5. Ongoing monitoring and rapid response. Carriers audit SHAFT-category senders regularly. An opt-out rate above 3%, a carrier complaint, or a content flag can trigger a review. You need delivery monitoring at the carrier level so you can identify and respond to issues before they escalate to suspension.
Why SHAFT Compliance Requires Specialized Infrastructure
SHAFT compliance is not something you add onto a generic SMS platform. The carrier relationships, content review capabilities, registration expertise, and monitoring infrastructure required for regulated-category messaging are fundamentally different from what e-commerce SMS needs.
Generic platforms typically take one of two approaches to SHAFT businesses: they reject them at signup, or they accept them and provide the same generic infrastructure that doesn’t actually support their compliance requirements. Neither outcome serves the business.
Delivyr was built specifically for regulated and SHAFT-adjacent industries. Our carrier relationships were established in these categories. Our content analysis understands the nuanced difference between legitimate regulated-industry content and actual violations. Our compliance team understands age gating, campaign registration, and carrier audit response for exactly the industries that generic platforms can’t serve.
If you’re operating in a SHAFT-restricted category, the infrastructure you run on is a compliance decision. Generic infrastructure is a liability.
