Your Marketing Texts Now Need Written Consent

That festival discount you text your whole guest list, the service reminder blast to every car buyer from the last three years, the WhatsApp offer for a free health check: all of it now needs something it never needed before, a customer's documented yes before you press send. Oman's telecom regulator has stopped talking about a spam rule and issued one, with a six month clock already running toward the deadline.

What the TRA actually issued

In mid August 2026, the Telecommunications Regulatory Authority, the body that licenses and polices phone and messaging services in Oman, issued a regulation covering promotional calls, service messages and value added services. Times of Oman and Muscat Daily both reported it in detail, and it now sits on TRA's own legal framework page as an active regulation, not a draft.

• Explicit consent, given before you send, is now required for any promotional call, text or similar message.
• Promotional calls and messages can only go out between 8am and 9pm.
• The sender name must show your real business name; promotional SMS codes must start with the letters AD, and generic or spoofed IDs are banned.
• Customers must get a working way to opt out, and businesses must honour that immediately.
• Customer phone numbers cannot be passed to another company or an international intermediary without the regulator's approval.

Businesses covered get six months from the day the regulation takes effect to bring their practices into line. Al Roya reported that it takes effect the day after publication in the Official Gazette, which points to roughly February 2027 for the deadline. Confirm the exact date with TRA before you build a plan around it.

Who this actually catches

The direct legal duties sit with licensed telecom operators and the SMS aggregators that carry bulk messages for businesses. In practice, any business that buys a bulk SMS package or a sender ID will be asked by its provider to show consent records before that sender ID keeps working. That reaches hotels sending seasonal offers, dealerships texting service reminders, insurers pushing renewal deals, clinics reminding patients about check up packages, and colleges promoting new intakes.

• Booking confirmations, appointment reminders and one time verification codes: these are service messages, and they are not the target of the new consent rule.
• Discount codes, seasonal offers, new branch announcements and renewal upsells: these are promotional, and they now need a documented opt in.
• A reply STOP line at the bottom of a message is good manners, but it is not consent. Consent has to be given first, not withdrawn afterward.

A phone number collected for a booking confirmation is not permission to sell that same customer a holiday package.

The cost of getting it wrong

Fines under the new regulation are not flat. They scale with what went wrong, and reported figures show they double for a repeat breach inside a year.

Al Falaj Motors is a composite example: a dealership in Ghala with a customer list built up over three years of sales and service visits. Here is the kind of math any business with a marketing list can redo.

1. Start with the full marketing contact list: 4,000 numbers.
2. Remove anyone with no purchase or service visit in the last three years, since that contact has gone cold anyway: down to 2,800.
3. Keep only numbers with a recorded yes to receiving offers, a ticked box on the service invoice or the website form: 640 numbers.
4. A bulk campaign to that clean list, at an illustrative rate of 3 baisa a message, costs about OMR 19.200.
5. Sending the same campaign to the full unconsented list of 4,000 risks a single data mishandling fine of OMR 1,000 to 5,000, before any repeat offense doubling.

Building a consent list that holds up

The fix is not complicated, it is a habit change. Capture the yes the moment you collect the number, keep proof of it, and stop treating every contact in your customer database as fair game for every offer.

• Add a single tick box wherever you already collect phone numbers today: at check in, on the booking form, at the sales desk.
• Record the date and the channel the yes came through, not just a name on a spreadsheet.
• Keep two lists: everyone, for service messages, and only the yes list, for promotions.
• Before every campaign, confirm your sender ID is still active. If a provider suspends it, missing consent records are usually why.

The same standard, ask before you use a number for anything beyond the reason it was given, is what actually counts as consent for a phone number in the first place. A call platform such as CustomerCare.OM already timestamps a caller's consent and any opt out request inside the call notes, which saves the scramble to reconstruct it later from memory.

What this means for you

You do not need to wait for the exact gazette date to start. Pull your marketing list this week and sort it into consent and no consent. Anything without a clear yes moves to the no send pile until you get one.

• Check with your SMS or WhatsApp broadcast provider whether your sender ID already meets the new naming rule.
• Set an internal rule: nobody sends a promotional blast without checking the yes list first.
• Fix your opt out process now, so a stop request actually stops the next message, not just the current campaign.
• Brief whoever manages your marketing texts on the 8am to 9pm sending window, since a well meant early morning offer is now a violation.

The bottom line

The direction has been clear for a while: fewer blasts, more permission. Now there is a date attached to it. Businesses that spend this month building a real consent list will keep sending offers without a second thought; the ones that wait will spend next spring defending their sender ID instead.