SMS marketing in the UAE: the rules and when it still works
TDRA's rules for marketing SMS in the UAE: consent, the 7 am to 9 pm window, opt-outs and penalties, what remains unconfirmed, and where SMS still works.
The short answer
Marketing SMS in the UAE needs the recipient's prior explicit consent, a free unsubscribe option in every message, and sending only between 7 am and 9 pm UAE time, according to TDRA's FAQ. Transactional and informational messages fall outside that definition. SMS still earns its place for reminders, delivery notices and codes, where a short message needs no app.
The rule that's easiest to break by accident is the clock. TDRA allows marketing text messages only between 7 am and 9 pm UAE time, and UAE time is four hours ahead of UTC. A campaign scheduled for 6 pm on a platform left on UTC goes out at 10 pm in the UAE.
Everything below is dated 7 November 2026. It rests on TDRA's published FAQ, with a law firm's summary for phone calls and another firm's report on the data law. It isn't legal advice, and TDRA is the authority to confirm it with.
What do TDRA's rules say about marketing SMS?
| Rule | What the FAQ says | What it means for you |
|---|---|---|
| Consent | The recipient must give explicit consent before any marketing message is sent. Consent can be on paper or in electronic form, provided it can be stored and kept for later review | Keep a record for every number: date and time, the wording shown, and where it was given |
| Unsubscribe | Every marketing message should carry a free-of-charge unsubscribe option | Put it in the message itself, and apply every opt-out across all the tools you use |
| Hours | Marketing messages may be sent only between 7 am and 9 pm UAE time | Set your platform to UAE time before the first send |
| What counts as marketing | Messages with a primary commercial objective, such as ads and promotions. Transactional and informational messages of all types fall outside the definition | TDRA's own examples of messages outside it are a bank transaction notice, a flight reminder and a service confirmation |
| Blocking | Recipients can block senders by texting 7726, and the service works for sender names that start with (AD) | Assume your most irritated customers will use it if you message them too often |
| Penalties | Providers impose penalties on violators, starting with warnings, then temporary suspension of service, then permanent disconnection if it recurs. No fine amount is given | The worst case is losing the service your reminders run on, which is an operational problem before it is a legal one |
Marketing phone calls are a separate regime, and the two windows differ. Clyde & Co's summary of Cabinet Resolutions No. 56 and No. 57 of 2024, effective from 27 August 2024, says marketing calls may be made only from 9 am to 6 pm. It also reports a limit of one call a day and two a week if unanswered, a Do Not Call Register, and fines for repeat violations of that register. Don't apply the SMS hours to calls, or the call hours to SMS.
What hasn't been confirmed?
Five gaps matter if you run a programme of messages, and none of them should be filled by guessing:
- Fine amounts for promotional SMS. TDRA's FAQ names the escalating measures but no figure, and the amounts quoted on vendor blogs couldn't be verified, so we don't quote one.
- How a business obtains or registers a sender name. The FAQ doesn't say, so ask your licensed SMS provider what name your messages will carry and who approved it.
- Whether a borderline message counts as marketing. The test is a primary commercial objective, and a reminder with an offer attached sits on the line. Ask your provider or TDRA before you send it.
- Whether the same rules reach WhatsApp or other apps. The FAQ is written about SMS. Our guides to bulk WhatsApp marketing and WhatsApp in Dubai cover what is and isn't confirmed there.
- How the federal data law sits alongside TDRA's rules. In June 2026 Morgan Lewis said the PDPL's implementing regulations still hadn't been issued, so the detail is open.
What should you do, step by step?
- Capture consent as its own action: an unticked box or a keyword text, worded plainly, such as "Send me offers by SMS". Explicit means the person did something for this purpose, and a line buried in terms and conditions is hard to defend as explicit. Store the number, the date and time, the wording and the source.
- Put a free unsubscribe in every marketing message, and keep one suppression list that every tool you use checks before it sends. An opt-out that only reaches the SMS tool and not the CRM comes back as a second message.
- Check the time zone before the first send. Set it to UAE time, then schedule a test to your own phone and read the timestamp it arrives with.
- Keep offers out of reminders and delivery notices. A booking reminder is informational. A booking reminder with 20% off is a promotion that wanted to be a reminder, and it invites the question of which kind of message it is.
- Ask your provider in writing: is it licensed in the UAE, what sender name will the messages carry, and how are opt-outs processed? A provider who can't answer in a sentence each is not ready to carry your customers.
- Never send to a bought list. A bought number has no consent record, and the FAQ tells advertisers to keep those records.
When does SMS still beat WhatsApp and email?
When the message is short, time-bound and the person shouldn't need an app: appointment reminders, delivery windows, payment links and one-time codes. Those are informational or transactional in TDRA's terms, so the marketing rules don't govern them, though a clean opt-in record still helps if a customer disputes a message.
For promotions the case is narrower. DataReportal, citing GWI's Q2 2026 survey, has 84.1% of UAE internet users aged 16 and over on WhatsApp in the past month, so a customer who opted in there can be reached with a conversation as well as a message. Email carries more content. Use SMS for a promotion only when three things are true: the person gave SMS consent, the offer fits in one message with an end date, and you'd be comfortable seeing them reply STOP.
Where SMS sits in the wider plan is covered by email marketing in the UAE and the marketing automation guide, and the TDRA glossary entry defines the regulator. Lifecycle messaging across email, SMS and WhatsApp together is what our email and lifecycle service covers, if you'd rather hand it over.
Ask TDRA for the rules, your licensed SMS provider for sender names and routes, and a UAE lawyer for anything borderline. Then open your SMS platform's settings and read the time zone.
Questions people ask
Is SMS marketing legal in the UAE?
Yes, with conditions. TDRA's FAQ requires the recipient's prior explicit consent for marketing texts, a free unsubscribe option in every message, and sending only between 7 am and 9 pm UAE time. Providers can penalise violators, up to permanent disconnection. This isn't legal advice.
What time can you send marketing SMS in the UAE?
Between 7 am and 9 pm UAE time, according to TDRA's FAQ. UAE time is four hours ahead of UTC, so check that your SMS platform isn't scheduling in UTC or a European time zone. Marketing phone calls have a different window of 9 am to 6 pm, so don't mix the two.
Do transactional SMS messages need consent in the UAE?
The consent rule in TDRA's FAQ is written for marketing messages. The FAQ treats transactional and informational messages, such as bank transaction notices, flight reminders and service confirmations, as outside that definition. The definition turns on a primary commercial objective, so a reminder carrying a promotion is a borderline case. Ask your provider or TDRA before sending one.
How do customers stop marketing SMS in the UAE?
Every marketing message should carry a free unsubscribe option. Recipients can also block senders by texting 7726, and TDRA's FAQ says this works for sender names that start with (AD). Honour opt-outs at once and across every tool you use, so a second message never follows.
What is the penalty for sending marketing SMS without consent in the UAE?
TDRA's FAQ says providers impose penalties on violators, starting with warnings, then temporary suspension of service, then permanent disconnection if it recurs. It gives no fine amount, and we haven't found a verified one. Confirm the current position with TDRA or your SMS provider.