A development director I talked to last year had two SMS lists. One was 3,400 people who checked a consent box while donating on the org's own site. The other was 41,000 numbers a vendor "matched" to their cause profile — a rented list, dressed up as a "warm affinity audience." Guess which one the board wanted to text first? The big one, obviously. It's 12x the size.
That was the mistake. The small list out-raised the big one on the first appeal, cost a fraction to send, and didn't come with a subpoena risk attached. The big list drove the opt-out rate up so fast the campaign got carrier-throttled inside 48 hours.
Full disclosure: I work for Ready, an SMS platform. We handle a lot of nonprofit sending, so I've watched this exact pattern play out across dozens of accounts. The consent source — not the list size — predicts almost everything downstream: giving rate, opt-out rate, deliverability, and how exposed you are legally. Let me show the math.
Two lists, three numbers that diverge
The three metrics that actually move the needle are giving rate per send, opt-out rate per send, and litigation exposure. Here's roughly how they split by source. These are approximations from what we see, not lab data — treat them as directional.
| Metric | Checkout opt-in | Rented / acquired list |
|---|---|---|
| Consent quality | Explicit, timestamped, tied to a real transaction | "Affinity match" — no real consent to you |
| Giving rate (first appeal) | ~4–6% | ~1% or less |
| Opt-out rate per send | ~0.5–2% | ~8–20%+ |
| Carrier deliverability | High (clean engagement) | Degrades fast under complaints |
| TCPA exposure per bad text | Low | $500–$1,500 per message |
| Cost to acquire the number | Near zero (already donating) | Per-record rental fee |
The checkout donor already pulled out a card and gave you money. The rented number has, at best, "expressed interest in causes like yours" to a data broker who is now selling that interest to twelve organizations at once. One of these people wants to hear from you. The other has never heard your name.
Why "4x" is conservative
Say you run an identical appeal to both lists. A single 155-character text asking for a $25 gift.
Checkout list — 3,400 contacts, ~5% give at ~$40 average gift:
- 3,400 × 5% = 170 gifts × $40 = $6,800 raised
- Send cost: 3,400 segments × ($0.02 + $0.0045 carrier) = $83.30
- Net: ~$6,717
Rented list — 41,000 contacts, ~1% give at ~$30 average gift:
- 41,000 × 1% = 410 gifts × $30 = $12,300 raised
- Send cost: 41,000 × $0.0245 = $1,004.50
- Plus the rental fee (often $0.05–$0.15/record), plus scrubbing, plus the opt-out cleanup
On raw dollars the big list "wins" — $12,300 vs $6,800. But look at revenue per contact: the checkout list earns $2.00 per name, the rented list $0.30 per name. That's the 4x, and it's before you subtract the rental fee, before litigation risk, and before the retention gap. Checkout donors renew. Rented numbers were never yours to begin with, so lifetime value on that cohort is roughly a rounding error.
Run your own version on the Ready cost calculator if you want to plug in your real gift sizes.
The opt-out rate is a carrier problem, not just a courtesy problem
Here's the part boards underestimate. A high opt-out rate doesn't just shrink your list — it tanks your ability to reach anyone at all.
Carriers watch the ratio of messages sent to STOP replies and spam reports. Cross a threshold and your traffic gets filtered — silently. Your reports show "sent," recipients show nothing received. A rented list generating 8–20% opt-outs will trip that filter fast, and the damage bleeds onto your good list because it's often the same registered 10DLC campaign.
Ready enforces automatic STOP handling — when someone texts STOP, the opt-out propagates so that contact can't be messaged again across any of your campaigns. That protects you from re-texting an angry unsubscriber, but it can't manufacture consent that never existed. If your opt-out rate is structurally high because the list is cold, no platform feature fixes the source. This is also the deliverability case for double opt-in, which we covered in why double opt-in loses 8% of sign-ups but saves you from a STOP death spiral.
Litigation exposure scales with consent uncertainty
Texting a rented list is where nonprofits get sued. TCPA statutory damages run $500–$1,500 per message, and there is no "we're a charity" exemption for marketing texts sent without prior express written consent. A rented list of 41,000, if even a fraction are litigators or DNC-complainers, is a real financial event.
There are three separate lists that get confused here — the federal DNC, DNC-complainers, and known TCPA litigators — and scrubbing one doesn't cover the others. We broke that down in the three lists compliance teams confuse.
If you're going to touch a riskier acquired source at all, scrub it first. Ready's TCPA & DNC Litigator Scrub runs at $0.005 per contact and suppresses known litigator and DNC-complainer numbers before you send. On that 41,000 list:
- 41,000 × $0.005 = $205 to scrub the whole list
One avoided $1,500 lawsuit pays for scrubbing that list seven times over. And acquired lists degrade — a list bought six months ago needs scrubbing far more often than one you grew, which we laid out in the source-based scrub schedule. Scrubbing reduces risk. It does not make you lawsuit-proof, and consent is still your responsibility — but $205 against $500–$1,500 per bad text is the cheapest insurance in the building.
What "checkout consent" actually requires
The reason checkout donors are so valuable is that the consent is clean if you capture it correctly. A phone field on a donation form is not consent to text. You need an explicit, unchecked opt-in checkbox with disclosure language next to it, and you need the timestamp stored. We wrote the full version in adding a phone field to your donation form isn't consent to text.
Ready's consent and attestation capture records the opt-in for bulk and API sends, so you're building an audit trail as you grow the list — the exact evidence you'd want if a complaint ever surfaced. Combined with quiet-hours enforcement (sends held outside the recipient's permitted local hours) and automatic 10DLC registration handled in-app, the checkout-sourced list is about as defensible as SMS gets.
A practical policy for mixed sources
If you already have both kinds of lists, here's what I'd do:
- Send to checkout/explicit opt-ins freely — this is your revenue engine. Keep it clean, honor STOPs, respect quiet hours.
- Quarantine anything acquired or rented until you've scrubbed it against litigator + DNC lists at $0.005/contact.
- Re-permission the rented list before appealing to it. Send one compliant opt-in invitation, keep only those who confirm, discard the rest. You'll lose 90%+ of the names — good. What remains is real.
- Register the right 10DLC use case for what you actually send. Filing the wrong campaign type throttles delivery even on your good list — see peer-to-peer vs broadcast consent.
- Track opt-out rate per source. The moment a source pushes past ~3–4%, stop sending to it and investigate.
The takeaway
List size is a vanity number. The consent source is the value driver — a donor who opted in at checkout is worth roughly 4x a rented name on revenue per contact, and that gap widens once you factor in retention, deliverability, and the litigation risk you avoid. Rented lists aren't worthless, but they're a liability until you've re-permissioned and scrubbed them, and most of the names won't survive that.
If you want to grow the list that actually pays, start with the checkbox at checkout, keep the audit trail, and scrub anything you didn't grow yourself. You can start on Ready with 2,500 free credits — no card required — and see how a clean, consent-sourced list performs before you ever touch an acquired one.