Brazil A2P SMS in 2026: Anatel, LGPD and WhatsApp

Quick answer: Brazil is a WhatsApp-first market, but SMS remains useful for alerts, fallback and audiences who prefer it. For A2P SMS, check the live country rules for the sender type and registration level before you launch: the published Brazil guidance lists required registration for alphanumeric senders, while short codes are a common high-volume choice. Do not assume a dynamic alphanumeric sender will work at subscriber level. Keep your own consent evidence and opt-out suppression current; Anatel's do-not-disturb rules and LGPD obligations are not a substitute for your tenant's controls. For WhatsApp, use a connected WhatsApp Business Account and submit the correct Portuguese (pt_BR) template for business-initiated messages.

This is an operator guide, not legal advice. Requirements vary by channel, use case and carrier; confirm the current position with Brazilian counsel and your messaging partners before a campaign.

Anatel and Não Me Perturbe: separate registry checks from your own opt-outs

Anatel is Brazil's telecommunications regulator. The national Não Me Perturbe service lets consumers register to limit telemarketing contact from participating sectors. The rules and mechanisms for voice calls, SMS, sector coverage and participating providers can change; confirm whether the registry applies to your campaign and route with counsel and your providers rather than treating a successful list check as blanket permission to message.

Keep tenant-owned opt-out hygiene in place for every marketing program:

Suppress a recipient as soon as they ask you to stop, and apply the request to the channels and purposes it covers.
Retain the source, time and scope of each opt-out so your team can honor it across later imports and campaigns.
Screen against any applicable do-not-disturb source available to your organization, and retain the result and check date.
Do not send again merely because a number is absent from a registry. An opt-out, missing lawful basis or other restriction may still make the message inappropriate.

Do Not Disturb coverage is not a consent record, and consent does not cancel an applicable do-not-contact request. Review the current Anatel guidance and your provider's implementation before relying on a registry check.

LGPD: choose a lawful basis and keep evidence

The Lei Geral de Proteção de Dados (LGPD) governs the processing of personal data. For messaging, identify the purpose and lawful basis before collecting a number or sending a campaign. Article 7 sets out the legal bases for processing; Article 8 specifies requirements for consent when you rely on it; Article 9 requires clear information about the processing. A marketing opt-in should identify who is contacting the person, what kind of messages they can expect and how to withdraw consent.

For each consent-based program, retain evidence that connects the person, channel and purpose to the disclosure they accepted. Record when and how consent was collected, the wording or version shown, and any later withdrawal. Keep service updates distinct from promotional messages: a number supplied to fulfill an order is not automatically permission for unrelated marketing.

People also have rights under the LGPD, including access to information about processing, correction and, in applicable circumstances, deletion or revocation of consent. Give requests a clear intake and response path, and make sure a deletion or withdrawal request does not silently put the person back on a marketing list. The ANPD can investigate complaints and alleged violations and apply the administrative sanctions provided by law; maintain evidence and a response process rather than treating consent as a checkbox.

Orbit provides consent, suppression and data-subject request surfaces for you to configure. Your organization chooses its lawful basis, captures the evidence, handles requests and determines whether each send is permitted. Orbit does not ensure LGPD compliance.

For the API fields and workflows, see Consent Management, Opt-Out & Suppression Lists and Data Subject Access Requests.

WhatsApp Business: the primary business channel

WhatsApp is the channel many Brazilian customers already use with businesses; industry reports commonly put its consumer reach above 99%. It is often the first channel to evaluate, with SMS retained for use cases where a recipient is not reachable on WhatsApp or a separate SMS program is appropriate. Choose based on audience, consent, urgency and delivery needs rather than assuming one channel can replace the other.

Meta's WhatsApp Business Platform policies apply in Brazil as elsewhere. Connect and verify your business account, follow the applicable template categories, and use an approved template for business-initiated conversations when Meta requires one. For Brazilian recipients, submit and select the Portuguese variant using the correct pt_BR language code; an approved template in another locale is not a substitute. Review Meta's current template and messaging policies because approval, category and quality requirements can change.

Treat WhatsApp consent and opt-outs as part of the same tenant-owned contact posture as SMS. A customer who asks your business to stop should not be contacted again through a different channel unless the scope of their request and your lawful basis clearly permit it.

Orbit's SMS send gate for Brazil

For SMS, the published Brazil country guidance identifies registration as required for alphanumeric senders. The send gate uses the per-country registration level: when it is required, an alphanumeric A2P send is held until the sender has an approved registration for Brazil. A short code or other accepted sender type follows its own country and carrier requirements; do not infer its approval from an alphanumeric sender's status.

Read the current destination and channel row before launch using the Country Compliance Requirements reference. The Send Gates guide explains the registration field and send-time behavior. These are checks on the sender-registration posture, not a decision about your LGPD lawful basis or a guarantee that a message will be delivered.

Brazil SMS launch checklist

Choose a channel and use case. Decide whether WhatsApp, SMS or both fit the recipient and message. Keep transactional and marketing purposes distinct.
Check the live SMS country row. Confirm accepted sender types, registration level, opt-out expectations and delivery capabilities for Brazil.
Confirm sender readiness. Use a short code or another currently accepted sender type. If using an alphanumeric sender where registration is required, submit it and wait for approval before sending.
Document the lawful basis. For marketing based on consent, retain the disclosure, collection source, date, purpose and channel scope. Do not treat a customer relationship alone as marketing consent.
Maintain suppression. Apply recipient opt-outs promptly, preserve their scope and check applicable do-not-disturb requirements with counsel and providers.
Prepare WhatsApp separately. Confirm WABA readiness and approved pt_BR templates for business-initiated messaging.
Test a small audience first. Verify sender identity, language, template, opt-out handling and delivery reporting before scaling.

For sender formats, country-by-country requirements and a reusable launch sequence, see the Sender-ID Registration by Country playbook.

Frequently asked questions

Preciso de consentimento para enviar SMS de marketing no Brasil?

Se sua base legal for consentimento, obtenha e registre a autorização antes de enviar. Explique quem enviará as mensagens, qual é a finalidade e como a pessoa pode cancelar. Avalie com assessoria jurídica qual base legal se aplica ao seu caso.

O cadastro no Não Me Perturbe substitui minha lista de opt-out?

Não. Verifique as regras aplicáveis ao seu tipo de mensagem e mantenha sua própria lista de supressão atualizada. A ausência de um número no cadastro não comprova consentimento.

O Orbit garante conformidade com a LGPD?

Não. Devotel Orbit oferece recursos que sua equipe pode configurar para registrar consentimento, respeitar supressões e organizar solicitações de titulares. Sua organização continua responsável pela base legal, pelas evidências e pelo atendimento das solicitações.

Um remetente alfanumérico dinâmico funciona para SMS no Brasil?

Não presuma que sim. Consulte a linha atual de SMS para BR e confirme o tipo de remetente e o nível de registro exigidos. A orientação publicada indica registro required para remetentes alfanuméricos.

Posso usar um template do WhatsApp em inglês para clientes no Brasil?

Use o template aprovado para o idioma que você envia. Para mensagens em português brasileiro, submeta e selecione a variante pt_BR; não dependa de uma aprovação em outro idioma.

Updated 11 October 2026.