{
  "id": "BRD-278",
  "slug": "brd-278",
  "title": "Cannabis, CBD and related brands are not carried, whatever the traffic",
  "statement": "A brand whose business is cannabis, CBD, hemp derivatives, kratom or drug paraphernalia must not be registered for A2P messaging.",
  "rationale": "The prohibition attaches to the business rather than to the message, and it holds regardless of state legality — so a licensed dispensary sending nothing but appointment reminders or two-factor codes is still ineligible. That is the part legitimate operators do not believe until it happens: the traffic is harmless, the business is the disqualifier, and logistics companies serving the sector are caught by the same rule.",
  "layer": "BRAND",
  "layerSlug": "brand",
  "object": "brand.vertical + brand fields + website content",
  "severity": "BLOCKING",
  "detectability": [
    "AI_FORM",
    "CRAWL",
    "EXTERNAL_DATA"
  ],
  "failureClass": "HARD_STOP",
  "authorities": [
    "AWS",
    "Bandwidth",
    "Bird",
    "Sinch",
    "Infobip",
    "Plivo"
  ],
  "codes": [
    {
      "provider": "Bandwidth",
      "code": "701",
      "remediable": false
    },
    {
      "provider": "Sinch",
      "code": "CR2015",
      "remediable": false
    }
  ],
  "applicabilityText": "Applies to every 10DLC registration.",
  "universal": true,
  "remediation": "A cannabis-sector brand cannot be registered for A2P messaging in the US, including for two-factor or transactional traffic. Use email, an app, or a web channel for customer messaging.",
  "notes": "Absorbs MSG-191: the ban attaches to the business type, so it holds even for 2FA-only or purely transactional traffic, which is exactly what MSG-191 states at the message layer. Whether a business is licensed in the cannabis sector may need a state licence register the product does not hold, so a brand that reads as ambiguous should be confirmed by the user before submission rather than after.",
  "catalogIds": [
    "MSG-191"
  ],
  "phase": "approval",
  "automated": true,
  "attestation": {
    "question": "Does this business sell, distribute, or serve the cannabis, CBD, hemp, kratom or paraphernalia sector in any part of its trade?",
    "howToCheck": [
      "Ask what the business actually sells, not what these messages say. The prohibition attaches to the business and holds regardless of state licensing.",
      "Include logistics, payments and services to the sector — they are caught by the same rule.",
      "Where the answer is ambiguous, settle it before submitting rather than after."
    ],
    "failureLooksLike": "A licensed dispensary sending nothing but appointment reminders or two-factor codes is still ineligible. The traffic is harmless and the business is the disqualifier."
  },
  "url": "https://ekas.io/rules/10dlc/brand/brd-278/",
  "markdown": "https://ekas.io/rules/10dlc/brand/brd-278.md",
  "registry": "https://ekas.io/rules/10dlc/",
  "updated": "2026-07-25",
  "licence": "CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/"
}