The consent control must be unchecked by default
The requirementstatement
The opt-in control must not be pre-selected; consent must be a deliberate act.
- Severityseverity
- BlockingBLOCKINGBreaking this rule gets the submission rejected. There is no partial credit.
- When it bitesphase
- Gates approvalapprovalGet this wrong and the brand or campaign is refused at registration.
- What is checkedobject
- consent surface
- Where it liveslayer
- Consent flowCONSENT_FLOW
- How Ekas settles itdetectability
- AI · visionVISION
- Needs the pixels: a screenshot of the opt-in surface, a scanned paper form, an MMS attachment.
- What the fix involvesfailureClass
- Fix the websiteTERMINAL_WEBSITE
- The fix lives on your site. No amount of rewording the form clears it.
- Who requires itauthorities
- CTIAFCCTCRTwilioAWS
- When it appliesapplicabilityText
- Applies when consent was collected by web form, checkout, account settings, third party and point of sale.
Why this rule existsrationale
A pre-ticked box collects consent from everyone who did not notice it, which is the definition of consent that was not affirmatively given. It is one of the few defects a reviewer can confirm from a single screenshot, so it is caught reliably and rejected without discussion.
How to fix itremediation
Render the checkbox unchecked on first paint. Check your form builder's default — Shopify, Klaviyo and most form plugins ship marketing consent pre-enabled, so this is usually a settings toggle rather than a code change.
Common mistakespitfalls
- Capturing the screenshot after you clicked the box proves nothing — take it on a fresh page load.
Provider rejection codescodes
The code you get back when this rule is what failed, and whether that provider lets you resubmit.
| Provider | Code | Resubmit |
|---|---|---|
| Twiliogen2 | 30925 | Yes |
Rules you will hit next
6 other rules read consent surface. Fixing one field to satisfy a single rule is how a resubmission trades one rejection for another, so read these before you change anything.
CON-043A mandatory phone field needs its own separate, optional SMS opt-inBlockingBLOCKINGCON-108The disclosure must be on the same page as the phone-number fieldBlockingBLOCKINGCON-AGE-GATEAge-gated programs require real age verification at opt-inBlockingBLOCKINGCON-BOX-BUNDLEDMessaging consent must be separate from terms acceptanceBlockingBLOCKINGCON-BOX-PRESENTAn explicit affirmative opt-in control must existBlockingBLOCKINGCON-DISC-ADJACENTDisclosures must appear at the point of opt-in, not only in linked documentsBlockingBLOCKING
CON-BOX-UNCHECKED is one of 101 consent flow rules in the 915-rule 10DLC registry. Free to cite under CC BY 4.0.