Coaching for Distinctive Results

The digital marketplace offers unprecedented opportunities for marketers to connect with consumers. However, the dark side of this connectivity is a persistent and evolving landscape of unethical and illegal mobile marketing practices that violate consumer trust and the law. From illegal spam texts to the surreptitious collection of location data, these practices demonstrate a clear disregard for both legal frameworks and consumer rights. A review of recent cases reveals the specific laws violated, the severe consequences for consumers, and the substantial penalties companies face. For marketers, the lesson is clear: ethical conduct, anchored in transparency and consent, is not optional.

Violating Consent and the Law

A glaring example of illegal mobile marketing is the case of KRA Consultancy Ltd, a Manchester-based firm fined £300,000 by the UK’s Information Commissioner’s Office. The company violated the core tenets of data protection and privacy law by sending over 5.5 million unsolicited direct marketing text messages to individuals who had not consented to receive them (Manchester Evening News, 2026). In the U.S., such actions would directly violate the Telephone Consumer Protection Act, which requires prior express written consent for marketing calls or texts sent via an auto dialer (Federal Communications Commission [FCC], 2024). The KRA case also highlights the malicious potential of such campaigns; the firm sent fabricated bailiff threats designed to frighten vulnerable people already in debt (Manchester Evening News, 2026).

Another pervasive issue is the misuse of consumer data, as seen in a lawsuit against Amazon. The complaint alleges that Amazon’s Ads, embedded in thousands of mobile apps, secretly collected consumers’ precise geolocation data without their knowledge or consent. This practice potentially violates the California Invasion of Privacy Act and other state privacy laws, which are part of a growing patchwork of U.S. regulations that demand transparency and choice. Laws like the Delaware Personal Data Privacy Act and the Maryland Online Data Protection Act, which went into effect in 2025, are prime examples of this trend toward stricter data privacy, giving consumers the right to opt out of the sale of their data or, in Maryland’s case, imposing strict limitations on data collection and processing (Bloomberg Law, 2025).

Consumers Bear the Brunt

The negative consequences of these practices on consumers are profound and multifaceted. The most immediate harm is often psychological and financial. In the KRA case, over 60,000 complaints were filed by people who were already struggling with debt and who were caused real fear and distress by the threats of bailiffs. Andy Curry, Head of Investigations at the ICO, emphasized that KRA deliberately sought these people out and bombarded them with illegal texts (Manchester Evening News, 2026). This type of predatory marketing exploits vulnerability for profit.

Beyond such malicious cases, consumers face a constant erosion of their privacy. The Amazon lawsuit illustrates how consumers lose control over their most sensitive information, including their precise movement patterns, which can be used to build detailed profiles and potentially expose religious affiliations, sexual orientation, and medical conditions. The complaint further alleges that Amazon has effectively fingerprinted consumers and has correlated a vast amount of personal information about them entirely without consumers’ knowledge and consent (Bloomberg Law, 2025). This loss of control fundamentally undermines consumer trust in digital platforms and the brands that use them.

The Price of Non-Compliance

Companies that engage in illegal mobile marketing face severe financial and legal penalties. In the U.S., the TCPA allows for statutory damages of $500 to $1,500 per unauthorized call or text, and courts can triple these amounts for knowing or willful violations. In a class-action suit involving millions of messages, these penalties can quickly escalate into a crippling financial blow (FCC, 2024). Individual states are also ramping up enforcement; for instance, Texas’s SB 140 imposes civil penalties up to $5,000 per violation of its telemarketing law, alongside private rights of action for consumers. Similarly, many state-level privacy laws, such as the Delaware and New Hampshire data privacy acts, have penalties up to $10,000 per violation (Bloomberg Law, 2025). The ICO’s £300,000 fine against KRA is described as one of the largest for nuisance marketing in recent years. Alongside monetary penalties, companies can be issued enforcement notices requiring them to stop illegal practices and implement compliance programs (Manchester Evening News, 2026).

Building an Ethical Mobile Marketing Campaign

To remain ethical and avoid legal and reputational pitfalls, marketers must build their mobile campaigns on a foundation of transparency and respect for the consumer. The single most critical step is obtaining explicit, informed consent before sending any marketing communication. This prior expression of consent must be demonstrated and recorded, and it should also be specific to the purpose of data collection. The recent evolution of the FCC’s one-to-one consent rule demonstrates the regulatory focus on this area; while the rule was ultimately vacated by the Eleventh Circuit, the underlying principle that consumers must clearly understand and agree to marketing contracts remains central to TCPA compliance (FCC, 2024).

Ethical practice does not end with the initial opt-in. Marketers must provide a clear and easy way for consumers to revoke their consent by opting out of future communications. This often means honoring simple keywords such as STOP and UNSUBSCRIBE within a reasonable timeframe. Furthermore, maintaining transparency in data collection is paramount. If an app collects location data or uses an SDK that does, this must be clearly and plainly disclosed to the user, who should be given a meaningful choice to opt-in. As emerging state privacy laws like those in Delaware and Maryland demonstrate, consumers are increasingly entitled to know how their data is used and to have control over it (Bloomberg Law, 2025). By prioritizing ethical practices like consent and transparency, marketers can build a relationship of trust with their consumers, which is ultimately more valuable than any short-term gain from a deceptive campaign.

References

Bloomberg Law. (2025, January 30). Amazon hit with suit over collection of consumers’ location data. https://news.bloomberglaw.com/litigation/amazon-hit-with-suit-over-collection-of-consumers-location-data

Federal Communications Commission. (2024). One-to-one consent rule for TCPA prior express written consent frequently asked questions (DOC-408396A1). https://docs.fcc.gov/public/attachments/DOC-408396A1.txt

Manchester Evening News. (2026, June 22). Manchester company that targeted people with spam texts about fake bailiffs slapped with huge fine. https://www.manchestereveningnews.co.uk/news/greater-manchester-news/huge-fine-for-manchester-company-34170585