Digital Marketing Compliance for Immigration Law Firms: The 2026 Checklist

Staying compliant in immigration law firm marketing comes down to seven things: ads that don’t promise outcomes, texts sent only with written consent on a registered A2P 10DLC number, tracking pixels kept off intake forms, chatbots that never give legal advice, call recordings with consent, a website people with disabilities can use, and Spanish copy that never sounds like a notario. Most firms we audit miss at least three.

Why compliance hits immigration firms harder

Every law firm has to follow bar advertising rules. Immigration firms carry extra weight for three reasons:

• The data is more sensitive. A web form that asks about status, entry date or a court date holds information a client may fear sharing. Sending it to an ad platform by accident is a different problem than leaking a car accident lead.
• Your clients have been scammed before. Notario fraud is common enough that the FTC and USCIS both run warnings about it. Marketing that sounds like a notario costs you trust and can cost you a bar complaint.
• You market in two languages. Disclosures, consent language and opt-out instructions have to work in Spanish too, not only on the English page.

The seven compliance areas, at a glance

1. Ad claims: the rule most people already know

Rule 7.1 bans false or misleading communication about a lawyer’s services. In immigration, the usual violation is promising an outcome that USCIS or a judge controls: “Get your green card,” “We stop deportations,” “100% approval rate.”

Some states go further. California requires immigration and naturalization ads to state active State Bar licensure in the same language as the ad, so a Spanish Facebook ad needs a Spanish disclosure. Texas requires certain ads to be filed with its Advertising Review Committee.

We cover this in detail, with do-and-don’t ad examples, in bar advertising rules for immigration law firm ads.

2. Text messaging: where the expensive mistakes happen

Texting is the fastest way to reach a lead and the easiest way to get sued. Each non-compliant text carries its own statutory damages, so one bad campaign to 2,000 contacts adds up fast.

What’s in force right now:

• Consent. Marketing texts need prior express written consent: a clear, unchecked opt-in that names your firm and isn’t a condition of service. The FCC’s stricter “one-to-one consent” rule was struck down by the Eleventh Circuit in January 2025, and the FCC removed it. The old written-consent standard applies.
• A2P 10DLC registration. Since February 1, 2025, US carriers block text traffic from unregistered business numbers. Your firm registers a brand and a campaign through The Campaign Registry before the first text goes out.
• Opt-outs. Since April 2025, FCC rules let people revoke consent by any reasonable means, including replies like “stop texting me” or “no más,” and you have up to 10 business days to process it. Best practice is to stop immediately.
• The “stop one means stop all” rule is on hold. The FCC has delayed it to January 31, 2027. Don’t build around the delay. Treat any opt-out as a full opt-out now.
• Quiet hours. Federal rules allow 8 a.m. to 9 p.m. in the recipient’s time zone. Florida and Oklahoma cut that to 8 p.m.
• State laws. Florida, Oklahoma, Washington and Maryland have their own telemarketing laws with private lawsuits. Texas SB 140, effective September 1, 2025, expanded its telephone solicitation law to cover texts, with penalties up to $5,000 per violation.

Immigration-specific habit: write the consent line and the STOP instructions in Spanish too. If the lead came in through a Spanish ad, the consent they gave should be in Spanish.

3. Tracking pixels: the risk most firms don’t know they have

A Meta pixel or Google tag that fires on your intake page can send what a visitor typed, or the URL of the page they saw, to the ad platform. Plaintiff firms now file lawsuits under state wiretap laws arguing that this counts as letting a third party listen in. California’s law carries $5,000 per violation, and the claims have spread to Florida and Pennsylvania.

Courts are split and many cases get dismissed. That doesn’t make the demand letter cheap. The fix is cheaper than the defense:

• Get consent before tags fire. A cookie banner that loads the pixel first and asks second doesn’t help.
• Keep pixels off intake forms and case-detail pages. Fire the conversion on the thank-you page with no form data attached.
• Never send case type to an ad platform. Conversion events named “asylum_lead” or “removal_defense_form” tell Meta something sensitive about a person. Use a neutral event name and keep case type in your own CRM.
• Make the privacy policy match reality. Courts have rejected consent defenses when the policy contradicted what the site actually did.

4. Chatbots and AI intake: allowed, with guardrails

AI receptionists and website chatbots are allowed. Bar opinions agree on the guardrails. ABA Formal Opinion 512 (July 2024) says lawyers need to understand the tools they use and protect client confidences when they do. Oregon’s Formal Opinion 2026-208 approved AI agents for client intake, “qualified”: the firm supervises the vendor, and the bot can’t appear to create an attorney-client relationship, promise services or guarantee results.

For an immigration firm, that means:

• Say it’s automated. “You’re chatting with our automated assistant” in the first message, in the visitor’s language.
• No legal advice. The bot can collect facts and book a consultation. It can’t tell someone whether they qualify for anything.
• Collect only what intake needs. Name, contact, language, case type, urgency. Save the details for the attorney.
• Check the vendor contract. Find out where transcripts live and whether the vendor can train on them. Chat transcripts are also showing up in wiretap lawsuits, so consent applies here too.
• Read the transcripts. Someone at the firm reviews a sample every week. You’re responsible for what it said.

More on where AI actually pays off for intake: AI for law firms.

5. Website forms: duties start before the retainer

Under Rule 1.18, a person who consults you about possibly hiring you is a prospective client, and you owe them confidentiality even if you never take the case. ABA Formal Opinion 10-457 warned back in 2010 that a website inviting people to submit details can trigger those duties, and can create conflict problems if the person turns out to be adverse to an existing client.

• Put a short notice above the submit button: submitting doesn’t create an attorney-client relationship, and don’t send confidential details until a lawyer contacts you.
• Ask for the minimum on the first form. Status, criminal history and entry details belong in the consultation, not a web form.
• Run a conflict check before the consultation, not after.

6. Call recording: announce it every time

Many intake teams record calls for training or use AI tools that transcribe them. Several states require every party’s consent to record, including California, Florida, Pennsylvania, Washington, Maryland and Massachusetts. Your callers come from everywhere, so treat every call as an all-party-consent call.

The fix is one sentence at the top of every call and in your phone tree: “This call may be recorded.” Record it in Spanish too.

7. Accessibility: the lawsuit that finds small sites

UsableNet counted 5,114 digital accessibility lawsuits in 2025. 45% of federal filings targeted companies that had already been sued once. New York led, and Florida came back as a high-volume state. Their monthly counts also show roughly 1,400 suits against sites that had an accessibility overlay widget installed. A widget is not a defense.

Build to WCAG 2.1 AA, the standard the Justice Department adopted for state and local government sites in 2024 and the one plaintiffs cite most. For a law firm site, the usual failures are fixable in a week:

• Forms without labels, or error messages a screen reader can’t hear.
• Low-contrast text, especially grey on dark backgrounds.
• Videos without captions, including Spanish videos.
• Booking calendars and chat widgets you can’t use with a keyboard.

Don’t forget the notario problem

This one isn’t a statute you’ll be sued under. It’s the trust problem underneath everything else. The FTC tells immigrants not to go to a notario for legal help, that USCIS forms are free, and that anyone promising a green card is lying. Your marketing should never trip those alarms:

• Never use “notario” or “notario público” to describe your firm, even in Spanish ads.
• Name the attorney and the firm in every ad and on every landing page.
• Don’t charge for, or appear to sell, government forms.
• Use “abogado de inmigración” and say plainly that a licensed attorney handles the case.

More on getting Spanish right: Spanish marketing for immigration law firms.

A 30-minute compliance audit you can run this week

How we handle it at Rocket Launch Media

We build intake systems for immigration firms, so these rules shape the build from day one:

• A2P 10DLC is registered before the first text goes out, with opt-in and STOP language in English and Spanish.
• Conversion tracking fires on the thank-you page with neutral event names. Case type stays in the firm’s CRM.
• AI receptionists open by saying they’re automated and hand anything legal to the attorney.
• Every ad is approved by the attorney before launch, and we archive the copy, targeting and landing page.

The attorney’s license is on the line, not the agency’s. We build like it.

Keep reading

Sources: ABA Model Rule 7.1; Venable, Eleventh Circuit overrules FCC’s one-to-one consent rule (Jan 2025); Womble Bond Dickinson, FCC repeals one-to-one consent rule; Privacy World, FCC extends waiver of “stop one means stop all” to Jan 31, 2027; A2P 10DLC and state mini-TCPA summary (2026); Legal 500, CIPA/ECPA website tracking litigation in 2026; ABA Formal Opinion 512 summary; NWSidebar, Oregon State Bar Formal Opinion 2026-208; ABA Formal Opinion 10-457, lawyer websites; UsableNet 2025 year-end digital accessibility lawsuit report; FTC, avoiding scams that target immigrants; California Business and Professions Code 6157.5.