The 30-second answer

To bulk-send review requests via CSV: (1) export your past customer list with name, email, and/or phone number columns. (2) Clean the list to remove invalid emails, opted-out numbers, and duplicates. (3) Upload to a review automation tool that handles 10DLC compliance, opt-out tracking, and rate limits. (4) Schedule the send for business hours in each recipient's time zone, not all at once.

Critical caveat before you start: bulk SMS to a cold list is a TCPA risk. Review requests are generally considered marketing communications under federal law, which means you need documented prior express written consent before texting. Bulk email is governed by CAN-SPAM (more permissive but still requires identification, opt-out, and accurate sender info). The rest of this guide walks through the safe way to do bulk review requests — and the lines you cannot cross.

This guide is informational, not legal advice. Consult counsel for guidance specific to your business and state.

When Bulk Review Requests Make Sense

Bulk-sending review requests via CSV is most useful in three specific scenarios:

1. Catching up after years of no system. You've been in business for 5 years, served 1,200 customers, and never had a systematic way to ask for reviews. A one-time bulk send to your historical customer list can produce a sudden burst of reviews that meaningfully improves your Google Business Profile ranking.

2. Onboarding a new review tool. You signed up for a review automation platform and want to seed it with your existing customer base before relying on the going-forward automation.

3. Migrating from one tool to another. Switching review platforms and want to keep collecting from your historical customer list under the new system.

When bulk requests don't make sense:

• Sending to strangers or purchased lists. This is illegal under TCPA and an open invitation to lawsuits.
• Sending without recent customer relationships. If your "list" is from 5+ years ago and you have no recent contact, the relationship is too cold — both legally questionable and unlikely to perform.
• Replacing your ongoing review automation. Bulk sends should be a one-time supplement, not a substitute for asking customers individually at the moment of service.

If you're a service business that's been operating without a review system, a single well-targeted bulk send to your last 12–24 months of customers is the highest-leverage marketing move you can make this quarter. After that, switch to automated post-job review requests for every new customer going forward.

Step 1: Build Your CSV File

Most review automation platforms expect a CSV with one row per customer and standard contact columns. The minimum columns:

Where to get the data:

• CRM export (Jobber, Housecall Pro, ServiceTitan, HubSpot, Salesforce) — most have a "customers" or "contacts" export option that produces a CSV
• Booking software (Vagaro, Square Appointments, Booksy, Mindbody) — similar export functionality
• Email marketing tool (Mailchimp, Constant Contact) — exports your subscriber list, though phone numbers may be missing
• Accounting software (QuickBooks, FreshBooks) — customer lists from invoicing
• POS system (Square, Toast, Clover) — customer purchase history exports

A note on column naming: Some tools require specific column header names (e.g., "Email" not "Email Address"). Check your review platform's CSV template before exporting to avoid manual reformatting later.

Step 2: Clean Your List Before Uploading

This is the step most operators skip — and it's the difference between a bulk send that produces 80+ reviews and one that gets your phone number blocked by carriers, your email flagged as spam, or worse.

The cleaning checklist:

1. Remove duplicates. Customers who appear twice get two requests, which annoys them and looks unprofessional.
2. Remove invalid emails. Run the list through an email verification tool (NeverBounce, ZeroBounce, or your review platform's built-in verifier if available). Invalid emails hurt your sender reputation and can get your domain blacklisted.
3. Remove invalid or landline phone numbers. Landlines can't receive SMS, so sending to them wastes carrier fees and triggers errors. Most cleaners offer a "mobile vs landline" check.
4. Remove anyone who has previously opted out. If you've ever asked for reviews before and someone replied STOP or unsubscribed, they must stay on your suppression list permanently.
5. Remove customers with active disputes or complaints. Asking an unhappy customer for a public review is asking for a 1-star review. Manual review of the list for known complainants is worth the 15 minutes.
6. Remove customers from outside your service area (if you accidentally captured leads who never became customers, or B2B contacts who weren't decision-makers).
7. Tag customers by last service date if your tool supports it — recent customers convert dramatically better than 18-month-old ones, and segmenting lets you prioritize the send order.

A reasonable rule: customers within the last 90 days should always be in the send. Customers 90 days to 12 months are usually worth including. Customers older than 24 months may not remember you well enough to give a meaningful review — and may have moved phone numbers.

For really old lists (24+ months), the realistic expectation is a 5–10% response rate vs 20–35% for recent customers. Adjust your expectations accordingly.

Step 3: TCPA, CAN-SPAM, and 10DLC — The Legal Realities

Before you upload anything, understand what you're legally allowed to do. The rules differ for SMS and email, and they've changed meaningfully in 2025–2026.

For SMS (TCPA + 10DLC)

For the complete SMS-specific playbook including compliance, templates, and 10DLC registration walkthrough, see our SMS review requests complete guide. The summary below focuses on the bulk-send-specific compliance considerations. Under the Telephone Consumer Protection Act (TCPA), review requests are generally considered marketing communications. This was clarified by legal commentary in 2025–2026 — the FCC and private litigators interpret "marketing" broadly to include anything that aims to gain a public commercial advantage, which includes asking for a public review.

What this means for bulk SMS review requests:

• You need prior express written consent (PEWC). A signed contract or web form where the customer checked a box agreeing to receive marketing texts qualifies. A verbal "yes, you can text me" doesn't.
• An existing service relationship is not automatic consent. A customer who hired you to fix their air conditioner hasn't necessarily consented to receive marketing texts from you afterward. Many businesses operate on this assumption, and many get away with it — but it's legally gray.
• The opt-out rule (April 2025) is strict. Customers can revoke consent through any reasonable method — STOP, an email reply, even an informal "leave me alone" voicemail. You must process opt-outs within 10 business days.
• Hours of operation: 8 AM to 9 PM in the recipient's local time zone (some states stricter — Florida is 8 AM to 8 PM, for example).
• 10DLC registration is mandatory. US carriers now block unregistered business SMS traffic entirely. Your review platform should handle 10DLC registration for you.

Penalties: TCPA violations carry $500–$1,500 per message statutory damages, with no cap on aggregate liability. A 5,000-contact bulk send without proper consent could result in $2.5M–$7.5M in class action exposure. This isn't a theoretical risk — TCPA class actions filed through mid-2025 were up nearly 95% year-over-year.

For Email (CAN-SPAM)

CAN-SPAM is significantly more permissive than TCPA, but still requires:

• Accurate sender identification — your "From" line must clearly identify your business
• A working physical address in the email
• A clear, working unsubscribe mechanism
• No deceptive subject lines
• Honoring opt-out requests within 10 business days

CAN-SPAM is also more flexible about implied consent — emailing past customers about your business is generally acceptable if the customer reasonably expects communication from you (which most do for review requests within 12 months of service).

The Honest Read for Most Service Businesses

If you've been running a legitimate local business and serving customers in person:

• Email is generally low-risk. Bulk emailing your past customers a review request, with proper identification and opt-out, is well within CAN-SPAM parameters.
• SMS is higher-risk. Bulk-texting past customers is common practice in the industry, but technically a TCPA gray area without documented consent.

The practical risk-reduction approach:

• Start with email-only bulk sends if you have any doubt about your SMS consent documentation
• For SMS, prefer customers who provided phone numbers specifically for service communications (and ideally checked a "we may text you" box on your intake form)
• Use a review platform that handles 10DLC, opt-out tracking, and consent records so you have documentation if challenged
• Stagger your sends rather than blasting your whole list at once — both for compliance and for response rate

For specifics on TR's SMS handling and compliance features, see our SMS review request playbook.

Step 4: Upload and Schedule the Send

Once your CSV is cleaned and you've confirmed your compliance posture, the actual upload is the easy part. Most modern review platforms handle CSV bulk-sends in a similar workflow:

1. Sign in to your review platform (e.g., your TrueReview dashboard)
2. Navigate to the bulk send / CSV upload area — TrueReview's is at features/send-bulk-requests-via-csv
3. Map your CSV columns to the platform's expected fields (First Name → First Name, Email → Email, etc.)
4. Preview the import to confirm the data parsed correctly and no rows are malformed
5. Choose your channel — email only, SMS only, or both (the platform sends via whichever contact info is available for each customer)
6. Customize the message template with personalization tokens like {first_name} and {service_type}
7. Schedule the send — don't send all at once

Why scheduling matters:

• Carrier-level rate limits. US carriers throttle bulk SMS traffic. A sudden burst of 5,000 messages from a single 10DLC-registered number will trigger throttling, and many messages may not deliver.
• Time zone considerations. Sending at 10 AM EST means your West Coast customers receive the message at 7 AM — too early. Schedule sends to land between 9 AM and 7 PM in the recipient's local time.
• Day of the week. Tuesday through Thursday consistently produce the highest response rates. Monday is busy. Friday is mentally checked-out. Weekends are inconsistent.
• Spread over several days. A 1,000-contact send distributed over 5 days produces better response rates and lower carrier throttling risk than a single-day blast.

A reasonable schedule for a 500-contact list:

• Day 1: 100 emails sent at 10 AM in recipient's time zone
• Day 2: 100 emails sent at 10 AM
• Day 3: 100 SMS sent at 11 AM
• Day 4: 100 SMS sent at 11 AM
• Day 5: Remaining 100 across both channels

For SMS specifically, TrueReview's CSV bulk send feature handles 10DLC compliance, opt-out tracking, and per-recipient time zone scheduling automatically.

Step 5: Monitor and Adjust

Once the send starts going out, watch a few metrics in real-time:

• Delivery rate. Should be 95%+ for email, 90%+ for SMS. Lower rates suggest list quality issues or compliance flags.
• Opt-out rate. Above 2–3% is a warning sign — your list may be older than it should be, or your message tone may be off.
• Response rate. Review submissions within 48 hours of send. A healthy bulk send to recent customers produces 15–35% response rates.
• Carrier complaints. Most platforms flag if carriers are blocking or filtering your messages. Stop the send immediately if this happens.

If response rates are low after the first day, don't keep blasting the rest of the list expecting a different outcome. Pause, look at why — bad timing? Weak message copy? Outdated list? Fix the variable, then resume.

How to Time the Send for Maximum Response

Beyond the carrier-throttling reasons, timing affects how many people actually click your review link.

Best times to send:

• Tuesday through Thursday, between 10 AM and 2 PM local time
• For service businesses: avoid sending during your customers' working hours if they're B2B (sales pros and managers don't respond to personal-life messages at 11 AM Wednesday)
• For consumer-facing businesses: lunch-hour and early-evening sends tend to outperform morning ones

Worst times to send:

• Before 9 AM or after 7 PM local time (looks invasive)
• Monday morning (everyone's catching up)
• Friday after 3 PM (everyone's checked out)
• Weekends (inconsistent, and looks like a robot blasting)
• Federal holidays
• Major sports event windows in your region (Super Bowl Sunday, World Series games, etc.)

The single best send window for most businesses: Tuesday or Wednesday, 10 AM in recipient's local time zone.

FAQ

How many review requests can I send at once?

There's no hard legal limit, but practical considerations include:

• Carrier rate limits — most 10DLC numbers can send 100–500 SMS per hour without throttling
• Email reputation — sending 5,000+ emails at once from a new sender domain triggers spam filters
• Compliance risk — bigger sends mean bigger exposure if any aren't properly consented

A reasonable max for a single day is 1,000 SMS and 5,000 emails, distributed across the day. For larger lists, spread over a week.

Can I bulk-send to customers from 5 years ago?

Legally, you can email past customers under CAN-SPAM regardless of how long ago. For SMS, it's grayer — older relationships may not meet TCPA consent requirements, and the customer's phone number may have been reassigned. Response rates for 24+ month old lists are typically 5–10%, so the cost-benefit is marginal anyway. Focus on customers from the last 12 months.

Do I need a TCPA opt-in record for every customer?

For SMS to customers you have an existing service relationship with: legally gray. Many businesses don't have explicit SMS opt-in records and operate on the assumption that providing a phone number for service contact implies consent for follow-up messages. This is industry common practice but technically a TCPA risk. Going forward, add a "we may text you" checkbox to your service intake forms so future bulk sends are unambiguously compliant.

What's the difference between a transactional and marketing review request?

Legally, review requests are generally classified as marketing because they aim to gain a public commercial advantage. Even if you frame it as "transactional follow-up," the FCC and TCPA litigators may still classify it as marketing. Treat review requests as marketing for compliance purposes.

Should I include the customer's name in the message?

Yes. Personalized messages (using the customer's first name and mentioning the service they received) outperform generic ones by 30–50% in response rate. Just be careful with merge tokens — a broken token like "Hi {first_name}!" sent literally will tank your response rate and look unprofessional.

Can I send the same review request twice to a customer who didn't respond?

Yes, but limit it. One follow-up reminder 5–7 days after the initial send is acceptable and generally improves total response rate. A second follow-up (10–14 days after initial) is the absolute maximum — beyond that, you're harassing customers who clearly chose not to respond.

What happens if a customer replies STOP to my bulk SMS send?

You must add them to your suppression list immediately and not send to them again from any of your business numbers. Most review platforms (including TrueReview) handle this automatically. Failure to honor opt-outs is one of the most common TCPA violations and one of the most likely to result in lawsuits.

Will bulk-sending hurt my email sender reputation?

If your list is clean and your unsubscribe rate stays under 0.5%, no. If you send to invalid emails, get marked as spam, or have high opt-out rates, yes — your sender domain can land on blacklists that take months to recover from.

The Bottom Line

A one-time bulk send to your historical customer list is one of the highest-leverage marketing moves a service business can make — if done correctly. The keys:

1. Clean your list first. Remove duplicates, invalid contacts, prior opt-outs, and customers older than 24 months.
2. Understand the TCPA and CAN-SPAM rules. SMS is higher-risk than email. Have documented consent where possible. Use a platform that handles 10DLC and opt-out tracking automatically.
3. Schedule the send across multiple days to avoid carrier throttling and respect time zones.
4. Personalize the message. First names and service-specific details lift response rates significantly.
5. Switch to automated review collection going forward. Bulk sends should be a one-time supplement to a systematic, post-service review request workflow.

For the bulk-send mechanics specifically, TrueReview's CSV import handles list validation, 10DLC compliance, time zone scheduling, and opt-out suppression in one workflow. Start a 14-day free trial and upload your first list, or see pricing — no sales call required.

For the SMS-specific deep-dive on automation, timing, and templates, see our SMS review request playbook.