Can a dealership text a credit application link?

Yes, a dealership can text a link to the secure credit application it already uses, but the text should carry only the link, never the customer's Social Security number, date of birth, or income. GoHighLevel can send the link and track the click with a trigger link. The bottom line: dealers who finance or lease are financial institutions under the FTC Safeguards Rule, so where credit application data is stored matters more than how fast the link goes out.

What the Safeguards Rule means for this text

According to dealer compliance guides, dealers that extend or arrange credit are financial institutions under the Gramm Leach Bliley Act, and the updated FTC Safeguards Rule has been fully mandatory for them since June 9, 2023. It requires a written information security program covering access controls, encryption, employee training, and vendor oversight. Since May 13, 2024, a dealer must tell the FTC within 30 days of discovering a breach that involves unencrypted information of 500 or more consumers. The FTC's own dealer FAQ, as summarized by those guides, says most dealers who finance or lease are covered. The practical question for a text workflow is simple: does customer financial data ever sit in a system that your security program has not approved?

Safe and unsafe ways to move the application

Ask the person who owns your Safeguards Rule program to approve where the data goes before building anything that collects it. The workflow below sends the link and tracks interest, and leaves the application itself in your approved system.

A message customers will trust

A text with a link to a credit application looks like phishing to many people, so say who is sending it and why. Sample: This is Maria at [Dealership]. As we discussed, here is our secure credit application for the Silverado: [link]. It takes about 5 minutes. Call me at [number] if you would like to do it together. Reply STOP to stop messages. Use your dealership's real domain in the link, not a generic shortener, and send it only after the customer has asked to apply.

Build it in HighLevel

1. Create a trigger link that points to the application page of your F&I platform, and name it Credit application.
2. Add a workflow with a manual trigger or a stage change to Ready to apply, so a salesperson decides when the link goes out.
3. Send the text above with the customer's first name and the vehicle, and attach the trigger link.
4. Use the Trigger Link Clicked trigger to add the tag Application link opened and create a follow up task for the F&I manager.
5. Wait 1 day. If the tag is still missing, send one reminder with the salesperson's direct line, then stop.
6. Never create custom fields for Social Security numbers, bank details, or income, and limit who can see the credit tag to the sales and F&I team.

Worked example

If a dealership sends 90 application links in a month and 40 percent are opened, that is 36 opened links (90 times 0.4). A same day task for each opened link means the F&I manager can call while the customer is still looking at the page. The 40 percent is an assumption, so replace it with your own click rate.

Other rules to keep in view

Fair lending rules apply to how credit offers are made, so send the same link to every customer who asks to apply and do not decide who gets one based on anything but the customer's request. Texting consent and registration rules apply to the message itself. Anything about rates or payments in the text is advertising and must match what the dealership will honor.

If the customer would rather apply by phone

Some customers will not tap a link they did not expect. Give the salesperson a script: offer to stay on the phone while the customer opens the page, or to bring the customer to the F&I office. The goal is not the link, it is a completed application in an approved system, and a phone call or a visit gets there when the text does not.

What to train the sales team to avoid

Salespeople are tempted to take the shortcut when a customer says they will just send it over. Write a one line rule on the desk and in the onboarding deck: no Social Security numbers, license photos, or income details by text or email, and send the application link instead. Add the rule to your Safeguards Rule training record, so there is evidence the team knows it.

How this was handled before

Customers filled out a paper credit application at the desk, or the F&I manager keyed it in from a phone call. Online applications moved the data entry to the customer, and a text link moves the invitation to the customer's phone. The security question did not change: where the data lands.

What to measure

Track links sent, links opened, applications started, and applications completed in your F&I system, since HighLevel will not see the last two. Review the list of people who can view the tag each quarter.

Questions people ask

Does the FTC Safeguards Rule apply to car dealers?

According to dealer compliance guides summarizing the FTC's FAQ, dealers that finance or lease vehicles are financial institutions under the rule, which has been fully mandatory since June 9, 2023.

What must a dealer do after a data breach?

Since May 13, 2024, a dealer must notify the FTC no later than 30 days after discovering a breach involving unencrypted information of 500 or more consumers.

Can a customer text a Social Security number to the dealership?

It is best not to invite it. Send a link to your secure application instead, and ask your Safeguards Rule program owner to approve any system that stores the data.

Start a GoHighLevel account here to build the trigger link workflow, or see how trigger links and tasks fit together in our capabilities demo.