Does TCPA require consent?

The TCPA Consent Mandate: Why Prior Written Consent Is Non-Negotiable for Marketing Leads

Yes — the TCPA requires consent, and for marketing calls and texts made with an autodialer or artificial voice, that consent must be in writing. If you're buying leads and dialing them with modern technology, this single requirement is the difference between a pipeline and a class action.

The baseline standard traces back to 2012, when the FCC first required prior express written consent for telemarketing calls. That standard remains fully in force even after the Eleventh Circuit vacated the FCC's 2023 "one-to-one" consent rule in January 2025. The court found the FCC exceeded its statutory authority, and the agency declined to appeal in April 2025 — but the vacatur only killed the one-to-one expansion, not the underlying consent mandate.

So what actually counts as valid consent? Under 47 CFR § 64.1200(f)(9), prior express written consent means an agreement, in writing, bearing the consumer's signature, that clearly authorizes the seller to deliver advertisements or telemarketing messages using an autodialer or artificial/prerecorded voice. Electronic and digital signatures count under federal or state contract law. What doesn't count for telemarketing:

• Verbal consent given over the phone
• Implied consent from a prior purchase or inquiry
• A web form that doesn't clearly disclose autodialed marketing contact
• Consent lacking a verifiable signature, timestamp, or disclosure record

The stakes are not theoretical. According to TCPA litigation data, plaintiffs filed 2,788 class actions in 2024 — a 67% increase over 2023 — and average settlements exceed $6.6 million. Statutory damages run $500 per violation, up to $1,500 if willful, meaning 200 non-compliant calls can expose a business to $100,000–$300,000.

There's one nuance worth knowing: manually dialed marketing calls only require prior express consent, which can be verbal. But almost no lead-follow-up operation dials manually anymore — speed-to-lead depends on automated SMS and voice systems, which puts you squarely in written-consent territory.

This is why consent documentation matters as much as consent itself. Every lead GrowthPros delivers carries a consent record — disclosure text, timestamp, IP address, and the named contacting party — because in a TCPA dispute, the paper trail is the defense. A lead without a consent trail isn't a bargain; it's unpriced litigation risk.

How Consent Revocation Rules Are Changing TCPA Compliance (Effective April 11, 2025)

The clock is ticking on a compliance shift that many lead buyers still haven't priced into their risk models. Starting April 11, 2025, the FCC's updated consent revocation rules take effect, compressing the opt-out window from 30 days to just 10 business days and elevating keywords like STOP, QUIT, and REVOKE into legally binding revocations across any reasonable channel.

This isn't a paperwork change — it's an operational mandate. If a consumer texts "UNSUBSCRIBE" to a number that isn't the one you dialed from, or clicks an unsubscribe link in an email after a voice call, that revocation is now enforceable the same way a formal written request would be. The FCC has made clear that consumers can revoke consent through any reasonable method, and businesses must honor it across SMS, voice, and email immediately and permanently.

• Opt-outs must be processed within 10 business days, not 30
• Keywords including STOP, QUIT, REVOKE, OPT OUT, CANCEL, UNSUBSCRIBE, and END are legally binding
• Revocation applies across all channels — SMS, voice, and email — once triggered
• No "reasonable delay" safe harbor; the clock starts at receipt

The stakes are measurable. TCPA class action filings surged 67% in 2024 to 2,788 cases, with 507 filed in Q1 2025 alone. Average settlements now exceed $6.6 million, and statutory damages run $500 per violation — $1,500 if willful. A single campaign with 200 non-compliant contacts creates $100,000 to $300,000 in exposure before legal fees.

For lead buyers, the compliance burden compounds. You're not just responsible for your own dialing — you inherit the consent trail of every lead you purchase. If that trail doesn't include a verifiable revocation log synced across channels, you're one plaintiff's attorney away from a class certification motion. GrowthPros builds that trail into every lead: disclosure text, timestamp, IP address, and the named contacting party, with DNC-scrubbed lists and opt-outs honored permanently across every channel before a single call is placed.

The firms that treat revocation as a backend admin task are the ones funding the next wave of settlements. The ones that embed it into their lead intake, CRM workflows, and vendor contracts are the ones still buying leads next year.

State Mini-TCPA Laws and Rising Litigation Risks: What Lead Buyers Are Missing

Even if you nail federal TCPA consent rules, a second layer of exposure is waiting for you: state law. At least 15 states enforce their own "mini-TCPA" statutes, and the twist most lead buyers miss is that the consumer's state law applies — not the caller's. Your call center in Texas can still be sued under Florida's rules if the person you dialed lives in Tampa.

These state statutes are not minor variations. They tighten calling windows, expand liability, and in some cases dramatically increase what a violation costs you.

• Florida cuts off telemarketing calls at 8 PM local time, an hour earlier than the federal 9 PM limit — a call that is legal federally can be actionable in Miami.
• Texas (SB 140, effective September 2025) enables treble damages and requires telemarketers to post a $10,000 bond before dialing.
• Georgia (SB 73, 2024) removed its damage caps and the "knowing" requirement, making claims easier to bring and harder to cap.
• Virginia (SB 1339, effective January 2026) requires honoring text-message opt-outs for 10 years — a dormant lead list with old opt-outs becomes a liability, not an asset.

The litigation numbers explain why plaintiff's attorneys are paying attention. TCPA class action filings reached 2,788 in 2024 — a 67% increase over 2023 — with 507 more filed in Q1 2025 alone. Roughly 78% of TCPA cases proceed as class actions, and average settlements now exceed $6.6 million.

Layer state exposure on top of the federal baseline — $500 per violation, $1,500 if willful, meaning 200 non-compliant calls can mean $100,000 to $300,000 in exposure — and the math gets ugly fast. A single campaign run at 8:30 PM to Florida numbers, or a reactivation sequence that texts a contact who opted out in 2019, can convert an otherwise compliant program into a class action.

This is why lead sourcing and lead handling have to be treated as one compliance problem, not two. The real TCPA risk comes from how you contact leads, not whether they exist — which means the consent trail attached to every lead matters as much as the dialing rules you follow. GrowthPros attaches a consent record to every delivered lead — disclosure text, timestamp, IP address, and named contacting party — so buyers can verify consent state-by-state before the first call goes out. That record, paired with DNC scrubbing every 31 days and immediate, permanent opt-out honoring, is what keeps a growing lead program out of the 67% growth curve.

How GrowthPros Ensures TCPA-Compliant Leads: Consent Records, DNC Scrubbing, and Safe Delivery

Most lead buyers assume the risk lives in the list. It doesn't — it lives in how you contact it. The TCPA requires prior express written consent for any marketing call or text placed with an autodialer or artificial voice, and the 2012 written-consent standard remains binding after the Eleventh Circuit vacated the FCC's one-to-one rule in January 2025. Violations carry statutory damages of $500 per call, trebling to $1,500 for willful breaches — meaning just 200 non-compliant calls can expose a business to $100,000–$300,000 in liability.

GrowthPros builds compliance into the product, not the pitch. Every lead we deliver — whether fresh by niche or reactivated from your dormant CRM — carries a complete consent record: the exact disclosure text the consumer saw, the timestamp of opt-in, the IP address, and the named contacting party. That record travels with the lead into your CRM via webhook, Zapier, or native integration so your team never has to reconstruct the paper trail. Lists are DNC-scrubbed before any outbound touch; opt-outs are honored immediately and permanently across SMS, voice, and email. And because reactivation targets only pre-existing, opted-in relationships — never cold lists — the FCC's one-to-one consent direction is satisfied from day one.

• Verifiable consent records attached to every lead (disclosure text, timestamp, IP, named party)
• DNC scrubbing every 31 days — violations can reach $43,792 per call
• Reactivation limited to your opted-in database — no cold outreach
• Opt-outs processed within 10 business days per new FCC revocation rules effective April 11, 2025
• AI follow-up inside five minutes, 24/7 — speed that converts without cutting corners

The result: leads that are qualified, consent-recorded, and ready for immediate, compliant outreach. Exclusive leads by niche, followed up in minutes — including the leads you already paid for. Book a 15-minute qualification call and we'll show you what compliant speed-to-lead looks like in your CRM.