
TCPA and Telemarketing Rules · October 4, 2026 · GrowthPros
How many times can you call someone without it being harassment?
There's no magic call count under the TCPA — consent and intent define harassment. Learn the rules, fines, and how to build a compliant call cadence.

Key Facts
- No federal law sets a magic call count for harassment — the FTC defines it by intent to annoy, abuse, or harass according to its Telemarketing Sales Rule.
- The TCPA is a strict liability statute, and multiple violations can attach to a single call per TCPA compliance analysis.
- One non-compliant call can cost $500–$1,500 in statutory damages, tripled for willful violations per legal analysis.
- DNC violations carry fines up to $43,792 each, and TCPA class-action judgments have exceeded $925 million per compliance data.
- As of February 2024, texting "stop" or "unsubscribe" revokes consent, and businesses must honor opt-outs within 10 business days per a mid-year telemarketing review.
- A company-specific Do Not Call request overrides even written consent and must be honored for at least five years per TCPA guidance.
- Nearly 100,000 phone numbers are reassigned daily, meaning yesterday's consent may belong to a stranger today per DNC compliance data.
Why There's No Magic Number of Calls
Most businesses assume there's a magic number — three calls, five, seven — after which follow-up becomes harassment. Federal law says otherwise: no statute sets a numeric call-count threshold for harassment. The FTC's Telemarketing Sales Rule defines it by intent — "repeatedly or continuously, with intent to annoy, abuse, or harass" — while the TCPA regulates consent, technology, calling hours, and DNC status, not frequency. FTC guidance and legal analysis both confirm the framework turns on how and why you call, not how many times.
Even a single call can be unlawful. The TCPA is a strict liability statute where multiple violations can attach to one call — $500 to $1,500 per communication in statutory damages, up to $43,792 per DNC violation, and judgments exceeding $925 million in recent years. DNC.com notes that 3,000+ TCPA complaints hit federal court in 2019 and 2020 alone. If consent is missing, revoked, or the number is on the DNC Registry, the "safe number" of calls is zero.
The real line isn't a count — it's consent status. Consumers may revoke consent at any time by any reasonable means, and as of February 2024 the FCC requires businesses to honor opt-outs within 10 business days without prescribing a specific revocation method. A company-specific DNC request terminates the established business relationship for telemarketing purposes, even if the customer keeps buying. FDIC examination materials confirm this holds regardless of ongoing transactions.
- No federal numeric threshold for harassment exists — intent and consent govern
- One non-compliant call creates strict liability exposure
- Revocation by any reasonable means (including texting "stop") stops lawful contact
- Company-specific DNC requests override even written consent and EBR status
This is why GrowthPros builds consent hygiene into every lead: disclosure text, timestamp, IP address, and named contacting party recorded at capture; DNC-scrubbed before any outbound touch; opt-outs honored immediately and permanently across SMS, voice, and email. Speed-to-lead matters — contacting within five minutes makes connection roughly 100x more likely than at thirty minutes — but only when the consent trail is clean. The alternative is buying leads that look cheap until the first class action lands.
The Bright Lines That Turn Follow-Up Into Harassment
Forget the idea of a magic call count. Federal law draws the line at consent and behavior, not volume — and once someone crosses certain triggers, even a single additional call becomes a violation.
The first bright line is consent revocation. Consumers can revoke consent at any time, by any reasonable means, and as of February 2024 the FCC makes that even easier: texting "stop," "quit," "end," "revoke," "opt out," "cancel," or "unsubscribe" all count. According to a mid-year telemarketing review by Kelley Drye, businesses must honor those opt-outs within 10 business days and cannot dictate a specific revocation method.
The second line is a company-specific Do Not Call request. This one is absolute: per TCPA compliance guidance, calls are prohibited after such a request even if you have an established business relationship or written consent. The FDIC's examination manual confirms a seller-specific DNC request terminates the EBR for telemarketing purposes even if the customer keeps doing business with you — and you must honor it for at least five years.
Beyond those two, several hard limits shape every compliant call:
- National DNC Registry: scrub your lists at least every 31 days; violations carry fines up to $43,792 each, per DNC compliance data.
- Calling hours: no calls before 8 a.m. or after 9 p.m. in the recipient's time zone, per the FTC's Telemarketing Sales Rule.
- EBR windows: 18 months after a transaction, just 3 months after an inquiry — then consent expires.
New wrinkles keep raising the bar. An FCC Declaratory Ruling from February 2024 treats AI-generated voices as artificial or prerecorded voice, meaning they require prior express consent. Ringless voicemail counts as a call too. And the 1:1 consent rule effective January 27, 2025 requires seller-specific consent that is logically and topically related to what the consumer signed up for — no more blanket consent shared across dozens of marketing partners.
The stakes for getting this wrong are not abstract. Statutory damages run $500 per communication, tripled to $1,500 for willful violations, and TCPA judgments have exceeded $925 million. Because the TCPA is a strict liability statute, good intentions don't protect you.
This is why consent hygiene matters as much as speed. GrowthPros builds these lines into the process from day one: every lead ships with a consent record — disclosure text, timestamp, IP address, and the named contacting party — lists are DNC-scrubbed before any outreach, and opt-outs are honored immediately and permanently across voice, SMS, and email. Fast follow-up only works when it's lawful follow-up.
What One Bad Call Actually Costs
One non-compliant call is all it takes. The TCPA is a strict liability statute — good-faith mistakes don't shield you — and multiple violations can stack on a single communication.
Private statutory damages run $500–$1,500 per communication. The FCC can assess up to $16,000 per violation (or $26,000 for intentional violations). DNC violations climb to $43,792 each. Class-action judgments have exceeded $925 million, and federal courts saw 3,000+ TCPA complaints in 2019–2020 alone. A cottage industry of professional plaintiffs now hunts these violations at scale.
- $500–$1,500 per communication in private statutory damages
- Up to $16,000 per FCC violation ($26,000 intentional)
- Up to $43,792 per DNC violation
- Class-action judgments exceeding $925 million
- 3,000+ federal TCPA complaints filed in 2019–2020
State law adds another layer. Florida, Maryland, Oklahoma, and Georgia have enacted mini-TCPA statutes that can be more expansive than federal law — some impose call-frequency restrictions and even criminal penalties. Specific numeric limits vary by state and must be verified locally.
This is exactly why GrowthPros builds consent into every lead before it reaches your team. Every record carries a disclosure trail — timestamp, IP, named contacting party — and every list is DNC-scrubbed before any outbound touch. Opt-outs are honored immediately and permanently across voice, SMS, and email. Reactivation campaigns target only pre-existing, opted-in relationships, never cold lists. The result: speed-to-lead inside five minutes without crossing the lines that turn follow-up into liability.
A Compliant Call Cadence: Speed Without the Risk
The safest number of calls you can make to someone is zero — unless you can prove they asked to hear from you. Since federal law defines harassment by intent rather than call count, the only durable defense is a cadence built on consent hygiene, not volume limits.
That shift matters because the TCPA is a strict liability statute — good-faith mistakes get no forgiveness, and multiple violations can attach to a single call. With statutory damages of $500 to $1,500 per communication and DNC fines reaching $43,792 per violation, one sloppy dial can cost more than an entire compliant campaign.
So instead of asking "how many calls is too many," build your outreach around an operational checklist that makes every call defensible:
- Consent records on every lead — capture the disclosure text, timestamp, IP address, and the named contacting party, so you can prove who agreed to be called and by whom.
- DNC scrubbing before every outbound touch — the registry must be checked at least every 31 days, and company-specific opt-out requests override even written consent.
- Immediate, permanent opt-out honoring — consumers can revoke consent "by any reasonable means," including texting "stop," "quit," or "unsubscribe," and businesses must honor revocations within 10 business days across SMS, voice, and email.
- Two-year record retention — the TSR requires telemarketers to keep business records for at least 24 months, so your consent trail needs to outlive the campaign.
- Reassignment awareness — nearly 100,000 phone numbers are reassigned daily, meaning yesterday's consent may belong to a stranger today.
Once that foundation exists, the growth lever isn't more calls — it's faster ones. Speed-to-lead is the compliant alternative to call-blasting: a prospect who just submitted a form and consented to contact is expecting your call, so one timely touch converts better than a dozen cold dials ever could.
This is the model GrowthPros builds around. Every lead arrives with its consent trail attached — disclosure text, timestamp, IP, named contacting party — and AI follow-up by voice, SMS, and email fires inside a five-minute window, 24/7. Lists are DNC-scrubbed before any outbound contact, and opt-outs are honored immediately and permanently across every channel.
The contrast is stark. Hammering a cold list stacks per-call liability with diminishing returns, while a single rapid response to a consent-recorded lead stays comfortably inside the rules — and reaches the buyer while intent is still hot. Compliance and conversion stop being a trade-off and become the same discipline.
If your current follow-up process can't produce a consent record for every number it dials, the risk isn't hypothetical. GrowthPros delivers exclusive and capped-shared leads by niche — each one qualified, time-stamped, and consent-recorded — plus reactivation of the opted-in lists you already own. Book a free 15-minute qualification call to see what compliant speed-to-lead looks like for your business.
Buying Leads That Come With Their Consent Trail
The cheapest lead you can buy is often the most expensive one — because a lead without a documented consent trail isn't an asset, it's a liability waiting for a plaintiff's attorney.
Here's why provenance beats price. The TCPA is a strict liability statute — no forgiveness for good-faith mistakes — with statutory damages of $500 to $1,500 per communication, and multiple violations can stack onto a single call. Call a number that was reassigned to someone else (nearly 100,000 phone numbers change hands daily), or one that sits on the DNC Registry, and it doesn't matter how politely you dial or how many times. One call is enough.
That math changes how you should evaluate any lead source. A compliant lead isn't just a name and a phone number — it's a package of documentation that proves you're allowed to make the call in the first place:
- A recorded consent trail — disclosure text, timestamp, IP address, and the named contacting party, satisfying the FCC's one-to-one consent direction
- DNC scrubbing before any outbound contact — the Registry must be checked at least every 31 days
- Exclusive or genuinely capped distribution — a lead sold to five buyers gets hammered by five sales teams, which is exactly how "intent to annoy, abuse, or harass" claims start
- Qualification before delivery, so your team spends calls on people who actually asked to hear from you
- Immediate, permanent opt-out handling across voice, SMS, and email — federal rules require honoring revocations within 10 business days, and best practice is faster
This is the model GrowthPros builds every lead around: exclusive or capped-shared (a hard maximum of two buyers), DNC-scrubbed, consent-recorded, and qualified before it ever reaches your CRM. The consent record travels with the lead, so if a question ever arises, you have the receipt.
Speed works inside these rules, not around them. When a lead opts in and AI follow-up responds by voice, SMS, and email within five minutes, you're contacting someone at the peak of their expressed interest — the moment consent is freshest and the conversation is most welcome. Note that AI-generated voices are now regulated as artificial or prerecorded voice under the TCPA, which is precisely why that consent record matters for automated outreach too.
The same logic applies to the lists you already own. Dormant doesn't mean dead — but it also doesn't mean dialable. Reactivation only works on pre-existing, opted-in relationships: contacts who gave consent, scrubbed against current DNC data before a multi-channel sequence (SMS first, voice follow-up, email backup) re-engages them. Never cold lists, never purchased databases of strangers.
If you're buying leads — or sitting on an opted-in list you've stopped working — the next step is a free 15-minute qualification call. We'll talk through your niche, your volume, and whether exclusive leads, reactivation, or both fits your goals. No commitment, no invented numbers — just an honest look at whether consent-recorded leads, followed up in minutes, can fill your pipeline.
Frequently Asked Questions
How many times can you call someone before it's legally harassment?
There's no magic number. Federal law defines harassment by intent, not call count — the FTC's Telemarketing Sales Rule prohibits calling repeatedly or continuously with intent to annoy, abuse, or harass, while the TCPA regulates consent, technology, calling hours, and DNC status rather than frequency. If consent is missing or revoked, even one call is a violation.
Can a single phone call really get my business sued?
Yes. The TCPA is a strict liability statute, meaning good-faith mistakes get no forgiveness, and multiple violations can attach to a single call. Statutory damages run $500 to $1,500 per communication, with DNC violations reaching $43,792 each — so the 'safe number' of non-compliant calls is zero.
What happens if a lead tells me to stop calling?
You must stop — that's the bright line. Consumers can revoke consent at any time by any reasonable means, and as of February 2024, texting 'stop,' 'quit,' 'end,' 'revoke,' 'opt out,' 'cancel,' or 'unsubscribe' all count, with businesses required to honor opt-outs within 10 business days. Any call after revocation creates liability.
Does a company-specific Do Not Call request override written consent?
Yes, absolutely. Calls are prohibited after a company-specific DNC request even if you have an established business relationship or written consent, and the request must be honored for at least five years. The FDIC's examination manual confirms it terminates the business relationship for telemarketing purposes even if the customer keeps buying from you.
How often do I need to scrub my call lists against the Do Not Call Registry?
At least every 31 days, per TCPA compliance requirements. This matters more than most businesses realize, since nearly 100,000 phone numbers are reassigned daily — meaning yesterday's consent may belong to a stranger today.
If there's no call limit, how do I follow up aggressively without risking harassment claims?
Build your cadence on consent hygiene, not volume: documented consent records, DNC scrubbing before every touch, and immediate opt-out honoring across channels. Then compete on speed instead of repetition — GrowthPros delivers consent-recorded, DNC-scrubbed leads with AI follow-up by voice, SMS, and email inside five minutes, because one timely call to someone who asked to hear from you converts better than a dozen cold dials ever could.
The Only Safe Number Is the One You Can Prove
There is no magic call count that separates persistence from harassment — federal law draws the line at consent, revocation, and Do Not Call status, not volume. A single non-compliant call carries strict liability: $500–$1,500 per communication in statutory damages, up to $43,792 per DNC violation, and class-action judgments that have exceeded $925 million. The real defense isn't counting dials; it's documenting consent before the first ring — disclosure text, timestamp, IP address, and the named contacting party — then scrubbing every list against the DNC Registry and honoring opt-outs immediately across every channel. Speed-to-lead still wins, but only when the consent trail is clean: contacting a qualified, opted-in lead within five minutes converts far better than hammering a cold list and hoping the math works out. If your current process can't produce a consent record for every number it dials, the risk isn't theoretical. GrowthPros delivers exclusive and capped-shared leads by niche — each one qualified, time-stamped, and consent-recorded — plus AI follow-up inside a five-minute window and reactivation for the opted-in lists you already own. Book a free 15-minute qualification call to see what compliant speed-to-lead looks like for your business.
This article is general information, not legal or financial advice. Benchmark figures are directional industry data, not guarantees of results.