Is autodialer legal?

The Short Answer: Legal, But Only With the Right Consent

Autodialers aren't banned — but dial the wrong number without the right consent and a single call can cost you $1,500. That's the reality every business using automated dialing needs to understand before firing up a new campaign.

Under the Telephone Consumer Protection Act (TCPA) and FCC regulations, autodialed or artificial/prerecorded voice calls to cell phones are prohibited unless the caller has prior express consent — and prior express written consent for telemarketing calls, per the FDIC Consumer Compliance Examination Manual. The old "established business relationship" excuse no longer gets you out of the consent requirement, either.

The stakes are severe. Statutory damages run $500 to $1,500 per violation, per class member, with no requirement for plaintiffs to prove actual injury, according to BCLP's analysis of the 2025 opt-out rules. At high call volumes, non-compliance fines can reach "well into the millions" — which is exactly why TCPA class actions are so attractive to plaintiffs' attorneys.

The rules have also evolved faster than most businesses realize. The Supreme Court's 2021 Facebook, Inc. v. Duguid decision narrowed the definition of an autodialer to equipment using a random or sequential number generator. And in February 2024, the FCC ruled that AI-generated voices count as artificial pre-recorded voices — meaning AI voice follow-up now requires the same consent as robocalls.

Here's what that means in practice for consent requirements:

• Cell phones, marketing calls: prior express written consent is required before any autodialed or prerecorded contact.
• Cell phones, informational or transactional calls: prior express invitation or permission may suffice.
• Manually dialed calls: not subject to autodialer restrictions, though DNC rules still apply.
• Opt-outs: as of April 11, 2025, revocations must be honored within 10 business days across all channels.

This is why the question matters for any business running automated dialing, AI voice follow-up, or SMS sequences to work leads. Speed-to-lead is a genuine competitive advantage — but only when every contact carries a documented consent trail. At GrowthPros, every lead we deliver comes with its consent record attached: disclosure text, timestamp, and the named contacting party, so your automated follow-up starts on legally solid ground.

The lesson is simple: the dialer isn't the legal risk. Contacting someone without provable consent is. Build your outbound motion around documented, revocable, DNC-scrubbed consent — and automation becomes an asset instead of a liability.

What Counts as an Autodialer After Facebook v. Duguid

For years, the question "is this dialer an autodialer?" decided the fate of multimillion-dollar TCPA class actions. Then the Supreme Court stepped in and rewrote the answer.

In Facebook, Inc. v. Duguid (2021), the Court held that equipment qualifies as an automatic telephone dialing system (ATDS) only if it can store or produce phone numbers using a random or sequential number generator. Because most modern business systems dial from pre-established lists rather than generating numbers randomly, many pending TCPA cases were expected to be dismissed, as Crowell & Moring's analysis notes. The Court reasoned that a broader reading would sweep in virtually every smartphone — something Congress never intended when it targeted equipment that risks dialing emergency lines or tying up an entity's phone lines.

That sounds like a lifeline for outbound teams, but the relief is narrower than it appears. The separate prohibition on artificial and prerecorded voice calls survived Duguid untouched. Even if your dialing system isn't an ATDS, prerecorded calls still require consent. And on February 8, 2024, the FCC unanimously ruled that AI-generated voices count as prerecorded voices, meaning AI voice outreach must satisfy the same TCPA consent rules as traditional robocalls, per Kelley Drye's mid-year telemarketing review.

Consent requirements then vary by what you're sending and where:

• Cell phones, marketing calls: prior express written consent is required — an established business relationship no longer excuses you, according to the FDIC Consumer Compliance Examination Manual.
• Cell phones, informational or transactional messages: prior express invitation or permission may suffice.
• Landlines: marketing calls require written consent; non-marketing calls may not, but DNC lists must still be checked.
• Emergency lines and hospital numbers: autodialed calls are prohibited outright, regardless of consent.

Two more wrinkles matter. Wireless restrictions apply whether the number is used for residential or business purposes — even a number given for work can trigger a violation, as Gryphon's TCPA compliance guide explains. And manually dialed calls escape autodialer restrictions entirely, per ActiveProspect's TCPA analysis.

The stakes justify the caution: statutory damages run $500 per violation and up to $1,500 for willful violations, with no need for the plaintiff to prove actual injury. That's why GrowthPros builds every lead delivery around a documented consent trail — disclosure text, timestamp, and named contacting party — so clients can prove consent rather than argue about dialer architecture after the fact.

The 2025 Rules That Changed the Game: Opt-Outs and One-to-One Consent

If you thought TCPA compliance was mostly settled after the Supreme Court's 2021 Duguid ruling, 2025 has some bad news: the rules just got stricter, not looser. The FCC's new opt-out regime took effect on April 11, 2025, and it shifts the burden of proof squarely onto businesses when a consumer says "stop."

Under the new Opt-Out Rule, consumers may revoke consent "in any reasonable manner" — a texted "STOP," an email, even a voicemail. Non-prescribed opt-out methods carry a rebuttable presumption of reasonableness, meaning it falls on the business to prove why an opt-out request wasn't reasonable. You can no longer tell customers to "reply STOP to unsubscribe" as the only valid channel.

The mechanics of the rule are strict:

• Revocations must be honored within 10 business days, and a "STOP" text halts both robotexts and automated voice calls.
• Opt-outs apply across all channels — SMS, voice, and email — not just the one where the request arrived.
• One clarification message is permitted, but only within 5 minutes of the revocation request, and it may contain no marketing content.
• FCC-endorsed opt-out keywords include "STOP," "QUIT," "END," "REVOKE," "OPT-OUT," "CANCEL," and "UNSUBSCRIBE."

The stakes are real: statutory damages run $500–$1,500 per violation with no requirement to prove actual injury, which is precisely what makes TCPA class actions so attractive to plaintiffs. Industry groups — including the American Bankers Association and America's Credit Unions — met with FCC Chairman Brendan Carr's Senior Counsel in March 2025 requesting a pause, citing the burden of processing revocations across channels and third-party vendors. The rule took effect anyway.

Meanwhile, the FCC's One-to-One Consent Rule — which would have required consent to name a specific, topically related seller — was vacated by the 11th Circuit in January 2025 in Insurance Mktg. Coalition Ltd. v. FCC. But vacated doesn't mean optional in practice. Attorneys at Kelley Drye still advise businesses to review opt-in processes carefully, and treating one-to-one consent as the operating standard remains the safest path.

State "mini-TCPAs" are tightening faster than federal law. Maryland's Stop the Spam Calls Act requires prior express written consent for any solicitation using automated dialing, with a private right of action. Maine mandates scrubbing against the FCC's reassigned number database before calls, and Georgia eliminated the "knowing" violation requirement while allowing class actions with no damages cap. Over 20 states impose calling-hour restrictions stricter than the federal 8 a.m.–9 p.m. window.

The practical takeaway: document everything, and keep it. Because the TCPA statute of limitations runs four years, legal advisors recommend retaining consent records for at least 4 years. That's why every lead GrowthPros delivers carries a full consent trail — disclosure text, timestamp, IP address, and named contacting party — attached before it ever reaches your CRM. In a litigation environment where the caller bears the burden of proof, the consent record is the defense.

How to Use an Autodialer (or AI Voice) Without Getting Sued

Using an autodialer or AI voice system without proper safeguards exposes businesses to significant legal risk under the TCPA. Penalties can reach $500 per violation, or up to $1,500 for willful violations, with no requirement to prove actual injury—making class actions particularly attractive to plaintiffs. The key to compliance lies in documented consent: prior express written consent is required for telemarketing calls using autodialers or artificial/prerecorded voices, including AI-generated speech.

GrowthPros ensures every lead includes a consent record with disclosure text, timestamp, IP address, and the named contacting party before any automated contact occurs. This documentation is critical, as the FCC’s One-to-One Consent direction requires consent to be logically and topically related to the specific seller and context in which it was obtained. AI voice follow-ups are treated as robocalls under current FCC rulings, meaning they require the same written consent as traditional prerecorded messages—never deployed on cold lists.

Before dialing, lists must be scrubbed against the National Do-Not-Call registry and checked for reassigned numbers, a practice now mandated by state law in Maine and aligned with federal safe harbor principles. Reactivation efforts are limited to pre-existing, opted-in relationships—never cold data—ensuring compliance with TCPA restrictions on autodialed calls to wireless numbers. Additionally, businesses must honor the federal 8 AM–9 PM calling window in the recipient’s local time, while adhering to stricter state-level restrictions where applicable.

Opt-out requests must be honored within 10 business days effective April 11, 2025, across all channels—SMS, voice, and email—and businesses can no longer prescribe exclusive opt-out methods. Consumers may revoke consent in any reasonable manner, and one clarification message (non-marketing, within 5 minutes) is permitted. GrowthPros builds these rules into its operations by honoring opt-outs immediately and permanently, applying them universally, and retaining consent records for at least four years to meet TCPA statute of limitations.

By anchoring every interaction in verifiable consent, maintaining rigorous list hygiene, and respecting timing and opt-out rules, businesses can use autodialer and AI voice technology legally—turning compliance into a competitive advantage rather than a liability.

Ready to get qualified, consent-recorded leads followed up in minutes? Book your free 15-minute qualification call to see how GrowthPros delivers leads that are legally sound and sales-ready.

Compliant Speed-to-Lead: Fast Follow-Up That Won't Cost You a Lawsuit

Speed wins deals — until it wins you a class action. The same five-minute follow-up that makes a lead 100x more likely to answer can cost $500 to $1,500 per call if the consent trail is missing.

The math on speed is not subtle. Contacting a lead within five minutes makes contact roughly 100x more likely than waiting thirty minutes, and about 78% of buyers choose whoever responds first. But under the TCPA, federal compliance guidance requires prior express written consent for telemarketing calls to cell phones — and the "established business relationship" excuse no longer works. Speed without documentation is just fast exposure.

AI voice makes this sharper, not softer. Since the FCC's February 2024 ruling, AI-generated voices are regulated as artificial or pre-recorded voices, meaning an AI speed-to-lead call demands the same consent as any robocall. And since April 11, 2025, businesses must honor opt-outs within 10 business days, across every channel, in any reasonable manner the consumer chooses — with statutory damages of $500–$1,500 per violation and no requirement for plaintiffs to prove actual injury.

So what does fast and defensible look like in practice?

• Every lead carries its consent record — disclosure text, timestamp, IP address, and the named party authorized to contact — before any automated call, text, or email goes out.
• Lists are DNC-scrubbed before outbound contact, and opt-outs are honored immediately and permanently across SMS, voice, and email.
• Follow-up targets only documented, opted-in leads — never cold data bought on price alone.
• Consent records are retained for at least four years, the full TCPA statute of limitations.

This is why buying leads with documentation beats dialing cold lists. A lead vendor that delivers consent-recorded leads with the trail attached transfers the evidence, not just the phone number. GrowthPros builds this model into every delivery: each lead arrives qualified, time-stamped, and followed up by AI voice, SMS, and email inside a five-minute window — 24/7 — with the consent documentation riding along into your CRM.

The result is speed-to-lead that survives scrutiny. You get the five-minute response window that wins the deal, backed by a paper trail that wins the lawsuit that never has to happen.

Ready to see it for your niche? Book the 15-minute qualification call or submit the get-started funnel, and we'll show you compliant, consent-recorded leads — exclusive or capped-shared at a hard maximum of two buyers — followed up in minutes, including the leads you already paid for.