Is there a law against cold calling?

Cold Calling Is Legal — But Only If You Follow These Rules

No, there is no federal law that bans cold calling outright — but the moment you pick up the phone to sell something, you step into one of the most tightly regulated corners of American marketing law. Two statutes govern the space: the Telephone Consumer Protection Act (TCPA), passed in 1991 and enforced by the FCC, and the Telemarketing Sales Rule (TSR), issued in 1995 and enforced by the FTC.

The stakes are real. TCPA penalties run $500 per negligent violation and $1,500 per willful violation — applied per call, not per recipient, and lawsuits can reach back four years. That math turns a sloppy calling campaign into a six-figure liability fast. Enforcement isn't just regulators, either: individuals and class-action plaintiffs can sue directly, and the calling business — not the lead seller — bears the liability if consent turns out to be invalid.

So what does compliance actually require? The core obligations are consistent across federal sources:

• Scrub your call lists against the National Do Not Call Registry at least every 31 days.
• Call only between 8 a.m. and 9 p.m. in the recipient's local time.
• Use accurate caller ID and honor opt-out requests within 10 business days.
• Keep verifiable authorizations and sales records for 24 months under the TSR.

Dialing method matters too. The TCPA's autodialer restrictions don't govern manually dialed calls, but DNC, calling-hour, and disclosure rules apply to every sales call regardless of how the number was dialed. And the ground is shifting: in February 2024, the FCC classified AI-generated voices as "artificial or prerecorded voice" under the TCPA, closing a gray area some AI calling companies had exploited.

Consent quality is where most businesses get burned. Valid prior express written consent must name the specific company calling, disclose the use of autodialed or AI voice technology, and sit near the submit button with the checkbox unchecked by default. Pre-checked boxes, buried terms-of-service language, and vague "our partners" wording all fail. The FCC's one-to-one consent rule, effective January 2025, was vacated by the Eleventh Circuit that same month — but stricter standards remain in flux, and state laws like Florida's 8 a.m.–8 p.m. window and California's cell phone restrictions layer on additional requirements.

This is exactly why consent documentation sits at the center of how GrowthPros operates. Every lead delivered carries a consent record — disclosure text, timestamp, IP address, and the named contacting party — and lists are DNC-scrubbed before any outbound contact, with opt-outs honored immediately and permanently across SMS, voice, and email.

The takeaway: cold calling is legal, but only for businesses that treat compliance as infrastructure, not an afterthought. If you're buying leads and can't see the consent trail attached to each one, you're carrying someone else's legal risk with none of the proof.

Why Consent Quality and DNC Scrubbing Are Your Compliance Lifelines

Why Consent Quality and DNC Scrubbing Are Your Compliance Lifelines

Valid prior express written consent is the cornerstone of TCPA compliance, and the calling business—not the lead seller—bears liability if that consent is invalid. Invalid consent includes pre-checked boxes, buried terms of service, verbal-only agreements, or third-party lists where the named contacting party doesn’t match the actual caller, all of which can trigger penalties of $500 per negligent violation or $1,500 per willful violation—applied per call. GrowthPros attaches disclosure text, timestamp, IP address, and the named contacting party to every lead, creating a consent record that meets the FCC’s requirement for specific authorization, clear disclosure of autodialed or AI voice use, and a statement that consent is not a condition of purchase.

Regular DNC list scrubbing is equally critical, as calling numbers on the National Do Not Call Registry remains a violation regardless of consent quality or dialing method. Federal rules require scrubbing against the National DNC Registry at least every 31 days, with state-specific lists adding further compliance burdens—2024 updates in Maryland, Maine, Georgia, and Mississippi demonstrate how state laws layer additional restrictions on top of federal requirements. GrowthPros scrubs all lists before any outbound contact, ensuring numbers are checked against both federal and state DNC registries to avoid calling reassigned or newly opted-out numbers.

Opt-out requests must also be honored immediately and permanently across all channels—SMS, voice, and email—within 10 business days under current FCC rules, which expanded permissible opt-out language to include "stop," "quit," "end," "revoke," "opt out," "cancel," or "unsubscribe." Failure to comply risks lawsuits that can reach back four years, making long-term consent and opt-out recordkeeping essential. By building one-to-one consent direction into its process from day one and honoring opt-outs across channels without delay, GrowthPros turns compliance into a operational strength rather than a reactive burden.

How GrowthPros Built Compliance Into Every Lead — From Consent to AI Follow-Up

TCPA penalties run $500 to $1,500 per call, and the calling business — not the lead seller — bears the liability when consent turns out to be invalid. That single fact shapes how GrowthPros builds every lead it delivers: compliance isn't a feature bolted on at the end, it's the architecture.

It starts with consent. Valid prior express written consent requires specific authorization for the number provided, clear disclosure that autodialed or AI voice contact will be used, and a statement that consent isn't a condition of purchase — while compliance guidance flags pre-checked boxes, buried TOS language, and mismatched consent entities as invalid. That's why every GrowthPros lead carries a full consent record: the disclosure text, timestamp, IP address, and the named contacting party, attached before delivery into the client's CRM.

The same discipline applies to list hygiene. Federal rules require scrubbing against the National DNC Registry at least every 31 days, with state lists adding dual-compliance burdens on top. Every GrowthPros list is DNC-scrubbed before any outbound contact — not after, not during.

The February 2024 AI ruling changed the follow-up game too. The FCC's Declaratory Ruling classifies AI-generated voices as "artificial or prerecorded voice," requiring prior express written consent for marketing calls. GrowthPros' five-minute AI speed-to-lead — voice, SMS, and email inside the window — works precisely because it only ever runs against consent-recorded leads, never cold lists. Reactivation campaigns target only pre-existing, opted-in relationships a client already owns.

Opt-out handling is where many operations fall short. The FCC's 2024 order expanded permissible opt-out methods to include texting "stop," "revoke," or "unsubscribe," with a 10-business-day window to honor requests. GrowthPros treats that window as a floor, not a target:

• Opt-outs are honored immediately — not within the 10 business days federal rules allow
• Suppression is permanent and cross-channel, covering SMS, voice, and email simultaneously
• Consent records are retained beyond the four-year TCPA lawsuit lookback period

Even the contested one-to-one consent rule is handled conservatively. The FCC's 2025 rule requiring consent specific to a single seller was vacated by the Eleventh Circuit, restoring the broader multi-seller standard — but GrowthPros built one-to-one consent direction in from day one, which satisfies either regime.

None of this guarantees a lead will close — no honest provider promises that. What it does guarantee is the process: qualified, consent-recorded, DNC-scrubbed leads followed up inside the promised window, with a compliance trail attached to every one. In a regulatory environment where the caller absorbs the risk of bad consent, that trail is the product.