
TCPA and Telemarketing Rules · September 28, 2026 · GrowthPros
What are some of the prohibited acts covered under TCPA?
Learn the prohibited acts under TCPA: consent rules, autodialers, DNC violations, and opt-out requirements. Avoid fines up to $1,500 per violation.

Key Facts
- TCPA violations carry statutory damages of $500 to $1,500 per violation, with no need to prove actual injury per legal analysis
- TCPA class action filings hit 2,788 in 2024 — a 67% jump over 2023 — with average settlements exceeding $6.6 million per industry tracking
- Calling a Do-Not-Call number can cost up to $43,792 per call, while scrubbing costs just $75 per area code per compliance analysis
- ViSalus faced a $925 million verdict for illegal robocalls; Wells Fargo settled for roughly $18 million per documented enforcement cases
- The FCC's new Opt-Out Rule, effective April 11, 2025, requires honoring revocation requests within ten business days per BCLP legal analysis
- The 'TCPA-compliant lead' is a myth — no lead is inherently compliant, and liability is only mitigated through diligent practices per TCPA specialists
- 29% of consumers abandon forms over privacy concerns, meaning sloppy consent quietly shrinks your funnel per consumer research
The Cost of Non-Compliance: Why TCPA Violations Are a Business Threat
A single non-compliant text message can cost more than the lead it came from — up to $1,500, in fact. For businesses that buy leads at scale, TCPA exposure isn't a legal footnote; it's a line item that can wipe out an entire marketing budget.
The numbers make the stakes clear. TCPA violations carry statutory damages of $500 to $1,500 per violation, per class member, with no requirement to prove actual injury, according to legal analysis of the new opt-out rules. And plaintiffs don't need to show harm — the statute does the work for them.
The volume of litigation is climbing fast. Industry tracking shows 2,788 TCPA class action filings in 2024 — a 67% increase over 2023 — with another 507 filed in Q1 2025 alone. Roughly 78% of TCPA cases proceed as class actions, and average settlements exceed $6.6 million.
The math scales brutally. Consider a few documented exposure scenarios:
- 10,000 non-compliant texts = $5 million base exposure, or $15 million if willful
- 200 non-compliant calls from a single plaintiff = $100,000–$300,000 in exposure
- Failure to DNC-scrub can draw penalties of up to $43,792 per call — while scrubbing costs just $75 per area code, capped at $20,868 per year
Enforcement isn't theoretical. Wells Fargo settled for approximately $18 million over calls and texts made without consent, and ViSalus faced a $925 million verdict for illegal robocalls, per documented enforcement cases.
Here's the uncomfortable truth for lead buyers: TCPA specialists note that the "TCPA-compliant lead" is a myth. No lead is inherently compliant — liability is mitigated by pairing verified consent records with diligent call practices. Courts also routinely find violations willful when a company lacks a compliance program, which pushes damages toward the $1,500 ceiling.
That's why the provenance of every lead matters. GrowthPros attaches a consent record to each lead — disclosure text, timestamp, IP address, and the named contacting party — and DNC-scrubs every list before outbound contact, so buyers inherit a documented trail rather than a liability question mark. Opt-outs are honored immediately and permanently across SMS, voice, and email.
The reputational cost compounds the financial one. Consumer research shows 29% of people abandon a form over privacy concerns, meaning sloppy consent practices don't just invite lawsuits — they quietly shrink your funnel. Compliance, done right, is a competitive advantage, not overhead.
Core Prohibited Acts Under TCPA: Consent, Autodialers, and Opt-Out Violations
The difference between a compliant sales call and a $925 million verdict often comes down to a single checkbox. That's not hyperbole — it's the reality of the Telephone Consumer Protection Act, where prohibited acts are clearly enumerated and aggressively litigated.
Contacting Without Prior Express Written Consent
Under the TCPA, businesses must obtain prior express written consent before sending marketing texts, making marketing robocalls, or sending fax advertisements, according to legal analysis from BCLP. Generic phrasing like "our partners may contact you" no longer suffices — the consumer must actively select which companies may contact them, and consent checkboxes must never be pre-ticked, as TCPA compliance guidance makes clear. The FCC's December 2023 one-to-one consent rule attempted to close the "lead generator loophole" but was vacated by the Eleventh Circuit in January 2025 for exceeding statutory authority, per lead buyer compliance analysis.
Autodialers, Prerecorded Messages, and DNC Registry Violations
Using an autodialer or prerecorded voice without proper consent is a core prohibited act. So is calling numbers listed on the national Do-Not-Call registry — penalties for non-scrubbing can reach $43,792 per call, while DNC scrubbing costs just $75 per area code. The Established Business Relationship exception rarely rescues purchased leads, since it doesn't override internal DNC requests or apply to autodialed calls.
Failing to Honor Opt-Out Requests
The FCC's new Opt-Out Rule, effective April 11, 2025, requires businesses to honor revocation requests within ten business days, down from the previous 30-day window. Consumers may revoke consent through "any reasonable manner," including:
- Texting keywords like "STOP," "QUIT," or "END"
- Using interactive voice prompts during a call
- Contacting the business by phone, email, or in person
Businesses carry the burden of proving a revocation method was unreasonable, and opt-out records should be retained for at least four years.
Why This Matters for Lead Buyers
TCPA litigation increasingly focuses on whether consent existed and whether calls exceeded its scope. As Mac Murray & Shuster notes, the "TCPA-compliant lead" is a myth — no lead is inherently compliant, and liability is mitigated only through diligent call practices. Courts routinely find violations willful when a company lacks a compliance program.
This is why GrowthPros attaches a full consent record to every delivered lead — disclosure text, timestamp, IP address, and the named contacting party — and DNC-scrubs all lists before any outbound contact. Opt-outs are honored immediately and permanently across SMS, voice, and email, and reactivation campaigns target only pre-existing, opted-in relationships, never cold lists.
The stakes are real: TCPA class action filings hit 2,788 in 2024, a 67% increase over 2023, and average settlements exceed $6.6 million. Compliance isn't a checkbox — it's the foundation of every legitimate lead operation.
How GrowthPros Builds TCPA Compliance Into Every Lead Delivered
The "TCPA-compliant lead" is largely a myth, as TCPA litigation specialists point out — no lead is inherently compliant, and liability is only mitigated when leads are paired with diligent contact practices. That reality shapes how GrowthPros builds compliance into every lead before it ever reaches a client's CRM, treating the consent trail as part of the product itself.
The first safeguard is documentation. Every lead delivered carries a full consent record: the disclosure text the consumer saw, a timestamp, the IP address, and the named contacting party. This matters because legal experts note that marketing texts and robocalls require "prior express written consent," and courts routinely treat the absence of a compliance program as evidence of willfulness — which raises statutory damages from $500 to $1,500 per violation.
The second safeguard is list hygiene. All lists are DNC-scrubbed before any outbound contact, a practice that compliance analyses frame as essential: penalties for calling Do-Not-Call numbers can reach up to $43,792 per call, while scrubbing costs a fraction of that exposure. GrowthPros also honors opt-outs immediately and permanently across SMS, voice, and email — a standard that comfortably outpaces the FCC's Opt-Out Rule effective April 11, 2025, which requires businesses to honor revocation within ten business days.
For reactivation campaigns, the guardrails are even stricter. Dead lead reactivation targets only pre-existing, opted-in relationships a client already owns — never cold lists. This matters because the FCC's lead-generator consent rules have tightened the definition of valid consent, and generic phrasing like "our partners may contact you" no longer passes muster.
In practice, that means every delivered lead arrives with:
- A consent record showing disclosure text, timestamp, IP address, and the named contacting party
- DNC-scrubbing completed before any outbound contact is made
- Opt-outs honored immediately and permanently across SMS, voice, and email
- Reactivation limited to opted-in lists the client already owns, with one-to-one consent direction built in from day one
With TCPA class action filings reaching 2,788 in 2024 — a 67% increase over the prior year — and average settlements exceeding $6.6 million, mitigating liability at the source is not a nice-to-have. It is the difference between a lead that creates opportunity and one that creates exposure.
If you want leads that arrive qualified, time-stamped, and consent-recorded — followed up inside five minutes — book the 15-minute qualification call or submit the get-started funnel at growthpros.marketing. The call is free, honest about fit, and commits you to nothing.
Frequently Asked Questions
What are the main prohibited acts under the TCPA?
The TCPA prohibits contacting consumers without prior express written consent for marketing texts, robocalls, and fax ads; using autodialers or prerecorded voices without proper consent; calling numbers on the national Do-Not-Call registry; and failing to honor opt-out requests. Legal analysis from BCLP confirms that prior express written consent is required before any marketing text or robocall.
How much can a TCPA violation actually cost my business?
Statutory damages run $500 to $1,500 per violation, per class member, with no requirement to prove actual injury — and courts push damages toward the $1,500 ceiling when a company lacks a compliance program. To put it in perspective, 10,000 non-compliant texts could mean $5 million in base exposure, or $15 million if willful.
Is it really true that a lead can be 'TCPA-compliant' on its own?
No — TCPA specialists call the "TCPA-compliant lead" a myth. No lead is inherently compliant; liability is only mitigated by pairing verified consent records with diligent call practices, which is why courts focus on whether consent existed and whether calls exceeded its scope.
What happens if I call someone on the Do-Not-Call registry?
Penalties for failing to DNC-scrub can reach up to $43,792 per call, while scrubbing costs just $75 per area code (capped at $20,868 per year) — making it one of the cheapest compliance investments available. The Established Business Relationship exception rarely rescues purchased leads anyway, since it doesn't override internal DNC requests or apply to autodialed calls.
How quickly do I have to honor an opt-out request under the new rules?
The FCC's Opt-Out Rule, effective April 11, 2025, requires businesses to honor revocation requests within ten business days, down from the previous 30-day window. Consumers can revoke consent through "any reasonable manner" — texting STOP, using voice prompts, or even telling a cashier — and the burden falls on businesses to prove a revocation method was unreasonable.
Can generic consent language like 'our partners may contact you' protect me?
Not anymore — consumers must actively select which companies may contact them, and consent checkboxes must never be pre-ticked for consent to count as "express." Although the FCC's one-to-one consent rule was vacated by the Eleventh Circuit in January 2025, carriers like T-Mobile, AT&T, and Verizon still require one-to-one opt-in for SMS.
Turning Compliance from Cost Center to Competitive Edge
The evidence is clear: TCPA violations aren’t just legal risks—they’re financial landmines, with statutory damages up to $1,500 per violation and average class settlements exceeding $6.6 million. From consent gaps to autodialer misuse and delayed opt-outs, the prohibited acts outlined here expose how easily lead acquisition can backfire without rigorous safeguards. But compliance done right isn’t just about avoiding penalties—it’s about building trust. When every lead arrives with a verified consent trail, DNC-scrubbed lists, and immediate opt-out honors across channels, you’re not just checking a box—you’re protecting your budget, your reputation, and your ability to scale. GrowthPros embeds these protections into every lead delivered, turning compliance into a quiet advantage. If you’re ready to stop gambling with lead quality and start building a pipeline you can trust, the next step is simple: book a free, no-pressure 15-minute qualification call to see how consent-recorded, speed-to-lead delivery works for your niche.
This article is general information, not legal or financial advice. Benchmark figures are directional industry data, not guarantees of results.