What are the legal rules for cold calling?

Key Facts

FTC civil penalties for TSR violations reach up to $51,744 per violation according to telemarketing compliance analysis
DNC record retention requirements extended from two to five years effective October 15, 2024 per FTC rule changes
Consumers lost approximately $242 million to tech support scams in 2023 with median individual loss of $1,400 per Federal Register data
Cold calling legally restricted to 8 a.m. to 9 p.m. local recipient time under federal telemarketing regulations
FCC 2024 rule clarifies consumers can revoke consent in any reasonable manner including verbal stop or text reply
FTC expanded TSR coverage to inbound technical support calls effective January 9, 2025 closing long-standing loophole
Tech support scam complaints surged from 40,000 in 2017 to over 90,000 in 2023 per FTC Federal Register data

The Real Cost of Getting Cold Calling Wrong

The financial and legal consequences of non-compliance with federal telemarketing laws can quickly escalate from manageable oversight to existential threat for businesses engaged in cold calling. With the FTC now imposing civil penalties of up to $51,744 per violation under the Telemarketing Sales Rule (TSR), even a small-scale calling campaign can trigger six- or seven-figure liabilities if core requirements like time restrictions, mandatory disclosures, or National Do Not Call Registry adherence are ignored. These penalties apply not only to outbound solicitation but, as of January 9, 2025, also to inbound technical support calls made in response to advertisements or direct mail — a significant expansion that closes a long-standing loophole exploited by fraudulent actors.

Beyond direct fines, non-compliance risks trigger broader operational and reputational damage. The FTC has the authority to seek nationwide injunctions that halt calling activities entirely, while state attorneys general may pursue additional actions under stricter state-level telemarketing laws, compounding exposure. Violations also open the door to consumer redress programs, where the FTC can require violators to provide restitution to harmed individuals — a process that has seen consumers report losing approximately $242 million to tech support scams in 2023 alone, with a median individual loss of $1,400. For lead generation companies like GrowthPros, whose model hinges on trust, consent integrity, and speed-to-lead, such outcomes erode the very foundation of their value proposition.

To mitigate these risks, businesses must treat compliance as a continuous operational discipline rather than a one-time checklist. This includes maintaining verifiable consent records with timestamps, IP addresses, and disclosure details — a practice GrowthPros embeds into every lead delivery — while honoring opt-out requests within 30 days and extending Do Not Call list retention to five years, effective October 15, 2024. Crucially, the FCC’s 2024 clarification that consent revocation can be made in any reasonable manner demands flexible, real-time honoring of withdrawal signals across voice, SMS, and email channels. Companies that fail to adapt face not just penalties, but exclusion from markets where compliance is no longer optional — it’s the price of entry.

Federal law draws a hard line around when and how you can reach a prospect. The Telemarketing Sales Rule (TSR) and the Telephone Consumer Protection Act (TCPA) together set the baseline: calls only between 8 a.m. and 9 p.m. local time, mandatory disclosures at the top of every call, and prior express written consent before any autodialed or prerecorded outreach. Violations carry civil penalties of up to $51,744 per violation, so the cost of guessing is steep.

Time window: 8 a.m. – 9 p.m. recipient local time, no exceptions
Opening disclosures: seller identity, purpose of the call, and the nature of the offer
Written consent required for autodialed calls, prerecorded messages, and SMS
National DNC Registry access and internal entity-specific do-not-call lists
Opt-out requests honored within 30 days, revocable in any reasonable manner

The FCC's 2024 rule clarified that consumers can revoke consent in any reasonable manner — a verbal "stop," a text reply, or a website form all count. Meanwhile, the FTC extended DNC record retention from two years to five, effective October 2024, and expanded TSR coverage to inbound technical-support solicitations starting January 9, 2025. GrowthPros builds these requirements into every lead: each record carries the disclosure text, timestamp, IP address, and named contacting party, and every list is DNC-scrubbed before a single dial. Reactivation campaigns only touch opted-in contacts you already own, so the consent trail stays intact from day one.

How GrowthPros Built Compliance Into Lead Delivery

Most lead buyers never see what happens before a lead lands in their CRM — and that invisible stretch is exactly where TCPA and TSR liability lives. GrowthPros treats compliance as part of the product, not a client-side chore, so every lead arrives with its legal paperwork already attached.

The stakes are real. TSR violations carry civil penalties of up to $51,744 per violation, according to a telemarketing compliance analysis — enough that a single bad list can wipe out months of revenue. Recent rule changes have raised the bar further: the FTC now requires DNC record retention of five years (up from two), and the FCC has clarified that consent revocation can be made in any reasonable manner and must be honored promptly.

That regulatory reality shapes how GrowthPros builds lead delivery from the ground up:

DNC scrubbing before any outbound contact — every list is checked against the National Do Not Call Registry before a single call or text goes out, as the TSR requires.
Consent records with every lead — disclosure text, timestamp, IP address, and the named contacting party travel with the lead into the client's CRM.
Immediate, permanent opt-out honoring across SMS, voice, and email — well inside the TSR's 30-day window.
Reactivation only on pre-existing, opted-in lists — never cold data — with FCC one-to-one consent direction built in from day one.

The consent trail matters more than most buyers realize. FTC guidance requires sellers and telemarketers to maintain records of express informed consent, and enforcement now extends to business-to-business calls under the FTC's 2024 rule changes. A lead without documentation is a lead a regulator can't verify — which makes it a liability, not an asset.

Compliance and speed don't compete here. Every delivered lead still gets AI voice, SMS, and email follow-up inside a five-minute window, 24/7, because responding fast only counts if the contact was legally reachable in the first place. Clients get high-intent leads with the legal groundwork done; they close conversations, not compliance gaps. That's the promise — the process, documented, not a guarantee about outcomes.

Frequently Asked Questions

What are the legal calling hours for cold calls in the U.S.?

Federal law requires all telemarketing calls to be made between 8 a.m. and 9 p.m. in the recipient's local time zone, with no exceptions for time zone differences or business types. This restriction is mandated by the Telemarketing Sales Rule (TSR) and applies to both live and automated calls.

Do I need written consent before making automated cold calls or sending marketing texts?

Yes, prior express written consent is required before placing any autodialed or prerecorded calls or sending marketing text messages under the TCPA and TSR. The consent must be documented with disclosure text, timestamp, and the named contacting party to be verifiable in case of enforcement.

What disclosures must I make at the start of a cold call?

You must disclose the seller's identity, the purpose of the call, and the nature of the offer at the beginning of every telemarketing call. The TSR also requires additional material disclosures such as cost, quantity, material restrictions, and no-refund policies depending on the offer type.

How long do I have to honor a consumer's opt-out request?

Opt-out requests must be honored within 30 days under the TSR, but the FCC's 2024 rule clarifies that consent revocation can be made in any reasonable manner — including verbally, via text, or through a web form — and must be acted on promptly across all channels.

Does the National Do Not Call Registry apply to business-to-business (B2B) calls?

As of March 2024, the FTC extended TSR protections to cover business-to-business telemarketing calls, meaning B2B calls are now subject to the same DNC Registry requirements, consent rules, and disclosure obligations as consumer calls.

What are the penalties for violating cold calling laws?

Violations of the Telemarketing Sales Rule carry civil penalties of up to $51,744 per violation, and the FTC can seek nationwide injunctions, consumer redress, and enforcement actions by state attorneys general. In 2023 alone, consumers reported losing approximately $242 million to tech support scams, with a median individual loss of $1,400.

Cold Calling Compliance Is the Price of Entry — Not a Checkbox

The rules for cold calling in the U.S. are clear and unforgiving: call only between 8 a.m. and 9 p.m. local time, disclose who you are and why you're calling, secure prior express written consent for automated outreach, scrub every list against the National Do Not Call Registry, and honor opt-outs promptly — because consent can now be revoked in any reasonable manner. With civil penalties reaching $51,744 per violation, a single undocumented list can erase months of revenue. The 2024 amendments — five-year DNC record retention, expanded B2B and inbound tech support coverage — signal a clear direction: enforcement is tightening, and a lead without a consent trail is a liability, not an asset. Your next step is an audit: verify that every lead in your pipeline carries timestamped, verifiable consent documentation before your next campaign dials out. If you'd rather buy leads that arrive with the legal groundwork already done — DNC-scrubbed, consent-recorded, and followed up within five minutes — book a free 15-minute qualification call with GrowthPros. It commits you to nothing, and it's the fastest way to know whether your lead pipeline is an asset or an exposure.

This article is general information, not legal or financial advice. Benchmark figures are directional industry data, not guarantees of results.