TCPA and Telemarketing Rules · October 2, 2026 · GrowthPros

What are the rules for telemarketing calls?

Learn the core federal rules for telemarketing calls in 2025: TCPA consent, DNC scrubbing, calling hours, and how to verify lead consent to avoid $1,500...

An illustration of a phone with regulatory icons, signifying compliance with telemarketing call rules and regulations.

Key Facts

The Real Cost of Assuming a Lead Is TCPA-Compliant

Ask a lead vendor whether their leads are TCPA-compliant and you'll hear "yes" every time. The problem, as attorney Michele Shuster argues, is that the "TCPA-compliant lead" is only a myth — because compliance isn't a label, it's proof, and most sellers can't produce it.

The legal exposure is real. Courts have held that lead buyers and sellers can be vicariously liable for each other's actions. That means the business dialing the phone inherits the compliance failures of whoever sourced the lead — even if the buyer never saw the form, the disclosure language, or the consent checkbox. When a seller claims "we have consent" but can't document it, compliance experts are blunt: you're not buying leads, you're buying risk.

The financial stakes explain why. TCPA statutory damages run $500 per violation, rising to $1,500 per call or text when the violation is willful or knowing, according to regulatory analysis of the 2025 consent landscape. Multiply that across a purchased list of thousands, and a single bad batch can erase months of revenue.

The litigation trend confirms the risk is accelerating, not fading. TCPA litigation tracking shows class actions more than doubled from 239 cases in 2024 to over 500 in the first few months of 2025. Nearly 80% of TCPA cases are class actions — versus just 2–5% for other consumer lawsuits — which is why plaintiffs' attorneys actively court these claims.

So what does verifiable consent actually look like? Compliance guidance says every lead must answer five questions with evidence:

  • Who is authorized to contact the consumer, by name
  • How — which channels and technologies (autodialer, prerecorded voice) were consented to
  • What the consumer actually saw and agreed to, including disclosure text
  • When and where consent occurred, with a timestamp and IP address
  • How the consent record can be audited later

Emerging threats make the paper trail even more important. Industry analysis warns that sophisticated bots can now submit forms using real consumer data, checking consent boxes with no human intent behind the action — one of the fastest ways compliance silently breaks down. A lead that looks perfectly legitimate in your CRM may have never involved a real, willing consumer.

This is why GrowthPros attaches a consent record — disclosure text, timestamp, IP address, and the named contacting party — to every lead it delivers, rather than asking buyers to take compliance on faith. In this environment, the cheapest lead is rarely the cheapest lead; the only lead worth dialing is one whose consent you can prove.

Want leads that arrive with their consent trail attached? Book the 15-minute qualification call — free, honest about fit, and it commits you to nothing.

Core Federal Rules Every Telemarketer Must Follow in 2025

Telemarketing compliance in 2025 demands precision, as federal rules grow stricter and enforcement intensifies. Businesses must navigate overlapping requirements from the TCPA and TSR to avoid costly violations and class-action exposure. The stakes are especially high for lead buyers and sellers, where verifiable consent documentation has become the linchpin of lawful outreach.

Under the TCPA, prior express written consent is required for autodialed or prerecorded telemarketing calls and texts to wireless numbers, as well as any prerecorded telemarketing call to a landline. This consent must clearly disclose the number to be called, which entities may contact the consumer, the purpose and frequency of calls, and authorize the use of autodialer or prerecorded voice technology — all in writing with a signature. The FTC’s TSR further mandates express informed consent in every telemarketing transaction, reinforcing the need for transparent, auditable agreements.

Calling practices are tightly constrained: telemarketers may only contact consumers between 8 a.m. and 9 p.m. in the recipient’s local time zone. Abandoned calls — those where a live person answers but no agent connects within two seconds — must not exceed 3% of all outbound calls answered by a person, a threshold enforced as a safe harbor under the TSR. Additionally, telemarketers must scrub their lists against the National Do Not Call Registry before initiating contact, honoring both federal DNC entries and any company-specific opt-out requests, even if exempt from the national list.

A critical update effective April 11, 2025, requires businesses to honor consumer revocation of consent within 10 business days, using any reasonable method, for both informational and marketing communications. This shift elevates consent revocation from a backend process to a frontline compliance obligation, with one-time confirmation texts permitted only for clarification. GrowthPros builds this standard into its delivery model, ensuring opt-outs are honored immediately and permanently across voice, SMS, and email channels for every lead provided.

  • Prior express written consent required for wireless calls/texts using autodialer or prerecorded voice
  • Calling restricted to 8 a.m.–9 p.m. consumer local time; 3% abandonment safe harbor applies
  • National DNC Registry compliance mandatory; company-specific opt-outs must be honored
  • Consent revocation must be processed within 10 business days effective April 11, 2025

These rules are not theoretical — TCPA class actions more than doubled from 239 in 2024 to over 500 in the early months of 2025, reflecting heightened litigation risk. Penalties range from $500 to $1,500 per violation, underscoring why lead verification and consent traceability are non-negotiable. For businesses sourcing leads, the proof behind the permission matters as much as the permission itself.

Buying leads without proof of consent is like buying a house without a title search — the paperwork is the entire value. TCPA attorney Michele Shuster calls the "TCPA-compliant lead" "only a myth" unless consent can actually be verified, and courts have held lead buyers and sellers vicariously liable for each other's actions.

The stakes are rising fast. TCPA class actions more than doubled from 239 cases in 2024 to over 500 in the first few months of 2025, with nearly 80% of TCPA cases filed as class actions. At $500 to $1,500 per violation, a single bad lead batch can escalate into six-figure exposure.

Demand per-lead consent documentation. Every lead you buy should arrive with a complete consent trail attached. Compliance experts frame it plainly: if the seller can't show you where traffic comes from, what the consumer saw, and how consent is documented, you're not buying leads — you're buying risk. At minimum, require:

  • The exact disclosure text the consumer saw at the point of consent
  • A timestamp and IP address proving when and where consent occurred
  • The named contacting party the consumer authorized
  • The scope of consent — which entities, which channels, what purpose

Verify DNC scrubbing, don't take it on faith. Ask vendors how often they scrub against federal, state, and company-specific Do Not Call lists, and request evidence. Shuster recommends periodic lead audits and regular DNC scrubs as baseline risk management — a vendor that can't describe its scrubbing cadence hasn't built one.

Watch for red flags before you wire money. Sophisticated bots can submit forms using real consumer data and check consent boxes with no human intent behind them — one of the fastest ways compliance breaks down. Opaque traffic sources, "proprietary network" claims, and refusal to show the actual forms consumers completed all signal the same problem: consent that exists in a sales pitch but not in a record.

This is why GrowthPros attaches a consent record to every lead — disclosure text, timestamp, IP, and named party — and DNC-scrubs every list before delivery. It's also why shared leads deserve extra scrutiny: research shows shared leads carry higher compliance risk than exclusive ones, since consent scope and seller identity get murkier with each additional buyer. If you do buy shared, cap the buyer count and demand the same per-lead proof you'd require from an exclusive seller.

If you're evaluating lead sources and want consent documentation built in from day one, book the 15-minute qualification call — it's free, honest about fit, and commits you to nothing.

Frequently Asked Questions

What counts as valid consent for telemarketing calls and texts under current TCPA rules?
Prior express written consent is required for autodialed or prerecorded telemarketing calls and texts to wireless numbers and any prerecorded telemarketing call to a landline, and it must clearly disclose the number to be called, which entities may contact the consumer, the purpose and frequency of calls, and authorize autodialer or prerecorded voice use — all in writing with a signature. TCPA attorney Michele Shuster emphasizes that consent isn't a label but proof, and courts have held buyers and sellers vicariously liable for each other's compliance failures.
How much can a TCPA violation actually cost my business per call or text?
Statutory damages run $500 per violation, rising to $1,500 per call or text when the violation is willful or knowing, according to regulatory analysis of the 2025 consent landscape. With class actions more than doubling from 239 cases in 2024 to over 500 in early 2025, a single bad lead batch can escalate into six-figure exposure fast.
What specific proof should I demand from a lead vendor before buying?
Every lead should arrive with the exact disclosure text the consumer saw, a timestamp and IP address proving when and where consent occurred, the named contacting party the consumer authorized, and the scope of consent — which entities, which channels, and what purpose. Compliance experts warn that if the seller can't show you where traffic comes from, what the consumer saw, and how consent is documented, you're not buying leads — you're buying risk.
Do I still need to scrub against the National Do Not Call Registry if I have consent?
Yes — telemarketers must access and pay for the National Do Not Call Registry, and calls to registry numbers are prohibited absent prior express written consent or an established business relationship. Company-specific DNC requests must also be honored even if you're exempt from the national list, per FTC guidance on TSR compliance.
What changed with consent revocation rules in April 2025?
Effective April 11, 2025, businesses must honor consumer revocation of consent within 10 business days using any reasonable method, for both informational and marketing communications, with a one-time confirmation text permitted only for clarification. Industry analysis notes this shifts revocation from a backend process to a frontline compliance obligation, and GrowthPros builds immediate, permanent opt-out honoring across voice, SMS, and email into every lead delivery.
Are shared leads riskier than exclusive leads for TCPA compliance?
Research shows shared leads carry higher compliance risk than exclusive ones because consent scope and seller identity get murkier with each additional buyer. Compliance guidance recommends capping buyer count and demanding the same per-lead proof you'd require from an exclusive seller — GrowthPros caps shared leads at a hard maximum of two buyers for this reason.

Why Verifiable Consent Is Your Best Defense

Telemarketing in 2025 demands more than assumptions — it requires proof. As we've seen, the myth of the 'TCPA-compliant lead' crumbles without verifiable consent documentation, and the financial and legal risks are too high to ignore. From strict calling time limits and DNC scrubbing requirements to the new 10-business-day revocation rule effective April 11, 2025, compliance is no longer optional — it's foundational. GrowthPros builds these protections into every lead by attaching a full consent trail — disclosure text, timestamp, IP address, and named contacting party — and scrubbing lists against federal, state, and company-specific DNC registries before delivery. If you're ready to eliminate guesswork and buy leads you can actually prove are compliant, book your free 15-minute qualification call — it's honest, obligation-free, and designed to see if we're the right fit for your business.

This article is general information, not legal or financial advice. Benchmark figures are directional industry data, not guarantees of results.

Start

More booked calls. Not more form fills.

Tell us your niche and your goal. We will show you realistic volume, exclusivity options, and what follow-up looks like on a live call — no pressure, no 40-page deck.