What does "scrubbing" mean?

The Compliance Risk of Unscrubbed Lead Lists

Many businesses assume that having consent from a lead form is enough to make a call, but this overlooks a critical compliance requirement: checking numbers against the Do Not Call registry. Failing to scrub lead lists against the National Do Not Call Registry before dialing exposes companies to significant legal and financial risk under the Telephone Consumer Protection Act (TCPA). Federal law requires this check to be performed using a registry version obtained within the last 31 days, meaning lists must be refreshed at least monthly to remain compliant.

Calling a number on the DNC registry can trigger TCPA violations carrying statutory damages of $500 to $1,500 per call, with penalties trebled for willful violations. In fiscal year 2025 alone, the FTC received over 2.6 million Do Not Call complaints against a registry of more than 258 million active registrations, underscoring both consumer vigilance and enforcement readiness. One FTC enforcement action under the Telemarketing Sales Rule resulted in $28.7 million in civil penalties and a permanent telemarketing ban, illustrating how quickly non-compliance can escalate.

The financial exposure extends beyond individual fines. TCPA class actions frequently target widespread calling practices, with average settlements reaching $6.6 million in recent years and some campaigns facing theoretical liability in the hundreds of millions. For example, a single call to a registered number can result in a federal TCPA violation fine of up to $53,088 when combined with other penalties, making unscrubbed lists a severe liability. GrowthPros mitigates this risk by DNC-scrubbing all leads before delivery as part of their compliance protocol, ensuring every number checked against the National DNC Registry uses data no older than 31 days and that opt-outs are honored permanently across voice, SMS, and email channels.

• National DNC Registry scrub must use data from the last 31 days before calling
• TCPA violations carry $500–$1,500 per call, trebled for willfulness
• Over 2.6 million DNC complaints filed with FTC in fiscal year 2025
• One FTC action yielded $28.7 million in civil penalties and a permanent ban
• Average TCPA class action settlement: $6.6 million

Ignoring DNC scrubbing isn’t just a compliance oversight—it’s a direct path to costly litigation, regulatory action, and reputational harm. By integrating real-time scrubbing into lead delivery, businesses protect themselves from avoidable risk while maintaining the ability to engage consumers who have not opted out. This proactive approach turns compliance from a burden into a foundation for trustworthy, effective outreach.

How DNC Scrubbing Works as a Standalone Compliance Requirement

Having a signed consent form in your CRM does not mean the phone number is safe to dial. That surprise is exactly where most TCPA exposure begins, because DNC scrubbing is a separate compliance requirement from consent verification—and passing one check does not satisfy the other, as compliance experts consistently warn.

Compliance practitioners describe an eight-step pre-dial sequence: consent verification, internal DNC checks, National DNC Registry scrubbing, state registry compliance, communication-type rules, dialing, opt-out capture, and audit trail maintenance. DNC scrubbing sits at step three—not as a replacement for consent verification, but as an independent gate that must also be cleared.

The distinction matters because the two checks answer different questions. TCPA consent verification asks whether the consumer agreed to be contacted; DNC scrubbing asks whether the number itself is off-limits for telemarketing. A number can carry valid consent and still be registered on the National Do Not Call Registry, which held over 258 million active registrations in fiscal year 2025 according to the FTC.

A proper scrub checks every number against multiple layers, not just the federal list:

• The National Do Not Call Registry, using a version no older than 31 days, as federal law requires.
• State-level registries—ten U.S. states maintain their own Do Not Call lists in addition to the federal one.
• Internal suppression lists, capturing every consumer who previously told your team to stop calling.
• Optional litigator screening to flag known professional plaintiffs.

The internal list deserves special attention. Experts note that a number absent from the National Registry can still be off-limits because the consumer opted out directly with your company—an independent TCPA violation if ignored.

Even a lead with documented consent must be scrubbed before every dialing session. Industry guidance is clear: consent does not override DNC registration if the call occurs more than 31 days after consent was given. The stakes are substantial—TCPA violations carry statutory damages of $500 to $1,500 per call or text, with recent settlements including a $28 million fund in a National DNC Registry case.

This layered approach is why GrowthPros treats scrubbing as a mandatory pre-delivery step: every lead is DNC-scrubbed before any outbound contact, carries its consent record, and flows into AI follow-up only after both gates clear. The same discipline applies to reactivation campaigns, where opted-in dormant lists are scrubbed before the first SMS or voice touch—because a consent trail without a fresh scrub is only half a compliance story.

GrowthPros’ Scrubbing Process: Consent, Compliance, and Delivery

Scrubbing isn't a courtesy step—it's the legal gatekeeper between a qualified lead and a TCPA lawsuit. The National Do Not Call Registry held over 258 million active registrations in fiscal year 2025, and the FTC fielded more than 2.6 million complaints that same year. Every number GrowthPros sources gets checked against federal and state DNC lists before it ever reaches a CRM, and the consent record—disclosure text, timestamp, IP address, and named contacting party—travels with the lead.

• Pre-delivery scrub against the National DNC Registry and all ten state registries
• Internal suppression list enforcement for every opt-out received
• Consent documentation attached to each lead for a minimum four-year audit trail
• Real-time honoring of opt-outs across SMS, voice, and email channels

Consent from a lead form doesn't override a consumer's DNC registration if the call happens more than 31 days after that consent was given, so scrubbing runs immediately before any outbound contact. The pre-dial compliance sequence requires eight distinct steps, and passing the TCPA consent check does not satisfy the DNC requirement—they are parallel obligations. GrowthPros builds both into the same pipeline: leads are qualified, consent-recorded, and DNC-scrubbed before delivery, whether they're fresh exclusive leads or reactivated contacts from a client's opted-in database.