What is a DNC?

The DNC Registry: What It Is and Why It Exists

Before your sales team dials a single number, there's a federal list of 258 million people who've already said "don't call me." Ignore it, and each dial could cost you more than most leads are worth.

The National Do Not Call Registry is a list managed by the Federal Trade Commission that lets consumers opt out of most telemarketing sales calls and robocalls. The FTC describes it as "a list of phone numbers from consumers who have indicated their preference to limit the telemarketing calls they receive," offering an easy, efficient way for people to tell companies they don't want to be contacted.

The Registry launched in 2003 after the FTC reviewed more than 64,000 public comments, the majority of which favored its creation. It has since grown into one of the most consequential compliance obligations in outbound sales. According to the FTC's FY2025 Data Book, the Registry now holds over 258 million active registrations — up more than 4.8 million year over year — and the FTC received more than 2.6 million DNC complaints in that fiscal year alone.

For lead buyers, the Registry defines the boundary between a dialable lead and a legal liability. Under the Telemarketing Sales Rule, telemarketers must scrub their call lists against the Registry at least every 31 days, and calling a registered number can trigger civil penalties exceeding $53,000 per call, per the FTC's guidance for telemarketers and sellers.

The stakes keep rising. Recent compliance analysis shows TCPA class actions up 23% year over year, with 856 filings through April 2026 — and a single jury award in Wakefield v. ViSalus reached $925 million for prerecorded calls. Compliance experts warn that the danger zone is the gap between "we scrub our lists" and "we can prove we scrubbed this number."

That's why any lead you buy should arrive with its compliance posture intact. A few non-negotiables to expect from your lead sources:

• Lists scrubbed against the federal DNC Registry before any outbound contact
• A consent record attached to every lead — disclosure text, timestamp, IP, and named contacting party
• Opt-outs honored immediately and permanently across voice, SMS, and email

At GrowthPros, every lead we deliver is DNC-scrubbed and consent-recorded before it reaches your CRM, so the compliance burden doesn't fall on your dialer team after the fact. Understanding the Registry isn't optional background — it's the first thing to verify before you buy a single lead.

The Real Cost of Ignoring the DNC: Penalties and Enforcement

Ignoring DNC compliance isn't just a regulatory oversight—it's an existential threat to your business. A single call to a number on the National Do Not Call Registry can trigger civil penalties exceeding $53,000 under the Telemarketing Sales Rule, with fines adjusted annually for inflation and now standing at $53,088 per violation as of January 2025. This isn't theoretical; the FTC received over 2.6 million DNC complaints in fiscal year 2025 alone, reflecting both widespread consumer intolerance and active enforcement.

The financial exposure multiplies under the Telephone Consumer Protection Act (TCPA), which imposes statutory damages of $500 to $1,500 per illegal call or text—with no upper limit on total liability. Willful violations treble damages to $1,500 per incident, and courts have shown little hesitation in awarding massive sums. Consider the Wakefield v. ViSalus case, where a jury awarded $925 million for 1.85 million prerecorded calls—though later vacated on procedural grounds, it underscores the scale of risk when compliance systems fail. Even without trebling, calling just 1,000 numbers without proper consent could exceed $1.5 million in TCPA liability.

Enforcement is accelerating, not slowing. TCPA class actions rose 23% year-over-year from April 2025 to April 2026, climbing from 691 to 856 filings, with April 2026 alone seeing 330 new cases filed. This surge reflects both heightened consumer awareness and more aggressive plaintiffs' bar activity. For lead generators like GrowthPros, whose model depends on compliant, consent-recorded leads delivered with AI-powered speed-to-lead, these trends aren't distant headlines—they directly impact the viability of outbound strategies. One compliance gap can unravel months of trust-building and expose clients to liability that dwarfs any short-term gain from cutting corners on list hygiene.

• TSR fines now exceed $53,000 per call, adjusted for inflation
• TCPA allows $500–$1,500 per violation with no statutory cap
• Internal DNC lists must be retained for 5+ years federally, 10 years in some states

Who You Can Still Call: Exemptions, EBR Windows, and State Rules

The Established Business Relationship (EBR) exemption is the most misunderstood safe harbor in telemarketing. It lets you call a current customer for 18 months after their last purchase or payment, or for three months after an inquiry or application — even if their number sits on the Registry. But that window slams shut the moment the consumer submits a direct do-not-call request to your company; a personal opt-out always overrides EBR.

• Federal rules require you to scrub against the National DNC Registry at least every 31 days.
• Eleven states — CO, FL, IN, LA, MA, MO, OK, PA, TN, TX, WY — maintain their own lists that demand separate management.
• Florida adds a unique twist: consent expires after 18 months, forcing a fresh opt-in.
• Internal DNC lists must be retained for five years federally; some states require ten.

Missing a scrub cycle or ignoring a state list exposes you to TSR penalties that now exceed $53,000 per call and TCPA statutory damages of $500–$1,500 per violation with no cap. GrowthPros builds every lead delivery around a documented consent trail — disclosure text, timestamp, IP address, and the named contacting party — so the compliance record travels with the lead. Lists are DNC-scrubbed before any outbound contact, opt-outs are honored immediately and permanently across SMS, voice, and email, and reactivation campaigns target only pre-existing, opted-in relationships. That process is the product: qualified, consent-recorded leads followed up inside the promised window.

How Lead Buyers Stay Compliant: Scrubbing, Consent Records, and Opt-Out Logic

Compliance isn't a checkbox — it's a chain of evidence. The FTC received more than 2.6 million DNC complaints in fiscal year 2025 alone, and TCPA class actions surged 23% year-over-year through April 2026. Every outbound touchpoint needs a timestamped audit trail that proves the number was clean, the consent was specific, and the opt-out was honored.

• Real-time DNC scrubbing at point of contact with provable timestamps — monthly scrubs leave a 31-day compliance gap the TSR permits but courts punish
• Person-based opt-out suppression (not phone-number-based) so a consumer's preference survives number changes and CRM re-imports
• Per-seller consent records under the FCC's one-to-one requirement — disclosure text, timestamp, IP address, and the named contacting party attached to every lead
• Internal DNC list retention of five years minimum (ten in states like Florida and Indiana) with immediate, permanent suppression across SMS, voice, and email

The FCC prohibits daisy-chain sharing of lead data and requires prior express written consent for each identified seller. A clean registry scrub doesn't defend against a TCPA consent claim — the two regimes are enforced separately and you can win one while losing the other. Established Business Relationship exemptions (18 months post-purchase, 3 months post-inquiry) vanish the moment a consumer requests no contact.

GrowthPros builds this chain into every lead: exclusive and capped-shared leads arrive with consent records attached, scrubbed against federal and state registries before any outbound attempt, and followed up by AI voice, SMS, and email within five minutes. Reactivation campaigns target only pre-existing, opted-in relationships — never cold lists. The result is a lead product that closes the gap between "we scrub our lists" and "we can prove we scrubbed this number."

Want leads that arrive with their compliance trail already built? Start a conversation — we'll walk through your niche, your volume, and what compliant delivery looks like in your CRM.

What Compliant Lead Generation Looks Like in Practice

Most lead buyers assume compliance and speed are a trade-off: you can scrub every list carefully, or you can call fast enough to actually win the customer. That assumption is expensive. With TCPA class actions up 23% year-over-year — 856 filings through April 2026 versus 691 the prior year, per compliance analysis of outbound sales enforcement — the cost of getting consent wrong now rivals the cost of being slow.

The real risk lives in documentation gaps. As one outbound compliance analysis puts it, "that gap between 'we scrub our lists' and 'we can prove we scrubbed this number' is where outbound teams get hit." TSR violations carry civil penalties of more than $53,000 per non-compliant contact, and TCPA statutory damages run $500–$1,500 per violation with no damages cap, according to DNC compliance guidance.

This is why provable consent records — not just clean lists — are the standard buyers should demand. Every lead should arrive with its paper trail attached:

• The exact disclosure text the consumer saw when they opted in
• A timestamp showing when consent was given
• The IP address tied to the submission
• The named contacting party, so consent maps to a specific seller — the direction the FCC pushed with its one-to-one consent rule, which clarified that "sharing lead information with a daisy-chain of 'partners' is not permitted," per legal analysis of the FCC's lead-generation rules

That last point matters more than buyers realize. A lead that's been sold to five anonymous buyers isn't just lower quality — it's a consent structure regulators have explicitly targeted.

GrowthPros builds this into the product rather than bolting it on. Lists are DNC-scrubbed before any outbound contact, opt-outs are honored immediately and permanently, and every delivered lead carries its full consent record — disclosure text, timestamp, IP, and named contacting party. Then the AI speed-to-lead layer follows up by voice, SMS, and email inside five minutes, 24/7, because contacting a lead within five minutes makes contact roughly 100x more likely than waiting thirty. Compliance is handled before delivery; speed happens after. Neither compromises the other.

The takeaway for buyers is simple: ask any lead vendor for the consent trail before asking about price. If the answer is a shrug, you're absorbing regulatory risk that isn't priced into the lead. If the answer is a documented record attached to every contact, you've found a vendor that treats compliance as infrastructure — and speed as the reward for getting it right.

Exclusive, consent-recorded leads by niche — followed up inside five minutes, including the leads already sitting in your CRM. Book a free 15-minute qualification call to see what your niche looks like.