What is the telemarketing sales rule?

Why the TSR Matters If You Buy or Sell Leads

If you buy leads for a living, the Telemarketing Sales Rule stopped being "someone else's problem" the moment the FTC started prosecuting the people who sell leads — not just the people who call them.

The Response Tree case made that unmistakable. The lead generator operated more than 50 websites designed to trick consumers into handing over personal information, then sold it as consent. At peak, its "consent farm" pushed an average of 10,000 supposedly real-time leads per day — up to 50,000 on some days — and between 2019 and 2022 it sold millions of deceptively collected leads. The proposed settlement included a $7 million civil penalty and a ban from telemarketing and robocall activities entirely, according to reporting on the FTC's action.

The Response Tree case didn't stand alone. A 2023 nationwide enforcement sweep targeted parties responsible for distributing or facilitating billions of illegal telemarketing calls — and for selling more than 700 million telemarketing leads. Samuel Levine, Director of the FTC's Bureau of Consumer Protection, put it plainly: the agency "will continue to target every corner of the illegal telemarketing ecosystem."

That phrase should matter to every lead buyer. "I just bought the lead" is not a defense when the lead itself was farmed through deception — the campaigns those leads fueled were illegal because telemarketers never had the consumer's consent to call, violating core TSR and Do Not Call Registry provisions. If you can't trace where a lead came from, you inherited its legal risk.

The 2024 amendments raise the stakes further. As compliance analysts have noted, the FTC explicitly stated that maintaining "a list of IP address and timestamps as proof of consent" is now insufficient — and recordkeeping requirements have extended from two years to five. Consent has to be verifiable, not assumed.

What that means in practice when you evaluate a lead source:

• Every lead should arrive with a consent record — disclosure text, timestamp, IP address, and the named contacting party — not just a name and phone number.
• Lists should be DNC-scrubbed before any outbound contact, with opt-outs honored immediately and permanently.
• Reactivation campaigns should target only pre-existing, opted-in relationships — never cold lists.
• Compliance data should be centralized and organized so it can be produced as proof on demand.

This is why TSR fluency has become a buying criterion, not just a legal one. At GrowthPros, every lead we deliver carries its consent trail attached — because in the current enforcement environment, the cheapest lead on the market is often the most expensive one you'll ever buy.

Compliance questions about your current lead sources? Book a 15-minute qualification call and we'll walk through it — honest about fit, committed to nothing.

What the Telemarketing Sales Rule Actually Requires

The Telemarketing Sales Rule sets clear boundaries for how businesses can communicate with consumers over the phone. At its core, the TSR requires specific disclosures before any transaction is discussed, bans material misrepresentations about goods or services, and restricts calling to the 8 a.m. to 9 p.m. window in the recipient’s time zone. These foundational rules apply regardless of whether the call is initiated by a telemarketer or comes in response to an advertisement, as clarified in the 2024 amendments effective January 9, 2025.

Key operational requirements include transmitting accurate Caller ID information, honoring the National Do Not Call Registry, and maintaining detailed records of consumer consent and transactions. For GrowthPros, this means every lead delivered includes a consent record with disclosure text, timestamp, IP address, and the named contacting party — ensuring transparency from the first point of contact. Lists are DNC-scrubbed before any outbound attempt, and opt-outs are honored immediately and permanently across all communication channels, including SMS, voice, and email.

The 2024 amendments introduced several significant updates that directly impact lead generation practices. Recordkeeping requirements were extended from two to five years from the end of the contract for consumer calls, increasing the obligation to retain detailed interaction logs. Inbound calls responding to ads or direct mail solicitations — particularly those offering technical support — are now explicitly covered under the TSR, closing a loophole frequently exploited by scammers. Additionally, AI-generated calls are now treated as prerecorded messages under the rule, subjecting them to the same consent and disclosure requirements as traditional robocalls.

Another critical change extends anti-deception protections to business-to-business telemarketing for the first time at the federal level. Material misrepresentations in B2B calls are now prohibited nationwide, aligning federal standards with existing state-level safeguards. This expansion reflects the FTC’s recognition that businesses, like consumers, deserve protection from fraudulent telemarketing tactics.

Understanding the distinction between the TSR and the TCPA is essential for compliance. As noted by industry analysts, the TCPA governs 'how' you make the calls — addressing equipment, dialing methods, and consent for robocalls — while the TSR governs 'what' you say during the call, focusing on disclosures, truthfulness, and transaction-related practices. For a lead generation company like GrowthPros, this means adhering to the TSR by ensuring all lead data includes verifiable consent documentation and that any follow-up communication avoids misrepresentation, while relying on TCPA-compliant systems for call placement and timing. Together, these rules form a comprehensive framework that protects consumers and supports ethical telemarketing practices.

The Consent Standard That Just Changed the Game

The FTC just drew a hard line that invalidates how most lead marketplaces operate. The agency explicitly stated that "common practices previously employed by telemarketers or sellers, such as maintaining a list of IP address and timestamps as proof of consent, are insufficient" to demonstrate valid consumer consent under the Telemarketing Sales Rule. This single finding should force every lead buyer to audit their sources immediately.

What replaces the old standard? Screen captures of the actual consent flow — the exact disclosure text the consumer saw, the checkbox they ticked, the button they clicked, timestamped and tied to the named contacting party. The FTC confirmed that screen prints of consent capture from web pages satisfy requirements if they accurately reflect what consumers submitted. That means a spreadsheet of IPs and timestamps no longer cuts it; you need the visual receipt.

Most marketplace leads cannot produce this evidence. Shared inboxes, five-buyer dumps, and consent farms operate on volume, not verification. The FTC's enforcement action against Response Tree revealed a consent farm operating more than 50 deceptive websites that sold millions of leads — at peak, 10,000 to 50,000 "real-time" leads per day — without valid consent records. The company and its president now face a $7 million civil penalty and a ban from telemarketing and robocall activities. The same sweep identified entities that distributed or facilitated billions of illegal calls and sold more than 700 million telemarketing leads.

A compliant consent record now requires four non-negotiable elements:

• Exact disclosure language presented to the consumer
• Timestamp of the consent action
• IP address at time of consent
• Named contacting party identified to the consumer

GrowthPros builds this consent trail into every lead we deliver — exclusive or capped-shared — because the liability for missing documentation falls on the caller, not just the source. Our AI follow-up system attaches the consent record to each lead in your CRM before the first dial. If your current provider cannot produce screen-capture proof for every lead in your pipeline, you are operating on borrowed time.

How GrowthPros Builds TSR Compliance Into Every Lead

The TSR doesn't just regulate the telemarketer on the phone — it reaches the entire ecosystem that makes the call possible. The FTC's 2023 enforcement sweep targeted parties responsible for facilitating billions of illegal calls and selling more than 700 million telemarketing leads, and one lead generator caught farming deceptively obtained consent faced a $7 million civil penalty and a telemarketing ban. That is why compliance is built into every lead GrowthPros delivers, not bolted on afterward.

The 2024 amendments also raised the bar on what counts as proof. The FTC made clear that common consent practices like a bare list of IP addresses and timestamps are "insufficient" — records must accurately reflect what the consumer actually submitted. Each GrowthPros lead carries a full consent trail attached at delivery: the disclosure text, the timestamp, the IP address, and the named contacting party, so a buyer can verify consent rather than take it on faith.

The rest of the process maps directly to specific TSR provisions:

• DNC scrubbing before contact — every list is scrubbed against the National Do Not Call Registry before any outbound call, text, or email goes out.
• Immediate, permanent opt-outs — a request to stop is honored across SMS, voice, and email, with no re-contact and no exceptions.
• Calling-hour discipline — the AI speed-to-lead sequence still responds inside the five-minute window, but never before 8 a.m. or after 9 p.m., consistent with the TSR's time-of-day restrictions.
• Reactivation without cold lists — dormant-list campaigns target only pre-existing, opted-in relationships a client already owns, never purchased cold data.

The FCC's one-to-one consent direction is built in from day one, so lead flow stays ahead of the rule rather than scrambling behind it. And because the 2024 amendments now treat AI calls as prerecorded messages under the TSR, every AI voice follow-up runs inside the same consent and disclosure framework as a human caller would.

Compliance, done this way, stops being a legal checkbox and becomes part of the product. Qualified, consent-recorded leads — followed up inside the promised window, with the paper trail to prove it. That's the standard every delivered lead is held to, and it's why the process, not a promise of outcomes, is what GrowthPros stands behind.

How to Audit Your Lead Sources Before the FTC Audits You

The FTC's 2023 enforcement sweep targeted parties responsible for billions of illegal calls and the sale of over 700 million telemarketing leads — proof that buying leads can carry the same liability as making the calls. If you purchase leads, the burden of verifying consent sits with you. Here's how to audit your sources before a regulator does it for you.

Start with consent documentation. The FTC has stated plainly that "common practices previously employed by telemarketers or sellers, such as maintaining a list of IP address and timestamps as proof of consent, are insufficient" under the strengthened 2024 amendments. Ask every vendor for verifiable consent records — disclosure text, timestamps, IP addresses, and the named contacting party — not just a spreadsheet of phone numbers.

Verify DNC-scrubbing and opt-out handling. Confirm your vendor scrubs lists against the National Do Not Call Registry before any outbound contact, and that opt-outs are honored immediately and permanently. The Response Tree case shows what happens when vendors skip this: the lead generator faced a $7 million civil penalty for selling millions of deceptively collected leads — up to 50,000 per day at peak.

Confirm record retention. The 2024 amendments extended the retention period from two years to five years from the end of a consumer contract, per the Federal Register final rule. Your vendor's records — and yours — must survive that long.

Finally, apply the Safe Harbor framework for recordkeeping errors. Qualifying requires four elements:

• Establish and document written compliance procedures
• Train personnel on those procedures
• Conduct periodic compliance audits and enforcement
• Acknowledge and correct inadvertent errors within 30 days of discovery

That 30-day correction window is your only grace period — there is no protection for errors you never find, which is why the audits matter as much as the procedures.

GrowthPros builds these requirements into the product itself: every lead is DNC-scrubbed and delivered with a full consent trail — disclosure text, timestamp, IP address, and named contacting party — attached before it lands in your CRM. Reactivation campaigns target only pre-existing, opted-in relationships, never cold lists.

If auditing your current vendors sounds exhausting, skip the audit entirely. Book the 15-minute qualification call or submit the get-started funnel, and see consent-recorded, DNC-scrubbed leads delivered with AI follow-up inside five minutes — reviewed the same business day, with no obligation attached.