Why am I getting so many solicitation calls?

The Lead Generator Loophole: One Form, Many Callers

Here's a scenario that plays out thousands of times a day: you fill out one form on a comparison-shopping site to get a quote on car insurance, and your phone starts ringing — from insurers you never contacted, plus solar companies, home contractors, and lenders you've never heard of. You didn't give your number to all of them. But functionally, you did.

The problem is structural. For years, lead generation websites collected a consumer's consent once and distributed it to multiple sellers at once. Under that model, a single form submission could legally authorize calls from a whole roster of companies — a structural reason businesses and consumers receive high volumes of solicitation calls from companies they never directly contacted, as consent compliance research explains. The consent you thought you gave one company was actually a blanket authorization.

Regulators have tried to close this gap. In December 2023, the FCC voted 4-1 to finalize its one-to-one consent rule, requiring that consent be obtained from a single seller at a time on comparison-shopping sites — explicitly "closing the lead generator loophole," according to legal analysis of the FCC's lead generation rules. The rule also required consent to be "logically and topically related" to the site where it was given, so checking rates on a car loan site couldn't authorize robocalls about debt consolidation.

But the rule's fate illustrates how unsettled this area remains. Per industry reporting, the one-to-one consent rule was vacated by the 11th Circuit in January 2025 and formally removed by the FCC in September 2025 — meaning broad multi-seller consent remains federally permissible, though the burden of proving valid consent keeps growing.

For businesses buying leads, the practical lesson is about how your leads were sourced, not just how many you bought:

• A "shared" lead sold to five or more buyers multiplies outbound volume from one consumer's single consent.
• Purchased leads without confirmed, documented consent are a common compliance pitfall — and a legal liability.
• "Our database says they opted in" is not a defense in a TCPA lawsuit; you need to prove the consent actually happened.
• With TCPA statutory damages of $500 per violation — $1,500 for willful violations — one disputed consent can escalate quickly.

This is why the structure of lead delivery matters. GrowthPros caps shared leads at a hard maximum of two buyers — never five like the big shared marketplaces — and attaches a consent record to every lead, including the disclosure text, timestamp, IP address, and the named contacting party. When a lead's consent trail is documented and its distribution is limited, one form submission can't quietly become a dozen calls from strangers.

The loophole may still be open federally, but businesses don't have to operate as if it is.

Why Businesses Get Hit Hardest: The B2B Exemption

If you run a business and your phone rings off the hook with sales pitches, there's a legal reason for it — and it's not just bad luck. The same federal rules that shield consumers from telemarketers largely leave businesses exposed.

The FTC's Telemarketing Sales Rule carves out a near-total exemption for B2B calls, covering only narrow categories like retail sales of nondurable office or cleaning supplies, according to the FTC's own compliance guidance. That means the Do Not Call protections consumers rely on simply don't apply to most calls made to your business line. Solicitors know this, and they dial accordingly.

Two additional mechanisms legally generate calls to your business. An established business relationship exempts a caller from DNC Registry provisions, so a vendor you bought from two years ago can still ring your desk. Prior written permission works the same way — a signed form, a terms-of-service checkbox, or a lead inquiry can all unlock a pipeline of follow-up calls that regulators consider fully legitimate.

The picture isn't entirely lawless, though. State-level rules fill some of the federal gap, and a compliance analysis from PossibleNOW notes that many states still apply DNC protections to B2B outreach — especially when the call targets a mobile number or a sole proprietor. If you operate as a one-person shop and take calls on your cell, you may have more protection than a corporation with a landline.

Why this matters for anyone making outbound calls, not just receiving them:

• TCPA fines can reach $50,120 per call, with statutory damages of $500 per violation — trebled to $1,500 for willful ones.
• Call lists must be scrubbed against national and state DNC registries every 31 days, and internal opt-outs retained for at least five years.
• State statutes of limitations for TCPA claims run 1–6 years, so consent records need to outlive the campaign that collected them.

The stakes explain why documentation has become the real dividing line. As one consent-verification analysis puts it, when a TCPA lawsuit arrives, "our database says they opted in" is not a defense — you need to prove consent actually happened, and courts consistently treat session recordings as the strongest evidence available.

This is the standard we build to at GrowthPros: every lead is DNC-scrubbed before any outbound contact and carries a consent record — disclosure text, timestamp, IP address, and the named contacting party. The B2B exemption may make solicitation calls legal, but it doesn't make sloppy sourcing defensible. Businesses that can't prove where their consent came from are one lawsuit away from a seven-figure problem.

The Rules Changed — Then Changed Again: Consent in Legal Flux

If you've noticed your phone ringing more since 2025, you're not imagining it — the rules that were supposed to slow the flood of solicitation calls got tangled in court, and the regulatory ground is still shifting.

In December 2023, the FCC took its strongest swing yet at the "lead generator loophole" — the practice where a single form submission on a comparison-shopping site could distribute your number to dozens of sellers. The agency finalized its one-to-one consent rule in a 4-1 vote on December 13, 2023, requiring callers to obtain prior express written consent from a single seller at a time, with a 12-month implementation window, per legal analysis from Bradley. The rule also extended DNC Registry protections to text messages and prohibited buried, hyperlinked consent disclosures.

Then the timeline broke. In January 2025, the 11th Circuit vacated the one-to-one consent requirement, and the FCC formally removed it in September 2025 — meaning broad multi-seller consent remains federally permissible, according to consent-verification analysis. So the loophole the FCC tried to close in 2023 is, at the federal level, still open. That's a core reason your call volume hasn't dropped.

But don't confuse "permissible" with "safe." The burden of proving valid consent keeps growing, and the stakes are steep:

• TCPA statutory damages run $500 per violation, trebled to $1,500 for willful ones, and a single suit without consent evidence can reach seven figures, per consent litigation analysis.
• TCPA fines can reach $50,120 per call, according to DNC compliance guidance.
• Call lists must be scrubbed against national and state DNC registries every 31 days, and opt-out records retained for at least five years.

"When a TCPA lawsuit shows up, 'our database says they opted in' is not a defense," as eConsent's analysis puts it bluntly. Courts consistently treat session recordings as the strongest available evidence in consent disputes — which is why lead providers like GrowthPros attach a consent record (disclosure text, timestamp, IP address, named contacting party) to every lead delivered, and build one-to-one consent direction in from day one.

The practical takeaway: treat one-to-one consent as a forward-looking standard, not a current federal mandate. The rule was vacated, but the underlying scrutiny — and the plaintiff's bar — never went away. For businesses buying leads, that means demanding documented, seller-specific consent trails isn't just caution; it's the difference between a defensible call list and a seven-figure lawsuit.

If you want leads that arrive with their consent trail already attached, book the 15-minute qualification call — exclusive and capped-shared leads by niche, DNC-scrubbed and followed up within five minutes.

The Cost of the Noise: Distrust, Missed Calls, and Compliance Risk

Every unanswered robocall trains another consumer to ignore the phone entirely — and legitimate businesses pay the price. The solicitation flood you're experiencing is the same flood making your own outbound calls nearly worthless.

According to aggregated call-behavior research, Americans now answer less than 48% of the calls they receive, and 87% actively screen out calls from unrecognized numbers. Your carefully written follow-up script never gets heard because it's buried under a hundred spam calls in the same call log.

The damage compounds on the inbound side too. The same research shows small businesses miss roughly 62% of their incoming calls, while 85% of consumers abandon a call after reaching an auto attendant — and 51% abandon the business entirely. Solicitation noise has made the phone channel structurally unreliable in both directions.

The legal stakes sharpen the problem. Compliance analysis puts TCPA fines as high as $50,120 per call, and legal commentary on consent verification notes statutory damages of $500 per violation — trebled to $1,500 for willful ones. A single TCPA lawsuit without solid evidence can reach seven figures.

So what actually works in this environment? Two things: provable consent and speed across channels.

For consent, "our database says they opted in" is not a defense — you need to prove consent actually happened. That means every lead should carry a documented trail:

• The exact disclosure text the consumer saw
• A timestamp showing when consent was given
• The IP address captured at submission
• The named party authorized to contact them

For speed, the phone alone can't carry the load anymore. Channel data shows SMS open rates of 98–99% versus 20% for email, with average response times of 3 minutes versus 90. A lead contacted by voice, SMS, and email within minutes of opting in reaches people on whatever channel they actually check.

This is why GrowthPros attaches a full consent record — disclosure text, timestamp, IP, and contacting party — to every lead delivered, and follows up across voice, SMS, and email inside a five-minute window. When courts treat documentation as the strongest evidence in consent disputes, and consumers won't pick up unknown numbers, the process is the protection.

What to Do: DNC Scrubbing, Consent Records, and Better Lead Sourcing

If your phone rings off the hook with solicitors, the fix isn't just blocking numbers — it's understanding how sloppy lead practices create this noise, and refusing to run your own outreach the same way. Here's how compliant businesses stay off the wrong side of the problem while still reaching real buyers.

Scrub every list, every 31 days. Compliance guidance is unambiguous: call lists must be scrubbed against national and state DNC registries every 31 days, and internal opt-out requests must be honored and retained for at least five years. Given that TCPA fines can reach $50,120 per call, that monthly discipline is cheap insurance.

Demand consent trails from every lead vendor. As consent-verification experts point out, "our database says they opted in" is not a defense when a TCPA lawsuit arrives — you need to prove consent actually happened, with timestamps and session evidence. Vendors like GrowthPros attach a consent record to every lead: disclosure text, timestamp, IP address, and the named contacting party. If your current vendor can't produce that, you're holding their legal risk.

Cap how many buyers receive each lead. The multi-seller "lead generator loophole" is the structural reason one form submission triggers a flood of calls from companies nobody remembers contacting, as legal analysis of the FCC's rules makes clear. Shared marketplaces that sell a lead to five buyers poison the well for everyone. A hard cap of two buyers keeps response quality intact without burning the contact out.

Then move fast, because the channel data is brutal:

• SMS achieves 98–99% open rates versus roughly 20% for email.
• Average SMS response time is about 3 minutes, versus 90 minutes for email.
• 87% of people filter out calls from unrecognized numbers entirely.

That's why speed-to-lead across multiple channels beats a single dialer: voice, SMS, and email working within minutes of a lead's arrival reaches people before they've been conditioned to ignore you. It's also why reactivating dormant, opted-in lists beats buying cold ones — the consent already exists, and you're not competing with four other callers for the same person's attention.

The businesses drowning in solicitation calls and the businesses making them are often the same companies, just on different days. Build suppression into your workflows, document everything, and treat consent as a product feature rather than a legal afterthought — the FTC's Telemarketing Sales Rule and the TCPA both reward those who can prove what they did.