TCPA & Cold Calling Laws Compliance Guide

TCPA lawsuits are one of the fastest-growing categories of business litigation in the US, and cold calling operations — especially high-volume real estate acquisition teams — are a frequent target. Statutory damages run $500 per negligent violation and up to $1,500 per willful violation, and because TCPA allows class actions, a single bad list or a missed DNC flag can turn into a six- or seven-figure exposure fast.

Here's the practical 2026 landscape: what the federal rules cover, which states go further, and the operational checklist we run for every calling program — including teams using offshore callers.

The Federal Baseline

National Do Not Call Registry

Consumers who register their number on the National DNC Registry must not receive telemarketing calls. Numbers stay on the registry permanently (no more 5-year re-registration requirement as of the FCC's 2023 update). Before calling any list, scrub it against the current registry — most compliant dialers and CRMs offer automatic DNC scrubbing as a built-in feature; if yours doesn't, this is a non-negotiable add-on.

TCPA (Telephone Consumer Protection Act)

TCPA governs autodialed calls, prerecorded/artificial-voice messages, and text messages to cell phones. The core requirement most relevant to cold callers: calls or texts to cell phones using an autodialer (ATDS) or a prerecorded/artificial voice generally require prior express consent — and for calls that include a marketing/advertising message, that consent typically needs to be "prior express written consent," which is a higher bar than a general opt-in.

ATDS: what counts as an "autodialer" in 2026

Following the Supreme Court's 2021 Facebook v. Duguid decision, the definition of ATDS narrowed to systems that use a random or sequential number generator — which excludes most modern predictive/power dialers that call from a curated list. However, several states have their own broader ATDS definitions in their mini-TCPA statutes that do NOT follow the federal narrowing, so a dialer that's federally compliant may still trigger state-level rules. Don't assume federal ATDS narrowing protects you everywhere.

Prerecorded and AI voice calls

Prerecorded or artificial-voice calls to residential or cell numbers require prior express consent regardless of ATDS classification. The FCC's 2024 ruling extended these consent requirements explicitly to AI-generated voice calls — treat any voice-cloned or AI-scripted outbound call the same as a prerecorded message for consent purposes.

Calling Hours & Caller ID

Two operational notes most teams miss: (1) the time zone that matters is the recipient's, not yours — a Cairo-based team calling a Pacific-time seller at what feels like a normal afternoon shift may be dialing before 8 AM Pacific if scheduling isn't zone-aware, and (2) high-volume dialing from a single number with a low answer rate is exactly the pattern that gets a number auto-flagged as spam by carrier algorithms, independent of any legal violation — number rotation and health monitoring is now a practical necessity, not just a compliance nice-to-have.

State Laws That Go Further

Several states have "mini-TCPA" statutes that are stricter than federal law, often with private right of action and statutory damages that make them a magnet for plaintiff's attorneys. Key ones to know:

If you call nationally, the safest operational posture is to build your compliance program to the strictest state's requirements (currently Florida or Oklahoma) rather than maintaining 50 different rule sets.

Consent, DNC & The Purchase-Related Question

A common question from real estate wholesalers: "Does TCPA even apply if I'm calling to buy their house, not sell them something?" Some interpretations distinguish "informational" or transactional calls from marketing calls, and a small number of exemptions exist for calls not made for a commercial/marketing purpose. But this is genuinely gray territory, courts have not treated it consistently, and National DNC / state DNC obligations generally apply regardless of call purpose. Don't build your compliance program around an assumed exemption — build it as if every acquisition call is a regulated marketing call, and you'll be safe under any interpretation.

SMS / Text Compliance

Text messages to cell phones fall under the same ATDS and consent framework as calls. Key rules: obtain consent before texting (and written consent if the text is marketing in nature), honor opt-outs immediately (STOP must actually stop all future texts within a reasonable window, typically same-day), include a clear identification of your business, and never text before 8 AM or after 9 PM local time to the recipient. If you're following up a call with a text, that text needs its own consent basis — a phone conversation doesn't automatically authorize texting the same number.

Record Keeping

In litigation, the burden is effectively on you to prove compliance, not on the plaintiff to prove violation. Maintain, for at least 4 years:

• Internal DNC list with timestamped honor records for every opt-out request, however it arrived (call, text, email)
• List source and scrub date/results for every calling list used
• Consent records where relied upon — method, timestamp, and exact language presented
• Full call logs: date, time (with time zone), number dialed, disposition, caller ID used
• Written scripts and caller training materials, version-dated
• Caller training completion records, including any TCPA/compliance-specific training

Internal DNC List Management

Beyond the National and state registries, you must maintain your own internal DNC list of anyone who has asked you specifically not to call — even if they're not on any public registry. This is a hard federal requirement with no gray area: honor internal opt-out requests immediately and permanently, and make sure the internal DNC list is checked before every dial, not just at list-upload time. If a seller asks a caller not to call back during a live conversation, that request needs to reach your DNC list within the same day, not at the next weekly list refresh.

Penalties: What's Actually At Stake

Compliance Checklist for Teams Using Offshore Callers

Using an offshore calling team (like an Egypt-based agency) doesn't change your compliance obligations — the rules apply based on the recipient's location, not the caller's. Here's the checklist we run internally and recommend to every client:

• ☐ Every list scrubbed against National DNC before first dial, re-scrubbed every 31 days
• ☐ State DNC lists checked for any state with its own registry separate from National DNC
• ☐ Dialer configured to respect the called party's local time zone, not the caller's, for the 8 AM-9 PM window
• ☐ Internal DNC list updated same-day for every opt-out, checked before every dial
• ☐ Caller ID accurate and consistent; number health monitored for spam-flagging
• ☐ Callers trained specifically on DNC/opt-out handling as part of onboarding, not just sales scripts
• ☐ Call recordings and dispositions logged and retained for 4+ years
• ☐ Written policy covering the strictest applicable state law if calling nationally
• ☐ Legal review of scripts and consent language before large-scale campaign launch
• ☐ Clear escalation path for any recipient who disputes being called or requests documentation

At Dialing for Dollars, every caller is trained on DNC handling and calling-hour discipline as a standard part of onboarding, and we build client dialer configurations around time-zone-aware scheduling and DNC scrubbing by default — because the compliance exposure sits with the client's business regardless of where the calling team is based, and treating it as an afterthought is how six-figure exposure happens.

If you're building or auditing a compliance program for your calling operation, talk to a qualified TCPA attorney for a formal review — this guide is meant to get your operational checklist 90% of the way there, not to replace that review.

Frequently Asked Questions

Is cold calling for real estate acquisitions legal?

Yes — cold calling to buy real estate (as opposed to selling a product/service via a marketing pitch) generally falls outside the strictest TCPA marketing-call consent requirements in many interpretations, but National DNC, state DNC lists, calling-hour rules, and several state mini-TCPA statutes still apply regardless of the purpose of the call. Treat every outbound call as regulated until you've confirmed otherwise for your specific state and call type — this article is general information, not legal advice.

Does TCPA apply if my callers are overseas?

Yes. TCPA and state calling laws apply based on where the person you're calling is located, not where your caller is sitting. An offshore calling team dialing US numbers must follow the exact same National DNC, state DNC, calling-hour, and consent rules as a domestic team. The caller's location doesn't create an exemption.

What's the difference between National DNC and a state mini-TCPA law?

The National DNC Registry is a single federal list consumers join to block most telemarketing calls, enforced primarily through the FTC and FCC. Mini-TCPA statutes are separate state laws (Florida, Oklahoma, Washington, and others) that often go further — some require prior express written consent for any autodialed or prerecorded call regardless of DNC status, and several allow steep private lawsuits with statutory damages per call, which is why multi-state calling teams need to check both layers.

What records should we keep to prove compliance?

At minimum: your internal DNC list and timestamp of every honor request, consent records (how and when consent was obtained, if relied upon), call logs with date/time/number/outcome, the calling-hours logic used per time zone, and your written call script and training materials. Keep these for at least 4 years, since that covers the statute of limitations window most commonly cited in TCPA litigation.

Keep Reading

• Real Estate Cold Calling Services: 2026 Pricing Guide
• The Complete Guide to Motivated Seller Leads
• Outsourced SDR Services: The Complete Guide
• Skip Tracing for Wholesalers: The Complete Guide