Why Texting DNC Numbers Is a Legal Trap

Texting a number on the DNC list might feel safer than calling it — after all, a text is just a message, right? The FCC disagrees, and the penalties for getting this wrong can climb faster than most business owners imagine.

The FCC treats autodialed texts as calls. Under the Telephone Consumer Protection Act (TCPA), the FCC views texts sent using an autodialer as "calls," which means DNC rules and consent requirements apply in full. According to the FCC's own consumer guidance, texts to a mobile phone using an autodialer are banned unless the recipient previously gave consent — and these rules apply even if the number is not on the National DNC Registry. In other words, DNC registration is only one layer of the risk; the consent requirement stands on its own.

The stakes are real. TCPA statutory damages run $500 per violation, up to $1,500 per willful violation — per text, not per campaign, as legal compliance analysis makes clear. A list of 2,000 contacts texted without valid consent can theoretically mean seven figures of exposure. Class actions drive the point home: DSW Shoe Warehouse paid over $4.4 million for allegedly texting consumers who had opted out, and Uber settled for $20 million over unsolicited robocalls and texts.

Two recent rule changes make the landscape even stricter:

• March 26, 2024: The FCC made it explicit that National DNC Registry protections apply to text messages, requiring businesses to screen all numbers against the registry before sending marketing texts, per FCC compliance guidance.
• January 27, 2025: The Lead Generator Rule took effect, requiring one-to-one prior express written consent — consent must name a single identified seller, be signed, and be logically tied to the consumer's interaction. One checkbox covering multiple businesses no longer works.
• The burden of proof sits with the business sending the text, not the lead generator who collected the lead.

There is one wrinkle worth knowing. After the Supreme Court's June 2025 McLaughlin v. McKesson decision, courts have split on whether texts qualify as "calls" for private TCPA lawsuits — a California court said yes in October 2025, an Illinois court said no in July 2025. But as current legal commentary warns, businesses should not treat the issue as settled nationwide. The FCC's regulatory position remains clear regardless of the litigation split.

The practical takeaway: assume every marketing text carries TCPA risk unless you can prove compliant consent and opt-out handling. That's why automated lead-response systems like CallMyLeads build DNC screening, consent capture, and instant opt-out handling into the texting workflow rather than leaving them to memory or manual checks — because in this regulatory environment, "I didn't know the number was on the list" is not a defense. It's a settlement waiting to happen.

The Consent Standards You Must Meet Before Sending

Before sending any text message—especially for marketing purposes—you must meet specific consent standards that vary by message type. The burden of proof for valid consent always falls on the sender, not the recipient or lead generator. For marketing texts, such as promotional offers or service advertisements, the TCPA requires Prior Express Written Consent (PEWC). This means the consumer must have signed an agreement—electronically or on paper—that clearly identifies your business as the sole authorized seller, specifies the telephone number being authorized, and is topically associated with the consumer’s interaction, such as a form submission for a home service quote. Informational texts, like appointment reminders or service updates, only require Prior Express Consent (PEC), a lower threshold, but this protection vanishes if any promotional language is included, such as a discount code or upsell attempt.

The FCC’s Lead Generator Rule, effective January 27, 2025, reinforces that consent must be obtained for one seller at a time, eliminating ambiguous blanket agreements. Even if a consumer previously opted in, any internal do-not-contact request—such as replying “STOP” or “unsubscribe”—immediately overrides both prior consent and any Established Business Relationship (EBR). While EBR exemptions exist for transactional relationships within 18 months or inquiries within 3 months, they are narrow and do not protect you if the consumer has asked your business directly to stop contacting them. Internal DNC requests must be honored for at least five years and often indefinitely, regardless of other permissions. For businesses using automated systems like CallMyLeads’ missed-call text-back or lead nurture features, this means every outbound text must be backed by verifiable, seller-specific consent and screened against both the National DNC Registry and the Reassigned Numbers Database before sending. Failing to meet these standards risks penalties of up to $1,500 per willful violation per message, with enforcement applying equally to texts and calls under current FCC interpretation.

Operational Guardrails That Keep You Compliant

Knowing the rules is one thing. Building the systems that enforce them — automatically, every time — is what actually keeps you out of court.

The first guardrail is real-time DNC scrubbing. The FCC clarified that DNC Registry protections apply to text messages, requiring businesses to screen all numbers against the registry before sending marketing texts. To qualify for the FTC's Safe Harbor protection, you must scrub your lists at least every 31 days — and because states like Florida, Oklahoma, Texas, and Maryland maintain their own registries with independent penalties, compliance experts recommend scrubbing against both national and state lists in real time, not on a monthly schedule.

The second guardrail catches a quieter risk: reassigned numbers. If a lead filled out your form eight months ago and their number has since changed hands, the new owner never consented — and consent from a previous subscriber doesn't carry over. That's why businesses must check numbers against the Reassigned Numbers Database before texting aged leads, as compliance guidance makes clear.

Third, quiet hours. The federal baseline prohibits texts before 8 a.m. and after 9 p.m. in the recipient's time zone — not yours. A contractor in Texas texting a New York lead at 8:30 p.m. local time is compliant; the reverse could violate TCPA rules. Many states enforce stricter windows, so time-zone-aware sending logic should default to the most restrictive applicable rule.

Finally, opt-out handling — where most violations actually happen. DSW Shoe Warehouse paid over $4.4 million for allegedly texting consumers who had already opted out, and Uber paid $20 million for similar conduct. The rules here are strict:

• Consumers may revoke consent at any time, in any reasonable manner — "STOP," "cancel," or even "please don't text me anymore" all count
• The FCC's April 2025 "reasonable reply" rule recognizes keywords including "quit," "end," "revoke," "opt out," and "unsubscribe"
• You cannot require a specific opt-out method or force people to use your keyword
• Internal DNC requests override prior consent and even an established business relationship, and must be honored for at least 5 years
• Seller-specific DNC requests must be processed within 10 business days — though operationally, faster is safer

Because consumers can revoke consent by any reasonable means, automated systems beat manual ones here. A human reviewer might miss "take me off your list" buried in a reply; a configured system won't. This is why services like CallMyLeads honor opt-outs immediately and automatically across every channel, rather than relying on someone checking an inbox the next business day. When a single willful violation can cost up to $1,500 — and class actions run into the millions — the safest approach is treating every opt-out signal as binding, instantly, everywhere.

How CallMyLeads Builds Compliance Into Every Text

How CallMyLeads Builds Compliance Into Every Text

Texting a number on the DNC list for marketing purposes is not permitted without prior express written consent, and CallMyLeads ensures every automated message meets this standard by design. The company treats all outbound texts as calls under TCPA rules, applying the same rigorous compliance framework required for voice communications. This approach aligns with FCC guidance that text messages sent via autodialer are subject to DNC protections regardless of registry status.

Consent is captured at the point of lead entry with clear, conspicuous disclosure that specifies the business as the sole seller and confirms consent is not a condition of purchase. CallMyLeads integrates this requirement into every connected source — web forms, ads, chat, and missed calls — storing timestamped records with exact language and seller identity to meet the burden of proof. Before any text is sent, the system automatically scrubs the number against the National DNC Registry and state-specific lists, with updates occurring at least every 31 days to maintain FTC Safe Harbor eligibility.

The platform also checks the Reassigned Numbers Database for aged leads and enforces quiet hours based on the recipient’s time zone, defaulting to the most restrictive applicable window. Opt-out requests are honored instantly across all channels, with the AI recognizing variations like “stop,” “quit,” or natural language phrases such as “I do not want to hear from you.” Internal DNC lists are maintained indefinitely, overriding any established business relationship or prior consent. Every interaction — from consent capture to opt-out — is logged to create an auditable, source-to-booking record that supports defensible compliance.