Cold Calling Is Legal — But the Rules Decide Everything

Let's get the short answer out of the way: cold calling is not illegal in the United States. But that answer comes with an asterisk the size of a phone book.

Two federal laws do the heavy lifting. The Telephone Consumer Protection Act, passed in 1991 and amended in 2015, governs telemarketing calls, texts, and prerecorded messages. The FTC's Telemarketing Sales Rule, issued in 1995, covers any plan or campaign meant to induce a purchase over more than one interstate call — and it applies even to calls placed from outside the US that reach American consumers, according to FTC guidance.

So what counts as telemarketing? Under the TCPA, it's any call or message made to encourage the purchase or rental of property, goods, or services. That definition decides which rules apply to you, which is why the National Association of Realtors stresses that obtaining consent is of the utmost importance before reaching out to potential clients.

Consent comes in two levels, and they matter. Express written consent — a signed form, a website checkbox, even a telephone keypress — is required before a prerecorded telemarketing call to a home or wireless number. Express consent, which can be oral or written, covers autodialed calls and texts to cell phones. Live, manually dialed calls to a business landline are generally the least restricted, though Do Not Call lists still apply.

One rule deserves special attention right now. The FCC has stated plainly that AI-generated voice calls are illegal without consumer consent. For any business using automated calling or AI to respond to leads, that makes honest disclosure a legal requirement, not a nice-to-have. It's exactly why CallMyLeads callers always identify as AI and every caller can reach a human, use text, or book online.

The stakes for getting this wrong are real. More than 40 TCPA class actions and settlements were documented in roughly a 12-month window, ranging from $320,000 to $30 million, per litigation tracking. One plaintiff firm alone has secured over $440 million in TCPA settlements across 17-plus cases, according to case records — and household names like Wells Fargo and Capital One have paid nine-figure sums.

The pattern in those lawsuits is consistent. The most-litigated violations are:

• Calling numbers on the National Do Not Call Registry without scrubbing lists at least every 31 days
• Ignoring opt-out requests instead of honoring them immediately
• Placing prerecorded or autodialed calls without the required consent

Here's the takeaway: the question was never whether you call. It's how you call. Call before 8 a.m. or after 9 p.m. local time, skip the consent step, or keep dialing after someone says stop, and a legal activity turns into a lawsuit. CallMyLeads was built around those lines — consent collected at booking, quiet-hours rules followed, and opt-outs honored automatically — so fast lead response never becomes a compliance headache.

The Rules That Trigger Lawsuits (and the Settlements That Prove It)

Most cold callers don't get sued for calling. They get sued for breaking one of a handful of specific, well-documented rules — and the settlements show exactly which ones.

According to litigation tracking of TCPA cases, three violation patterns dominate: Do Not Call Registry breaches, ignored opt-out requests, and prerecorded or autodialed calls made without consent. More than 40 class actions and settlements were documented in roughly a 12-month window, with payouts ranging from $320,000 to $30 million.

The first trigger is the Do Not Call Registry. The FTC administers the national registry, and telemarketers must scrub call lists against it at least every 31 days, per compliance guidance from the National Association of Realtors. Calling a registered number without an established business relationship or written permission is a direct path to litigation.

The second trigger is ignoring an opt-out. Under FCC rules, consumers can revoke consent at any time and in any reasonable manner — even if they previously agreed to be contacted. Continuing to call or text after that point converts a legal contact into a per-call violation.

The third trigger is automated calling without consent. Prerecorded telemarketing calls require prior written consent, and autodialed calls or texts to wireless numbers require oral or written consent. Notably, the FCC has stated that AI-generated voice calls are illegal without consumer consent — a rule that applies directly to any business using AI for outreach or lead response.

Then there are the quiet hours. The FTC's Telemarketing Sales Rule prohibits telemarketing calls before 8 a.m. or after 9 p.m. local time. Time-of-day violations alone have triggered lawsuits against major consumer brands.

The financial stakes are concrete:

• Momentum Solar — up to $30 million
• Sirius XM — $28 million
• Wells Fargo — $95 million, the largest on record from one plaintiff firm that has recovered over $440 million across TCPA class actions
• Capital One — $75.46 million
• Bank of America — $32.08 million

Company size offers no protection. Banks, insurers, retailers, healthcare providers, and solar companies all appear in the settlement record. The FCC has also issued hundreds of millions of dollars in enforcement actions against illegal robocallers, calling the effort its top consumer protection priority.

The pattern across these cases is consistent: none of the violations are exotic. They come from skipping consent, skipping list scrubbing, calling at the wrong hour, or failing to stop when someone says stop. That is why compliance has to be built into the calling system itself, not bolted on afterward.

This is the approach CallMyLeads takes by design: explicit consent collected during the booking flow, opt-outs honored immediately and automatically, quiet-hours rules followed on every call and text, and callers always told they are speaking with AI. The rules that produce nine-figure settlements when ignored are the same rules the system treats as non-negotiable defaults.

The FCC's AI-Call Rule Changes the Game

If your business uses AI to call or answer leads, one sentence from the FCC should be on your wall: AI-generated voice calls are illegal unless the consumer has agreed to receive them or the caller is exempt. That single rule changes how every AI-powered outreach and answering system must operate.

The FCC treats AI-generated voices the same way it treats any prerecorded or artificial voice. Under its rules, prerecorded telemarketing calls to a home or wireless number require prior written consent — paper or electronic, including website forms or even a telephone keypress during a call.

The consent bar shifts depending on the channel, and getting it wrong is where businesses get sued:

• Prerecorded telemarketing calls — prior written consent required before the call ever happens
• Autodialed or prerecorded calls/texts to wireless numbers — oral or written consent required
• Commercial robotexts — written consent; informational texts may only need oral consent
• "Cold" prerecorded messages — effectively banned, since the FTC's Telemarketing Sales Rule requires a written agreement plus an automated opt-out mechanism

Notice what this means in practice: there is no legal way to blast an AI voice at strangers. The technology itself isn't banned — using it without consent is.

The financial stakes are not theoretical. Litigation trackers document more than 40 TCPA settlements in roughly a year, ranging from $320,000 up to $30 million. One plaintiff firm alone reports over $440 million in TCPA settlements, including $95 million from Wells Fargo and $75.46 million from Capital One. Prerecorded and autodialed calls without consent sit among the most-litigated violation categories.

Consent also isn't permanent. The FCC states consumers can revoke consent at any time, in any reasonable manner — even if they opted in before. Continuing to contact someone after an opt-out is one of the three dominant triggers for TCPA lawsuits.

This is why disclosure and consent collection are legal necessities, not good manners. A caller who doesn't know they're hearing AI, or who never agreed to hear it, is a lawsuit waiting for a timestamp. The National Association of Realtors puts it plainly: obtaining consent is of the utmost importance, and opt-in language must be clear and easy to understand.

CallMyLeads builds this directly into how it works. Every caller knows they're talking to AI, the booking flow collects explicit consent, and opt-outs are honored immediately and automatically. When the FCC's rule is "no consent, no AI call," honest disclosure stops being a brand value and starts being the only legal way to run the system.

How to Stay Compliant: The Checklist That Keeps You Safe

Most cold-calling violations don't come from bad intent — they come from sloppy process. A missed DNC scrub, a forgotten opt-out, or a text sent at 9:15 p.m. can land you in the same litigation pile as companies that paid millions to settle TCPA claims. Here's the checklist that keeps you on the right side of the rules.

1. Scrub your lists every 31 days. The FTC requires call lists to be checked against the National Do Not Call Registry at least every 31 days, and it applies to both B2C and B2B outreach. DNC breaches are among the most-litigated TCPA violations, so calendar this — don't rely on memory.

2. Honor opt-outs immediately. Consumers can revoke consent at any time, in any reasonable way, even after opting in. Continuing to contact people after an opt-out request is one of the top three patterns driving TCPA lawsuits, which have recently ranged from $320,000 to $30 million per settlement.

3. Collect explicit consent at every touchpoint. The FCC requires prior written consent before prerecorded telemarketing calls, and oral or written consent before autodialed calls or texts to wireless numbers. Log where and how each lead said yes — website form, keypress, or signed agreement.

4. Respect quiet hours. No telemarketing calls before 8 a.m. or after 9 p.m. local time. Time-of-day violations alone have triggered class actions against major brands.

5. Keep records and disclose AI callers. The FTC requires business records kept for two years, and the FCC is explicit: AI-generated voice calls are illegal without consumer consent. If an AI system places or answers calls, the person on the other end needs to know.

A done-for-you service like CallMyLeads builds these steps in rather than leaving them to chance:

• Business texting is registered under US carrier rules (A2P 10DLC), so messages deliver reliably and compliantly.
• Opt-outs are honored immediately and automatically — no manual list maintenance, no accidental follow-up texts.
• The booking flow collects explicit consent, and callers always know they're talking to AI, with a human, text, or online booking always available.
• Quiet-hours laws are followed by default, so after-hours lead response never turns into an 11 p.m. phone call.

Compliance isn't a legal checkbox — it's a competitive edge. As compliance analysts note, verified, compliant leads convert at 2–3x the rate of unverified lists, and FTC rules reward the businesses that can prove their process. Build the checklist into your lead response system, and speed stops being a risk and starts being an advantage.