The Legality Question — Consent Tiers, State Layers, as of July 2026
Is Cold Calling Illegal? No — Here Are the Rules
Cold calling is not illegal in the United States. A live, manually dialed sales call to a number not on the National Do-Not-Call Registry, placed between 8 a.m. and 9 p.m. at the called party’s location, requires no prior consent under federal law. Congress regulated it rather than banning it, pricing violations at $500 to $1,500 per call under 47 U.S.C. § 227. Four layers keep it that way — technology, list, clock, and state — as of July 2026.
This page is education, not legal advice. A dialer is a tool — the dialer itself is compliant, but compliance depends on how you use it. Consult a telemarketing attorney for your specific program.
The Technology Layer: Consent Tiers by Call Type
Federal consent attaches to how a call is made, not to cold calling as such:
| Call type | Federal consent required | Cite |
|---|---|---|
| Live, manually dialed sales call — no recorded or AI voice | None under federal law; DNC and quiet-hours rules still apply | 47 C.F.R. § 64.1200(c) |
| Telemarketing to a cell via ATDS or artificial/prerecorded/AI voice | Prior express written consent (signed, naming seller and number) | 47 C.F.R. § 64.1200(a)(2), (f)(9) |
| Artificial, prerecorded, or AI-voice telemarketing to a residential landline | Prior express written consent | 47 C.F.R. § 64.1200(a)(3) |
| Informational (non-marketing) autodialed or prerecorded call to a cell | Prior express consent — need not be written | 47 C.F.R. § 64.1200(a)(1) |
The AI row has a clear federal answer: the FCC’s unanimous February 2024 declaratory ruling (FCC 24-17) treats AI-generated and cloned voices as artificial voices under the TCPA, so AI-voice telemarketing needs signed consent — though after the Supreme Court’s 2025 McLaughlin decision, individual courts interpret the TCPA independently of FCC rulings. The ATDS row depends on the court, as of July 2026: after Facebook v. Duguid (2021), most federal courts hold that dialers calling stored lead lists are not an ATDS, but the case law is unsettled, the Second Circuit has read stored numbers more broadly, and prerecorded or artificial-voice calls are restricted separately regardless of dialer type — ask a TCPA attorney before relying on a dialer classification.
The List Layer: Do-Not-Call Obligations
Sales calls to National DNC Registry numbers are prohibited unless an exemption applies, and the FCC’s safe harbor requires scrubbing against registry data no more than 31 days old, plus documented procedures and training. Cells can be registered and are treated as presumptively residential — protected in most cases.
The main exemption is the established business relationship — a purchase within the prior 18 months or an inquiry within the prior 3 months — and it dies on a company-specific do-not-call request. That request joins your internal DNC file: honored within ten business days, kept five years (47 C.F.R. § 64.1200(d)). Mechanics, fees, and the SAN live in the DNC registry guide.
The Clock Layer: 8 a.m. to 9 p.m., Where the Prospect Is
Federal quiet hours bar telephone solicitations before 8 a.m. or after 9 p.m., local time at the called party’s location — the caller bears the burden of knowing that time, with no weekend or holiday exception (47 C.F.R. § 64.1200(c)(1)). Area code is not location. States can shorten the window; absent a verified stricter state rule, the federal default window governs — see calling hours by state.
What Changed in 2024–2026
Two reversals matter:
- One-to-one consent is dead. The Eleventh Circuit vacated it on January 24, 2025 in Insurance Marketing Coalition v. FCC — it never took effect — and the FCC deleted it from the CFR effective August 29, 2025. Prior express written consent (47 C.F.R. § 64.1200(f)(9)) governs again, and bundled multi-seller consent is again permissible federally, though state mini-TCPA laws may be stricter on lead-gen forms.
- Revocation took effect April 11, 2025. Consent can be revoked in any reasonable manner — stop, quit, end, revoke, opt out, cancel, and unsubscribe count per se — and must be honored within ten business days. The revoke-all provision is waived until January 31, 2027 and under active FCC reconsideration; the date and the rule itself could change — check FCC.gov before relying on it.
What Violations Cost
Statutory damages are $500 per violation or actual loss, whichever is greater — up to $1,500 for willful or knowing conduct — per call, with no injury proof required. Regulators stack on top: FTC Telemarketing Sales Rule penalties of up to $53,088 per violation as of 2026, FCC forfeitures, and state attorney general suits under 47 U.S.C. § 227(g). Courts apply the federal four-year catch-all limitations period (28 U.S.C. § 1658(a)). The full damages math and canonical cases are on TCPA for cold callers.
Legal Outbound Calling: The Working Checklist
Legal outbound calling comes down to seven standing items:
- Subscribe to registry data for every area code you dial, under your own SAN.
- Third-party scrub every list against registry data no more than 31 days old.
- Schedule inside 8 a.m.–9 p.m. at the prospect’s actual location.
- Keep signed consent records before any autodialed, prerecorded, or AI-voice marketing runs.
- Honor opt-outs within ten business days; keep them on the internal DNC file for five years.
- Open with your name, company, and a callback number or address (47 C.F.R. § 64.1200(d)(4)).
- Re-check the state layer before dialing a new state.
The State Layer: Federal Law Is the Floor
More than 15 states run their own telemarketing statutes — Florida, Oklahoma, Texas (SB 140), Washington, and Maryland among them — with their own consent triggers, hours, frequency caps, registries, and penalties; several define autodialer more broadly than the federal test. See state mini-TCPA laws, and have counsel verify every state you call into.
Where Enzo Fits — and Where It Doesn’t
Enzo runs power, predictive, and preview dialing in single- and multi-line modes, with CSV import, list management, and campaign scheduling. Its compliance surface is narrow — campaign-level internal DNC: mark a contact DNC and they stay excluded from that campaign. Marks do not carry across campaigns — keep your master suppression file outside the dialer. Enzo does not scrub lists against national or state DNC registries — run every list through a third-party scrubbing service first; see the DNC scrubber guide for the vendor landscape. The dialer itself is compliant as a tool; whether your calling is compliant depends on your lists, records, and habits.
Is cold calling against the law, then? No — legal, regulated, workable; the checklist above is the whole federal ask. See how campaign-level DNC fits a compliance-minded workflow — book a free discovery call.
Not legal advice. This guide is general information for outbound calling teams, not legal advice. Rules change and apply differently by state, industry, and call type — confirm your program with qualified telemarketing compliance counsel.
Rules and figures from 47 U.S.C. § 227, 47 C.F.R. § 64.1200, 16 C.F.R. Part 310, 28 U.S.C. § 1658, Federal Register publications, FCC orders FCC 24-17 and FCC 24-24, and Insurance Marketing Coalition v. FCC (11th Cir. 2025), as of July 2026 — educational only, not legal advice.