Why DNC Compliance Mistakes Are So Expensive

A single outbound campaign run against the wrong list can generate more legal liability in a few weeks than most businesses generate in revenue all year. That's not an exaggeration — it's the arithmetic built directly into U.S. telemarketing law.

Do Not Call rules don't stand alone. They sit inside the TCPA framework, a federal statute whose penalty structure stacks violations call by call with no cap on total damages. Under FTC rules, illegally calling a Registry number can cost up to $50,120 to $53,088 per call, figures that are periodically adjusted for inflation, according to the FTC's guidance for telemarketers and sellers. Standard TCPA violations run $500 each, trebled to $1,500 when the conduct is knowing or willful, as compliance analyses of TCPA penalties explain.

What makes the law especially punitive is who enforces it. The TCPA is primarily enforced through private lawsuits — individual claims and large federal class actions — not just regulator fines. The results are hard to ignore:

• A $925 million jury verdict affirmed against a multi-level marketing company for more than 1.8 million illegal calls.
• A satellite TV provider class action settled at $400 per call, trebled to $1,200 per violation, for a $61 million total.
• A serial plaintiff recovered $33,000 from just 22 calls after the caller failed to log opt-out requests.

Enforcement pressure keeps climbing. The FTC received more than 2.6 million DNC complaints in FY 2025 alone, and consumers added 4.8 million new numbers to the Registry. Every complaint is a potential lead for a plaintiff's attorney.

The multiplier that turns bad lists into existential risk is the four-year statute of limitations. Plaintiffs can reach back across every call placed in that window, so a non-compliant campaign of 100,000 calls can represent $50 million to $150 million in exposure. As TCPA specialist Eric Troutman notes in the National Law Review, high-volume callers commonly face damages in the hundreds of millions or billions in class actions.

This is exactly why My AI Call Center reviews list source and consent records before any campaign launches, and declines bought lists without clear permission records. The math only works when the list is clean before the first call goes out — not after a subpoena arrives.

The Core Do Not Call Rules Every Caller Must Follow

The Do Not Call rules look simple on paper, but they trip up even experienced calling teams — and each mistake can cost thousands of dollars per call. Getting the core rules right is the difference between a campaign that runs cleanly and one that generates complaints, fines, or a class action.

First, understand how the pieces fit together. The TCPA is the federal law passed by Congress in 1991, while the National Do Not Call Registry is an enforcement mechanism created under that framework by the Do-Not-Call Implementation Act of 2003. The Registry is managed by the FTC and enforced jointly by the FTC, FCC, and state officials, so a violation can draw attention from more than one regulator.

The foundation of compliance is the 31-day scrub rule. Businesses selling by phone must register with the FTC, download the Registry, and remove listed numbers from their calling lists at least every 31 days. Registry data may only be used to prevent telemarketing calls, and entities must certify that under penalty of law. Access costs roughly $88 per area code annually — a small price compared to the exposure.

Next, know your established business relationship (EBR) windows. A company may call for up to 18 months after a consumer's last purchase, delivery, or payment, while an inquiry or application creates a 3-month window. Critically, a do-not-call request overrides the EBR entirely and must be honored no matter how recent the relationship is.

Not every call is covered, but the exemptions are narrower than many callers assume:

• Political calls, charitable calls, and debt collection remain permitted even to registered numbers
• Purely informational calls are exempt — but only if they contain no sales pitch
• Surveys are exempt for the same reason, and the FTC has explicitly closed the "survey loophole": a call purporting to be a survey but including a sales pitch is covered by DNC provisions
• Appointment reminders qualify as informational only when they stay sales-free

Calling hours matter too. Telemarketers cannot call before 8 a.m. or after 9 p.m. local time, must transmit caller ID, and must immediately identify the seller and that it's a sales call. Misleading caller ID carries its own penalties and can cut answer rates by 40% or more when calls get labeled "Scam Likely."

Finally, honor opt-outs immediately. A caller must make two calls to a DNC-listed number within twelve months to violate the DNC provisions, but the safest practice is one call and a permanent log. Under expanded revocation rules effective April 11, 2025, callers must cease all calls and texts across all channels within ten business days of a revocation request.

This is the discipline My AI Call Center builds into every campaign: lists are checked against consent records before launch, calls run in approved windows, and opt-outs are logged and honored immediately. With the FTC receiving more than 2.6 million DNC complaints in FY 2025, treating these rules as campaign infrastructure — not an afterthought — is the only workable approach.

The New Rules for AI Calls and Consent

The 2024-2025 regulatory updates have fundamentally reshaped the rules for AI-powered calling, making compliance more precise and demanding than ever before. The FCC’s February 2024 ruling confirmed that AI-generated voices are treated as "artificial voices" under the TCPA, requiring prior express consent for any call using such technology according to the FCC. This means businesses can no longer assume AI calls fall outside robocall restrictions — every campaign must now be built on verified, documented consent.

Starting January 27, 2025, the one-to-one consent rule took effect, limiting prior express written consent to a single named seller and a single, logically related topic as noted by the National Law Review. Broad, multi-seller consent obtained through third-party lists no longer satisfies TCPA requirements for AI or prerecorded calls. Each lead must explicitly agree to receive calls from your specific business about a defined purpose — eliminating the viability of purchased lists without clear, auditable permission records.

Effective April 11, 2025, expanded revocation rules now require businesses to halt all calls and texts across every channel within ten business days of a consumer’s opt-out request per Dialzara’s compliance guidance. Automated systems must recognize keyword variations like “stop calling me” or “remove me” and process these requests uniformly across all communication platforms. These changes underscore why list quality and consent integrity are not just legal necessities but operational imperatives — especially for AI-driven outreach where scalability amplifies risk.

• AI voice calls require prior express consent as artificial voices under TCPA (FCC, Feb 2024)
• One-to-one consent rule limits permission to single seller/topic (effective Jan 2025)
• Opt-outs must be honored across all channels within 10 business days (effective Apr 2025)

How to Run Compliant Outbound Campaigns in Practice

Knowing the rules is one thing; running a campaign that survives them is another. The gap between the two is where most TCPA trouble starts — usually with a list nobody checked before dialing.

Every compliant campaign begins with list discipline. That means verifying where the list came from, confirming consent records exist, and confirming the consent is one-to-one: as of January 27, 2025, the FCC's "one-to-one" consent rule requires that each lead consent to calls from one named seller, for one topic. Consent obtained via third-party lists does not satisfy prerecorded-call requirements, which is why the FTC is explicit that it must come directly from the consumer. This is exactly why My AI Call Center reviews list source and consent records before any campaign launches — bought lists without clear permission records are flagged, and in most cases declined. If a list won't support the campaign, you should hear that before you spend anything.

Next, keep your paperwork. Industry guidance recommends retaining consent records for 5–7 years, with DNC scrub logs and call logs kept for at least five years. The TCPA carries a four-year statute of limitations, so your records must outlive any lawsuit window. A serial plaintiff case turned specifically on a caller's failure to log opt-out requests — 22 calls, $500 per call, trebled for willfulness, totaling $33,000.

Your pre-launch checklist should cover:

• Verify list source and consent records before dialing; scrub against the National DNC Registry every 31 days
• Retain consent and DNC scrub logs for at least five years
• Disclose the business name and the AI nature of the voice on every call — the FCC confirmed in February 2024 that AI-generated voices count as artificial voices under the TCPA
• Log and honor opt-outs across all campaigns, recognizing keyword variations like "stop calling me" within ten business days
• Keep reminder and survey campaigns genuinely sales-free — the FTC closes the "survey loophole" for any survey that includes a sales pitch

Opt-out handling deserves special attention. The April 2025 expanded revocation rules require callers to cease all calls and texts across every channel within ten business days of a revocation request. Logging opt-outs immediately — and carrying them into client DNC records so they hold across every future campaign — is both a legal requirement and basic respect for the person on the other end.

Here is the part most teams miss: list discipline is not just a compliance cost, it is a performance asset. Compliance guidance notes that misleading or sloppy calling practices can cut answer rates by 40% or more within a week, as carriers label numbers "Scam Likely." Clean, permissioned lists protect your numbers, your reputation, and your answer rates at the same time. Structured campaigns against approved lists — reminders that remind, surveys that survey — simply connect better than indiscriminate dialing ever could.