Defining Aged Leads and Their Market Role

Aged leads are older contact records that were generated through opt-in web forms and quote requests, then resold or worked after a period of dormancy. The consumer agreed to be contacted at the original point of capture, but that agreement is now months or years old, and that gap is where the trouble starts.

The economics explain why buyers keep coming back. Aged leads are the cheapest option on the market, priced from $3 to $22 depending on vertical, and they can run 10 to 50 times lower in cost per lead than real-time options, according to industry analysis of aged lead economics. Market share reflects that pull: aged leads grew from 18% of the market in 2023 to 21% in 2026, per a 2026 insurance lead industry report, even as shared leads decline. Agents still buy them despite weak performance. Aged leads contacted 90 or more days after generation see 15 to 25% contact rates and 1 to 3% close rates, the same report found.

The compliance problem isn't that aged leads are inherently illegal. It's that consent decays, and the records behind it often can't be proven. The TCPA sets no federal expiration date, but industry practice treats consent as valid for about 90 days, and the older the lead, the more likely the consumer has forgotten opting in. Common failure points include:

• Consent language that wasn't clear enough, or a seller who wasn't properly identified
• Disclosures never captured or retained, leaving no per-lead proof
• Buyer use that doesn't match what the consumer actually agreed to
• DNC scrubbing gaps, where the penalty can reach $43,792 per call
• Revocation handling built before April 2025, when the opt-out window shrank from 30 days to 10 business days

As one law firm analysis puts it, the "TCPA-compliant lead" is largely a myth, and courts have held buyers and sellers vicariously liable for each other's actions. That's the risk sitting inside a cheap list. This is why My AI Call Center reviews list source and consent records before any campaign launches, and declines bought lists without clear permission records. Compliant isn't a claim. It's a record.

The Mechanics of Consent Decay and Documentation Gaps

Here's the uncomfortable truth about aged leads: the TCPA never put an expiration date on consent, but that doesn't mean consent holds up forever. It just means nobody can tell you exactly when it stops working.

Aged leads come from opt-in web forms and quote requests where a consumer filled in their information and agreed to be contacted. That consent was real when it was captured. The problem is what happens next. There's no federal rule that expires consent after 30, 60, or 90 days, so sellers keep reselling these records indefinitely. In practice, the industry treats consent as valid for roughly 90 days, and the reasoning is simple: the older the lead, the more likely the consumer has forgotten they opted in at all, according to TCPA guidance for lead buyers.

That memory gap matters legally. When someone answers a call and says "I never agreed to this," they're not lying in a way you can disprove. They genuinely don't remember. And the burden of proving they did agree sits entirely on the business making the call.

This is where documentation gaps become the real failure point. The most expensive TCPA damages don't come from bad actors, they come from unclear disclosures, missing documentation, and buyer use that doesn't match what the consumer actually agreed to, as compliance research from ActiveProspect puts it. Common breakdowns include:

• Consent language that was too vague to specify who could call and for what purpose
• The seller never being properly identified on the original form
• Disclosures that were never captured or retained in the first place
• A buyer's use of the record that went beyond the original scope of permission

The last point deserves special attention. Proper consent, as M&S Law Group explains, must specify the phone number to be called, which entities may call, the purpose and frequency of calls, and clear authorization for autodialer or prerecorded voice use. With a fresh lead, the buyer usually knows exactly which form produced it and what that form said. With an aged lead that's been resold, the chain of custody is often broken. You might know a consumer checked a box somewhere, at some point, for someone. You usually can't prove it covered your call, your technology, and your purpose.

The stakes of getting this wrong are steep. TCPA penalties run $500 per violation, or $1,500 for willful violations, with no cap on total damages. A single plaintiff with 200 non-compliant calls can generate $100,000 to $300,000 in exposure.

The practical takeaway is that compliance is a record, not a claim. If you can't produce the original consent documentation showing the scope of permission, age has already eroded your legal position before you dial. That's why list discipline matters so much: at My AI Call Center, list source and consent records are reviewed before any campaign launches, and bought lists without clear permission records are typically declined rather than worked.

Older lists also carry a second layer of risk that didn't exist when many of them were built, which comes down to how consent rules changed in 2025.

Regulatory Shifts and the 2025 Compliance Trap

The rules changed in April 2025, and most older lead lists can't keep up. They were built before the new obligations existed, and that gap creates real exposure every time you dial.

The opt-out compliance window shrank from 30 days to 10 business days, and a confirmation message must go out within 5 minutes of the request (according to compliance analysis of the new FCC rules). Consumers can also revoke consent through any reasonable means: text, email, voicemail, verbal conversation, even an informal social media message. The burden of proof sits on the business.

Here's the trap. An aged lead list assembled before these rules took effect has no infrastructure for any of it. It can't capture a revocation that came through a voicemail. It can't honor a 10-business-day window if it was never designed to track one. And it certainly can't prove to a court which of its thousands of contacts revoked consent, when, and through what channel.

• Standardized keywords (STOP, QUIT, REVOKE, OPT OUT, CANCEL, UNSUBSCRIBE, END) now trigger automatic opt-outs, and silence after a confirmatory text counts as implied revocation (per TCPA guidance for lead buyers).
• A universal "revoke-all" rule is on the way: one revocation could apply to every future call and text from you, including reminders and account notifications.
• State laws now set the bar based on where the consumer lives, not where you call from. At least 15 states have stricter rules than the federal TCPA.
• Carriers still require one-to-one opt-in for SMS regardless of federal rules, adding a separate compliance layer most older lists never documented.

The financial stakes of getting this wrong are not theoretical. TCPA class action filings more than doubled year over year, average settlements exceed $6.6 million, and 78% of TCPA cases proceed as class actions (according to lead-generation compliance research). A single non-compliant campaign can generate exposure that dwarfs whatever you saved on cheap data.

This is exactly why list source and consent records get checked before any campaign launches at My AI Call Center. Bought lists without clear permission records get flagged and, in most cases, declined. The point isn't to make your life harder. It's that a list built before 2025 simply cannot answer the questions today's rules require you to answer.

Compliant isn't a claim, it's a record (as one compliance platform puts it). If your list can't produce that record on demand, it fails the check before the first call connects.

Financial Exposure and Litigation Risks

The cheapest leads on the market can also be the most expensive mistake you ever make. Under the TCPA, each violation carries statutory damages of $500, rising to $1,500 for willful or knowing violations, and there is no cap on total damages, according to compliance analysis. That math turns a bargain-priced aged lead list into a serious financial liability fast.

Consider the scale. A single plaintiff who documents 200 non-compliant calls can pursue $100,000 to $300,000 in statutory damages, per industry guidance for lead buyers. A non-compliant campaign of 10,000 texts could face $5 million in base damages, or $15 million if the violations are deemed willful. Against aged lead pricing of roughly $3 to $22 per record, the downside dwarfs the savings by orders of magnitude.

The litigation environment makes this worse, not better. TCPA class action filings hit 2,788 in 2024, a 67% increase over the prior year, and 507 class actions were filed in the first quarter of 2025 alone. Average settlements now exceed $6.6 million, and 78% of TCPA cases land as class actions. As one legal commentary puts it, the "TCPA-compliant lead" is largely a myth, because courts have held lead buyers and sellers vicariously liable for each other's actions.

So what actually triggers these claims? The most expensive damages rarely come from bad actors. They come from operational gaps:

• Consent language that was too vague, or sellers never properly identified
• Disclosures that were never captured or retained as proof
• Buyer use that didn't match what the consumer originally agreed to
• DNC scrubbing gaps, where the penalty can reach $43,792 per call

The common thread is documentation. Aged leads carry consent captured at the original opt-in, but years later that consent is often impossible to prove, and the burden of proof sits with you. "Compliant isn't a claim, it's a record," as one compliance vendor puts it. If a list seller can't show you the form, the disclosure language, and a per-lead consent record, you're not buying leads. You're buying risk.

This is why list discipline is a financial protection measure, not a legal formality. It's why we review list source and consent records before any My AI Call Center campaign launches, and why we flag, and in most cases decline, bought lists without clear permission records. Telling you a list won't support the campaign before you spend anything costs you nothing. A single class action could cost you millions.

Before launching any campaign, get appropriate legal guidance for your location and industry, since requirements vary by contact type and consent status.