Dormant Accounts: What They Are and Why the Clock Matters

A dormant account looks like a quiet revenue opportunity. In practice, it's a compliance clock that starts ticking the moment a customer goes silent.

In practical terms, a dormant account is a deposit or investment account with no customer-initiated activity for a period defined by the applicable state unclaimed property statute and the account agreement. Automated interest postings usually do not reset the dormancy clock.

The primary consequence is escheatment: after the statutory dormancy period, unclaimed property transfers to a state authority. As banking industry analysis puts it, once funds escheat, "the relationship is effectively over."

The clock is not federal. Dormancy periods and escheatment timing are set by state unclaimed property law, not federal rule, so a multi-state organization runs multiple dormancy timelines simultaneously.

Before dormancy becomes a revenue conversation, it is a compliance obligation. Dormancy notices are typically legally required contact attempts — compliance work, not marketing. If a reactivation offer quotes a rate or bonus, it falls under Regulation DD advertising requirements.

For outreach teams, the compliance surface looks like this:

• State-by-state escheatment clocks that run simultaneously across every jurisdiction where customers hold accounts
• Legally required dormancy notices that must be sent regardless of marketing goals
• Opt-out revocation that is medium-agnostic and must be honored within 10 business days
• Do-not-call obligations that persist for 5 years minimum, with list scrubbing every 31 days

The compliance stakes are measurable. Under the FCC's April 2025 opt-out rules, consumers may revoke consent "in any reasonable manner," and revocation is medium-agnostic — a "STOP" text ends both robotexts and robocalls.

TCPA statutory damages run $500–$1,500 per violation, per class member, with no proof of actual injury required. Do-not-call requirements demand immediate honor and a 5-year minimum enforcement window, with DNC list scrubbing required every 31 days.

For win-back campaigns, the practical takeaway is to build suppression lists before dialing. Research shows most reactivatable accounts are failed onboardings rather than drifted long-tenured customers, and some dormant-looking accounts — seasonal businesses, trusts, long-hold savings — are not actually dormant.

As one AI-driven reactivation analysis notes, dormant accounts are not just cold leads — they are people who already trusted the brand once. My AI Call Center's list review process checks for exactly this: verifying list source and consent records before launch, and flagging accounts that look dormant but aren't.

That is why a dormant account is a compliance issue before it is a revenue opportunity. The clock, the consent records, and the state-by-state deadlines all need to be in order before a single call connects.

The Compliance Rules That Govern Win-Back Outreach

Reaching out to a dormant account is not the same as reaching out to an active one. The contact may have opted out years ago, moved numbers, or never consented to the channel you are about to use — and the rules that govern win-back outreach have tightened considerably.

The biggest recent change came on April 11, 2025, when the FCC's new TCPA opt-out rules took effect. Under these rules, per a BCLP client alert, consumers may revoke consent "in any reasonable manner" — keywords like STOP or REVOKE, key-presses, even voicemail or email. The burden falls on the business to prove a method was unreasonable. Revocation is also medium-agnostic: one "STOP" text ends both robotexts and robocalls or artificial-voice calls.

The stakes are real. TCPA statutory damages run $500 to $1,500 per violation, with no proof of actual injury required, and willful violations can be tripled. Businesses must honor revocation within 10 business days and retain documentation for at least four years.

Do-not-call obligations add another layer. According to US cold calling law guidance, DNC requests must be honored immediately and for a minimum of five years, the federal registry must be scrubbed every 31 days, and an internal DNC list must sit alongside it. Every call must also disclose the company name and a call-back number at the start.

Email has its own test. When a required dormancy notice is bundled with a promotional offer, compliance analysis shows the combination triggers CAN-SPAM's "primary purpose test" — if the content reads as primarily commercial, the full marketing rules apply.

This is why channel sequencing matters for dormant contacts:

• SMS requires prior express written consent and should not be the first channel for dormant-account outreach.
• A call with disclosure upfront — who is calling and why — is the compliance-safer opening move.
• AI-generated voices count as artificial voices under the TCPA, so the same consent rules apply.
• Stale consent records should be reviewed before any win-back campaign launches, not after.

For contacts dormant 12–24 months, consent records are often outdated or incomplete, which makes call-first with clear disclosure the safer path than an unsolicited text. This is why My AI Call Center reviews list source and consent records before any win-back campaign launches, and tells you plainly if the list will not support the campaign. Opt-outs are logged immediately and carried into DNC records — the practical application of the April 2025 rules, built into the campaign rather than bolted on after.

Build a Compliant Win-Back Campaign: Segmentation, Opt-Outs, and Success Metrics

A win-back campaign lives or dies before the first call is ever placed. The teams that get reactivation right build their suppression lists first, verify consent records second, and only then think about scripts and offers.

Start with segmentation, because not every dormant-looking account is actually dormant. Research on dormant account reactivation shows that seasonal accounts, trusts, and long-hold savings often look inactive without truly being dormant — and most genuinely reactivatable accounts are failed onboardings rather than drifted long-tenured customers. Suppress the false positives before they pollute your results.

Next, verify consent records. Under the FCC's April 2025 opt-out rules, consumers can revoke consent "in any reasonable manner," revocation is medium-agnostic, and businesses must honor it within 10 business days. The burden falls on you to prove an opt-out method was unreasonable — a losing argument in most cases. That is why services like My AI Call Center check list source and consent records before any campaign launches, and decline lists that lack clear permission histories.

Opt-out handling deserves its own workflow:

• Log keyword opt-outs (STOP, REVOKE) immediately and carry them into your internal DNC records.
• Honor do-not-call requests for a minimum of 5 years, and scrub against the federal registry every 31 days.
• Retain documentation for at least 4 years to match the TCPA statute of limitations.

These obligations come from cold calling compliance requirements, and the stakes are real: TCPA violations run $500 each, tripling to $1,500 when willful.

Define success as customer behavior, not campaign responses. A practitioner framework for reactivation suggests measuring a customer-initiated transaction within 60 days, plus retained active status at 90 and 180 days against a matched holdout group. Connected minutes and answer rates tell you nothing about whether a dormant account actually came back.

Finally, structure offers around completed actions. Action-based incentives — setup help, fee waivers tied to a finished transaction — produce more durable behavior than one-time cash bonuses, which tend to attract incentive-seekers who go dormant again. One clear goal per campaign, measured by what customers actually do, beats a clever discount every time.