
What type of calls are prohibited under TCPA without written consent?
Key Facts
- TCPA violations cost $500 per call — up to $1,500 if willful — with no cap on total damages, per consent management research.
- High-profile TCPA class actions have produced settlements exceeding $40 million, according to ActiveProspect.
- AI-generated voices count as artificial voices under the TCPA, triggering the same written-consent rules as robocalls, per FCC guidance.
- Exempt informational calls to residential lines are capped at 3 calls per 30-day period, per FCC exemption rules.
- Consumers can revoke consent in any reasonable manner, and businesses must honor it within 10 business days, per the FCC's 2024 order.
- In February 2026, the Fifth Circuit ruled the TCPA requires only oral or written 'prior express consent' — but only within that circuit, per Holland & Knight.
- The TCPA rule has ballooned from roughly 1,160 words in 1995 to about 9,590 words today, according to Hudson Cook.
The Core Prohibition: Telemarketing Calls via Autodialer, Prerecorded, or AI Voice
If your outbound campaign uses an autodialer, a prerecorded voice, or an AI-generated voice, the rules governing whether you can press "dial" are stricter than most businesses realize. Under the Telephone Consumer Protection Act (TCPA), the calls prohibited without prior express written consent are advertising and telemarketing calls and texts made using an automatic telephone dialing system, a prerecorded voice, or an artificial voice, according to guidance on the FCC's TCPA regulations.
Since 2012, the type of consent required has depended on one question: does the call or text include advertising or telemarketing content? If it does, written consent is mandatory. Informational calls — appointment reminders, confirmations, notifications — sit on a different, less restrictive side of the line.
What counts as valid written consent? It must be an agreement in writing, signed by the recipient, that explicitly authorizes a seller to deliver advertisements or telemarketing messages via call or text using an autodialer or artificial or prerecorded voice. The agreement must specify the authorized telephone number and cannot be a condition of purchasing goods or services, as explained in a review of TCPA consent requirements. Consent also cannot be buried in fine print, obtained through pre-checked boxes, or bundled with unrelated permissions.
AI-generated voices count as artificial voices under the TCPA. That matters now, because AI voice technology has moved from novelty to standard tooling in outbound calling. A campaign that sounds like a person but is machine-generated triggers the same consent requirements as a traditional prerecorded robocall — and treating it otherwise is a costly assumption.
The stakes are real. Statutory damages run $500 per unauthorized call or text, rising to $1,500 per violation if the conduct was willful or knowing, with no cap on aggregate damages, according to consent management research. High-profile TCPA class actions have produced settlements exceeding $40 million. As one compliance attorney has put it, every compliance misstep can become an existential threat.
In practice, this is why list discipline comes before technology. At My AI Call Center, list source and consent records are reviewed before any campaign launches, and bought lists without clear permission records are flagged — and in most cases declined. The technology only matters if the permission underneath it holds up.
One caveat worth knowing: the legal landscape is shifting. In February 2026, the Fifth Circuit ruled in Bradford v. Sovereign Pest Control of TX, Inc. that the TCPA requires only "prior express consent" — oral or written — for automated or prererecorded telemarketing calls to cellphones, though that ruling applies only within the Fifth Circuit, per an analysis by Holland & Knight attorneys. Outside that circuit, the written-consent framework remains the operative national standard, and state telemarketing statutes may independently require written consent.
The safest posture, regardless of jurisdiction: documented written consent before the first call runs.
- Advertising or telemarketing calls and texts made with an autodialer require prior express written consent.
- Prerecorded voice calls with marketing content fall under the same written-consent requirement.
- AI-generated voices are treated as artificial voices under the TCPA, triggering identical consent rules.
- Valid written consent must be signed, name the authorized phone number, and never be a condition of purchase.
- Penalties run $500–$1,500 per violation with no aggregate cap — consent records are the first line of defense.
The Exemptions: Calls That Don't Require Consent (But Still Have Limits)
Not every prerecorded or AI-voiced call to a residential line requires prior express written consent — but the exemptions come with strict conditions that trip up even well-intentioned callers. Understanding where the line sits is what separates a compliant reminder campaign from a $500-per-call liability.
The FCC recognizes four categories of artificial or prerecorded voice calls to residential lines that are exempt from consent requirements entirely. According to legal analysis of the FCC's consent rules, these are:
- Calls not made for a commercial purpose (pure informational or charitable outreach)
- Commercial calls that contain no advertising or telemarketing content
- Calls made by or on behalf of a tax-exempt nonprofit organization
- "Health care" calls placed by a HIPAA-covered entity or business associate
Exempt does not mean unlimited. Effective July 20, 2023, the first three categories are capped at 3 calls per consecutive 30-day period, and HIPAA healthcare calls face tighter limits of 1 call per day and 3 per 7-day period. Every exempt call must also include a working opt-out mechanism, regardless of category.
That opt-out obligation matters more than many organizations realize. The FCC's 2024 rules codify that consumers can revoke consent "in any reasonable manner," and revocations must be honored within 10 business days, per Hudson Cook's review of the FCC's TCPA changes. Valid revocation keywords include "stop," "quit," "end," "revoke," "opt out," "cancel," and "unsubscribe."
The practical trap is content drift. A clinic appointment reminder is informational — until the script adds "and ask about our new cosmetic services." The moment advertising or telemarketing content enters the call, the exemption evaporates, and the call requires prior express written consent. Given that statutory damages run $500 to $1,500 per violation with no aggregate cap, as compliance guidance from ActiveProspect notes, a single poorly worded script can multiply into serious exposure across a large list.
This is precisely why reminder, confirmation, and notification campaigns demand disciplined scripting. The call must do one thing: confirm the appointment, deliver the update, or complete the survey. Cross-sell language, promotional offers, and upsell prompts belong in a separate, properly consented campaign — not bolted onto an exempt informational call.
At My AI Call Center, this boundary is built into campaign design. Appointment reminders, payment notifications, and health check-in calls run with one clear goal per campaign, and scripts go through approval before anything launches. List source and consent records are reviewed first, and if a list cannot support the intended campaign, that is flagged before any calls run — because staying on the informational side of the line is a scripting and list-quality decision, not an afterthought.
One caution: exemption rules and consent standards continue to shift at the circuit level, as Holland & Knight's analysis of recent TCPA rulings makes clear. The safest posture remains documented consent, scripted discipline, and immediate opt-out handling — even for calls that technically qualify as exempt.
A Shifting Legal Landscape: One-to-One Consent Vacated and the Fifth Circuit Challenge
If you thought TCPA consent rules were finally settling down, the past year proved otherwise. Two major court decisions have reshaped the landscape, and neither gives businesses the green light many hoped for.
First, the Eleventh Circuit struck down the FCC's "one-to-one consent" rule in Insurance Marketing Coalition v. FCC. That rule, adopted in December 2023, would have required written consent to name only one identified seller per form. With it vacated, multi-seller consent through a single form is legal again, including "and its marketing partners" language with hyperlinked partner lists.
Then the Fifth Circuit went further. In Bradford v. Sovereign Pest Control of TX, Inc., decided in February 2026, the court held that the TCPA's text requires only "prior express consent" — oral or written — for automated or prerecorded telemarketing calls to cellphones. In effect, it rejected the FCC's 2012 written-consent rule within that circuit.
Here is the critical warning: do not treat these rulings as permission to skip written consent.
- The Bradford decision applies only within the Fifth Circuit. Every other circuit still follows the FCC's written-consent framework.
- State telemarketing statutes may independently require written consent, regardless of what a federal circuit court says.
- Even Holland & Knight's attorneys caution that the ruling "does not eliminate TCPA exposure" — companies must still show clear, direct, and unequivocal consent.
- Statutory damages remain steep: $500 per violation, up to $1,500 if willful, with no aggregate cap. Some class actions have settled for more than $40 million.
The safest operational posture is documented written consent no matter where you call. That is the standard we apply at My AI Call Center — every campaign runs against approved, permissioned, or reviewed lists, and we check consent records before a single call goes out. If a bought list lacks clear permission documentation, we flag it and, in most cases, decline it.
One more shift matters just as much: revocation rules tightened. Under the FCC's February 2024 order, consumers can revoke consent "in any reasonable manner" — not just through designated keywords — and companies must honor revocations within 10 business days. A simple "stop" reply to a text revokes consent for both robotexts and robocalls. The FCC has also extended its global revocation rule's effective date to January 31, 2027, so expect more change, not less.
As one commentator put it, the FCC's piecemeal tinkering "makes compliance much more difficult than it should be." The rules will keep moving. Your consent documentation should not.
The Practical Risk: Bought Lists and Unverified Consent Records
The legal rules around TCPA consent only become real when a list of phone numbers lands on someone's desk. That moment — before a single call is placed — is where most compliance exposure actually begins.
Shared and third-party leads are the pressure point. Even though the Eleventh Circuit vacated the FCC's one-to-one consent rule, making multi-seller consent through a single form legal again, regulatory attorneys note that regulators remain focused on deceptive or overly broad consent language. A lead that technically came with "consent" can still fail under scrutiny if that consent was buried in fine print, bundled with unrelated permissions, or captured through a pre-checked box.
The financial math explains why this matters so much. TCPA statutory damages run $500 per unauthorized call, rising to $1,500 for willful violations, with no cap on aggregate damages, and high-profile class actions have produced settlements exceeding $40 million, according to consent management research. Multiply a bad list of 10,000 contacts by even the base penalty, and the exposure dwarfs whatever the list cost.
As Hudson Cook attorney Michael A. Goodman puts it, the TCPA's statutory damages structure means every compliance misstep can become an existential threat. That is not a risk to manage after launch — it is a risk to eliminate before it.
Practically, list discipline means asking hard questions of every contact source before any dialing begins:
- Where did this list come from, and can the seller document how each contact consented?
- Does the consent language actually cover the type of call planned — telemarketing versus informational?
- Does each record specify the authorized phone number and a signed, written agreement?
- Can consent be verified independently, rather than taken on the lead vendor's word?
- Are opt-out and revocation records current and portable into your own DNC logs?
That last point carries fresh weight. Under the FCC's 2024 revocation order, consumers can revoke consent in any reasonable manner, and revocations must be honored within 10 business days. A bought list with stale or missing opt-out history is a liability even if the original consent was valid.
The Fifth Circuit's February 2026 ruling in Bradford v. Sovereign Pest Control — holding that the TCPA requires only "prior express consent," oral or written, within that circuit — does not change this calculus. As Holland & Knight's analysis warns, companies must still demonstrate that the called party gave clear, direct, and unequivocal consent, and state statutes may independently demand written proof. Documentation remains the safest posture in every jurisdiction.
This is why list review is the first line of defense, not a launch-day formality. At My AI Call Center, every campaign begins with a list and consent review — checking list source, permission records, and calling windows before anything dials. Bought lists without clear permission records are flagged, and in most cases declined. If a list will not support the campaign, the client hears it plainly, before they spend anything.
The pattern across the research is consistent: the organizations that survive TCPA scrutiny are the ones that can produce a signed, specific, verifiable consent record for every number they call. Everything else is exposure waiting for a plaintiff's attorney to find it.
How to Run Compliant Campaigns: A Pre-Launch Checklist
Knowing the rules is one thing; launching a campaign that survives them is another. With statutory damages running $500 to $1,500 per violation and no aggregate cap, a single non-compliant campaign can turn into an existential problem — which is why a pre-launch checklist is worth more than any post-launch apology.
Treat AI and prerecorded telemarketing calls as requiring written consent. AI-generated voices count as artificial voices under the TCPA, and any call that includes advertising or telemarketing content made with an autodialer, prerecorded, or artificial voice requires prior express written consent. Even though the Fifth Circuit's Bradford ruling rejected the written requirement within its own circuit, the safest posture is documented written consent regardless of where your contacts live, since other circuits and state laws still follow the written framework.
Verify your list source and consent records before a single call goes out. Businesses relying on shared or third-party leads must independently verify that consent was legally obtained — consent buried in fine print, pre-checked boxes, or bundled permissions does not hold up. This is exactly the discipline My AI Call Center applies during list review: bought lists without clear permission records are flagged, and in most cases declined, before any budget is spent.
Build fast, universal opt-out handling into the campaign itself. The FCC's 2024 order lets consumers revoke consent "in any reasonable manner," and revocations must be honored within 10 business days — but keyword opt-outs like STOP and REVOKE should be processed immediately and logged, not queued.
If your calls are informational rather than promotional, confirm the exemption actually applies, then respect the caps:
- Non-commercial, non-advertising commercial, and tax-exempt nonprofit calls to residential lines: capped at 3 calls per 30-day period
- HIPAA healthcare calls: 1 call per day, 3 per 7-day period
- All exempt calls still require a working opt-out mechanism
Reminder, confirmation, and notification campaigns must stay clearly on the informational side of the line, per the FCC's exemption framework.
Finally, document everything — consent records, opt-out logs, call dispositions, exemption determinations — regardless of jurisdiction. As regulatory attorneys have noted, the FCC's piecemeal rulemaking makes compliance harder than it should be, and courts still expect companies to demonstrate clear, direct, unequivocal consent. A paper trail is your best defense.
Frequently Asked Questions
What types of calls are actually prohibited under the TCPA without written consent?
Does an AI-generated voice count as a prerecorded or artificial voice under the TCPA?
What exactly counts as valid written consent under the TCPA?
Are there any exemptions where I can make prerecorded calls without consent?
I heard a court ruled written consent isn't required anymore — is that true?
What are the real penalties if I get this wrong?
The Safest Call Is the One You Can Prove Consent For
The TCPA landscape keeps shifting — circuit courts disagree, the FCC revises rules piecemeal, and AI voice technology has made the line between prerecorded and artificial calls effectively disappear. What has not changed is the math: $500 to $1,500 per violation with no aggregate cap, and class-action settlements that have crossed $40 million. The organizations that stay compliant are not the ones chasing the latest ruling; they are the ones who can produce a signed, specific, verifiable consent record for every number they dial. That discipline starts before the first call — reviewing list source, confirming permission covers the intended call type, and building opt-out handling that works in real time, not after the fact. My AI Call Center applies exactly that standard: every campaign runs against approved, permissioned, or reviewed lists only, with consent records checked before launch and opt-outs honored immediately. If your list cannot support the campaign, we tell you plainly before you spend anything. Ready to run calls you can stand behind? Plan your campaign and we will start with the list review.