Most clients don’t call their lawyer before launching a text campaign. They call after the demand letter arrives. By then the damage is done, and the conversation turns to settlement instead of prevention.
Outbound calls and texts are still some of the most effective ways to sell, fundraise, and keep customers engaged, which is exactly why clients want to use them at scale. But the moment a campaign involves an autodialer, prerecorded messages, AI-generated voices, or high-volume SMS, the legal exposure grows quickly. And it isn’t just federal law: a growing number of states have their own telemarketing rules, some stricter than the TCPA.
The best advice you can give is to build compliance into the campaign before the first message goes out. Part of that is technical. Phone validation tools can confirm line type and carrier and flag numbers that carry extra risk, and one practical tip for clients: Avoid TCPA litigators by using the add on when using phone validation APIs. The rest depends on how the client collects consent, keeps records, writes its messages, and runs the program day to day. This guide covers what to walk clients through at each stage.
Understand the Regulatory Framework
The Telephone Consumer Protection Act, commonly known as the TCPA, is the central federal law governing many outbound calls and texts. It restricts calls and SMS messages made using certain automated systems, artificial or prerecorded voices, and marketing communications sent to wireless numbers without proper consent. The Federal Communications Commission enforces the TCPA, while private plaintiffs may also bring lawsuits.
Clients should also consider the Telemarketing Sales Rule, Federal Trade Commission guidance, state mini-TCPA laws, state telemarketing registration rules, and industry standards such as CTIA messaging guidelines. Some states impose stricter consent, calling time, disclosure, or registration requirements than federal law. A campaign that appears acceptable nationally may still create exposure in states like Florida, Oklahoma, Washington, or Maryland.
Confirm Consent Before Outreach
Consent is the foundation of compliant calling and texting. For marketing calls or SMS messages to mobile numbers, clients often need prior express written consent. This typically means a clear disclosure that the consumer agrees to receive marketing communications through automated technology, that consent is not required as a condition of purchase, and that the consumer provides a valid electronic or written signature.
For informational or transactional messages, the consent standard may be different, but clients should still document how and when the number was collected. Advisors should review web forms, checkout flows, lead forms, call scripts, and privacy notices to ensure the consent language matches the planned campaign. Consent should not be assumed simply because a consumer provided a phone number.
Maintain Reliable Records
Good records are essential if a complaint, carrier inquiry, regulator question, or lawsuit arises. Clients should retain consent logs showing the date, time, IP address, source URL, disclosure language, phone number, and identity of the consenting party. If consent is captured by phone, call recordings or detailed agent notes may be valuable.
Records should also track opt-outs, internal do-not-call requests, campaign dates, message content, and vendor activity. If a client buys leads, the contract should require the lead seller to provide proof of consent and comply with applicable laws. Even then, clients should audit sample leads because liability may still attach to the party placing the call or sending the text.
Scrub Against Suppression Lists
Before launching any campaign, clients should scrub numbers against applicable do-not-call and suppression lists. This may include the National Do Not Call Registry, internal do-not-call lists, state lists, prior opt-outs, known litigant lists where appropriate, and numbers associated with previous complaints.
Clients should also consider whether numbers have been reassigned. A consumer may have consented years ago, but the number may now belong to someone else. Using reassigned number tools, carrier data, and phone validation services can reduce risk. However, these tools should be part of a broader compliance process rather than a substitute for consent.
Control Message Content and Timing
Call scripts and text messages should be reviewed before use. Marketing messages should identify the sender, avoid misleading claims, and include required disclosures. SMS campaigns should provide clear opt-out instructions such as “Reply STOP to cancel.” If the campaign includes recurring messages, the initial disclosure should describe frequency and potential message and data rates.
Timing also matters. Federal rules generally restrict telemarketing calls to certain hours, and many states have their own quiet-hour requirements. Advisors should help clients configure dialing and messaging platforms to account for the recipient’s local time zone. This is especially important for nationwide campaigns.
Manage Vendors Carefully
Many clients rely on platforms, lead generators, call centers, SMS aggregators, and marketing agencies. Vendor contracts should address compliance responsibilities, consent documentation, audit rights, data security, indemnification, opt-out processing, and immediate escalation of complaints. Clients should not rely solely on a vendor’s promise that “everything is compliant.”
Regular audits are important. Advisors should recommend reviewing sample messages, consent records, suppression processes, and campaign performance data. If a vendor resists transparency, that is a warning sign.
Build Compliance Into the Campaign
The best compliance programs combine legal review, operational discipline, and technical safeguards. Clients should train staff, document policies, monitor complaints, honor opt-outs quickly, and pause campaigns when issues arise. With proper planning, businesses can use outbound calling and SMS effectively while reducing regulatory, litigation, and reputational risk.