Yes, You Can Sue — And the TCPA Makes It Worth Your While

Yes, you can sue robocallers—and the TCPA makes it worth your while. The law gives individuals a private right of action in federal or state court, with statutory damages of $500 to $1,500 per illegal call or text and a 4-year statute of limitations to file a claim. This legal leverage has fueled a litigation surge, with TCPA class actions up 112% year-over-year in Q1 2025 and over 2,128 lawsuits filed year-to-date as of September 2025. For context, just 20 illegal calls could result in $10,000 to $30,000 in potential damages for an individual claim.

To build a strong case, consumers should answer robocalls to extract company information from live agents—asking for the business name, website, mailing address, and email—before sharing personal details. Documenting each violation, including dates, times, and call content, is essential. Acting within the 4-year window ensures your claim remains valid, even if the calls occurred months or years ago.

Businesses face significant risk when compliance falls short. Proven consent—particularly prior express written consent for marketing calls—is the strongest defense against TCPA liability, though jurisdictional variations exist. For example, the Fifth Circuit ruled that only "prior express consent" is required under the statute, not explicitly written consent, though this applies only in Texas, Louisiana, and Mississippi. Despite this, written consent remains the safest national approach, as emphasized by legal experts who advise against changing opt-in practices based on a single appellate decision.

Effective April 2025, the FCC’s consent revocation rule requires companies to honor opt-out requests via any reasonable means—such as saying "stop" or texting "STOP"—within 10 business days. Every call after that constitutes a willful violation at the $1,500-per-call tier. This underscores why maintaining clean, consent-verified lists isn’t just ethical—it’s a legal necessity. CallMyCustomers ensures compliance by working only from verified customer lists, honoring opt-outs immediately, and operating under required privacy agreements for healthcare clients, including HIPAA and TCPA adherence.

• Answer calls to identify the caller’s company, website, and address before sharing personal info.
• Document each illegal call or text with dates, times, and details for evidence.
• File your claim within the 4-year statute of limitations to preserve your right to damages.

For businesses, protecting against TCPA exposure starts with rigorous consent documentation and list hygiene. Scrubbing against the National Do Not Call Registry, honoring opt-outs immediately, and avoiding prerecorded calls without prior express written consent are critical steps. As litigation continues to rise, proactive compliance isn’t just about avoiding fines—it’s about preserving trust and ensuring every outreach effort is both effective and lawful.

What Makes a Call Illegal: The Violations That Win Lawsuits

Not every annoying call is illegal — but four specific violations turn a nuisance into a lawsuit. The Telephone Consumer Protection Act awards $500 to $1,500 per illegal call or text, and with TCPA filings up more than 50% year-over-year, courts are seeing these claims at record volume.

The first winning ground is contact after an opt-out request. Under the FCC's consent revocation rule effective April 2025, you can revoke consent by any reasonable means — saying "stop," texting "STOP," or asking to be removed. Companies have just 10 business days to comply, and every call after that counts as a willful violation at the $1,500 tier.

Second, calls to numbers on the National Do Not Call Registry create independent violations. A single call can stack multiple violations — lack of consent, a DNC breach, and a failure to honor your opt-out — each carrying its own damages. Twenty calls without consent could mean $10,000 to $30,000 for an individual claimant.

Third, prerecorded and AI-generated voice calls require prior express written consent. The FCC has confirmed that AI voices qualify as "artificial or prerecorded" under the TCPA — a call that sounds human but is actually AI is still covered. Notably, the Fifth Circuit held in Bradford v. Sovereign Pest Control that the statute requires only "prior express consent," not written consent, though that ruling applies only to Texas, Louisiana, and Mississippi — and written consent remains the safest standard nationally.

Fourth, marketing texts and calls at unlawful hours violate the TCPA's time restrictions. Permitted contact runs from 8:00 a.m. to 9:00 p.m. in the recipient's time zone — a text at 6 a.m. is a violation regardless of consent.

The legal landscape itself is shifting in consumers' favor. A 2025 Supreme Court decision moved TCPA interpretation authority from the FCC to the courts, meaning judges now set their own standards — and many are ruling favorably for consumers.

For businesses, the lesson is clear: documented, permission-based outreach is the strongest defense. CallMyCustomers works only from lists of real customers, honors opt-outs immediately, and has the owner approve every message — the practices that keep campaigns on the right side of these four violations. As compliance attorney Aaron Parry of M&S Law Group advises, reliance on any type of consent should be clearly documented, because proven consent is what wins — or prevents — these lawsuits.

How to Actually Build Your Case: Document, Identify, File

Winning a TCPA case comes down to evidence and naming the right defendant. The consumers who recover damages aren't the ones who simply hung up in frustration—they're the ones who stayed on the line and took notes.

Step one: answer the call and identify the caller. It sounds counterintuitive, but consumer protection attorneys describe picking up as "the most effective identification technique." Once transferred to a live agent, ask before providing any personal information: What company are you with? What's your website? What's your mailing address? Can you send me something by email? Those four answers form the backbone of your complaint.

Step two: document everything. Keep call logs, save screenshots of texts, and record calls where it's legal in your state. Each violation—lack of consent, a Do Not Call Registry breach, a failure to honor your opt-out—can carry $500 to $1,500 in statutory damages, and 20 calls without consent can add up to $10,000–$30,000 for an individual claim, per attorney guidance from Lakelaw. Note that under the FCC's April 2025 revocation rule, you can revoke consent by any reasonable means—saying "stop" or texting "STOP"—and companies have just 10 business days to comply. Every call after that counts as a willful violation at the $1,500 tier.

Step three: sue the right entity. Go after the company whose product is being marketed, not just the call center. The TCPA applies to the entity "on whose behalf" the call is made, meaning the lender or lead buyer can be liable even when a third-party dialer placed the call.

Your evidence checklist should include:

• Call logs with dates, times, and phone numbers
• Screenshots of texts and any opt-out requests you made
• The company name, website, address, and email you extracted from the live agent
• Recordings of calls, where your state permits them

Step four: file within the window. TCPA claims carry a 4-year statute of limitations, giving you time to build a solid record. You can file individually in court or join a class action—nearly 80% of TCPA lawsuits are class actions, compared with just 2–5% of other consumer cases, according to litigation tracking data. Filings reached 2,128 lawsuits year-to-date as of September 2025, up more than 50% year-over-year.

This landscape is exactly why businesses that follow the rules treat consent as their strongest protection. CallMyCustomers, for example, works only from lists of real customers, honors opt-outs immediately, and collects explicit consent in its booking flow—practices that compliance attorneys recommend documenting for every marketing lead. For consumers, the takeaway is simpler: answer, document, identify, and file—and the law does the rest.

The Business Side: How Proven Consent Protects You From TCPA Suits

If you run a business that calls or texts customers, the TCPA is not an abstract legal topic — it is a live financial risk. Leading TCPA-defense attorney Eric J. Troutman calls the statute the "biggest cash cow in history" for the plaintiff's bar, and the numbers back him up: TCPA class actions more than doubled year-over-year, jumping from 239 filings in Q1 2024 to 507 in Q1 2025.

The settlement figures explain why. Recent TCPA settlements range from roughly $320,000 (Citizens Disability) to $30 million (Momentum Solar), with Sirius XM paying $28 million, Realogy $20 million, and QuoteWizard $19 million. Nearly 80% of TCPA lawsuits are class actions, compared with just 2–5% for other consumer statutes — meaning one bad campaign can snowball fast.

The strongest defense is documented prior express written consent. Attorney Aaron Parry of M&S Law Group advises that "reliance on any type of consent should be clearly documented" — meaning you keep records of opt-in forms, checkout flows, and consent language for every marketing contact. If you cannot produce proof, the call is presumed illegal.

Some businesses wonder whether the Fifth Circuit's Bradford v. Sovereign Pest Control ruling changes the calculus, since it held the TCPA statute requires only "prior express consent," not written consent. But that ruling applies only to Texas, Louisiana, and Mississippi, and the Ecommerce Innovation Alliance warns it would be "risky for businesses to change their consent practices based on this single ruling." Written consent remains the safest national standard.

Beyond consent, three operational habits close the biggest liability gaps:

• Scrub all calling and texting lists against the National Do Not Call Registry and reassigned-number databases before every campaign.
• Honor opt-outs immediately — under the FCC's April 2025 revocation rule, consumers can revoke consent by any reasonable means, and every call past 10 business days is a willful violation at $1,500.
• Restrict outreach to permitted hours (8:00 a.m. to 9:00 p.m. in the recipient's time zone) and avoid prerecorded or AI-voice calls without written consent.

This is why permission-based outreach to known customers is the safest growth strategy available. A service like CallMyCustomers works only from lists of real customers with documented consent and immediate opt-out handling — the exact practices defense attorneys recommend. If you want to reactivate past customers without betting your business on it, get a free list review to see what your list can produce before you spend a dollar.

Reactivation Outreach That Stays on the Right Side of the Law

The legal landscape makes one thing clear: the safest outreach is the outreach your customers actually asked for. With TCPA class actions surging 112% year-over-year in Q1 2025 and statutory damages reaching $1,500 per illegal call or text, the cost of guessing wrong has never been higher. Nearly 80% of TCPA lawsuits are now filed as class actions, and courts are increasingly ruling in consumers' favor after a 2025 Supreme Court decision shifted interpretation authority from the FCC to the judiciary.

Permission-based reactivation starts with the list itself. CallMyCustomers works exclusively from lists of real customers who have an existing relationship with the business — no purchased leads, no cold data. Every campaign begins with a free list review that segments contacts by recency, old quotes, expiring memberships, and referral potential, so outreach feels useful rather than intrusive. Explicit consent gets collected in the booking flow, and opt-outs are honored immediately across every channel.

• Owner approves every script, offer, and message before anything is sent
• Calls, texts, and emails run in the business's name with replies routed back for booking
• Compliance covers TCPA, A2P 10DLC, and BAA/HIPAA where required for clinical clients
• No software to buy or learn — the team handles execution, the owner keeps control

The FCC's April 2025 consent revocation rule means companies have just 10 business days to honor any reasonable opt-out request — saying "stop" or texting "STOP" triggers the clock. Every call after that window becomes a willful violation at the highest penalty tier. For businesses that want reactivation revenue without the litigation risk, the path forward is straightforward: work only from permissioned lists, document consent at every touchpoint, and keep the owner in the approval loop. That's not just compliance — it's the only model that turns past customers into booked work sustainably.