Cell Phones Are Covered by Both DNC Registry and TCPA Rules

Many business owners assume the Do-Not-Call Registry is a landline-only concern — a leftover from the era of dinner-time telemarketing. In reality, cell phones sit at the center of U.S. calling regulations, protected by two overlapping layers of federal rules that every business placing outbound calls needs to understand.

The first layer is the National Do-Not-Call Registry itself. According to the FTC's guidance for telemarketers and sellers, the Registry covers all area codes serving the 50 states, D.C., U.S. territories, and toll-free numbers — collectively encompassing every wireless numbering plan area in the North American Numbering Plan. The Registry now contains more than 221 million numbers, and it makes no distinction between landlines and cell phones in its database. A wireless number on the list receives exactly the same protections as a landline.

The second layer is where cell phones diverge sharply. The FCC's rules apply to wireless numbers even when they are not on the Registry, meaning TCPA protections follow the phone itself, not its registration status. This creates a dual compliance burden: a business must honor Registry restrictions where they apply, and independently satisfy TCPA consent requirements for every wireless number it touches.

For wireless numbers, those TCPA requirements are strict. The key obligations include:

• Prior express written consent before making prerecorded telemarketing calls to a wireless number — on paper or through electronic means like website forms or a telephone keypress.
• Oral or written consent before any autodialed or prerecorded call or text to a wireless number.
• A ban on autodialed commercial texts to mobile phones unless the owner previously consented; commercial texts require written consent, while informational texts may be satisfied by oral consent.

The stakes are considerable. Private plaintiffs can recover $500 per communication, or $1,500 for willful or knowing violations, and TCPA judgments have reached more than $925 million. The FCC can seek up to $16,000 per violation, rising to $26,000 for intentional ones. Class action settlements have averaged $6.6 million in 2024–2025.

For businesses that rely on repeat customers — the HVAC company calling about a seasonal tune-up, the dental office following up on a treatment plan — this is precisely why working from a permissioned list of real customers matters. It's the approach CallMyCustomers takes: outreach built on existing relationships and documented consent, not cold-dialing numbers scraped from public sources. The existing business relationship exemption helps here too, permitting calls for 18 months after a transaction and 3 months after an inquiry — but only when the underlying consent and DNC hygiene are in order.

State-Level Mini-TCPA Laws Are Raising Compliance Stakes

If you think federal TCPA rules are the whole compliance picture, think again. A growing number of states are passing their own "mini-TCPA" laws that tighten calling hours, raise consent standards, and multiply penalties well beyond federal limits.

Following the Supreme Court's 2021 Facebook v. Duguid decision narrowing the autodialer definition, plaintiffs have shifted toward DNC and prerecorded-voice claims — and states have responded with tougher statutes. According to TCPA compliance tracking, states including Texas (2025), Oregon (2026), and New York (2025) have all enacted laws stricter than the federal baseline.

Oregon offers a clear example. Under Oregon HB 3865, effective September 29, 2025, telemarketing calls are restricted to 9 a.m.–7 p.m., with a hard cap of three calls per consumer per 24 hours. Florida's SB 1120, passed in 2021, goes further on consent, requiring prior written consent for calls made using automated systems.

The penalty landscape is equally fragmented. Federal private statutory damages run $500 per communication, or $1,500 for willful violations, while the FCC can seek up to $16,000 per violation — $26,000 for intentional ones — according to TCPA litigation analysis. But several states now exceed even those figures:

• New York: up to $20,000 per violation
• Florida and Indiana: up to $10,000 per call or violation
• New Jersey: $10,000 first offense, $20,000 for subsequent violations
• Missouri: up to $5,000 per knowing violation

For businesses running reactivation or reminder campaigns across state lines, this patchwork makes a one-size-fits-all calling policy a liability. A campaign that's compliant at 8:30 p.m. in one state may violate Oregon law in another — and class action settlements have averaged $6.6 million in 2024–2025.

The practical response is layered: scrub lists against the National DNC Registry every 31 days, honor internal opt-outs for at least five years, and map calling windows and consent requirements to each state where customers live. CallMyCustomers builds this discipline into every campaign it runs, since working only from lists of real past customers — with documented consent and immediate opt-out handling — keeps outreach on the safe side of both federal and state rules.

Compliance here isn't just about avoiding fines. It's about protecting the trust that makes a reactivated customer willing to pick up the phone in the first place.

Practical Compliance Steps for Service Businesses Reactivating Customers

Practical Compliance Steps for Service Businesses Reactivating Customers

Service businesses reactivating past customers must navigate strict U.S. telemarketing rules, especially when using cell phone numbers, which receive dual protection under both the National Do-Not-Call Registry and the Telephone Consumer Protection Act (TCPA). The Registry contains over 221 million numbers without distinguishing between landlines and wireless lines, yet cell phones face stricter TCPA requirements regardless of registration status. This means compliance isn’t optional—it’s foundational to avoiding penalties that can exceed $50,000 per violation in some jurisdictions.

CallMyCustomers integrates compliance directly into its reactivation campaigns by implementing four core practices. First, all customer lists are scrubbed against the National DNC Registry at least every 31 days, a requirement reinforced by FCC and FTC guidance to ensure outdated registrations don’t lead to unintended calls. Second, internal DNC lists are maintained and honored for a minimum of five years, capturing opt-outs from past interactions and ensuring immediate suppression upon request—whether verbal, written, or via any reasonable means. Third, consent is obtained based on call type: prior express written consent for prerecorded messages and prior express consent (oral or written) for autodialed calls or texts to wireless numbers, recognizing that TCPA rules apply to cell phones even when not on the National Registry. Finally, every number is checked against the FCC’s Reassigned Number Database before contact to avoid liability for reaching a new subscriber who hasn’t consented, a critical step given the one-call exception’s narrow scope.

• Scrub calling lists against the National DNC Registry every 31 days to maintain compliance with federal telemarketing rules.
• Maintain and honor internal DNC lists for at least five years, accepting opt-outs through any reasonable consumer-initiated method.
• Obtain appropriate consent—prior express written for prerecorded wireless calls, prior express (oral/written) for autodialed wireless communications.
• Verify numbers via the Reassigned Number Database before calling to prevent liability for calls to reassigned lines without current subscriber consent.

These steps align with CallMyCustomers’ done-for-you model, where campaign scripts, timing, and outreach methods are pre-approved by the business owner, ensuring every reactivation effort respects both customer preferences and legal boundaries. By embedding list hygiene, consent management, and reassignment checks into the workflow, service businesses can safely reactivate dormant customers while minimizing regulatory risk—turning compliance into a foundation for trust, not a barrier to reconnection.