The Short Answer: Yes, But It Depends on the Call

The most expensive misconception in outbound calling is assuming the Telephone Consumer Protection Act treats every phone call the same way. It doesn't — but the default answer is yes: the TCPA (47 U.S.C. § 227) requires prior express consent for calls made using artificial or prerecorded voices, autodialers, and for telemarketing generally, according to Troutman Pepper's legal analysis.

The consent standard gets stricter with the stakes. When telemarketing is sent with an autodialer or artificial voice, the rules require prior express written consent under 47 CFR 64.1200(a)(2) — and a reactivation text asking someone to book an appointment qualifies as telemarketing, as compliance research on database reactivation makes clear. The Supreme Court has also called it "undisputed" that texts are "calls" under the TCPA.

Here's where business owners get tripped up. A past purchase does not substitute for written consent when you're autodialing or texting marketing messages. The FCC's "established business relationship" exemption — 18 months for purchases, 3 months for inquiries — only exempts you from the national Do-Not-Call Registry, not from the written-consent rule for autodialed marketing, which has no business-relationship exception.

That said, consent is not required for every call type:

• Live telemarketing calls to existing customers within established business relationship windows remain permitted, though a DNC request overrides the relationship entirely, per Do-Not-Call list guidance.
• Purely informational calls, surveys, political, and charitable calls fall into exempt categories.
• AI-generated voices, however, are treated as "artificial voices" requiring prior express consent regardless of whether the message is marketing or informational.

The stakes of misclassification are severe. Statutory damages run $500 per violation, trebled to $1,500 for willful violations, with no cap — and TCPA enforcement data shows the largest damages award reached $925 million. A serial plaintiff once recovered $33,000 from just 22 calls.

This is exactly why service businesses reaching back out to past customers need to know which side of the line each outreach falls on. A live human call to a recent customer about a seasonal reminder sits differently under the law than an automated text blast pushing a promotion. It's also why CallMyCustomers works only from lists of real customers, collects explicit consent at the booking flow, and honors opt-outs immediately — practices that align with the stricter reading of the rules.

The practical rule of thumb from practicing attorneys: when in doubt, treat a message as telemarketing. Any promotional content makes it so.

The Costly Myth: A Past Customer Is Not Consent

The established business relationship exemption is one of the most misunderstood aspects of TCPA compliance. Many businesses assume that if a customer made a purchase within the last 18 months or submitted an inquiry within the last three months, they have automatic permission to send autodialed marketing calls or texts. This is incorrect. The FCC’s established business relationship rule (47 CFR 64.1200(f)(5)) only provides relief from the national Do-Not-Call Registry — it does not override the requirement for prior express written consent when using an autodialer or artificial voice for telemarketing purposes.

For service businesses relying on reactivation campaigns, this distinction carries significant financial risk. A single autodialed marketing text or call sent without proper written consent can trigger statutory damages of $500 per violation, which can be trebled to $1,500 for willful or knowing violations. There is no cap on total liability, meaning a campaign of just 100,000 calls could result in $50 million to $150 million in exposure. The largest TCPA damages award to date reached $925 million, underscoring how quickly compliance missteps can escalate into existential threats.

This risk is compounded by two evolving challenges. First, the one-to-one consent rule effective January 27, 2025, requires that written consent be specific to a single named seller and a single, logically related topic — broad or bundled consent from third-party lists no longer suffices. Second, approximately 35 million phone numbers are reassigned each year, meaning consent tied to a previous subscriber does not transfer to the new user. Texting or calling a reassigned number without obtaining fresh consent from the current owner constitutes a violation, even if the original customer had previously agreed to contact.

CallMyCustomers addresses these risks by working exclusively from verified customer lists where explicit consent has been collected at the point of service or booking. Every script, offer, and message is approved by the business owner before deployment, ensuring that outreach aligns with both the customer’s expectations and TCPA’s written consent requirements for autodialed marketing. This approach turns compliance from a liability into a foundation for trust-based reactivation.

What Compliance Actually Looks Like for Customer Reactivation

Compliance isn't a checklist — it's the infrastructure that lets reactivation work without putting the business at risk. The TCPA requires prior express written consent for any autodialed or prerecorded telemarketing, and a reactivation text asking someone to book counts as telemarketing under 47 CFR 64.1200(a)(2). An established business relationship does not substitute for that consent; the exemption only applies to the Do-Not-Call Registry, not the written-consent rule for autodialed marketing. Treating every promotional message as telemarketing — "when in doubt, treat it as telemarketing," as Troutman Pepper attorneys advise — is the safer posture.

• Collect explicit consent at the booking flow so the record exists before any outreach begins
• Check the Reassigned Numbers Database before texting older lists — roughly 35 million numbers are reassigned each year, and consent belongs to the person who gave it, not the number
• Honor opt-outs by any reasonable means within 10 business days; keywords like "stop" are valid but phrases like "no more texts!" must be treated the same way
• For dental and med spa clients, operate under a BAA with HIPAA-aligned handling so patient outreach meets clinical standards

CallMyCustomers builds campaigns on lists of real customers with consent already captured, runs outreach only after the owner approves every script and offer, and honors opt-outs immediately — well inside the regulatory window. Live human callers using manual dialing avoid the autodialer definition, but the same consent discipline applies to every text and prerecorded touchpoint. The result is a reactivation engine that books appointments without creating exposure.

The Rules Keep Moving: Revocation, Texts, and What's Next

Even after you've sorted out what consent the TCPA requires, the ground keeps shifting underneath you. The FCC's September 9, 2026 Report and Order overhauled how consumers can revoke consent — and a fresh appellate split has raised new questions about whether texts count as "calls" at all. Here's what to watch.

Revocation gets more targeted — but marketing is still all-or-nothing. The FCC's new order replaces the broad "revoke-all" rule that was scheduled for January 31, 2027 with a more nuanced framework. Under the revised rules, revoking consent for informational calls may now be category-specific — a customer can opt out of appointment reminders without ending fraud alerts. But a marketing opt-out still ends all future marketing from that caller.

The practical mechanics matter too. Callers may designate one exclusive opt-out method — an automated key-press, standardized keywords, or a designated website — if it's clearly disclosed; otherwise, revocations made by "any reasonable means" must be honored. All requests must be processed within 10 business days, though the FCC's follow-on proposal would tighten that to seven. And as compliance analysts note, businesses must follow the current rules until the new order is published in the Federal Register and takes effect 30 days later.

Texts may or may not be "calls" — depending on your circuit. In Steidinger v. Blackstone Medical Services, the Seventh Circuit held that the TCPA's private right of action under the Do Not Call provisions covers only voice telephone calls, not texts. That conflicts with the First, Second, Ninth, and Eleventh Circuits, which treat texts as "calls" under the consent provisions — a genuine circuit split that could reach the Supreme Court.

Don't relax your text policies yet, though. Venable attorneys put it plainly: "Until further guidance emerges, continuing to treat text messages as subject to all applicable TCPA requirements is the safest bet." The stakes are too high to gamble on — statutory damages run $500 per violation, trebled to $1,500 for willful violations, with no cap on total exposure.

What to monitor going forward:

• The FCC's final revocation rules and the proposed 7-business-day honoring window
• Whether the Supreme Court takes up the Seventh Circuit's text-message ruling
• Enforcement posture on the informational-versus-telemarketing distinction — expected to be a litigation focal point
• Further guidance on AI-generated voices, which already require prior express consent

The simplest way through this moving landscape is to avoid the riskiest categories entirely: real humans making live calls to known customers, with permission collected up front and opt-outs honored immediately. That's the approach CallMyCustomers builds into every campaign — outreach to people who already know your business, with every message approved before it goes out. When you start from genuine consent, the shifting rules around revocation and texts become far less threatening.

Your Next Steps: Reactivate Customers Without the Legal Risk

Your Next Steps: Reactivate Customers Without the Legal Risk

Start by auditing where consent is collected — booking flow, intake forms, or POS systems — to confirm it meets TCPA standards for telemarketing outreach. Segment your customer list by recency (30 days, 6 months, 12+ months) and consent status, isolating old quotes, expiring memberships, and seasonal service needs as compliant reasons to reconnect. Prior express written consent is required for autodialed marketing, and an established business relationship does not substitute for it — so never assume past service equals permission to call or text.

Choose outreach reasons that feel useful, not promotional: renewal reminders before lapse, seasonal service prompts, or follow-ups on estimates that never became jobs. These align with informational or service-related touchpoints that reduce compliance risk while driving reactivation. Any promotional content makes a message telemarketing, requiring written consent — so frame messages around customer benefit, not sales pressure. For example, a text about HVAC maintenance before summer peak feels like a reminder, not a pitch.

Build internal opt-out processes that honor requests within 10 business days through any reasonable means — not just keywords like “STOP” — or partner with a done-for-you service that uses only real-customer lists with owner-approved scripts and immediate opt-out honoring. Consent status must propagate across systems within 10 business days, and phrases like “no more texts!” must be treated as valid opt-outs. Start with a free list review to see what your data can produce — zero risk, full clarity — before deciding how to proceed.