
How long does DNC last?
Key Facts
- National DNC Registry registrations never expire — over 221 million numbers have been protected since 2003 per the FTC.
- Transaction-based relationships allow calls for up to 18 months after a customer's last purchase, delivery, or payment according to compliance research.
- Inquiry-based relationships — like unconverted quote requests — permit calls for only 3 months from the inquiry date per legal analysis.
- Telemarketers must scrub call lists against the National DNC Registry every 31 days, not just at campaign launch per compliance experts.
- TCPA violations cost $500 per unknowing call and $1,500 per willful call, with no statutory damages cap according to legal analysis.
- Recent TCPA class action settlements average $6.6 million, turning a single wrong call into expensive legal exposure per compliance research.
- Eleven states maintain their own DNC registries — New York fines reach $20,000 per violation according to compliance research.
The Short Answer: DNC Registration Never Expires, But Your Permission to Call Does
National DNC Registry registrations are permanent — once a number is added, it remains on the list indefinitely with no re-registration required. Since the registry launched in 2003, more than 221 million telephone numbers have been registered and stay protected from most telemarketing calls unless an exemption applies. This permanence often surprises business owners who assume their calling lists naturally "clean out" over time.
The real constraint for outreach isn’t the DNC listing itself — it’s the clock on your permission to call. While the restriction lasts forever, the federal exemptions that allow you to legally reach your own past customers do not. An established business relationship (EBR) based on a transaction permits contact for up to 18 months after the last purchase, delivery, or payment. For inquiries alone — such as a quote request that never converted — the EBR window closes after just 3 months. These time limits create a finite, compliant window for reactivation efforts, even though the underlying DNC bar remains in place indefinitely.
For service businesses relying on repeat work, this shifts the focus from "how long does DNC last" to "how long do I have to reach my customers before the relationship window expires?" Missing that 18-month transaction-based EBR deadline means losing the legal right to call — even if the customer hasn’t opted out and still remembers your business. That’s why compliant reactivation campaigns prioritize recency: segmenting lists by 30-day, 6-month, and 12-month intervals ensures you engage the most permissioned contacts first.
- Telemarketers must scrub their lists against the National DNC Registry every 31 days to remain compliant
- Violations carry penalties of $500 per unknowing call or $1,500 per knowing/willful call, with no statutory damages cap
- Registry access fees increased to $80 per area code annually effective October 1, 2024, with a nationwide maximum of $22,038
State-level DNC lists add another layer, as eleven states maintain their own registries that may have expiration rules unlike the permanent federal list. Businesses operating across state lines must comply with both national and state-specific rules, including narrower calling windows and varying penalty structures. For example, Florida restricts calls to 8 a.m.–8 p.m. and imposes fines up to $10,000 per violation, while New York penalties can reach $20,000 per call.
Because the EBR permission expires but the DNC block does not, the safest approach is systematic, permission-based outreach before the relationship window closes. Capturing explicit consent at booking and honoring opt-outs immediately turns compliance into a competitive advantage — one that protects your business while reactivating revenue from customers who already know and trust you. At CallMyCustomers, we build every campaign around this principle: your next booked customer already knows your business, and we help you reach them the right way.
The Clocks That Actually Matter: 18 Months, 3 Months, and 31 Days
The National Do Not Call Registry never expires — but your permission to call your own customers does. That asymmetry is what actually shapes outreach campaigns, and it comes down to three clocks: 18 months, 3 months, and 31 days.
The first clock is the transaction-based established business relationship. Under federal rules, a company may call a number on the registry for up to 18 months after the customer's last purchase, delivery, or payment, according to compliance research. For a service business, that 18-month window is the natural lifespan of a reactivation campaign — once it closes, the registry restriction becomes absolute again.
The second clock is shorter and trips up far more businesses. An inquiry-based relationship — someone who requested a quote or estimate but never bought — permits calls for only 3 months from the date of inquiry. Notably, the FTC frames the rule more broadly as covering anyone who "sought to do business" with a company for 18 months, but the FTC's own guidance contrasted with the stricter two-tier interpretation means the conservative reading should guide your planning. Treat every old quote as expiring at 3 months, and you'll never be wrong.
The third clock is operational rather than relational. Telemarketers must scrub their call lists against the National DNC Registry every 31 days — not once at campaign launch. A win-back campaign running two to four weeks should sync with the registry at the start of each wave, because a list that was clean on day one may not be clean on day twenty.
Put together, these clocks point toward a simple segmentation framework built on recency:
- Under 30 days: recent customers and fresh quotes — the most time-sensitive, clearly permissioned contacts to work first.
- 30 days to 6 months: still well inside both the transaction and inquiry windows, ideal for renewal reminders and old-quote follow-up.
- 6 to 12 months: transaction-based only — quote follow-ups are off the table by now.
- 12 to 18 months: the last compliant stretch before the EBR window closes for good.
This is exactly how we approach list review at CallMyCustomers — segmenting by recency before a single call is placed, so the most perishable permission gets worked first and nothing slips past a window. Given that TCPA penalties run $500 to $1,500 per violation with no statutory damages cap, per legal analysis, conservative timing isn't just tidy — it's the difference between a profitable campaign and an expensive mistake.
The Cost of Guessing Wrong: Penalties, State Layers, and New Rules
A single call to the wrong number can cost more than an entire marketing campaign. That's the arithmetic behind DNC compliance, and it's why guessing about registry rules is one of the most expensive mistakes a service business can make.
Under the TCPA, violations carry penalties of $500 per call for unknowing violations and up to $1,500 for knowing or willful ones — with no statutory damages cap on civil liability. The stakes scale fast: recent TCPA class action settlements average $6.6 million, and even a handful of unresolved opt-out requests can snowball into costly legal exposure.
The national registry isn't the only rulebook. Eleven states — including Florida, Texas, Pennsylvania, and New York — maintain their own DNC lists with their own penalties and expiration rules. A campaign that's federally compliant can still violate state law.
The state-by-state variation is significant:
- Florida restricts calls to 8 a.m.–8 p.m. with fines up to $10,000 per violation
- New York penalties reach $20,000 per violation
- New Jersey fines run $10,000 for a first offense and $20,000 for subsequent ones
- Indiana imposes up to $10,000 per call
- Pennsylvania prohibits Sunday calls, with fines up to $1,000
Unlike the permanent national registry, some state and internal DNC lists carry expiration dates, after which contact may again be permissible depending on the state's rules. That means list hygiene isn't a one-time task — it's a recurring obligation layered across jurisdictions.
The regulatory landscape keeps tightening. A new FTC one-to-one consent rule takes effect January 27, 2025, raising the bar for what counts as valid permission. Oregon's House Bill 3865, effective September 29, 2025, restricts calls to 9 a.m.–7 p.m., caps outreach at three calls per consumer per 24 hours, and extends coverage to text messages.
For businesses running reactivation campaigns across state lines, this complexity is exactly why working from a list of real customers — with consent captured and opt-outs honored immediately — matters more than volume. At CallMyCustomers, every campaign starts from your actual customer list and your approved message, not scraped contacts.
The strongest defense, according to compliance experts, is documented consent: capturing prior express written consent and maintaining a verifiable audit trail turns a potential liability into proof. In an environment where a $500 phone call can become a $6.6 million settlement, permission isn't just polite — it's the business case.
Running Compliant Reactivation Campaigns: A Practical Playbook
Running Compliant Reactivation Campaigns: A Practical Playbook
Turning compliance rules into action starts with segmenting your customer list by recency so still-permissioned contacts get worked first. Prioritize those with recent transactions, since transaction-based EBRs permit outreach for up to 18 months after the last purchase, delivery, or payment, while inquiry-based EBRs expire after just 3 months. Syncing the National DNC Registry check at the start of every campaign wave — not just at launch — ensures you’re scrubbing against the most current list, as telemarketers must re-check every 31 days to remain compliant. Honoring opt-outs immediately and capturing explicit consent at booking turns a potential liability into a verifiable audit trail, especially critical given that TCPA violations carry penalties of $500–$1,500 per call with no statutory damages cap.
- Segment by recency: 30 days, 6 months, 12+ months to work still-permissioned contacts first
- Run registry sync at the start of every campaign wave, not just launch
- Honor opt-outs immediately and document explicit consent at booking
- Check state DNC lists for multi-state outreach — 11 states maintain their own registries
- Act before EBR permission expires — waiting for dormancy closes your compliant window
Because EBR permission expires after 18 months, waiting for customers to go dormant closes your compliant outreach window even though the National DNC Registry itself never expires. This structural reality makes systematic, permission-based reactivation essential — not optional. CallMyCustomers supports this playbook with done-for-you campaigns: owner-approved scripts, lists worked from any CRM or spreadsheet, and replies routed directly into your booking process. The free list review shows you exactly what your list can produce before you spend a dollar, turning compliance into a repeat-revenue engine.
Get your free list review today to see how many past customers are still within your compliant outreach window.
Frequently Asked Questions
Does DNC registration ever expire, or do I need to re-register my number?
If DNC never expires, how can I still legally call my past customers?
How often do I need to check the DNC list to stay compliant?
What happens if I accidentally call someone on the DNC list?
Do state DNC lists expire like the federal one?
How much does it cost to access the National DNC Registry?
The Registry Lasts Forever — Your Window Doesn't
So, how long does DNC last? Forever, for the registry itself — but the permission that lets you reach your own past customers expires on a strict clock: 18 months after a transaction, just 3 months after an inquiry, with a mandatory registry re-check every 31 days along the way. That asymmetry is the real takeaway. With penalties of $500 to $1,500 per call and no statutory damages cap, guessing wrong is far more expensive than acting early. The practical move is simple: segment your customer list by recency, capture consent at every booking, honor opt-outs immediately, and start outreach before the window closes — not after. Your next booked customer likely already knows and trusts your business; the only question is whether you reach them while you're still permitted to. If you want that handled for you — scripts you approve, lists worked compliantly, replies routed straight into your booking process — start with a free list review and see exactly how many past customers are still within your compliant outreach window.