What Counts as Telephone Harassment Under Federal Law

When your phone rings at 7 a.m. with a recorded pitch, or you pick up to nothing but dead air, that's not just annoying — it's likely illegal. Federal law draws clear lines around what telemarketers can and cannot do, and crossing them comes with serious consequences.

Two laws do most of the work: the Telephone Consumer Protection Act (TCPA) and the FTC's Telemarketing Sales Rule (TSR). Together, they define telephone harassment as a specific set of prohibited behaviors, and regulators enforce them aggressively. TCPA violations carry statutory damages of $500 to $1,500 per call, and the law includes a four-year statute of limitations, meaning legal action can follow a call long after it happens, according to TCPA compliance analysis.

Specific behaviors that count as harassment include:

• Hang-up and dead air calls — the FCC's TCPA regulations specifically target these through autodialer restrictions and Caller ID transmission requirements, per the FDIC Consumer Compliance Examination Manual. The TSR allows no more than 3% abandoned calls per campaign.
• Autodialed or prerecorded calls without consent — calls to cell phones using these technologies require prior express written consent under the TCPA's 2012 consent reforms.
• Calls to emergency lines, hospitals, or other sensitive numbers without prior consent.
• Repeated calls with intent to annoy, abuse, or harass, along with threats, intimidation, and profane or obscene language — all explicitly prohibited under the FTC's Telemarketing Sales Rule.
• Interfering with Do Not Call rights — denying or obstructing a consumer's right to be added to a DNC list is itself defined as an abusive act.

Timing matters too. Calling before 8 a.m. or after 9 p.m. in the consumer's local time zone is considered abusive under the TSR. Telemarketers must also transmit accurate Caller ID information; spoofing or hiding your identity removes a consumer's ability to identify and avoid unwanted contact.

The rules are tightening further. As of April 11, 2025, the FCC's updated opt-out rules require businesses to honor revocation requests within 10 business days — down from 30 — and consumers can now revoke consent through any reasonable method, including email, voicemail, or simply saying "don't contact me." TSR violations can cost up to $51,744 each, according to the FTC's guidance for businesses.

For legitimate businesses running reactivation outreach, these rules define the guardrails, not the ceiling. CallMyCustomers builds its campaigns around them — working only from real customer lists, honoring opt-outs immediately, and keeping every call inside permitted hours, so reconnecting with past customers never crosses into harassment territory.

New Compliance Rules That Redefine Risk in 2025

For decades, businesses could take their time processing opt-out requests — up to 30 days, in fact. That era ended on April 11, 2025, when the FCC's new Opt-Out Rule took effect and fundamentally reshaped what "telephone harassment" looks like from a regulator's perspective.

The most consequential change is speed. As of April 11, 2025, businesses must honor opt-out and Do-Not-Call requests within 10 business days, down from 30, according to TCPA compliance analysis. A business that keeps calling a customer who asked to be left alone now has a far shorter window in which a "processing delay" becomes a violation — and with TCPA statutory damages running $500 to $1,500 per violation under 47 USC § 227(b)(3), per legal analysis from BCLP, that compressed timeline carries real financial weight.

The second shift is scope. Consumers can now revoke consent through any reasonable method — not just a formal "STOP" text. That includes emails, phone calls, voicemails, verbal statements like "don't contact me," and even informal social media messages. Critically, the burden now falls on businesses to prove a consumer's chosen method was unreasonable, not the other way around.

The third change adds a new operational requirement. When a consumer opts out by text, businesses must send a one-time confirmation message within five minutes of the revocation request — and that message must contain no promotional content, per compliance guidance on the 2025 rules. A confirmation that sneaks in a discount code or a "last chance" offer is itself a violation.

For businesses running outreach campaigns, these rules reshape daily operations:

• Response windows are now measured in days, not weeks — every opt-out channel (text, email, voicemail, verbal) must feed a single suppression process.
• Front-line callers need clear scripts for recognizing verbal revocations mid-conversation, since "stop calling me" now counts as a formal opt-out.
• Documentation must be retained for at least four years, matching the TCPA's statute of limitations for legal action.
• Confirmation messages must be templated in advance — promotional-free and deployable within the five-minute window.

These changes are why done-for-you outreach services like CallMyCustomers treat opt-out handling as a core operational function rather than an afterthought, honoring revocations immediately rather than riding the legal deadline. The stakes are amplified by the TCPA's four-year statute of limitations, which allows consumers to bring legal action up to four years after a call was made, as TCPA experts note. In short, the margin for sloppy list management just disappeared.

How CallMyCustomers Structures Outreach to Avoid Every Violation

Every prohibited behavior on the harassment list has a mirror-image safeguard on the operations side — and that's exactly how CallMyCustomers builds its reactivation campaigns. Rather than treating compliance as a legal afterthought, each safeguard maps directly to a rule that regulators have defined as abusive practice.

Start with the biggest one: consent. The TCPA's four-year statute of limitations means a call made today can trigger legal action up to four years later, so legal experts recommend retaining consent documentation for at least four years. CallMyCustomers documents consent and keeps those records for the full window. The company also works only from lists of real customers — never purchased leads — and the owner approves every script and offer before anything goes out.

Opt-out handling is where many businesses slip. As of April 11, 2025, the FCC's new rules cut the honor period from 30 business days to 10, and consumers can now revoke consent in any reasonable manner — a verbal "don't contact me," an email, even a voicemail. CallMyCustomers honors opt-outs immediately across all channels, well inside the regulatory window.

The operational safeguards line up one-to-one with the prohibited behaviors:

• Calling hours: strict 8 a.m.–9 p.m. windows in the consumer's time zone, since calls outside those hours are abusive under the Telemarketing Sales Rule.
• Caller ID: accurate transmission on every outbound call, as the TSR requires.
• Abandoned calls: rates kept under the TSR's 3% per-campaign safe harbor, so no hang-ups or dead air.
• Consent records: documented and retained for four years, matching the TCPA statute of limitations.

The stakes are real. TCPA violations carry statutory damages of $500 to $1,500 per violation, and TSR violations can reach $51,744 each. For dental, med spa, and clinic clients, outreach runs under the required privacy agreements — BAA/HIPAA, TCPA, and A2P 10DLC in practice — with patient communication held to clinical standards.

The result is outreach that feels like a courtesy call from a business you know, not a cold interruption. Permission-based reactivation of real customers, with every rule respected, is simply a better way to win back the people who already trusted you once.

What to Do If You're Unsure About Your Current Outreach Practices

Unsure if your current outreach practices might cross the line into telephone harassment? Taking a proactive audit can prevent costly compliance issues before they arise. Many service businesses unknowingly risk violations by overlooking critical details in their reactivation efforts, especially as regulations tighten. A simple self-check focused on key compliance areas can reveal gaps and protect your reputation.

Start by verifying your list source and consent records—ensure you're only contacting real customers with documented permission, as required under TCPA rules for autodialed or prerecorded calls to cell phones. Next, confirm your opt-out processing speed and method flexibility: since April 11, 2025, businesses must honor revocation requests within 10 business days (down from 30) and accept them through any reasonable means, like emails, calls, or verbal statements, not just "STOP" texts. Review your calling hours and Caller ID settings to avoid abusive patterns—calls before 8 a.m. or after 9 p.m. in the consumer's time zone are prohibited under the TSR, and you must transmit accurate Caller ID while keeping abandoned calls under 3% per campaign. Finally, audit your scripts to ensure they avoid threats, intimidation, profane language, or repeated calls intended to annoy, all explicitly defined as harassment under federal rules.

• Verify list source and consent documentation for every contact
• Confirm opt-outs are processed within 10 business days via any reasonable method
• Ensure calling occurs only between 8 a.m. and 9 p.m. local time
• Check that Caller ID is transmitted and abandoned calls stay under 3%
• Review scripts for abusive language, threats, or intent to harass

For businesses wanting a zero-risk way to validate their approach, CallMyCustomers offers a free list review that identifies compliance gaps in your existing data before any outreach begins. This service checks your list quality, consent validity, and readiness for permission-based reactivation—helping you turn past customers into booked work without violating TCPA or TSR rules. It’s a practical first step toward building a repeat revenue engine that’s both effective and fully compliant.