The Costly Myth of 'They Didn't Say No'

Many businesses still operate under the assumption that silence, an ongoing relationship, or a one-time sign-up grants ongoing permission to call and text. This misconception ignores the reality that consent must be actively maintained and can be withdrawn at any time—not just through prescribed channels like "text STOP." Under the FCC’s new TCPA Opt-Out Rule effective April 11, 2025, businesses can no longer limit opt-out methods to exclusive options; instead, any reasonable revocation request—whether via voicemail, email, or in-person communication—must be honored, with the burden of proof falling on the business to demonstrate unreasonableness.

Silence or non-response does not constitute valid consent, and treating it as such risks triggering TCPA violations that carry statutory damages of $500 to $1,500 per violation, per class member. As the CustomerScience playbook advises, teams should suppress outreach after a fixed number of non-responses, interpreting lack of engagement as a signal to stop rather than implied permission. Continuing to message after a customer signals disinterest—via unsubscribe, STOP, or any reasonable revocation method—invalidates prior consent and requires immediate cessation of all non-emergency calls and texts, especially when the opt-out occurs in response to an informational message.

To stay compliant, businesses must implement flexible opt-out mechanisms that accept any reasonable revocation method and process requests as soon as practicable, but no later than 10 business days after receipt. Consent must be specific, informed, and freely given, with detailed logs capturing timestamp, purpose, and provenance—treating unsubscribe and STOP events as first-class facts that terminate permission immediately. Separating marketing and informational message streams ensures that opting out of one does not inadvertently allow continued contact through the other.

For service businesses relying on reactivation campaigns, this means building consent rules directly into automation flows—using conditional splits to route customers by available consent (e.g., email if email consent exists, SMS if not)—so compliance is maintained throughout the campaign rather than applied retroactively. By honoring every reasonable opt-out request and maintaining verifiable consent records, businesses like those served by CallMyCustomers can avoid costly violations while preserving trust and deliverability. Reactivating known customers remains a powerful revenue driver—but only when grounded in clear, revocable permission.

Five Things That Do Not Count as Consent

Most businesses that get hit with TCPA penalties didn't ignore the rules — they misread what counts as consent. The FCC's new Opt-Out Rule, effective April 11, 2025, makes that misreading far more expensive, with statutory damages running $500 to $1,500 per violation, per class member, according to legal analysis from BCLP.

Here are five consent patterns that do not hold up — and why each fails.

1. Restricting opt-out to one channel. Telling customers to "text STOP only" no longer works. Under the Opt-Out Rule, consumers may revoke consent "in any reasonable manner," and the burden falls on the business to prove a revocation method was unreasonable. A customer who replies to an email, leaves a voicemail, or tells your front desk to stop has opted out.

2. Treating silence as agreement. Non-response is not consent. Practical reactivation guidance advises teams to "suppress after a fixed number of non-responses," treating silence as a signal to stop rather than implicit permission, per a customer experience playbook. GDPR-informed practice reinforces this: without a lawful basis, processing is impermissible.

3. Messaging after a STOP or unsubscribe. The sequence should end the moment a customer signals disinterest. Businesses must honor revocation within 10 business days maximum — and if the opt-out came in response to an informational message, all future non-emergency calls and texts must stop, including marketing. A five-minute clarification window is all that's permitted.

4. Bundled or vague consent with no records. Consent without a timestamp, purpose, and provenance doesn't meet standards. The playbook is explicit: log consent with all three, and store unsubscribe events as first-class facts. TCPA's statute of limitations means documentation should be retained at least four years.

5. Assuming one yes covers everything. Consent to a renewal reminder doesn't automatically cover marketing texts. Channel-specific consent routing — email if there's email consent, SMS if not — keeps "automation from outrunning compliance," as one case study puts it.

At CallMyCustomers, every reactivation campaign is built on permissioned lists with opt-outs honored immediately — because a win-back only works when the customer actually wanted to hear from you.

Want to see what your past-customer list can legally produce? Get a free list review before spending a dollar — your rate, setup, and campaign potential, reviewed together.

What Compliant Consent Looks Like After April 11, 2025

The good news is that compliant consent after April 11, 2025 is not complicated — it just has to be flexible, documented, and fast. The FCC's new TCPA Opt-Out Rule, which took effect that day, fundamentally rewrote how businesses must handle a customer's decision to stop hearing from them.

Under the new rule, consumers may revoke consent to robocalls and robotexts "in any reasonable manner," and businesses can no longer dictate an exclusive opt-out channel like "text STOP only." According to legal analysis from BCLP, there is a rebuttable presumption that any method a consumer uses — voicemail, email, a reply, or a conversation with your front desk — is reasonable. The burden falls on the business to prove otherwise.

Timing matters just as much as method. Businesses must honor revocation requests as soon as practicable and no more than 10 business days after receipt for marketing messages. But when a consumer revokes consent in response to an informational call or text, the rule is stricter: all future non-emergency contact must stop, including every marketing message, across both calls and texts regardless of the medium used.

For businesses running reactivation campaigns — win-back outreach, renewal reminders, old-quote follow-ups — that distinction is easy to get wrong. A customer who says "stop" to an appointment reminder has arguably cut off more than that reminder. This is why at CallMyCustomers, opt-outs are honored immediately and consent rules sit inside the campaign workflow, so automation never outruns compliance.

Documentation is the final pillar. Consent must be captured and logged with timestamp, purpose, and provenance, with unsubscribe and STOP events stored as first-class facts, as recommended in a practical reactivation playbook. Because the TCPA carries a statute of limitations of at least four years, businesses should retain consent records for a minimum of four years — long after the campaign that generated them has ended.

The stakes for getting this right are real. TCPA violations run $500 to $1,500 per violation, per class member, which means a single campaign that ignores a reasonable opt-out can escalate into a six-figure class action quickly. A case study of consent-based campaign routing shows the practical answer: a conditional split routes each customer by consent — email if there is email consent, SMS if not — so permission is checked before every send, not audited after.

Compliant consent, in short, looks like this:

• Any reasonable revocation method is accepted, with the burden of proof on the business
• Marketing revocations are honored within 10 business days at most
• Revocations of informational messages stop all non-emergency contact immediately
• Every consent is logged with timestamp, purpose, and provenance
• Records are retained at least four years to match the TCPA limitations window

Businesses that build these rules into their outreach from day one protect both their customers and the repeat revenue those relationships generate.

Building Consent Rules Into Your Outreach — Not Bolted On After

Building consent rules into your outreach from the start — not as an afterthought — ensures compliance travels with every message. When service businesses treat opt-out signals as first-class facts captured and stored with timestamp, purpose, and provenance, they create a foundation where automation never outruns compliance. This approach directly supports the FCC’s TCPA Opt-Out Rule, which places the burden on businesses to prove a revocation method was unreasonable, recognizing that consumers may withdraw consent "in any reasonable manner" according to legal experts.

Routing each customer by consent inside the automation flow — such as sending email when email consent exists and SMS only when it does not — builds to the strictest common denominator so teams never manage exceptions at send time. As demonstrated in real-world implementations, a conditional split that routes customers by consent status keeps compliance embedded in the workflow, ensuring that automation never outruns compliance per operational case studies. This proactive design prevents costly oversights, especially given that TCPA violations carry statutory damages of $500 to $1,500 per violation, per class member per regulatory analysis.

For CallMyCustomers’ US service business clients, this means structuring win-back, renewal, and seasonal reminder campaigns around verified consent logs rather than assumptions. Capturing STOP or unsubscribe events as immediate, actionable facts — not buried in analytics — allows systems to honor revocation requests "as soon as practicable and no more than 10 business days after receipt" as required by the FCC rule. By building these rules into the flow from list review to follow-up, businesses turn compliance into a competitive advantage: one that protects revenue, preserves trust, and keeps repeat customers engaged without risk.

Permission-Based Reactivation: Compliance as a Growth Advantage

Permission-Based Reactivation: Compliance as a Growth Advantage

True consent isn’t just a box checked—it’s an ongoing agreement that can be withdrawn at any time, in any reasonable way. When businesses treat silence as approval or restrict opt-outs to a single channel like “text STOP only,” they risk violating TCPA rules that now place the burden of proof squarely on them. The FCC’s new Opt-Out Rule makes clear that any revocation method a consumer uses is presumed reasonable unless the business can prove otherwise.

This shift transforms compliance from a cost center into a competitive advantage. Reactivating existing customers costs roughly one-fifth of acquiring new ones—a efficiency that turns permission-clean lists into revenue engines. CBC’s win-back campaign achieved a 36% success rate by re-engaging lapsed subscribers with targeted, consent-respecting outreach, while Keeper Tax converted 20% of inactive users into paying customers within the first month of their campaign.

At CallMyCustomers, every message begins with your approval. We honor opt-outs immediately, maintain separate tracks for marketing and informational outreach, and build consent rules directly into our workflows—so automation never outruns judgment. Before any fee, we provide a free list review to show you exactly what your dormant customers are worth. See what your list can do—no obligation, no surprise. Get your free list review today.