Cold calling tips that work without getting you sued

Last updated 2026-07-10

What actually makes cold calling work in outbound sales?

Cold calling works when you treat the first thirty seconds as a qualification call, not a pitch. Your only job in that window is to earn ten more seconds. You do it by saying your name and company, giving one sentence on why you are calling this person specifically, then asking a question that proves you did homework.

Research from RAIN Group found that 82% of buyers accept meetings with sellers who reach out, as long as the outreach is relevant ^[1]. That single number is the best answer to anyone who says cold calling is dead. It is not dead. Most of it is just done badly.

The fundamentals have not changed. A good list. A short opener. Real curiosity about the prospect's situation. The patience to call more than once. Most reps quit after one or two attempts, which is where the money leaks out. Outbound studies put the useful number of contact attempts somewhere between three and eight before you write a prospect off, though it swings hard by industry and list quality. Nobody has a clean randomized trial on this. Aggregate CRM data is the closest evidence, and it consistently lands above two attempts and below ten.

For a full primer on what cold calling means and where the practice sits in modern sales, that background frames everything below.

What are the TCPA rules that apply to cold calling?

The Telephone Consumer Protection Act (47 U.S.C. § 227) is the federal law that governs outbound calls and texts ^[2]. Three things about it matter to every outbound team.

First, calling a number on the National Do Not Call Registry without a prior business relationship or written consent is illegal. The FTC runs the registry. Violations expose you to up to $51,744 per call (the 2024 adjusted civil penalty cap under the FTC Act) ^[3], plus private TCPA suits at $500 to $1,500 per call ^[2].

Second, calling a cell phone with an autodialer or prerecorded message requires prior express written consent. The FCC's one-to-one consent rule, which took effect January 27, 2025, requires that consent come from a single identified seller instead of a shared lead form that routes the same yes to a dozen companies ^[4]. That change hurts if you buy leads.

Third, no calls before 8 a.m. or after 9 p.m. in the called party's local time zone. That is the federal floor. Some states are tighter.

The statute is blunt about cell phones. 47 U.S.C. § 227(b)(1) states it is unlawful "to make any call (other than a call made for emergency purposes or made with the prior express consent of the called party) using any automatic telephone dialing system or an artificial or prerecorded voice... to any telephone number assigned to a... cellular telephone service" ^[2].

For a closer look at what a cold call is in legal terms versus sales terms, the distinction matters when you size up your exposure.

How do you scrub a cold call list the right way?

List hygiene is not optional. It is the fastest way to cut your legal risk, and it costs almost nothing.

The steps are:

1. Register your organization with the FTC's National DNC Registry at donotcall.gov. You need a subscription to download the suppression list for your area codes ^[3]. 2. Pull a fresh suppression file before each campaign. The registry updates daily. A list you scrubbed thirty days ago has already decayed. 3. Suppress any number on your internal DNC list. Anyone who has asked you not to call stays off your dial list permanently, even if they never registered nationally. 4. Run numbers through a cell phone identification tool to flag mobile numbers that need consent for autodialed or prerecorded calls. 5. Check that numbers are still assigned to the same person. Reassigned number risk is real. The FCC's Reassigned Numbers Database lets callers check whether a number changed hands since consent was last obtained ^[5].

Teams that skip step five get sued by people who never consented but inherited a number from someone who did. The FCC built the database for exactly this problem, and courts have not been kind to callers who ignored it.

Scrubbing takes about fifteen minutes with the right tools. LeadCompliant's free DNC checker handles steps one through three for small teams without an enterprise compliance stack. One tool, run before every campaign, removes most of the low-hanging lawsuit risk.

Scrub step	Frequency	What it prevents
National DNC Registry	Before each campaign	FTC enforcement + private suits
Internal DNC list	Before each campaign	TCPA willful violation claims
Cell phone identification	At list build	ATDS/prerecorded message violations
FCC Reassigned Numbers Database	Quarterly or at list refresh	Wrong-party consent failures
Time zone validation	Per call	8 a.m. to 9 p.m. rule violations

When is the best time to make cold calls?

The legal answer is 8 a.m. to 9 p.m. in the prospect's local time zone, not yours. That federal floor comes from 47 C.F.R. § 64.1200 ^[6]. California has no tighter statutory window, but courts can still treat aggressive early-morning calling as evidence in a harassment or nuisance claim.

The practical answer is narrower. Aggregate CRM data sets published by HubSpot and others point to 10 a.m. to noon and 4 p.m. to 5 p.m. local time as the strongest windows for answer and conversion rates. Wednesday and Thursday beat Monday and Friday. Nobody has a definitive randomized trial here. The evidence is observational, drawn from large call data sets, but the pattern shows up across enough sources to treat as a working assumption.

Skip Monday morning. Prospects are in planning meetings, digging out of email, and generally unreachable. Friday afternoon is the same problem in reverse: people have mentally clocked out. Tuesday through Thursday, mid-morning and mid-afternoon, is where experienced reps put their heaviest volume.

One habit that saves lawsuits: convert your call time to the prospect's zone before dialing. Boston calling Phoenix, 4:30 p.m. your time is 1:30 p.m. theirs. A predictive dialer that ignores time zones will eventually put you in front of a judge.

What should a cold call script actually include?

A cold calling script is a scaffold, not a transcript. The reps who sound like robots are reading it word for word. The ones who convert use it to hit the right beats without forgetting anything.

A solid structure has five parts:

Opening (10-15 seconds): Name, company, one specific reason you are calling this person. "I noticed your team just opened a second location in Phoenix" beats "I'm calling about our sales software" every time.

Permission ask (5 seconds): "Did I catch you at an okay time?" Some trainers hate this because it hands people an exit. I think the exit is fine. If someone is genuinely slammed, getting off the call fast saves you both. The ones who say yes are now paying attention.

The problem statement (20-30 seconds): Describe the problem you solve in the language your prospect uses. This is where research pays off. Generic statements kill calls.

The question (open-ended, just one): Ask about their situation, not about whether they want to buy. "How are you handling X right now?" opens a conversation. "Would you be interested in Y?" closes it.

The ask (clear and specific): Ask for a next step, not a final decision. "Can we grab twenty minutes Thursday to walk through one thing that might be relevant?" is easier to say yes to than a demo request.

For specific language and examples, the cold call script resource covers variations by industry and prospect type.

One thing no script can fix: calling without a real reason to believe the prospect has a problem you solve. That is a list problem, not a script problem.

How do you handle the gatekeeper on a cold call?

Gatekeepers are doing their job. Treating them as enemies is wrong and it makes reps worse. Better frame: gatekeepers route calls, and if you give them a good reason, they route you correctly.

Be direct about who you are and who you want. Vague callers get screened. Confident, specific callers get through. "I'm calling for Sarah Chen, the VP of Operations. My name is James, I'm with [company]. It's about the expansion she announced last month." That is not manipulation. That is clarity.

Do not fake a relationship you do not have. "She's expecting my call" when she is not is a lie, and it gets you blacklisted with that company. Beyond being dishonest, it is bad practice.

When you cannot reach the decision maker, ask: "Who would be the right person to talk to about X?" You often get a name, sometimes a direct number, occasionally a live transfer. That information has value even if today's call goes nowhere.

Voicemail is a gatekeeper of a different kind. Keep messages short and specific. Name, company, one relevant sentence. Give your number clearly, once. Do not pitch. The goal of a voicemail is a callback, or at least name recognition when you call again.

What are the most common cold calling mistakes that cost sales?

The most expensive mistake is a bad list. Calling people with no plausible need for what you sell wastes everyone's time and trains your reps to expect rejection. A targeted list of three hundred relevant prospects beats a spray list of three thousand every time.

The second most expensive mistake is talking too much. Cold calls where the rep talks more than half the time almost never convert. Your job is to learn enough about the prospect's situation to know whether a follow-up is worth booking.

Other common failures:

Giving up too early. Most buying decisions happen after several touches. If your offer is genuinely relevant, one or two calls is not a real test.

Pitching before qualifying. If you do not know whether the prospect has the problem you solve, a pitch is premature and feels presumptuous.

Calling numbers that were never scrubbed. This is a sales mistake and a legal one. Wasted dials hurt efficiency. DNC violations hurt you in court.

Ignoring state laws. Florida, Texas, and others run telemarketing statutes on top of federal TCPA. Selling into a state you do not know without checking its rules is a real risk ^[7].

Running AI dialers without reading the FCC rules. Tools that use prerecorded or synthetic voices now fall under the FCC's 2024 ruling that AI-generated voices in robocalls require prior express written consent ^[8]. The ai cold calling landscape changed after that ruling.

What does TCPA liability actually look like for a small outbound team?

The real exposure is a lawsuit, not a regulator. A single call to a cell phone without consent is $500. A willful violation is $1,500. Multiply that across a few thousand calls in one campaign and you see why TCPA settlements routinely run into seven figures ^[9].

47 U.S.C. § 227(c)(5) gives private citizens the right to sue for DNC violations, and plaintiff's attorneys have built entire practices on it. You do not need the FTC or FCC to open a case. Any person who got your call and was on the DNC list, or never consented, can sue in small claims or federal court ^[2].

Recent case law helps. In Facebook, Inc. v. Duguid (2021), the Supreme Court narrowed the definition of an automatic telephone dialing system, a win for callers using click-to-dial or manual systems ^[10]. But the ruling left the consent requirement for prerecorded messages and the DNC rules fully intact. Plenty of teams read Duguid as broader relief than it gave.

For small teams, the usual threat is not a class action. It is a serial TCPA plaintiff, someone who collects settlements for a living, getting your call on a cell phone they put on the DNC list specifically to catch violators. There is a cottage industry of exactly this. Scrubbing your list is the cheapest insurance you can buy.

LeadCompliant's free compliance kit includes a call log template and a consent documentation guide sized for small teams. That paper trail is what separates a dismissible case from a settled one.

For more on how what is cold calling in sales maps to legal definitions, the overlap between sales practice and legal exposure is real.

How do state laws add to cold calling requirements?

Federal TCPA is the floor. States go further, and some go a lot further.

California's Automatic Dialing-Announcing Device statute (Cal. Public Utilities Code § 2871) predates TCPA and carries its own consent and identification requirements ^[11]. The California Consumer Privacy Act also governs how you collect and use prospect data, even for B2B outbound.

Florida amended its mini-TCPA in 2021 (Florida Telephone Solicitation Act, Fla. Stat. § 501.059). The amendment stretched the autodialer definition well past the federal one and added a private right of action at $500 per call, separate from federal TCPA ^[7]. Florida is now arguably the most plaintiff-friendly state for telemarketing suits.

Texas, New York, Indiana, and several others run state DNC lists on top of the federal registry. If you operate across states, you scrub against each applicable list, more than the federal one.

State	Key law	Notable restriction vs. federal
Florida	Fla. Stat. § 501.059 (2021)	Broader autodialer definition, $500/call private right of action
California	Cal. PUC § 2871 + CCPA	Separate ADAD consent rules, data use restrictions
Texas	Tex. Bus. & Com. Code § 302	State DNC list, must scrub separately
Indiana	Ind. Code § 24-4.7	State DNC list with own enforcement
New York	Gen. Bus. Law § 399-z	State DNC list, stricter identification requirements

The state picture is genuinely messy. If you sell heavily into more than three or four states, a compliance attorney review of your state-specific exposure is worth the cost.

What metrics should you actually track in a cold calling program?

Most teams track too many metrics and act on none. Three numbers actually matter: connect rate, conversation-to-meeting rate, and meeting-to-pipeline rate.

Connect rate tells you whether your list and timing are good. Below five percent on a manual-dial program, your list quality or calling windows need work. Above fifteen percent, you probably have a warm list rather than a true cold one, and your benchmarks should shift.

Conversation-to-meeting rate tells you whether your opener and qualifying questions work. Industry benchmarks for B2B cold calling put this between fifteen and thirty percent for experienced reps on a good list. Those numbers swing wildly by industry, price point, and how you define a qualified meeting. Trust your own data over any published benchmark.

Meeting-to-pipeline rate tells you whether your qualification is honest. If you book meetings that never turn into opportunities, you are either qualifying too loosely or handing off to the wrong account executive.

Track one more number the sales team usually ignores: your DNC hit rate, the percentage of dials that come back as numbers that should have been suppressed. A hit rate above one or two percent means your scrubbing process has a gap. That is compliance data more than operational data.

Record your calls. Not to hover over reps, but to catch compliance problems early. If a rep is making claims that could read as deceptive, a recording lets you fix it before it becomes a regulatory problem.

How does AI change cold calling tips and compliance requirements?

AI changed two things in cold calling: prospecting and dialing. On prospecting, AI tools score leads, predict call timing, and surface conversation triggers faster than manual research. That part is useful and carries no real compliance risk.

Dialing is a different story. The FCC issued a declaratory ruling in February 2024 stating that AI-generated voices used in calls fall under the TCPA's "artificial or prerecorded voice" prohibition ^[8]. Any call using a synthetic voice, even partially AI-generated, now requires prior express written consent to reach cell phones. That ruling reset the compliance posture for teams running AI voice tools.

Power and predictive dialers are a separate question. Duguid (2021) narrowed what counts as an automatic telephone dialing system, but a tool that uses a random or sequential number generator to store or produce numbers still meets the definition ^[10]. If your dialer can run without a human starting each individual call, check whether it meets the ATDS definition before you point it at cell phones.

For a fuller look at where ai cold calling sits after the 2024 FCC ruling, the compliance picture for AI-assisted outbound is still settling.

Honest summary: AI for research and prioritization is worth exploring. AI voice agents that replace human callers for outbound prospecting carry real consent risk under current FCC rules.

What is the right mindset for cold calling, and does it actually matter?

Yes, it matters. Not in a motivational-poster way. In an acoustic way. Prospects can hear tension, over-eagerness, and script-reading. They cannot see your face, but they hear everything else.

The reps who last treat cold calling as research, not persuasion. The goal of the call is to find out whether the prospect has a real problem that fits your offer. If they do, you earned the right to keep going. If they do not, you hang up faster and move on. That frame kills the pressure that makes calls sound desperate.

Rejection is structural, not personal. Call one hundred people who have a problem you solve, and maybe twenty take your call, maybe six agree to a meeting. The ninety-four who pass are not rejecting you. They are at the wrong stage, have the wrong problem, are locked into a vendor, or caught your call at a bad moment. That is not a verdict on your worth.

Persistence beats perfection. A rep who makes sixty calls with a decent opener will outwork a rep who makes twenty with a perfect one. Volume at minimum viable quality wins.

There is a floor, though. Calling DNC-listed numbers, dialing outside legal hours, or opening with a lie is not persistence. It is exposure. The compliance work and the sales work point the same way: call the right people, at the right time, with an honest reason for calling.

Frequently asked questions

What is the first thing to say on a cold call?

State your name and company in the first five seconds, then give one specific reason you are calling this person. Specificity separates calls that get cut off from calls that earn thirty more seconds. Avoid generic openers like "How are you today?" They signal a script is coming, and most prospects disengage immediately.

How many cold calls does it take to get a meeting?

There is no universal number. Most outbound research suggests reps need three to eight contact attempts across calls and voicemails before moving a prospect to inactive. Connect rates on cold calls typically run five to fifteen percent for B2B programs. Of connected conversations, roughly fifteen to thirty percent convert to a scheduled meeting, though these figures vary a lot by industry and list quality.

Is cold calling legal?

Yes, cold calling is legal. It is regulated by the TCPA (47 U.S.C. § 227), the FTC Telemarketing Sales Rule, and various state statutes. Legality depends on whether the number is on a DNC list, whether you obtained consent for cell phone calls using automated dialers or prerecorded messages, and whether you call within the 8 a.m. to 9 p.m. local time window.

Can you cold call cell phones?

You can call cell phones manually, meaning a human dials each number without an automatic dialing system. Using an autodialer or prerecorded message to call a cell phone without prior express written consent violates the TCPA. The FCC's one-to-one consent rule, effective January 27, 2025, also requires that consent name your specific company rather than any seller in a shared lead form.

What is the National Do Not Call Registry and do you have to use it?

The National DNC Registry is run by the FTC at donotcall.gov. The FTC's Telemarketing Sales Rule requires telemarketers to scrub their call lists against it before dialing. Calling a registered number without a prior established business relationship or written consent exposes you to up to $51,744 per call in FTC penalties plus $500 to $1,500 per call in private TCPA damages.

What times are you allowed to make cold calls?

Federal law (47 C.F.R. § 64.1200) prohibits calls before 8 a.m. or after 9 p.m. in the prospect's local time zone. Some states impose stricter windows. The zone that counts is where the prospect is, not where your team is calling from. A predictive dialer that ignores local time zones will produce violating calls automatically.

How do you get past a gatekeeper on a cold call?

Be specific and direct: give your name, company, and the name of the person you want. Vague callers get screened; callers with a clear reason get through more often. Never claim a personal relationship you do not have. If the decision maker is out, ask who the right contact is and whether they can share a direct number. That information is worth the call even if you do not connect.

What happens if you accidentally call a number on the Do Not Call list?

A single accidental call rarely triggers immediate enforcement, but it can trigger a private lawsuit. The TCPA lets individuals sue for $500 per violation with no FTC involvement. Documenting your scrubbing process, timestamps, and the source of the number is your best defense. Maintaining an internal DNC list and honoring any opt-out request immediately is required.

What is the difference between cold calling B2B and B2C compliance?

B2C calling faces stricter enforcement. The TCPA's prior express written consent requirement for autodialed calls to cell phones applies in both contexts, but B2C cold calling also triggers the FTC's Telemarketing Sales Rule fully. B2B calls to business lines (not an employee's personal cell) have somewhat more flexibility, but if you call employees on their mobile phones, the full TCPA cell phone rules apply regardless of the business context.

Do TCPA rules apply to text messages sent for sales purposes?

Yes. The TCPA treats SMS and MMS messages sent via an autodialer the same as calls. Prior express written consent is required to send marketing texts to cell phones. The FCC's one-to-one consent rule applies to texts as well as calls. Each non-compliant text is a separate violation at $500 to $1,500 per message, and class actions from mass texting campaigns have produced some of the largest TCPA settlements on record.

What records should you keep to protect yourself from a TCPA lawsuit?

Keep timestamped records of every DNC scrub you run, including the date, the area codes queried, and the tool used. Document consent for any cell phone contact where automated dialing or prerecorded messages were used, including the form, the date, and the IP address where possible. Retain call logs showing the number dialed, the caller, and the time in the prospect's local zone. These records are your defense if a suit is filed.

How do you write a cold calling opener that does not sound scripted?

The trick is preparation, not improvisation. Research the prospect before you call so your opener carries a specific, true detail about them or their company. Practice it aloud until the pacing sounds natural. A scripted opener sounds scripted when the rep is reading it live. Once the rep has internalized it and varies delivery by call, it does not. The content matters; the delivery matters more.

What cold calling tips apply specifically to real estate or insurance?

Both industries carry sector-specific overlays on top of TCPA. Insurance cold calling often involves state insurance department rules on solicitation. Real estate cold calling has to contend with MLS-related agent solicitation rules in some markets. Both are heavy targets for TCPA litigation because of high outbound volume. The basics still hold: scrub for DNC, get written consent for cell phone autodialing, and call within legal hours.

Does the cold calling definition change between sales and legal contexts?

Yes, and the difference matters. In sales, a cold call is any outbound contact to a prospect with no prior relationship. In TCPA terms, the legal significance turns on whether an autodialer was used, whether the number is a cell phone, and whether the contact is telemarketing versus informational. See the cold calling definition article for the full breakdown.

Sources

1. RAIN Group, Top Performance in Sales Prospecting study: 82% of buyers accept meetings with sellers who proactively reach out when the outreach is relevant
2. Cornell LII, 47 U.S.C. § 227 (TCPA statute text): TCPA prohibits autodialed or prerecorded calls to cell phones without prior express consent; private right of action at $500 to $1,500 per violation
3. FTC, National Do Not Call Registry for businesses: Telemarketers must scrub call lists against the National DNC Registry; civil penalty cap adjusted to $51,744 per violation under the FTC Act
4. eCFR, 47 C.F.R. § 64.1200, FCC Telemarketing rules: Federal regulations prohibit telephone solicitations before 8 a.m. or after 9 p.m. in the called party's local time zone
5. Florida Legislature, Fla. Stat. § 501.059 (Florida Telephone Solicitation Act): Florida's 2021 amendment expanded the autodialer definition beyond federal TCPA and added a $500 per call private right of action
6. FTC, Telemarketing Sales Rule enforcement page: TCPA class action settlements routinely run into seven figures; TSR enforced in conjunction with TCPA
7. Supreme Court of the United States, Facebook, Inc. v. Duguid, 592 U.S. 395 (2021): Duguid narrowed the ATDS definition: a dialer must use a random or sequential number generator to qualify; click-to-dial manual systems generally excluded
8. California Legislative Information, Cal. Public Utilities Code § 2871: California's Automatic Dialing-Announcing Device statute imposes its own consent and identification requirements for automated calls
9. FTC, Telemarketing Sales Rule summary and text: FTC Telemarketing Sales Rule governs B2C outbound calling and operates alongside TCPA