TCPA consent requirements for missed call texting: what you need to know

Last updated 2026-07-10

What does the TCPA actually require before you text someone?

The Telephone Consumer Protection Act, codified at 47 U.S.C. § 227, bars texts to a mobile phone sent with an automatic telephone dialing system (ATDS) or an artificial or prerecorded voice unless you have the recipient's prior express consent ^[1]. Consent is the whole ballgame. Everything else is detail.

For purely informational texts, the FCC allows prior express consent, which can be oral or, in narrow cases, implied from an existing business relationship. The moment your text carries any marketing content, the bar jumps. Now you need prior express written consent. Written does not mean paper. It means a signature, electronic or physical, that clearly authorizes you to send promotional messages to a specific number ^[12].

The FCC's 2012 amendments tightened this hard. Before 2012, telemarketers could point to an established business relationship to justify autodialed calls and texts. That exemption is gone for calls and texts to mobile numbers. If you were banking on that loophole, it closed over a decade ago ^[4].

So what counts as valid written consent? The FCC says it must include the consumer's phone number, a clear and conspicuous disclosure that they are authorizing calls or texts from a specific company, and an acknowledgment that consent is not a condition of purchase ^[12]. Courts enforce all three strictly.

Does a missed call count as consent to text that person back?

No. A missed call from someone's number does not give you consent to text them, and no federal court or FCC order has held otherwise.

The logic some companies lean on: the person called us, so they consented to be contacted. That logic fails for two reasons. A missed call is not a signature or any form of express written authorization. And the FCC requires consent to be clear and conspicuous, which a one-ring hangup plainly is not ^[12].

There is also a technical wrinkle. If you run software that detects a missed call and fires a text in response, that system may well qualify as an ATDS under the reading many courts apply. The Supreme Court narrowed the ATDS definition in 2021 to systems that use a random or sequential number generator ^[3], but even under that narrower reading, purpose-built missed-call-response platforms can still qualify depending on how they store and dial numbers. Know what your vendor's system actually does. The sales deck does not count.

Here is the short version. A missed call is evidence of interest, nothing more. Treat it as a warm lead, not a consent record.

What types of texts require different levels of consent?

The TCPA sorts texts into two buckets, and the consent bar is very different for each.

Text Category	Consent Required	Examples
Purely informational (no marketing)	Prior express consent	Appointment reminders, fraud alerts, order updates
Marketing or promotional	Prior express written consent	Sales offers, discount codes, missed-call follow-ups asking to buy
Emergency messages	No consent needed (narrow)	Imminent safety threats only
Package delivery notifications	Prior express consent, specific rules	FedEx/UPS-style delivery alerts

A missed-call follow-up text is almost always marketing. Even if you phrase it as "Hey, we saw you called, how can we help?" a court reads context. If your company sells something and that text exists to re-engage a prospect, it is a commercial message. Dress it up however you like. The substance controls ^[4].

One real gray area. If the missed call came from an existing customer calling your support line, and you text back with a case number or callback confirmation, that might qualify as informational. Get a lawyer's eyes on the specific fact pattern before you rely on that line.

What penalty can you face for texting without proper consent?

The TCPA sets $500 per violation, meaning per text, for negligent violations. If a court finds the violation willful or knowing, that climbs to $1,500 per message ^[1]. There is no cap per plaintiff or per campaign.

A single blast to 10,000 people without proper consent is $5 million to $15 million in exposure before anyone files a class action. And these cases do get certified as classes. Settlements in TCPA class actions run into the millions even for companies that thought their consent practices were clean.

Recent examples make it concrete. UnitedHealthcare paid $2.5 million to settle TCPA claims. Credit One Bank faced a major TCPA lawsuit that ended in a substantial settlement. Truist Bank settled TCPA class action claims too. These are not fringe plaintiffs chasing ambulances. They are well-funded firms running automated discovery tools to find non-compliant texters at scale.

Private plaintiffs can sue with no regulatory complaint first. The FCC can bring its own enforcement actions. State attorneys general have independent authority under many state laws. You can face all three at once.

How does the FCC's 2024 one-to-one consent rule change missed-call texting?

The FCC adopted a Report and Order in December 2023 (effective in 2025) requiring TCPA consent to be "one-to-one," meaning a consumer's consent authorizes contact from one specific seller, not a broad list of marketing partners ^[5]. That ended the lead-generation trick of collecting consent through a single opt-in form listing dozens of companies.

For missed-call texting, the implication is direct. If a lead generator collected your consent and then sold it to you as part of a list, that consent is almost certainly invalid under the new rule. You need consent that names your company.

The order requires consent to be, in the FCC's words, "logically and topically associated" with the website or app where it was obtained ^[5]. A generic inquiry form on a third-party site does not create topically associated consent for your HVAC company to send a missed-call text. A lot of outbound teams have not absorbed this yet.

If you bought leads and have been texting them without checking how consent was collected, this is where your exposure lives.

What does valid written consent actually look like for missed-call follow-up texts?

Valid prior express written consent for marketing texts needs to check four boxes, based on the FCC definition at 47 C.F.R. § 64.1200(f)(9) ^[12]:

1. The consumer's phone number is provided directly by the consumer. 2. There is a clear disclosure that authorizing texts is optional, not required to get service or complete a purchase. 3. The consent names the specific company that will be texting. 4. The consumer affirmatively agrees through a signature, checked box, or documented electronic action.

For a missed-call follow-up workflow, the cleanest path is collecting written consent before the person ever calls you. Put a checkbox on your web form or quote request page. When they submit, your system records the timestamp, IP address, phone number, and consent language. If they call from that number later, you already hold a consent record tied to that contact.

No pre-call consent? Your safest move is to call them back rather than text. Calls made by a live agent without an ATDS, to a number not on the National Do Not Call Registry, carry a different (though not zero) risk. A human calling a human is lower risk than automated texting. Check the DNC Registry first anyway.

LeadCompliant's free consent record checker helps you verify whether your intake form captures the required elements before you run a missed-call campaign.

Can you text someone who called you if they are an existing customer?

An existing customer relationship offers less protection than most people assume. The FCC killed the established business relationship exemption for autodialed texts to mobile numbers in 2012 ^[4]. Being a customer does not, by itself, authorize marketing texts.

What it can do is make certain informational texts lower risk. If a customer calls your support line and hangs up before reaching an agent, a text saying "We missed your call, a rep will call you back within 2 hours" is arguably informational. It confirms a callback and pushes no product. Courts have generally treated pure service notifications more leniently, though no case has handed out a blanket blessing.

The moment your text to a customer includes an offer, a promotion, a discount, or any sales language, you are back to needing prior express written consent. "We missed your call, and while we have you, here is 10% off your next order" crosses the line.

Document everything. If you run missed-call texting to a customer base, keep records showing how and when you collected written consent for marketing texts from each one. A consent record from the original sign-up does not expire unless revoked, but you have to be able to produce it.

How do you revoke consent for missed-call texts, and what happens if you ignore it?

Consumers can revoke TCPA consent at any time, by any reasonable means. That is not a policy preference. The FCC confirmed it in a 2015 declaratory ruling and courts have applied it broadly ^[6]. A reply of STOP, a verbal request during a call, a written email, or a voicemail telling you to quit texting all count as valid revocation.

Under the FCC's more recent rules, companies must honor opt-out requests within 10 business days ^[5]. In practice, most compliant platforms process STOP requests instantly. If yours takes longer, fix it.

Ignoring a revocation is one of the fastest ways to turn a $500 violation into a $1,500 one. Courts have found willfulness where a company kept texting after a clear STOP request. That is not a close case.

For missed-call texting: if someone who previously gave consent calls, you miss the call, and you go to send a follow-up text, check your opt-out list before sending. Not after. The consent database and the suppression list have to talk to each other in real time. If they do not, you will text someone who revoked consent, and you will lose that fight.

What are the state law considerations on top of federal TCPA rules?

Federal TCPA sets the floor, not the ceiling. Several states are stricter.

Florida's Telephone Solicitation Act (FTSA) requires written consent before any autodialed text to a Florida resident and allows $500 per violation with a private right of action. Florida plaintiffs drove a wave of litigation in 2021 and 2022 because the law is easier to prove than TCPA in some respects ^[7].

California's CCPA and related regulations stack data privacy rules on top of consent. If you text California residents, how you collected, stored, and use their phone number may implicate CCPA even when your TCPA consent is solid.

Washington, Oklahoma, and a handful of other states have their own telephone solicitation statutes with independent penalties. Some demand affirmative written consent for any commercial text. Some run shorter opt-out windows than federal rules.

If your missed-call campaign is national, know where your contacts live and apply the strictest applicable rule for each one. Running everyone through the federal standard alone is not enough if Florida or California sits in your list. See recent TCPA news for state-level developments as they land.

What records do you need to keep to defend a TCPA consent claim?

When a plaintiff sues you for texting without consent, the burden shifts to you to prove you had it. The FCC has said companies bear the burden of showing they complied with consent requirements ^[12]. No record, and you lose on that element.

At minimum, keep these for every contact you text:

• The exact consent language the consumer agreed to, verbatim
• Timestamp and date of consent collection
• IP address and session data if collected online
• The phone number as provided by the consumer
• Any later opt-out requests and when they were processed
• The date and content of every text you sent to that number

For missed-call follow-up workflows, also keep a log showing the inbound call came from the consented number, more than the same area code or a spoofed caller ID. Caller ID can be faked. If your system matches a missed call to a consent record by caller ID alone, that match can be challenged.

Hold these records for at least four years. The TCPA's statute of limitations runs four years under 28 U.S.C. § 1658, so a 2025 campaign can generate suits through 2029 ^[8].

LeadCompliant's compliance kit includes a consent record template and a suppression list audit checklist built around the FCC's documentation requirements.

What is a safe workflow for texting back after a missed call?

There is no zero-risk approach to outbound marketing. But here is a workflow a reasonable compliance attorney would not immediately condemn.

Step 1: Collect written consent before first contact. Your web form, landing page, or intake process should carry a compliant opt-in that names your company, states you will send texts, and is not bundled with dozens of other sellers.

Step 2: When a call comes in, check the caller's number against three lists. Your consent database (do you hold written consent for this number?). Your opt-out and suppression list (have they revoked?). And the National DNC Registry if you have no existing business relationship ^[9].

Step 3: If consent is confirmed and not revoked, and the number is not suppressed, send one follow-up text tied clearly to the reason they contacted you.

Step 4: Include a clear opt-out in every text. "Reply STOP to stop" is standard. Process STOP replies immediately.

Step 5: Log everything. Consent record, missed-call event, text sent, timestamp.

Step 6: Do not send a second text if the first gets no reply. Repeated texts to a non-responsive number raise your exposure and, in some states, can independently violate harassment statutes.

This is more effort than firing an auto-text on every missed call. That is the point. The shortcut is where the liability lives. For more on text messaging marketing compliance, the same principles apply at scale.

What have courts actually decided about automated follow-up texts?

Courts have consistently held that automated texts sent without proper written consent violate the TCPA, even when they answer consumer-initiated contact. The key word is automated.

In Marks v. Crunch San Diego, the Ninth Circuit held in 2018 that an ATDS includes any system with the capacity to store and automatically dial numbers, a broad reading that swept in many CRM-integrated text platforms ^[10]. Facebook v. Duguid narrowed that at the Supreme Court in 2021 ^[3], but whether a given missed-call text platform qualifies as an ATDS still gets litigated case by case.

A concrete settlement example: Cash App faced a TCPA class action over automated messages, which shows even technology-forward companies carry this exposure. Albertsons and Safeway settled TCPA claims over text marketing. These settle because proving individual consent records at scale is genuinely hard, not because the companies were reckless.

The practical read from the case law: the riskiest pattern is a platform that ingests a missed-call event, looks up the number in a list, and fires a pre-written text with no human involved. That is exactly what the TCPA was built to reach. Add a human review step, even a light one, and the analysis shifts.

How do you verify your consent process is actually TCPA-compliant before running a missed-call campaign?

Before you launch any missed-call text campaign, run this checklist yourself.

First, pull the exact consent language on your opt-in form. Read it aloud. Does it say texts may be sent to the number provided? Does it name your company? Does it say consent is not required to purchase? If any of those are missing, fix the form before you send a single text.

Second, audit your lead list. Where did each contact's number come from? If any came from a third-party lead generator, find out what consent language was shown. Under the FCC's one-to-one consent rule, generic multi-seller forms no longer transfer consent to you ^[5].

Third, test your suppression list integration. Actually send a STOP reply from a test number and confirm within the hour that the number lands in suppression. Then try to text that suppressed number and confirm your system blocks it.

Fourth, review your text content. Does the message do anything beyond confirming the callback? If it names a product, a service, a price, or a promotion, it is marketing and needs written consent.

Fifth, document who owns this in your organization. TCPA compliance without an owner is a policy nobody follows. Name a person, give them authority to halt campaigns, and make sure they know the rules.

Want an outside read on your form language? LeadCompliant's free TCPA consent checker reviews the key elements without asking you to share your full database.

Frequently asked questions

Is texting someone back after a missed call legal under the TCPA?

Only if you have prior express written consent for marketing texts, or prior express consent for purely informational ones. A missed call by itself is not consent. If your follow-up text promotes your business in any way, you need written consent that names your company and was signed by the recipient. Without it, each text is a potential $500 to $1,500 violation.

Does a missed call create an implied consent to text under federal law?

No. The FCC has not recognized a missed-call implied consent doctrine, and no federal appellate court has either. Implied consent under the TCPA is narrow. It applies mainly where a consumer provides their number in a context that clearly contemplates follow-up, such as submitting a form requesting a callback. A missed call, especially one you cannot verify was intentional, does not meet that standard.

What is prior express written consent and how do I collect it?

It is a signed agreement, electronic or paper, where the consumer provides their phone number and authorizes a specific company to send marketing texts to it, with an acknowledgment that consent is not required to buy anything. Collect it via a web form checkbox, a signed agreement, or a documented electronic signature. Keep the timestamp, IP address, phone number, and exact consent language in your records.

Can I use an existing customer's phone number to send a missed-call follow-up text?

For informational texts (confirming a callback, providing a case number), the risk is lower, though not zero. For any text with marketing content, you still need prior express written consent regardless of the customer relationship. The FCC eliminated the established business relationship exemption for autodialed mobile texts in 2012. An old purchase does not authorize new marketing texts.

What changed with the FCC's 2024 one-to-one consent rule for text campaigns?

TCPA consent must be one-to-one: one consumer's consent authorizes contact from one named seller. Consent collected through a lead generator's form that listed multiple companies no longer transfers to you. If your lead lists were built under the old shared-consent model, they need to be reconsented before you text anyone from those lists.

How many texts can I send to a missed call before it becomes a TCPA violation?

Even one text without valid consent is a violation. Volume makes it worse financially but does not change the legal standard. With no consent record, the first text is already a $500 to $1,500 exposure. Sending multiple follow-up texts to a non-responsive number also raises the risk of a willfulness finding, which courts have used to justify the $1,500 treble amount.

Does the Facebook v. Duguid Supreme Court decision make missed-call texting safer?

Somewhat, but not enough to rely on. Facebook v. Duguid (2021) narrowed the ATDS definition to systems using a random or sequential number generator, which excludes some CRM-based texting tools. But many missed-call automation platforms store numbers and fire texts automatically in ways courts still scrutinize. The consent requirement exists independently of ATDS status for some text types, and state laws often apply regardless of the ATDS question.

What should I do if someone replies STOP to my missed-call follow-up text?

Process the opt-out immediately and add the number to your suppression list before any further texts go out. The FCC requires opt-out requests to be honored within 10 business days, but best practice is instant processing. Continuing to text after a STOP reply is strong evidence of a willful violation, which courts have used to impose the $1,500 per-message penalty rather than the base $500.

Do state laws add requirements beyond the federal TCPA for missed-call texts?

Yes. Florida's FTSA allows a private lawsuit for any autodialed text without written consent and imposes $500 per violation independently of federal law. California's CCPA adds data use requirements. Several other states have their own telephone solicitation statutes. If your campaign reaches Florida or California residents, you must satisfy those states' requirements on top of federal TCPA rules.

How long should I keep consent records for missed-call text campaigns?

At minimum four years, matching the TCPA's statute of limitations under 28 U.S.C. § 1658. A campaign run today can generate lawsuits through 2029. Keep the consent language, timestamp, IP address, phone number, all texts sent, and all opt-out records. If you cannot produce a consent record when sued, you bear the burden of proving compliance and will likely lose that element.

Is a live human callback safer than an automated text after a missed call?

Generally yes, with caveats. A live agent calling back a number not on the National DNC Registry, without an ATDS, faces a different and usually lower risk profile than automated texting. But you still need to check the DNC Registry if there is no existing business relationship, and some state laws restrict live calls too. A human callback is not automatically compliant, but it sidesteps the ATDS question entirely.

What happens if a lead generator sold me a list and claimed the contacts consented?

You are still liable if the consent does not meet TCPA standards. The FCC's one-to-one consent rule makes shared-consent lead lists especially risky. If the lead generator used a form that named multiple companies or did not clearly name yours, that consent does not cover you. Get the exact consent language in writing from your vendor, and if it does not pass scrutiny, do not text those contacts.

Can a TCPA plaintiff sue me for missed-call texts without first complaining to the FCC?

Yes. The TCPA creates a private right of action that requires no prior regulatory complaint. A plaintiff can file directly in federal or state court. Class actions are common because each text is a separate violation, which makes the aggregate damages large enough to attract plaintiff-side firms. The FCC and state attorneys general can also bring independent enforcement actions on top of private suits.

What is the difference between transactional and promotional texts in the TCPA context?

Transactional or informational texts (appointment reminders, delivery confirmations, account alerts) require prior express consent, which can be somewhat looser. Promotional texts, meaning any message designed to encourage a purchase or advertise a product, require prior express written consent with a signature. Courts look at the substance of the message, not how you label it internally. A missed-call text that names your services or pushes a sale is promotional by nature.

Sources

1. U.S. Government, 47 U.S.C. § 227 (TCPA statute text): TCPA prohibits autodialed or prerecorded texts to mobile phones without prior express consent; $500 per violation, $1,500 if willful
2. U.S. Supreme Court, Facebook, Inc. v. Duguid, 592 U.S. 395 (2021): Supreme Court narrowed ATDS definition to systems using random or sequential number generators, excluding some CRM-based texting platforms from that classification
3. FCC, 47 C.F.R. § 64.1200 (TCPA implementing regulations): FCC regulations eliminated the established business relationship exemption for autodialed mobile texts and distinguish informational from marketing messages for consent purposes
4. Florida Legislature, Florida Telephone Solicitation Act, Fla. Stat. § 501.059: Florida FTSA requires written consent before autodialed texts to Florida residents and provides $500 per violation private right of action independent of federal TCPA
5. U.S. Code, 28 U.S.C. § 1658 (statute of limitations for federal civil claims): Federal four-year statute of limitations applies to TCPA claims, meaning campaigns from 2025 can generate lawsuits through 2029
6. FTC, National Do Not Call Registry: Sellers must check the National DNC Registry before contacting consumers without an existing business relationship
7. Ninth Circuit Court of Appeals, Marks v. Crunch San Diego LLC, 904 F.3d 1041 (9th Cir. 2018): Ninth Circuit held ATDS includes systems with capacity to store and automatically dial numbers, a broad reading later narrowed by Facebook v. Duguid at the Supreme Court level
8. U.S. Code, 47 C.F.R. § 64.1200(f)(9), definition of prior express written consent: FCC regulation requires prior express written consent to include consumer-provided phone number, clear disclosure of autodialed/prerecorded message authorization, and confirmation consent is not required for purchase