DNC do not call registry: what it is, how it works, and what it costs to ignore

Last updated 2026-07-09

What is the DNC registry and who runs it?

The National Do Not Call Registry is a free federal database run by the Federal Trade Commission where U.S. consumers register their phone numbers to opt out of most telemarketing calls. Congress created it through the Do-Not-Call Implementation Act of 2003 and directed the FTC to build it under the Telemarketing Sales Rule (16 CFR Part 310). ^[1] The FCC enforces the same requirements against carriers and telemarketers under 47 USC 227, the Telephone Consumer Protection Act. ^[2]

Two agencies, one list. That dual-agency setup confuses a lot of teams. The FTC owns the database and handles most civil enforcement against telemarketers. The FCC keeps its own Do Not Call rules under the TCPA and can bring separate actions. Both can fine you for the same call.

More than 249 million phone numbers sit on the list, according to the FTC's most recent Data Book. ^[3] That count has grown every year since 2003. If your outbound universe touches residential U.S. numbers, you are almost certainly dialing into that pool unless you scrub first.

The registry is not the same as the internal do-not-call list every company has to keep on its own. Federal rules require each telemarketer to maintain a company-specific list of people who asked not to be called again, whether or not those numbers sit on the national registry. You can read more about the broader do not call list framework if you want to see how those two obligations fit together.

How does the DNC registry actually work for consumers?

Registering a number is free and takes about two minutes at donotcall.gov. A consumer enters a home or mobile number plus a valid email address, confirms through a follow-up email, and the registration becomes active within 31 days. ^[9] There is no expiration date. Once registered, a number stays on the list until the consumer removes it or the number gets disconnected and reassigned.

Mobile numbers count. The FTC settled this years ago, and the registry has accepted wireless numbers since launch. If you have heard that cell phones live on a separate list or that people must re-register periodically, that is wrong. The mobile phone do not call list question comes up constantly, and the short answer is simple: same list, same protections.

Consumers report violations directly at donotcall.gov. Those complaints feed the FTC's enforcement database and have driven real cases. The agency reads complaint patterns to spot high-volume violators, so a cluster of reports about one caller gets attention fast.

Which businesses must check the DNC registry before calling?

Any seller or telemarketer making outbound telephone solicitations to residential customers in the U.S. has to check the registry. The Telemarketing Sales Rule prohibits initiating an outbound call to any number on the registry. ^[1] The rule covers landlines and mobile numbers alike.

The exemptions are narrow. Political organizations, charities, and pure telephone surveyors sit outside the national registry requirement. So do calls under an established business relationship (EBR), but that one has teeth: under the FTC rule, an EBR runs 18 months after the last purchase or transaction, or three months after a consumer inquiry. ^[1] The FCC's TCPA-based EBR reads slightly differently, which is one of those spots where dual-agency compliance gets genuinely annoying.

B2B calls generally fall outside the national registry. Dial a business phone to reach a business decision-maker and the registry does not apply. Dial someone's personal cell for a business purpose and the analysis gets messier under the TCPA's separate autodialer and prerecorded voice rules.

Insurance agents, mortgage companies, home alarm sellers, and other financial services firms doing outbound calling are fully covered. Real estate brokers calling FSBOs (for-sale-by-owner listings) have floated various exemption theories; courts have not been reliably sympathetic. When in doubt, assume your calls are covered.

Teams that want the telemarketer-specific detail can check the do not call telemarketer list article, which breaks down exactly which call types trigger the scrubbing requirement.

How often do telemarketers have to scrub against the registry?

Scrub at least every 31 days. The FTC's Telemarketing Sales Rule bars calling a number that was on the registry when you last downloaded the list, so if you pull the file every 31 days and someone registers on day 15, your next download cycle catches them. ^[1] Most compliance-conscious teams pull the list more often, especially on high-volume campaigns.

The 31-day rule is a floor, not a target. Monthly is the minimum. "We only check quarterly" is not a defense, and regulators have never treated it as one.

The FCC's version under the TCPA works the same way with slightly different wording. FCC rules at 47 CFR 64.1200 prohibit calls to registered numbers, and the FCC has treated a reasonable honoring window as roughly 30 days. ^[4]

There is a grace period baked in: you have a defense if the number joined the registry fewer than 31 days before the call. That defense disappears the moment you download a list that includes the number and keep calling anyway.

How do you access and download the national DNC list?

Businesses download the registry through the FTC's dedicated portal at telemarketing.donotcall.gov, and consumer registration lives at donotcall.gov. ^[1] Access requires an organization account. You pull numbers by area code, and there is a fee structure for larger downloads.

Access is free for the first five area codes each year. Additional area codes cost $75 each, and a full national file is capped (the FTC has set it around $18,935, and the figure adjusts annually). ^[3] If your calling is geographically narrow, you may only need a handful of area codes and pay nothing.

The download arrives as a text file of phone numbers. Your dialer or CRM then has to suppress those numbers before you call. That suppression step, more than the download itself, is where most teams fall down. Pulling the file and forgetting to load it in time does not satisfy the rule.

Want a step-by-step on download and suppression? The how do i get the do not call list article walks through it. State registries run separately; Florida and Indiana, for instance, keep their own lists with their own portals and fees. The Florida do not call list and Indiana do not call list articles cover those.

What are the penalties for calling a number on the DNC registry?

The FTC can seek civil penalties up to $51,744 per violation under the Telemarketing Sales Rule as of 2024. ^[5] The FCC can impose forfeitures under the TCPA, and private plaintiffs can sue for $500 per violation or up to $1,500 per willful violation under 47 USC 227(c)(5). ^[2] The numbers add up fast.

For small teams, the TCPA's private right of action is the bigger day-to-day risk. The FTC and FCC are resource-constrained and go after large-scale or egregious violators. Class action plaintiff firms are not resource-constrained. A single campaign dialing a few thousand DNC-listed numbers can produce exposure well into the millions.

The FCC has issued forfeitures topping $100 million against robocall operations, and the FTC has secured multimillion-dollar judgments against repeat violators. ^[6] The Supreme Court's 2021 decision in Facebook, Inc. v. Duguid narrowed the TCPA's autodialer definition, which trimmed some autodialer exposure. But DNC claims under 47 USC 227(c) are separate from the autodialer provisions and that ruling left them untouched. ^[7]

For how these penalties play out in practice, see the dnc registry penalties breakdown.

Here is how the enforcement tracks compare:

Enforcement track	Authority	Max per-call exposure	Who brings it
FTC civil penalty	16 CFR Part 310	$51,744	FTC
FCC forfeiture	47 CFR 64.1200	$23,000+ (base; can be higher)	FCC
TCPA private suit	47 USC 227(c)(5)	$1,500 (willful)	Any consumer or class
State AG action	Varies by state	Varies; often $10K-$25K/violation	State AG

What exemptions exist, and are any of them reliable?

The exemptions that actually hold up are narrower than most callers assume. Here is the honest rundown.

Established business relationship (EBR): You can call a registered number if the consumer bought from you, leased from you, or completed a financial transaction with your company within the past 18 months. You can also call within three months of a consumer inquiry. But the consumer can still tell you to stop, and the moment they do, the EBR dies. ^[1] It is a defense, not a license.

Prior express written consent: If the consumer gave you clear written permission to call their registered number, you have a defense under both FTC and FCC rules. This is the cleanest exemption and the one that demands real documentation. A screenshot of the web form with the consent language, the timestamp, and the IP address is the minimum you need to defend it.

Nonprofit and charitable solicitation: Calls by or on behalf of tax-exempt 501(c)(3) organizations sit outside the national registry, and so do political calls. The exemption falls apart if a for-profit fundraiser is calling on the charity's behalf for its own commercial gain.

Surveys: A pure survey with no sales pitch at any point is exempt. The instant the call pivots toward selling something, the exemption is gone.

The exemptions that do not work: "We only called their business." If the number is on the DNC list and doubles as a business number, you are in a gray zone; if it is a personal cell, the registry applies regardless of why you called. "We didn't know they were on the list." Ignorance is not a defense once you had the duty to check.

Do state DNC lists add extra requirements on top of the federal registry?

Yes, and in some states the extra requirements are substantial. About a dozen states run their own Do Not Call registries or DNC statutes that go beyond federal rules, and some ban calls the federal rules would allow. ^[8]

Florida's list, for example, covers both residential and mobile numbers, and Florida's Telemarketing Act sets stricter call-time windows (8 a.m. to 9 p.m.) and requires registration with the state before you conduct telemarketing. Florida enforces hard. Pennsylvania and Indiana also run state-level lists. Texas has no separate list but keeps its own Business and Commerce Code provisions on telemarketing.

The practical rule is short. Call into a state with its own list, and you scrub against that state list on top of the federal registry. Federal law does not preempt state laws that give consumers more protection. Section 227(e) of the TCPA preserves stricter state requirements. ^[2]

Check the Florida do not call list, Indiana do not call list, and do not call list pa articles for state detail. These are not edge cases. Florida and Pennsylvania carry big populations and active enforcement.

What records do you need to keep to defend a DNC compliance program?

If you get sued or investigated, documentation is everything. The Telemarketing Sales Rule requires sellers and telemarketers to keep records of their scrubbing activity, the version of the list they used, and when they downloaded it. ^[1] There is no single prescribed format, but your records have to show you checked the number against a current list before dialing.

Here is the minimum documentation a defensible DNC program keeps.

A timestamped download receipt or confirmation from the FTC portal showing when you pulled the list. A record showing the number in question was not on that version of the list (or was not present until after your download date). Your consent documentation if you rely on an EBR or written consent exemption. Your company-specific DNC list and proof the number was not on it either.

Some teams also keep call logs showing the number of rings, whether the call connected, and what was said. That matters in litigation, because a TCPA private claim requires that a call was actually made; a record showing a busy signal before the call dropped can sometimes help.

The FTC treats a written DNC policy as a condition of the safe harbor under the Telemarketing Sales Rule. ^[1] That policy has to exist and has to be followed in practice, not printed and filed away.

LeadCompliant's free compliance kit includes a DNC policy template and a scrub-log tracker that meets the TSR's documentation requirements, if you want a starting point without building from scratch.

Is there a safe harbor if you called a DNC number by mistake?

There is a limited safe harbor under both the FTC and FCC rules, and it comes with real conditions. Under the Telemarketing Sales Rule, a seller or telemarketer is not liable for calling a registered number if it can show it has a written DNC compliance policy, has trained its people, has accessed the registry within the past 31 days, and that the call was the result of error. ^[1] Error, not negligence. Not a failure to load the downloaded file. Not calling off an outdated list.

The FCC's safe harbor under 47 CFR 64.1200 tracks the same structure but requires the call was made in good faith based on reasonable reliance that the number was not registered. ^[4]

Courts read these safe harbors narrowly. In several district court decisions, judges refused safe harbor to companies with a systemic scrubbing failure, even where the list was downloaded on time. The error has to be genuinely accidental and isolated.

Call a number added to the registry fewer than 31 days before the call, and you have a complete defense, more than a safe harbor. That 31-day grace period is written into the regulation.

How do you report a violation if someone calls your DNC-registered number?

Consumers report violations at donotcall.gov. The form asks for the date of the call, the number that called, what the call was about, and whether the caller asked for money or a credit card. ^[9] Complaints go into the FTC's database and can be shared with state authorities.

Filing a complaint does not guarantee individual action. The FTC uses complaint data in the aggregate to spot patterns and rarely chases a single consumer complaint on its own. For a consumer who wants direct relief, a private TCPA lawsuit under 47 USC 227(c)(5) is the mechanism. Small claims court works in many jurisdictions for individual claims, and the $500 minimum statutory damages figure is set to be accessible without a lawyer.

If you run a compliance program and want to check whether a specific number is on the DNC list, the do not call list number article explains how to look up individual numbers through the FTC's verification tool. The do not call list report article covers what the FTC's annual data tells you about complaint trends.

For complaints about scammers posing as the DNC registry (a common con where callers offer to "remove" your number for a fee), the FTC investigates those separately as fraud.

What should a small outbound team do right now to stay compliant?

If you run a small outbound team and have not formalized your DNC process, the risk is real and the fix is not complicated. Here is what actually works.

Register with the FTC business portal and download the national list for every area code you call. Set a calendar reminder to re-download every 30 days, not 31. Load the file into your CRM or dialer suppression list before each campaign, not after. Keep the download timestamp on file.

Build your company-specific DNC list in parallel. Anyone who says "take me off your list" gets added right away. The FTC rule requires honoring those requests within 30 days, and the FCC's rule requires honoring them for that specific seller. ^[1][4] Immediate is safer than 30 days, and it costs you nothing.

Write down your DNC policy. It does not need to run 20 pages. A one-page policy describing your scrubbing frequency, your company-specific list process, and how you handle opt-outs covers the TSR's written policy requirement.

Call into Florida, Indiana, Pennsylvania, or other states with their own registries? Subscribe to those lists separately. State list access is cheap next to the fines.

For free tools to check numbers and a downloadable compliance checklist, LeadCompliant's tools at leadcompliant.com include a scrub-log template and a consent documentation guide built for small teams with no dedicated legal department. The point is to make the paperwork manageable so you actually do it.

The ftc do not call list article and the government do not call list article are worth bookmarking as quick reference alongside this one.

Frequently asked questions

How long does it take for a number to become active on the DNC registry after registering?

The FTC says a registered number becomes effective within 31 days. That means a telemarketer has up to 31 days from the registration date before they must stop calling. In practice, once a number shows up in a downloaded list file, callers should suppress it immediately. The 31-day window is not an invitation to keep calling; it covers processing lag.

Does the DNC registry apply to text messages and SMS?

The national DNC registry was built for telephone calls, but the FCC treats text messages as "calls" under 47 USC 227, so TCPA restrictions apply to texts. The FTC's Telemarketing Sales Rule also reaches text-based solicitations. Whether the registry itself technically blocks SMS is a gray area regulators have not fully resolved, but smart programs suppress DNC-registered mobile numbers from text campaigns too.

Can a business number be on the national DNC registry?

Technically only residential subscribers can register, but the FTC has said that if a number is used both personally and for business, or if the consumer registered it, the protections apply. B2B calls to numbers used exclusively for business generally fall outside the registry's scope. Calling a person's personal cell for business reasons does not strip away the registry protection.

Does the DNC registry expire? Does my registration ever run out?

No. The FTC eliminated the original 5-year expiration in 2008. Numbers on the national list stay registered permanently unless the consumer removes them or the number gets disconnected and reassigned. Reassigned numbers are a real compliance risk: a new owner of a previously registered number has not re-registered, but the number may still show up on the list for some time after reassignment.

What is the difference between the national DNC registry and a company's internal do-not-call list?

The national registry is a federal database consumers register with directly. A company-specific internal DNC list is a separate legal duty: every telemarketer must keep its own list of people who asked not to be called by that company. Both require independent upkeep. A number can be on one and not the other, and you have to honor both. The internal list obligation exists even for companies that call only B2B.

How much does it cost to access the national DNC registry as a business?

Access is free for the first five area codes each calendar year. Additional area codes cost $75 each, with an annual cap for a full national download that the FTC has set around $18,935 in recent years. The FTC adjusts these fees annually. For small teams calling only a few states, the cost is usually under a few hundred dollars a year, a trivial expense next to a single TCPA lawsuit.

Can a caller be sued privately for calling a DNC-registered number?

Yes. Section 227(c)(5) of the TCPA gives consumers a private right of action for calls that violate DNC rules. Statutory damages are $500 per violation, trebled to $1,500 for willful violations. Consumers do not need to prove actual damages. Class actions are possible when many plaintiffs got similar calls, which is why one non-compliant campaign can generate exposure in the millions. Many plaintiff attorneys take these cases on contingency.

What calling hours rules apply alongside the DNC registry?

Federal rules bar telemarketing calls before 8 a.m. or after 9 p.m. local time at the called party's location, under both FTC and FCC rules. These time limits apply independently of DNC registry status. A number not on the registry can still trigger a violation if you call at 7 a.m. Some states go stricter: Florida also holds the 8 a.m. to 9 p.m. window and enforces it actively.

What happens if a number was not on the DNC list when I downloaded it but was added before my call went out?

You have a defense. The Telemarketing Sales Rule's safe harbor covers calls to numbers that were not on the registry when the seller last accessed it within the required 31-day window. If someone registered the day after your download and you called before your next cycle, that falls inside the safe harbor, provided your overall program is otherwise intact. Document your download dates carefully for exactly this scenario.

Do I need to check the DNC registry if I only use prerecorded voice messages?

Yes, and the rules are stricter for prerecorded messages. Under FCC rules, prerecorded telemarketing messages to residential lines require prior express written consent regardless of DNC registry status. So a prerecorded call to a non-registered number can still violate the TCPA if you lack consent. DNC scrubbing is the floor, not the ceiling, for prerecorded voice campaigns.

Are political calls really exempt from the DNC registry?

Yes. Calls from political campaigns, parties, and candidates are exempt from the national DNC registry under FTC rules because they are not "telephone solicitations" as the statute defines them. The FCC's TCPA rules similarly exempt calls that do not involve a commercial sale. But political calls using an autodialer or prerecorded message to cell phones still require prior express consent under a separate TCPA provision, so the exemption is narrower than political callers often assume.

How does the established business relationship exemption actually work?

If a consumer bought from your company, leased from you, or completed a financial transaction within the past 18 months, you can call their DNC-registered number. If they only made an inquiry, you have three months to call. The consumer can revoke this by asking not to be called again, which kills the EBR immediately. Document every transaction and inquiry with a timestamp. Without documentation, the EBR defense fails in litigation.

What is the FCC's role in DNC enforcement compared to the FTC?

The FTC enforces the Telemarketing Sales Rule and maintains the national registry. The FCC enforces the TCPA's DNC provisions, which apply to carriers and telemarketers. Both agencies have overlapping jurisdiction and can pursue the same caller for the same calls under different authorities. FCC forfeitures have reached tens of millions of dollars in robocall cases. In practice, the FCC focuses heavily on illegal robocall operations; the FTC handles broader telemarketing violations.

Sources

1. FTC, Telemarketing Sales Rule (16 CFR Part 310): Telemarketing Sales Rule requirements for DNC scrubbing every 31 days, written policy requirement, EBR durations (18 months/3 months), and safe harbor conditions
2. U.S. Congress, Telephone Consumer Protection Act, 47 USC 227: TCPA private right of action for $500-$1,500 per DNC violation and state law preservation provision under 47 USC 227(c)(5) and 227(e)
3. FTC, National Do Not Call Registry Data Book FY 2023: More than 249 million phone numbers registered on the national DNC list; annual access fee cap of approximately $18,935 for full national download
4. FCC, 47 CFR 64.1200 - Delivery restrictions: FCC rules prohibiting calls to DNC-registered numbers, safe harbor conditions, and 30-day honoring window for opt-out requests
5. FTC, Civil Penalty Adjustments (2024): FTC civil penalty maximum of $51,744 per TSR violation as adjusted for inflation in 2024
6. FTC, Press Releases and Enforcement Actions: FTC has obtained multimillion-dollar settlements against robocall operations; FCC forfeitures have topped $100 million in robocall cases
7. U.S. Supreme Court, Facebook, Inc. v. Duguid, 592 U.S. 395 (2021): Supreme Court narrowed TCPA autodialer definition in 2021; DNC claims under 47 USC 227(c) were unaffected by this ruling
8. FTC, Consumer Advice on the National Do Not Call Registry: Approximately a dozen states maintain their own DNC registries with requirements that may exceed federal rules
9. FTC, donotcall.gov - Consumer Registration and Reporting: Consumers register numbers free of charge at donotcall.gov, registration becomes effective within 31 days and does not expire, and violations are reported through the same site
10. U.S. Congress, Do-Not-Call Implementation Act of 2003, Pub. L. 108-10: Congress authorized the FTC to create and maintain the national DNC registry through the Do-Not-Call Implementation Act of 2003