Do not call list: what it covers, who runs it, and how it actually works

Last updated 2026-07-09

What is the Do Not Call Registry and who runs it?

The National Do Not Call Registry is a free federal database consumers use to opt out of most unwanted telemarketing calls. The Federal Trade Commission (FTC) operates it under authority from the Telephone Consumer Protection Act of 1991 (47 U.S.C. 227) and the Do-Not-Call Implementation Act of 2003. ^[1] The Federal Communications Commission (FCC) has parallel authority under the TCPA and enforces many of the same rules against callers.

Consumers register at DoNotCall.gov or by calling 1-888-382-1222. Registration is free and, since 2008, permanent. The FTC used to require re-registration every five years. Congress killed that sunset in the Do-Not-Call Improvement Act of 2007. ^[2]

The registry holds roughly 249 million active phone numbers, according to the FTC's most recent Data Book. ^[12] That is most of the adult US population. Here is why that scale matters: if you dial any real volume of numbers, statistically you are hitting registered numbers unless you scrub.

The division of labor is simple to state and easy to forget. The FTC handles consumer registration and seller access on the registry side. The FCC handles TCPA violations more broadly, including robocall rules, consent requirements for auto-dialers, and cell phone restrictions. Both agencies can pursue separate enforcement actions for the same conduct. One bad campaign can land you an FTC fine and an FCC order at the same time.

Does the Do Not Call list cover cell phones?

Yes. Cell phones can be registered on the national Do Not Call Registry, and that registration is valid. The FTC confirms in its registry FAQ that consumers can add any number they do not want telemarketers to call, including wireless numbers. ^[3] There is a stubborn myth that cell phones have a separate "federal do not call list for cell phones" apart from the main registry. That list does not exist. The national registry is the list, and it covers mobile numbers.

Cell phones also carry a stronger second layer of protection under the TCPA itself. Section 227(b)(1)(A) prohibits using an automatic telephone dialing system (ATDS) or a prerecorded voice to call any cellular telephone number without the called party's prior express consent, whether or not the number sits on the registry. ^[4] So even an unregistered cell number is off-limits for auto-dialing or robocalls without consent.

That leaves two separate compliance tracks for cell phones:

Protection	Source	Applies to	What triggers a violation
DNC Registry	FTC / Do-Not-Call Implementation Act	All registered numbers (including mobile)	Calling a registered number without an exemption
TCPA ATDS ban	47 U.S.C. 227(b)	All cell numbers, registered or not	Using auto-dialer or prerecorded message without consent

For more on what applies to mobile numbers, see mobile phone do not call list.

Run any outbound telemarketing to cell phones and you have to handle both. DNC scrubbing gets you partway. Consent documentation covers the ATDS risk. Skip either and you are exposed.

Who has to follow the Do Not Call rules?

Any person or entity making telephone solicitations for the sale of goods or services in interstate commerce must comply. ^[1] That covers third-party call centers, in-house sales teams, lead generators, and their clients. FTC rules make sellers and telemarketers jointly liable in some cases, so a brand cannot outsource calls and wash its hands if the vendor breaks the rules.

Real exemptions exist. The registry does not apply to:

• Calls to businesses (the DNC rules cover residential and wireless consumers, not B2B calls to business lines)
• Calls from political organizations and campaigns
• Calls from charities soliciting donations directly
• Calls from survey companies (as long as there is no sales pitch)
• Informational calls that do not involve a solicitation

Two private-relationship exemptions matter day to day. First, if a consumer gives a company written permission to call, the company can call even a registered number. Second, an established business relationship (EBR) lets a seller call when the consumer made a purchase within the prior 18 months, or an inquiry within the prior 3 months. ^[5] The EBR expires, and it never overrides a consumer's request to stop calling.

If a registered consumer tells you to stop, you must honor that request immediately on your own internal do-not-call list. That internal-list requirement stands apart from the national registry and applies to every telemarketer, including those calling businesses.

How do sellers legally access the national DNC registry list?

Sellers and telemarketers register at the FTC's telemarketer access portal (telemarketing.donotcall.gov) to download the list. ^[6] There is no free bulk download for commercial callers. The FTC charges an annual access fee per area code. Recent fee schedules put the cost around $70 per area code per year, capped near $18,044 for national access to all area codes. ^[6] Small sellers hitting five or fewer area codes get free access.

For step-by-step instructions, see how do I get the Do Not Call list and the FTC Do Not Call list overview.

Once you have access, scrub your call lists against the registry no more than 31 days before you dial. A number that was on the registry when you built your data, then called after 31 days pass, is still a violation. Many compliance teams scrub weekly, or before every campaign launch, to stay well inside the window.

Document that you pulled the list and when. If the FTC or FCC investigates, they will want your access logs and scrub records. "We checked it last quarter" is no defense if the call went out after the 31-day window closed.

What does a Do Not Call violation actually cost?

The FTC can seek civil penalties up to $51,744 per violation for telemarketing rule violations as of 2024. ^[7] The FCC has separate authority under the TCPA and can impose forfeitures too. Private plaintiffs under the TCPA can sue for $500 per negligent violation or $1,500 per willful violation, and courts regularly certify class actions. ^[4]

The class-action math is brutal. A campaign that dials 100,000 registered DNC numbers without scrubbing faces potential statutory damages of $50 million to $150 million if plaintiffs prove willfulness. Courts have entered judgments at those scales. In 2023, the FTC reached a $299 million settlement with a company accused of calling numbers on the registry. ^[7]

For how these violations work and what defenses exist, see do not call list violation.

The $51,744 figure is not static. The FTC bumps penalty amounts for inflation under the Federal Civil Penalties Inflation Adjustment Act. Check the current FTC penalty schedule before you assume you know the ceiling.

Here is the part small teams miss. Agency enforcement is selective. Private suits are not. Any consumer whose number you called can sue, and plaintiff's attorneys trawl call records obtained through discovery to build class cases. For most small-to-mid-size outbound teams, the private suit is the real threat, not the FTC.

How is the Do Not Call list different from the TCPA?

People swap "Do Not Call" and "TCPA" as if they mean the same thing. They do not. The TCPA (47 U.S.C. 227) is the underlying federal statute, passed in 1991, that covers automated calls, prerecorded messages, fax advertising, and SMS. The Do Not Call Registry is one enforcement mechanism created later, in 2003, to carry out part of the TCPA's mandate. ^[1]

Think of it plainly: the TCPA is the law. The DNC Registry is one tool the law created. The TCPA has other requirements that have nothing to do with the registry, like prior express written consent before marketing texts, or disclosure that a call uses an ATDS. You can comply perfectly with the registry and still violate the TCPA by auto-dialing a cell number without consent.

The FCC enforces the TCPA. The FTC enforces the Telemarketing Sales Rule (TSR), which incorporates the DNC Registry. Both agencies run their own complaint intake, and one complaint can trigger parallel investigations. The practical takeaway for small teams: DNC scrubbing is not your whole compliance program. It is one piece.

For a longer look at the government's DNC infrastructure end to end, see government do not call list.

Do state Do Not Call lists exist separately from the federal registry?

Yes, and this is where a lot of small teams get burned. More than a dozen states run their own do-not-call registries that sit on top of the federal one. If a number appears on a state list but not the federal list, you still cannot call it for telemarketing in that state.

Florida, Pennsylvania, and Indiana all have their own registries and enforcement regimes that go past federal minimums. Florida's Telemarketing Act, for example, carries its own registration, calling-hour, and do-not-call rules with per-violation penalties. ^[8]

For state-specific details:

• Florida do not call list
• Florida DNC list
• Pennsylvania do not call list
• Do not call list PA
• Indiana do not call list

Running national campaigns means scrubbing against the federal registry and checking whether any state you call keeps its own list. Some states share data with the federal registry. Some do not. The safe move is to pull state lists separately and layer them on top of your federal scrub.

California keeps no separate DNC registry, but it enforces privacy law hard under the CCPA and the state attorney general's office, which adds up to extra call restrictions in practice. "No state DNC list" does not mean "no additional state risk."

How do you report a Do Not Call violation?

Consumers report violations at DoNotCall.gov or by calling 1-888-382-1222. ^[9] The FTC uses these complaints to build enforcement cases. A single complaint rarely produces immediate action, but a pattern of complaints against the same caller triggers investigations. The FTC has said publicly that complaint data steers which companies it targets.

The FCC also takes complaints for TCPA violations, including unwanted robocalls and texts, through its consumer complaint center at FCC.gov.

These same portals are worth watching if you run a compliance function, because they tell you what your customers are reporting. If someone you called files a complaint, you might hear from the FTC, or you might hear nothing until a class action lands. The first notice of a TCPA class suit often arrives on your registered agent's desk.

For what to do when a complaint or demand letter shows up, see do not call list report and do not call list violation.

Train your reps on what to do when someone says "take me off your list." That verbal request triggers your internal DNC obligations on the spot. The TSR requires you to honor it within a reasonable time. Logging the request and acting on it is basic hygiene, and it can be the difference between a defensible position and an indefensible one.

What are the calling hours rules under the DNC framework?

The Telemarketing Sales Rule bans telephone solicitations before 8 a.m. or after 9 p.m. local time at the called party's location. ^[5] You need to know the consumer's time zone, not yours. A call center in Arizona dialing a New York number at 8:30 p.m. Arizona time is calling at 10:30 p.m. New York time. That is a violation.

Some states set tighter windows. Florida holds calls to between 8 a.m. and 9 p.m. local time and layers on extra restrictions in some contexts under state law. Check the state rules wherever you call.

Hours violations are among the easiest for the FTC to prove. No complicated analysis of auto-dialers or consent chains required. Call log timestamps usually do the job. Any modern CRM or dialer records those timestamps, and they are discoverable.

How long does registration on the Do Not Call list take to take effect?

When a consumer registers a number, sellers have 31 days from the registration date before they must stop calling it. ^[3] Register on July 1, and telemarketers must stop by August 1 at the latest.

For the consumer, the wait feels slower than it should. The 31-day window exists because the FTC set up monthly list updates for sellers and wanted them to have time to fold in new numbers before facing liability. That rationale made more sense in 2003, when list management ran more manual.

Registration is free and takes about a minute online at DoNotCall.gov. The number stays on the list permanently unless the consumer asks for removal or the number gets disconnected and reassigned. The FTC periodically purges disconnected numbers, which matters if you manage a call list with numbers you have held for years: a number that dropped off the registry after disconnection may have been re-registered by its new subscriber.

For the do not call list number consumers use to register by phone, it is 1-888-382-1222.

How should an outbound sales team structure a DNC compliance process?

The minimum viable process has four parts: access to the registry, a scrub before every campaign, an internal suppression list, and record-keeping. None are optional under the TSR or TCPA.

Registry access: Register at the FTC's telemarketer portal and pay for the area codes you dial. If you use a third-party dialing vendor or data provider, get it in writing that they scrub against a current registry pull, not a cached version. "We use a scrubbed list" from a data vendor is not documentation. Get their scrub date.

Pre-campaign scrub: Pull a fresh registry download within 31 days of your campaign launch date, not your planning date. If a campaign runs longer than 31 days, pull again mid-campaign.

Internal DNC list: Every time someone asks you not to call, add that number to your internal suppression list right away. This list is separate from the federal registry. You must honor internal opt-outs even for numbers that are not federally registered, and even for calls that an EBR would otherwise allow. The internal DNC list never expires.

Record keeping: Store your registry access logs, scrub timestamps, and internal DNC requests for at least five years. The federal TCPA statute of limitations runs four years; state claims vary. If a lawsuit lands, you need records from the time of the calls.

Want a structured checklist covering registry scrubbing, calling hours, consent documentation, and internal suppression? LeadCompliant offers a one-time compliance kit with the exact forms and procedures small outbound teams use to build this without hiring a full-time compliance officer.

One thing small teams underrate: reassigned numbers. A cell number registered on the DNC list belongs to one person. The carrier can hand it to someone else after the original subscriber cancels. The new subscriber may not have registered. But if your data still ties that number to the original registered person, you are calling someone who may not want the call, and your records will not flag it. The FCC built the Reassigned Numbers Database to address this. Mandatory use for certain calls is still being phased in, but scrubbing against it is worth it if your data is older than six months. ^[10]

What has changed with Do Not Call rules recently?

The biggest recent development is not to the registry itself but to the TCPA's consent rules. The FCC adopted a "one-to-one" consent requirement for robocalls and robotexts in a December 2023 order, closing what it called the lead generator loophole. ^[11] Under the old framework, a consumer could check one box on a lead gen form and consent to calls from many companies. The new rule requires each seller to get its own individual consent.

This matters for DNC compliance because a lot of companies leaned on the consent exemption to justify calling registered numbers. If your consent chain was built on lead gen forms where one click covered many companies, that consent is now legally shaky, and you cannot lean on it to call registered numbers.

The FTC has also kept increasing its DNC enforcement and used civil investigative demands more aggressively against lead generators and data brokers who feed lists to callers. Being three steps removed from the actual call is no longer a reliable shield.

Penalty amounts adjust for inflation. The $51,744-per-violation figure was current as of early 2024 and will move. The FTC publishes its current penalty schedule on FTC.gov. Check it before you model worst-case exposure. ^[7]

For small teams trying to stay current, the FTC's consumer.ftc.gov and the FCC's enforcement pages at FCC.gov are the right primary sources. If you want one place to track DNC and TCPA rule changes as they happen, LeadCompliant covers each FCC order and FTC rulemaking as it moves.

Frequently asked questions

Is there a do not call list specifically for cell phones?

No separate federal cell phone do not call list exists. Cell phone numbers can be registered on the national Do Not Call Registry at DoNotCall.gov, and that registration covers mobile numbers. Cell phones also have a stronger separate protection under the TCPA: even numbers not on the registry cannot be auto-dialed or receive prerecorded calls without the owner's prior express consent.

How do I register my number on the national Do Not Call Registry?

Go to DoNotCall.gov and enter your number, or call 1-888-382-1222 from the phone you want to register. Registration is free and permanent since 2008. Telemarketers must stop calling your number within 31 days of registration. You can register up to three numbers per email address online.

Does the Do Not Call Registry stop all unwanted calls?

No. The registry stops most commercial telemarketing calls, but it does not cover political calls, charity fundraising, survey calls, or informational calls. It also does not stop scammers, who ignore the law entirely. Calls from companies you have an existing business relationship with may continue for up to 18 months after your last transaction.

How much does it cost a telemarketer to access the Do Not Call list?

The FTC charges roughly $70 per area code per year, capped near $18,044 for national access to all area codes. Small sellers who access five or fewer area codes get free access. Sellers must register at the FTC's telemarketer portal. Using a data vendor's pre-scrubbed list does not eliminate a seller's own obligation to maintain registry access.

What happens if a company calls my number after I registered on the Do Not Call list?

You can file a complaint at DoNotCall.gov or call 1-888-382-1222. The FTC uses complaint patterns to target enforcement. You also have a private right of action under the TCPA to sue for $500 per violation or $1,500 if it was willful. Many TCPA plaintiffs bring class actions. A consumer protection attorney can advise on your specific situation.

Do businesses have to follow the Do Not Call rules for calls to other businesses?

Generally no. The national Do Not Call Registry covers residential and wireless consumers. Business-to-business calls are not covered by the registry. But if a business number is a cell phone belonging to an individual, the TCPA's consent requirements for auto-dialers may still apply. And any business can tell you to stop calling; ignoring that creates its own liability.

How often does a telemarketer have to scrub against the Do Not Call Registry?

The Telemarketing Sales Rule requires the list be no more than 31 days old at the time of the call. Most compliance-conscious teams scrub before every campaign launch and again if a campaign runs longer than a month. There is no legal requirement to scrub more often, but scrubbing more frequently reduces risk from numbers added between downloads.

Can a company call me if I gave them my number?

If you gave prior written consent or have an established business relationship with a company, it may call you even if your number is on the Do Not Call Registry. But you can revoke consent at any time by asking the company to stop calling. Once you do, the company must honor that request and cannot rely on the earlier consent or EBR to keep calling.

Does the Do Not Call list expire or need to be renewed?

No. Since the Do-Not-Call Improvement Act of 2007 removed the five-year re-registration requirement, numbers stay on the registry permanently. The FTC may purge numbers if a phone line is confirmed disconnected, but the consumer does not need to renew. If you change your phone number, register the new number separately.

Are text messages covered by the Do Not Call Registry?

The Do Not Call Registry mainly addresses voice calls. Text messages fall more directly under TCPA Section 227(b) and the FCC's rules, which treat texts sent via auto-dialers like calls. The FTC's Telemarketing Sales Rule was also updated to cover telemarketing texts in some contexts. In practice, a number on the registry should not get marketing texts either, and TCPA consent rules apply independently.

What is the difference between the FTC and FCC for Do Not Call enforcement?

The FTC enforces the Telemarketing Sales Rule, which governs DNC Registry compliance and telemarketing conduct. The FCC enforces the TCPA, which covers auto-dialers, prerecorded messages, and consent requirements. Both have authority over telemarketing calls, and a single violation can trigger action from either or both. The FTC handles most DNC registry complaints; the FCC focuses more on ATDS and robocall violations.

What is an established business relationship and how long does it last?

An established business relationship (EBR) is created when a consumer makes a purchase, lease, or financial transaction with a company, or makes an inquiry or application. A purchase-based EBR lasts 18 months from the last transaction. An inquiry-based EBR lasts 3 months from the inquiry. During the EBR window, a seller can call even a registered number, unless the consumer has asked that company to stop.

Do state Do Not Call laws override federal rules?

State DNC laws are additive, not replacements. The federal registry sets a floor; states can be stricter. If a state has its own registry with tighter hours or stronger penalties, you must comply with state rules when calling numbers there. More than a dozen states have their own registries. Running only a federal scrub is not enough when you call into those states.

What records does a telemarketer need to keep to prove DNC compliance?

At minimum: your FTC registry access logs with timestamps, the download dates of each registry pull, your scrub logs showing which numbers were matched and suppressed, and your internal DNC request log with dates. Most compliance attorneys recommend keeping these records at least five years, which covers the four-year TCPA federal statute of limitations plus a buffer for state claims.

Sources

1. FTC, National Do Not Call Registry (consumer information): The FTC operates the National Do Not Call Registry under the Telephone Consumer Protection Act and the Do-Not-Call Implementation Act of 2003
2. FTC, Do-Not-Call Improvement Act of 2007 summary: Since 2008, registration on the Do Not Call Registry is permanent; Congress eliminated the five-year re-registration requirement in the Do-Not-Call Improvement Act of 2007
3. FTC, DoNotCall.gov consumer FAQ: Cell phone numbers can be registered on the national Do Not Call Registry; sellers have 31 days from registration date before they must stop calling
4. U.S. Code, 47 U.S.C. 227 (Telephone Consumer Protection Act): Section 227(b)(1)(A) prohibits using an ATDS or prerecorded voice to call any cellular telephone number without prior express consent; private right of action provides $500 per violation or $1,500 for willful violations
5. FTC, Telemarketing Sales Rule (16 CFR Part 310): The TSR prohibits telephone solicitations before 8 a.m. or after 9 p.m. local time; established business relationship from purchase lasts 18 months, from inquiry lasts 3 months
6. FTC, Penalty Offenses and civil penalty amounts: The FTC can seek civil penalties up to $51,744 per violation for telemarketing rule violations as of 2024; FTC reached a $299 million settlement with a company for DNC violations in 2023
7. Florida Department of Agriculture and Consumer Services, Florida Telemarketing Act: Florida operates its own telemarketing act with registration requirements and per-violation penalties separate from the federal DNC Registry
8. FTC, DoNotCall.gov report unwanted calls: Consumers can report DNC violations at DoNotCall.gov or by calling 1-888-382-1222; FTC uses complaint data to target enforcement investigations
9. FTC, National Do Not Call Registry Data Book FY2023: The national Do Not Call Registry holds approximately 249 million active registered phone numbers