Do not call list lookup: how to check numbers before you dial

Last updated 2026-07-09

What is a do not call list lookup and why does it matter?

A do not call list lookup is the act of checking a phone number against a registry of consumers who asked not to get telemarketing calls. The list that matters most is the FTC's National Do Not Call Registry, which held more than 249 million active registrations as of FY 2023 ^[1]. State registries sit on top of that in places like Florida, Indiana, and Pennsylvania.

Here is why the check matters in plain money terms. The Telephone Consumer Protection Act (47 U.S.C. § 227) and the FTC's Telemarketing Sales Rule (16 C.F.R. Part 310) both require covered sellers and telemarketers to check the registry before calling. Call a registered number without a valid exemption and a private plaintiff can sue you for $500 per call, trebled to $1,500 if a court finds the violation was willful ^[2]. The FTC can pile on civil penalties up to $51,744 per violation under the FTC Act ^[3].

For a small team making a few hundred calls a day, skipping the scrub is not a rounding error. It is how class actions start. Courts have certified TCPA classes in the thousands, and even a modest settlement runs into seven figures.

The good news: the mechanics are simple. A lookup has a few moving parts, and once you understand each one, you stay out of trouble.

How does the National Do Not Call Registry actually work?

The FTC runs the National Do Not Call Registry at donotcall.gov ^[1]. Consumers register for free, and registrations never expire. Congress made permanent registration the law in 2007 through the Do-Not-Call Improvement Act ^[4]. As of FY 2023, the registry held more than 249 million phone numbers ^[1].

Access for telemarketers works like this. You apply for a Subscription Account Number (SAN) through the FTC's registry access portal. The fee is $75 per area code per year, the first five area codes are free, and national access is capped at $18,044 ^[5]. Once you have a SAN, you download lists by area code in .txt format and scrub your own call list against them.

The law says you must honor a number's registration status no more than 31 days after it lands on the registry ^[6]. Someone registers today, and you have 31 days to stop calling them. Most compliance-minded teams scrub monthly, right at that boundary, some more often.

Here is a detail people miss. The registry covers residential landlines and mobile phones alike. There is no separate mobile phone do not call list. A cell number on the national registry gets the same protection a landline does. The old story that cell phones had some special immunity was never true for the FTC registry. The real mobile-specific concern is the TCPA's autodialer and prerecorded-message rules, which is a different compliance layer.

Want the full scope of how this registry operates? Start with our do not call list overview.

Who has to do a do not call list lookup before calling?

If you call consumers to sell goods or services, you have to check. The TSR and TCPA rules apply to "telemarketers" and "sellers" as defined in 16 C.F.R. § 310.2, and that net catches insurance agents, solar installers, home improvement contractors, financial services firms, and real estate investors cold-calling homeowners.

Exemptions exist. They are narrower than most people assume. You do not need to check the registry if:

• You have an established business relationship (EBR): the person bought from you within the last 18 months, or inquired within the last 3 months ^[6].
• The person gave you written permission to call.
• You are a tax-exempt nonprofit calling for charitable purposes (some state laws cover nonprofits anyway).
• You are a political organization, pollster, or certain survey company (state rules vary here).

The EBR exemption is where small teams get burned. An EBR is not someone who once opened your email. It is a real transaction or a genuine inbound inquiry. The FTC and the courts have held that line consistently. Buy a lead list and assume every lead has an EBR with you, and you are wrong on every one.

B2B calling mostly sits outside the national registry. The TSR aims at residential numbers. But some states, Indiana among them, stretch DNC protection to business numbers in certain cases, so read state law before you treat any B2B call as automatically exempt ^[7].

How do you actually perform a do not call list lookup step by step?

Two practical routes: direct access through the FTC's portal, or a third-party scrubbing service.

Direct FTC registry access

1. Register for a Subscription Account Number at the FTC's telemarketing access portal, telemarketing.donotcall.gov ^[5]. 2. Pay the area code fees ($75 per area code, first five free, national cap $18,044). 3. Download the registry files for your target area codes. 4. Compare your call list against the downloaded files, usually programmatically, matching numbers in a consistent format. 5. Remove matches from your calling list before dialing. 6. Repeat at least every 31 days.

Calling across the whole country means keeping a compliance calendar, storing the downloaded files securely, and having a real person run the scrub. Not hard. It does need a process, not a mental note.

Third-party scrubbing services

Services like Gryphon and Contact Center Compliance (formerly DNC.com) offer API-based scrubbing. You send numbers to their API and get back a DNC status in real time or in batch. Many of them bundle state DNC lists, wireless identification, and litigator lists (numbers known to belong to serial TCPA plaintiffs). Pricing runs from a few tenths of a cent per lookup to volume-based subscriptions.

For a team running a few thousand lookups a month, a third-party service usually beats wrangling raw FTC files by hand. Very high-volume shops sometimes pull the raw FTC files themselves and use a service only for state lists and litigator scrubs.

Want a fast starting point? LeadCompliant has a free number checker and a one-time compliance kit that walks through setting up this scrubbing process from scratch.

One overlooked step: document your scrubs. Log when you pulled the registry data, what file version you used, and when you ran the comparison. That log is your defense when a plaintiff's attorney claims you dialed a registered number.

What state do not call lists do you also need to check?

The national registry alone is not enough. More than 30 states run their own do not call lists, and several set rules stricter than the federal baseline ^[7]. Call into those states and you check both the FTC registry and the state list.

Here is a summary of states with separate DNC programs worth knowing:

State	Has state DNC list	Notable difference from federal
Florida	Yes	Shorter re-contact window; covers more call types [8]
Indiana	Yes	Extends to some B2B calls; stricter penalties [7]
Pennsylvania	Yes	State list maintained by PA AG; must scrub both [9]
Texas	Yes	Administered via TX AG; solar and home services heavily enforced
Colorado	Yes	Colorado Privacy Act adds consent layers for some contacts
Massachusetts	Yes	State DNC maintained by MA AG; heavier enforcement since 2022
Wyoming	No	Relies entirely on the federal registry

Massachusetts has gotten more aggressive. If you run outbound calls into the state and want the do not call list ma rules specifically, the Massachusetts Attorney General's office keeps its own list and has gone after out-of-state callers.

For detail on the bigger state programs, see our guides on the florida do not call list and the indiana do not call list. Calling into the northeast? The do not call list pa page breaks down Pennsylvania's process.

The practical call: if you dial nationally, pay for a third-party scrubbing service that maintains state lists for you. Tracking state list updates yourself is a real operational drag, and it is the first thing that slips when things get busy.

How often do you need to re-check numbers on the do not call list?

Monthly, at a minimum. Under 16 C.F.R. § 310.4(b)(3)(iv), a seller or telemarketer must "honor a residential subscriber's do-not-call request within a reasonable time from the date such request is made," and the FTC reads the registry scrub requirement to mean your registry data can be no more than 31 days old ^[6].

Set a fixed scrub date each month and treat it like payroll. Miss a cycle, call someone who registered in the gap, and you have no defense.

Some state registries carry their own timing rules on top of the federal 31-day window. Florida, for one, has historically demanded more frequent checks for certain caller categories. Check the specific state rule if you push heavy volume into a single state.

There is also an internal DNC obligation running parallel to the registry scrub. Under 47 U.S.C. § 227(c)(1), any residential subscriber can ask a telemarketer to put them on that company's own internal do not call list. You honor that request within 30 days and keep the number on your internal list for at least five years ^[2]. Someone tells your rep "do not call me again," your CRM does not record it, and you are liable for every call after that, registry status or not.

What does a do not call list lookup cost?

Costs fall into three buckets, and the smallest one is the scrub itself.

FTC registry direct access: $75 per area code per year, first five area codes free, national access capped at $18,044 per year ^[5]. Call a handful of area codes and direct access is cheap. Call nationwide and you hit the cap.

Third-party scrubbing services: Pricing swings widely. Batch scrubbing tends to run $0.002 to $0.01 per record, depending on what is included (federal only, versus federal plus state, versus federal plus state plus wireless plus litigator). API-based real-time lookups for smaller volumes often start around $30 to $100 per month for a few thousand lookups. Enterprise contracts get negotiated separately.

The cost of not scrubbing: One TCPA violation is $500 to $1,500 ^[2]. A class action with 1,000 members at $1,000 per violation hits $1 million before attorney fees. The FTC's civil penalty cap sits at $51,744 per violation as of 2024 ^[3]. Even a small company can eat a six-figure settlement over a few months of dirty calling.

The scrub is trivial next to the exposure it kills. A team making 5,000 calls a month might spend $50 to $150 on a third-party service. That same team, if it hits a serial litigator who is also on the registry, could open a $10,000 demand letter the next morning.

For how the FTC accesses and administers the registry, see our ftc do not call list page.

What is the difference between the federal DNC registry and an internal do not call list?

Two separate legal obligations, constantly confused for each other. Here is the split.

The National Do Not Call Registry is the FTC's list that any consumer can add a number to. Telemarketers must check against it before calling. You do not control who is on it.

An internal do not call list is a list you keep yourself, specific to your business. It holds numbers where the person told you, specifically, to stop calling. The FCC's rules under 47 U.S.C. § 227(c) require you to maintain that list and honor it for at least five years ^[2]. You have 30 days after a request to stop calling that number.

The practical point: a number might not sit on the national registry at all, but if that person told your agent six months ago "take me off your list," calling them is still a TCPA violation. Your CRM has to capture those opt-outs on its own. A spreadsheet someone updates by hand does not hold up at any real scale.

For how the national registry ties into your workflow, the dnc registry page lays out the full structure.

Worth knowing too: some companies keep their own "do not call telemarketer list" or scrub against a litigator list to dodge professional plaintiffs. Not required by law. Increasingly standard for teams doing volume. More at do not call telemarketer list.

What happens if you call a number that is on the do not call list?

The consumer can file a complaint at donotcall.gov, and the FTC investigates patterns rather than one-off calls. The sharper immediate risk is a private lawsuit under 47 U.S.C. § 227(c)(5), which lets any person who gets more than one call in a 12-month period from the same entity, in violation of FCC rules, sue in federal or state court.

The statute reads: "A person who has received more than one telephone call within any 12-month period by or on behalf of the same entity in violation of the regulations prescribed under this subsection may" bring a private action for up to $500 per violation, or $1,500 if the court finds the defendant acted willfully or knowingly ^[2].

Note the "more than one call" threshold. A single stray call to a registered number probably does not support a private suit under this provision on its own. Two calls do. A robocall campaign that blasts thousands of numbers without scrubbing can spin up thousands of separate causes of action in one day.

The FTC and state attorneys general bring their own enforcement actions. The FTC seeks civil penalties under the FTC Act, and the FCC can impose forfeitures under 47 U.S.C. § 503. The FTC's civil penalty cap runs $51,744 per violation as of 2024, adjusted annually for inflation ^[3].

Consumers report violations at donotcall.gov. The FTC does not chase individual complaints, but high complaint volume against one company often trips an investigation. More on the reporting side at do not call list report.

Are there tools that make the do not call list lookup process easier?

Yes, and for most small teams a third-party tool beats pulling raw FTC files. Here is what to look for in a DNC scrubbing tool.

• Coverage: Does it include the federal registry, all relevant state lists, and wireless identification? Some services charge extra for state lists or sell them as add-ons.
• Update frequency: How often does the provider refresh its copy of the FTC registry? Monthly is the floor. Some update weekly or more.
• Litigator list: Some providers keep lists of numbers tied to serial TCPA litigators. Not legally required, but it can shrink your exposure fast.
• API vs. batch: If your CRM or dialer can make API calls, real-time lookup at point of contact beats batch. Batch works for campaign planning but misses anyone who registered in the 31 days since your last scrub.
• Audit trail: Can you pull a report showing which numbers were checked, when, and with what result? That trail is your evidence if you ever defend a call.

LeadCompliant's free compliance kit includes a checklist for vetting DNC scrubbing vendors and a monthly scrub template you can drop into your CRM workflow.

Just getting started? The how do i get the do not call list page walks through the FTC's direct access process in plain language. And if you want to understand number formats and registration details before you begin, the do not call list number page covers the specifics.

What do the FCC and FTC guidance documents actually say about scrubbing requirements?

The core statutory duty lives in 47 U.S.C. § 227(c), which directs the FCC to write rules protecting residential subscribers' privacy ^[2]. The FCC's implementing rules sit at 47 C.F.R. § 64.1200. The FTC's parallel authority comes from the Telemarketing and Consumer Fraud and Abuse Prevention Act, and the TSR at 16 C.F.R. Part 310 is the operative rule.

The TSR at 16 C.F.R. § 310.4(b)(1)(iii)(B) flatly prohibits initiating an outbound call to any person whose number appears on the Do Not Call Registry unless the seller has an established business relationship or express written agreement ^[6].

The FCC's 2003 Report and Order set the registry as the primary mechanism for implementing § 227(c) and fixed the 31-day scrubbing window. Later FCC orders addressed number porting, wireless numbers, and the reach of the EBR exemption. The FCC's 2012 order tightened consent rules for prerecorded calls, requiring prior express written consent rather than oral consent for certain call types.

One practical note on who enforces what. The FTC enforces the TSR against telemarketers and sellers. The FCC enforces the TCPA rules and assesses forfeitures. Private plaintiffs enforce 47 U.S.C. § 227 directly in court. All three can be in play for the same violation at the same time.

For government-administered registries specifically, our government do not call list page explains who runs what and how each registry is kept up.

Frequently asked questions

Can I look up a single phone number on the do not call list for free?

Yes. The FTC lets consumers verify their own registration at donotcall.gov at no cost. But telemarketers cannot use that consumer portal to check arbitrary numbers in bulk. To scrub a call list, you need a Subscription Account Number from the FTC's telemarketing access portal. The first five area codes are free, so small-scale lookups are essentially free for most local businesses.

How long does a number stay on the do not call registry?

Registrations are permanent. The Do-Not-Call Improvement Act of 2007 killed the old 5-year expiration, so a number registered in 2004 is still active today unless the consumer removes it or the number gets disconnected and reassigned. Reassigned numbers are a real risk: if a new person gets a previously registered number, you may still be calling a registered number without knowing it.

Does the do not call list apply to text messages and SMS?

Yes. The FCC treats text messages as covered under the TCPA the same way voice calls are. A number on the Do Not Call Registry should not get marketing texts either, if those texts count as telemarketing. The TCPA's separate rules on automated texts also require prior express written consent for most marketing SMS. Running a DNC scrub before a text campaign is standard practice.

What is an established business relationship and how long does it last?

An established business relationship (EBR) means the consumer bought something from you or made a financial transaction within the past 18 months, or made an inquiry or application within the past 3 months. An EBR lets you call even if the number is on the registry, but the consumer can end it any time by asking not to be called. You honor that opt-out within 30 days.

Do I need to check state do not call lists separately from the federal registry?

Yes, if you call into states with their own registries. More than 30 states run separate DNC lists, and several, including Florida, Indiana, and Pennsylvania, set rules stricter than the federal baseline. A number missing from the federal registry may still sit on the state list. Third-party scrubbing services usually bundle state lists with federal access, which is the easiest way to handle multi-state calling.

How much does it cost to get access to the full national do not call list?

Direct FTC access is $75 per area code per year, with the first five area codes free. National access is capped at $18,044 per year, so calling every U.S. area code costs at most that amount. Third-party scrubbing services usually charge per-record rates (roughly $0.002 to $0.01 per lookup) or monthly subscriptions, which often works out cheaper for teams that do not call into every state.

What is the penalty for calling someone on the do not call list?

A private plaintiff can sue for $500 per call, or up to $1,500 per call if the violation was willful, under 47 U.S.C. § 227(c)(5). The FTC can seek civil penalties up to $51,744 per violation under the FTC Act. In class actions, these per-call amounts multiply across every affected member, which is how even small outbound teams hit seven-figure exposure from a few weeks of non-compliant calling.

Can a business be sued for calling a do not call list number even if it was a mistake?

Yes. The TCPA works as a strict liability statute for many violations, so intent is not required to be liable. Willful or knowing violations let courts triple the damages. The safe harbor in 47 C.F.R. § 64.1200(c)(2)(i)(D) offers some protection if you keep written procedures, train your staff, maintain an internal DNC list, and can show you accessed the registry in good faith within the required timeframe.

What records should I keep to prove I did a do not call list lookup?

Log every scrub: the date, the registry file version or third-party service confirmation, the area codes covered, and who ran it. Store the scrubbed list with a timestamp. If you use a third-party service, save the API response records or batch report receipts. Courts and the FTC both look for contemporaneous documentation. A spreadsheet assembled after the fact carries almost no weight as evidence.

Do do not call rules apply to B2B calls?

The FTC's TSR and the national DNC registry aim at calls to residential consumers, not businesses, so most B2B telemarketing sits outside the national registry's scope. Some states, though, extend DNC protection to business lines. Indiana is one. And if a business number is really a home-based business or a mobile number used personally, the analysis gets murky. Know your list source and confirm numbers are genuine business lines.

What is a litigator list and do I need to scrub against it?

A litigator list is a privately maintained database of phone numbers tied to people or law firms known to file TCPA lawsuits, sometimes called professional plaintiffs. Scrubbing against one is not legally required, but calling a litigator number that is also on the registry almost guarantees a demand letter. Many compliance vendors sell litigator scrubbing as an add-on. For teams doing real volume, it is worth the small cost.

How do I register my business to access the do not call registry?

Go to telemarketing.donotcall.gov and create an account. You need a business name, address, and payment method for area code fees. The FTC verifies your identity and issues a Subscription Account Number, which you use to download registry files. Account approval typically takes a few business days. Once approved, you can start downloading area code files right away.

What happens when a phone number is reassigned to a new person after they registered it?

This is a real compliance problem. If the previous owner registered the number and a new person gets it, the registration technically stays active. You could call the new person, who has no expectation of getting telemarketing calls, and still face liability because the number sits on the registry. The FCC has addressed caller exposure for reassigned numbers in several rulings. A carrier-grade reassigned number lookup before dialing unknown numbers is one way to reduce the risk.

Sources

1. FTC, National Do Not Call Registry Data Book FY 2023: The National Do Not Call Registry held more than 249 million active registrations as of FY 2023.
2. U.S. Code, 47 U.S.C. § 227, Telephone Consumer Protection Act: Private plaintiffs may recover $500 per violation, trebled to $1,500 for willful violations; companies must maintain internal DNC lists for five years.
3. FTC, civil penalty amount adjustments under the FTC Act: The FTC's maximum civil penalty is $51,744 per violation as of 2024, adjusted annually for inflation.
4. FTC, Do-Not-Call Improvement Act of 2007 (Pub. L. 110-187): The Do-Not-Call Improvement Act eliminated the 5-year expiration on registry registrations, making them permanent.
5. FTC, Telemarketing Registry Access Portal, fee schedule: Area code access costs $75 per area code per year; the first five area codes are free; national access is capped at $18,044 per year.
6. FTC Telemarketing Sales Rule, 16 C.F.R. Part 310: TSR § 310.4(b)(1)(iii)(B) prohibits calling numbers on the registry without an EBR or written consent; registry data must be no more than 31 days old.
7. Indiana Attorney General, Indiana Do Not Call Law (IC 24-4.7): Indiana's DNC law extends coverage to some business-to-business calls and imposes stricter penalties than the federal baseline.
8. Florida Attorney General, Florida Do Not Call Act (§ 501.059, F.S.): Florida's DNC statute covers additional call categories and has a shorter permissible re-contact window compared to federal rules.
9. Pennsylvania Attorney General, Pennsylvania Do Not Call Registry: Pennsylvania maintains its own state DNC list administered by the AG's office; callers must scrub against both the PA list and the federal registry.