How often can you legally call someone on the DNC list

Last updated 2026-07-09

What does it actually mean to be on the DNC list?

The National Do Not Call Registry is a federal database run by the Federal Trade Commission. When a consumer registers a phone number, telemarketers cannot legally call that number to sell anything. Full stop. The registry is not a throttle on how often you call. It is a ban.

The governing statute is the Telephone Consumer Protection Act, 47 U.S.C. § 227, and the FTC's rules at 16 C.F.R. Part 310 (the Telemarketing Sales Rule). The FCC enforces its own parallel TCPA rules at 47 C.F.R. § 64.1200. Both agencies treat a DNC call as a violation no matter how many times you called before.

Consumers register at donotcall.gov. Registration takes effect within 31 days and does not expire. As of 2024, over 249 million phone numbers sit on the registry. ^[1]

So when you ask "how often can I call someone on the DNC list," the honest answer is that the permitted number is almost always zero. The exceptions below define when you can call at all, and even inside those exceptions there are limits worth knowing.

Are there any exceptions that let you call a DNC number?

Yes. Three exceptions exist, and they are narrow. Misreading them is how companies end up in class actions.

Exception 1: Existing Business Relationship (EBR). Under 16 C.F.R. § 310.2(n) and the FCC's parallel rules, you may call a DNC-registered number if the consumer made a purchase, rental, or financial transaction with your company within the past 18 months, or made an inquiry or application within the past 3 months. ^[2] The EBR is company-specific. Buying a list of "customers" from a third party does not transfer any EBR to you.

Exception 2: Express Written Consent. If the consumer gave prior express written consent to receive telemarketing calls from your specific company, you may call even if the number is registered. The FCC tightened this rule in 2024, requiring consent on a one-to-one basis (one consent, one company) instead of a shared lead form that bundles multiple sellers. ^[3] A signed paper form, a checked box on your own website, or a recorded verbal agreement can all count, but the consent has to name your company.

Exception 3: Non-Commercial Calls. Calls from political organizations, charities, and survey firms are generally exempt from the registry under the Telemarketing Sales Rule. That is why you still get election robocalls even when you are registered. These exemptions do not reach for-profit sales calls. ^[4]

There is no exception for calling "just once to check in," calling old leads who never bought, or calling because you found the number somewhere other than your own opt-in records. If the number is registered and none of the three exceptions apply, the first call is already a violation.

How many times can you call during an active EBR window?

The law sets the window (18 months from last transaction, 3 months from last inquiry) but does not set a per-week or per-month cap inside that window. That sounds like freedom. It is not.

The TCPA's general reasonableness standard still applies. Calling the same number every day during an EBR window invites a harassment argument, and more practically, it burns the relationship before you can convert it. The FCC has also said consumers can orally revoke an EBR at any time, and once they do, further calls are prohibited. ^[5]

The sharper limit is that the EBR clock runs from the last transaction, not from your last call. If a customer bought from you 17 months ago and you have sold them nothing since, you have roughly 30 days left. Calling them 40 times in that window does not reset the clock.

Cell phones add another layer. Any call made with an automatic telephone dialing system (ATDS) or an artificial or prerecorded voice requires prior express consent regardless of the EBR, and regardless of whether the number is on the registry. ^[6] These are two separate rule sets. A number can be fine to call under DNC rules and still require consent under the autodialer provisions. Many small outbound teams miss this and take liability from both directions.

For practical guidance on cold calling compliance, including how EBRs interact with cell phone rules, build these distinctions into your dialer workflow before you scale calls.

What are the fines for calling a DNC number illegally?

Each illegal call is a separate violation. The FTC can seek civil penalties up to $53,088 per violation under the Telemarketing Sales Rule. ^[7] The FCC can impose forfeitures up to $23,727 per call, per day, under TCPA. Both figures adjust for inflation.

Private plaintiffs can sue too, under TCPA § 227(c)(5). A consumer who gets more than one telemarketing call within a 12-month period from the same entity after registering can sue for $500 per call, or $1,500 per call if the court finds the violation was willful or knowing. ^[8] Class actions aggregate those numbers fast. The Cash App TCPA class action settlement and the Credit One TCPA settlement show how small per-call damages climb into eight- and nine-figure territory.

A useful comparison:

Enforcement Body	Max Per-Call Fine	Authority
FTC (TSR)	$53,088	15 U.S.C. § 45
FCC (TCPA)	$23,727	47 U.S.C. § 503(b)
Private plaintiff, standard	$500	47 U.S.C. § 227(c)(5)(B)
Private plaintiff, willful	$1,500	47 U.S.C. § 227(c)(5)(C)

These are maximums, and they are per violation. Regulators and courts weigh the number of calls, whether the violations were knowing, and whether the company ran a written compliance program. A program does not immunize you, but it demonstrably lowers exposure in settlement talks.

Does the DNC rule apply differently to cell phones vs. landlines?

The DNC registry covers both residential landlines and cell phones. Consumers can register either. ^[9] So the same EBR and consent exceptions apply whether the number is a mobile or a home line.

Cell phones carry extra TCPA restrictions that landlines do not. Calling a cell phone with an ATDS or a prerecorded message requires prior express consent, full stop, regardless of EBR and regardless of DNC status. The statute at 47 U.S.C. § 227(b)(1)(A) reads: "It shall be unlawful for any person within the United States... to make any call (other than a call made for emergency purposes or made with the prior express consent of the called party) using any automatic telephone dialing system or an artificial or prerecorded voice... to any telephone number assigned to a... cellular telephone service." ^[6]

So a live agent hand-dialing a cell phone is treated differently than a predictive dialer hitting the same number. If your team uses any auto-dialing technology, cell phones need consent layered on top of DNC compliance.

For more on which numbers get what protections, see our piece on mobile phone do not call list rules.

What is the company-specific DNC list, and how does it differ from the national registry?

Companies have to keep their own internal do-not-call lists. Under 16 C.F.R. § 310.4(b)(1)(iii), if a consumer asks not to be called during a call, you must record that request and honor it. The FTC's rule says stop within a reasonable time. The FCC's rule at 47 C.F.R. § 64.1200(d) gives you 30 days. ^[2]

This internal list is separate from the national registry. A number might not be on the national registry but still sit on your internal list because the person told you specifically to stop. Call that number again and it is a TCPA violation.

The reverse is also true. A number can be on your internal list even though the consumer is happy to hear from other companies. Your internal list binds only you.

Small teams get this wrong two ways. They fail to document oral opt-outs made during calls, and they fail to sync those opt-outs across every dialer and CRM before the next campaign runs. Both failures create liability. Treat an oral opt-out like a formal written record. That is the safe move.

How do you check if a number is on the DNC list before calling?

Organizations that make more than a de minimis number of telemarketing calls must subscribe to the national registry data through the FTC's access portal at telemarketing.donotcall.gov. ^[1] The FTC updates the data every 31 days. You must scrub your call lists against that data at least every 31 days before each campaign.

The 31-day scrub cycle is where small teams slip. They download the data once, load it into the CRM, then run campaigns for six months without a refresh. Numbers added to the registry during that gap are unprotected in your system, and calls to them are violations.

Below a certain call volume, manual scrubbing through the FTC portal is possible but error-prone. Most outbound teams at any real scale use a third-party DNC scrubbing service that automates the 31-day refresh. LeadCompliant has a free DNC checker for spot-checking numbers, which is a fine starting point before you set up an automated workflow.

For a deeper look at who gets on the list and how it works, see do not call list and how do I get the do not call list for the data access process.

One common question: can you call a number that was just registered? The 31-day grace period cuts both ways. Newly added numbers do not have to be honored for 31 days, so technically you could call one in that first month. In practice, scrub immediately on registration. The consumer's intent to opt out is clear, and a court might look hard at a company that deliberately timed calls into that grace window.

What about state DNC lists and state calling laws?

Many states run their own do-not-call registries with stricter rules than the federal one. States like Indiana, Texas, and Wyoming have had independent registries at various points, and state laws can set shorter EBR windows, extra consent requirements, or lower per-call damages. ^[10]

California is the big one. The California Consumer Privacy Act and California's DNC law create additional rights and remedies. Texas has its own Business and Commerce Code provisions on unsolicited calls. Calling into a state without checking that state's rules is a common source of exposure for teams that operate nationally.

Some states also restrict calling hours differently. Federal rules under 16 C.F.R. § 310.4(c) prohibit calls before 8 a.m. or after 9 p.m. local time at the called party's location. ^[2] Several states go further. Florida's Telephone Solicitation Act adds its own requirements and has driven a wave of litigation since its 2021 amendments.

The practical takeaway: the national registry is your floor, not your ceiling. If you call into multiple states, build a state-law check into your process on top of the federal scrub.

Can a consumer's consent override their DNC registration?

Yes. Written consent is one of the three exceptions to DNC rules, and it is the one that matters most for modern lead generation. If a consumer fills out a form on your site, checks a box agreeing to calls from your company, and gives a phone number, you have a basis to call even if that number is registered.

The FCC's 2024 order (FCC 24-17) changed how that consent has to be captured. Before the rule, a single web form could bundle consent to many sellers, so someone asking for one insurance quote might consent to calls from 20 companies. The FCC closed that loophole. Under the new rule, consent must be one-to-one: one form, one company. ^[3]

The rule was set to take effect in January 2025, but litigation from lead generation industry groups produced a court stay of the one-to-one provision while the case plays out. As of mid-2025, the status of that specific provision is unsettled. The underlying requirement for written consent is not in dispute. What is contested is whether shared-lead-form consent can cover multiple companies.

The safe position for any outbound team is to treat one-to-one consent as the standard no matter how the litigation lands. Shared lead form consent is a litigation target, and relying on it while the courts sort it out is a calculated bet.

For consent as it applies to text campaigns, see text message marketing and the TCPA overview.

What written compliance policies do you actually need?

The FTC's Telemarketing Sales Rule requires telemarketing companies to keep a written policy for maintaining a do-not-call list. ^[2] It has to cover how you record opt-outs, how you train employees on the policy, and how you keep the list current. This is not optional paperwork. The absence of a written policy is itself evidence of willful non-compliance in enforcement actions.

The FCC likewise requires procedures for a company-specific DNC list and training on those procedures. The safe harbor at 47 C.F.R. § 64.1200(c)(2)(i)(A) through (E) spells out what those procedures must include: a written policy, personnel training, a list-maintenance process, honoring DNC requests within 30 days, and access to the national registry. ^[5]

Meeting the safe harbor does not make violations vanish. It gives you a defense that reduces or eliminates liability if you get sued. Courts have dismissed TCPA cases where the defendant showed a fully implemented safe-harbor program and the violation was an isolated error rather than a systemic failure.

LeadCompliant's one-time compliance kit includes a written DNC policy template, a call log format, and a training checklist aligned to these requirements. That is a reasonable start if you do not have these documents yet.

Put these in writing before you launch any outbound program. It is faster and cheaper than explaining their absence to a plaintiff's attorney.

What does a real enforcement case look like?

In 2023, the FTC and the Department of Justice sued a mortgage company for making more than 1.1 million calls to numbers on the DNC registry. The case ended in a $2.3 million civil penalty. ^[11] That works out to roughly $2 per call, well below the $53,088 statutory maximum, which reflects negotiated settlement math, not legal charity.

Private class actions tend to produce bigger numbers per company because class damages pile up quickly. The structure is well-established: plaintiff's attorneys file on behalf of everyone who got calls from the defendant during a defined period. Even at $500 per call, a company that called 100,000 registered numbers faces $50 million in potential liability before a court decides anything.

Four defenses actually work in litigation. One, the number was not on the registry at the time of the call and the company had a 31-day-current scrub. Two, the company had valid written consent from that specific consumer. Three, a valid EBR existed and was documented. Four, the company had a written safe-harbor program and the call was an isolated error. All four need contemporaneous records. If you document consent and EBR status in your CRM at the moment of the interaction, you have a defense. If you reconstruct records after a complaint, you generally do not.

See do not call telemarketer list for a breakdown of what the FTC tracks and how enforcement referrals usually start.

Frequently asked questions

Can you legally call a number on the DNC list even once?

Only if one of three narrow exceptions applies: a valid existing business relationship (purchase or inquiry within the required window), prior express written consent to your specific company, or an exempt call (charity, political, survey). Without one of those, even a single call is a violation subject to fines up to $53,088 under the Telemarketing Sales Rule.

How long does the existing business relationship exception last?

18 months from the last purchase, rental, or financial transaction, or 3 months from the last inquiry or application the consumer made to your company. Once either window closes without a new transaction or inquiry, the EBR is gone. You cannot renew it by calling. Only a new transaction or an inbound inquiry from the consumer resets it.

Does the DNC list apply to business-to-business calls?

No. The National Do Not Call Registry and the TCPA's DNC rules apply to calls to residential phone numbers. B2B calls sit outside the registry's scope. But B2B cell phone calls made with an ATDS or prerecorded voice may still require consent under the autodialer provisions, and some state laws extend DNC-style protections to business numbers. Check state law for the states you call into.

If someone opted in to receive calls, can you call them as many times as you want?

Consent removes the DNC barrier but not all limits. Consumers can revoke consent at any time, orally or in writing, and you must honor revocations promptly. Excessive calls can also trigger harassment claims under other statutes. Consent gives you the legal right to make the call. It does not guarantee the call is wise or that the consumer cannot later claim the volume was abusive.

What is the safe harbor that protects companies from TCPA liability?

Under 47 C.F.R. § 64.1200(c)(2), a company has a safe harbor from private DNC suits if it keeps a written policy for an internal DNC list, trains personnel on it, records and honors opt-outs within 30 days, scrubs against the national registry at least every 31 days, and the violation resulted from error rather than systemic failure. All five criteria must be met for the safe harbor to apply.

How often do you have to scrub your call list against the DNC registry?

At minimum every 31 days, immediately before each campaign. The FTC requires telemarketers to access registry data no more than 31 days before any call. Running a campaign on data older than 31 days means numbers added after your last download are unprotected in your system, and calls to them are violations. Most compliance teams automate the refresh.

Can you text someone who is on the DNC list?

Text messages that count as telemarketing fall under the same DNC rules as voice calls. The FCC treats SMS as a call under TCPA. Texts sent to cell phones with an ATDS also require prior express written consent regardless of DNC status. So a registered cell phone number needs both DNC compliance and ATDS consent for any marketing text. The same three exceptions apply.

Does registering on the national DNC list also stop robocalls?

Not fully. The registry prohibits telemarketing calls from for-profit companies. It does not cover political calls, charitable solicitations, informational calls, or calls from companies you already do business with. Illegal robocallers ignore the registry by definition. The list works best against legitimate businesses that can be identified and fined, not against overseas spam operations.

What happens if a consumer asks to be put on your internal DNC list during a call?

Record the request immediately and stop calling that number within 30 days under FCC rules. Best practice is to suppress the number the same business day. The request applies to your company only. Check whether the number is on the national registry at your next 31-day scrub, and if it is not, the consumer may want to register it separately at donotcall.gov.

Can someone sue you personally for DNC violations, or only the company?

Both. TCPA allows suits against companies and, in some cases, against individuals who personally directed or authorized the illegal calls. Officers and managers who set calling policies have faced personal liability in FTC enforcement actions. Corporate structure does not automatically shield individuals who were personally involved in designing or approving a calling program that broke the rules.

How do state DNC laws differ from the federal registry?

State laws can be stricter than federal rules. They may set shorter EBR windows, lower the per-call damage amount, add consent requirements, or restrict call types the federal rules allow. California, Florida, and Texas are the states most likely to affect national outbound campaigns. The federal registry is the minimum floor. State laws stack on top, and you must comply with both.

What is the difference between a cold call and a DNC violation?

A cold call is an unsolicited outbound call to someone who has not interacted with you before. A DNC violation is a specific legal event that happens when you call a number registered on the national or state DNC registry (or on your internal list) without a valid exception. Not every cold call is a DNC violation, and not every DNC violation involves a cold call. They overlap but are not the same.

Sources

1. FTC, National Do Not Call Registry Data Book FY 2024: Over 249 million phone numbers are registered on the National Do Not Call Registry; registration takes effect within 31 days
2. FTC, Telemarketing Sales Rule, 16 C.F.R. Part 310: EBR windows of 18 months (purchase) and 3 months (inquiry); internal DNC list requirements; prohibition on calls before 8 a.m. or after 9 p.m. local time; written policy requirement
3. FTC, Complying with the Telemarketing Sales Rule: Political organizations, charities, and survey firms are generally exempt from DNC registry requirements
4. U.S. Code, 47 U.S.C. § 227(b)(1)(A), Telephone Consumer Protection Act: Statute text prohibiting ATDS or prerecorded calls to cell phones without prior express consent regardless of EBR or DNC status; $500 per call statutory damages; $1,500 for willful violations
5. FTC, Civil Penalty Amounts (inflation-adjusted): FTC civil penalty maximum of $53,088 per violation under the Telemarketing Sales Rule
6. U.S. Code, 47 U.S.C. § 227(c)(5), TCPA private right of action: Private plaintiffs may sue for $500 per call or $1,500 per willful call after receiving more than one telemarketing call in 12 months from the same entity
7. FTC, donotcall.gov consumer FAQ: Both residential landlines and cell phones can be registered on the national DNC registry
8. National Conference of State Legislatures, State Do Not Call Laws: Many states maintain their own DNC registries and telemarketing laws that may be stricter than federal rules
9. FTC, Press Release: DOJ files suit against mortgage company for DNC violations, 2023: 2023 FTC/DOJ enforcement action resulting in $2.3 million civil penalty for over 1.1 million calls to DNC-registered numbers