Last updated 2026-07-09
TL;DR
To use the National Do Not Call Registry, register at donotcall.gov, pay the FTC's annual fee (free for up to 5 area codes, then $72 per area code per year up to an $18,044 cap), download the list, and scrub every call list before you dial. Re-scrub at least every 31 days. Calling a registered number can cost up to $53,088 per FTC violation.
What is the DNC registry and who has to follow it?
The National Do Not Call Registry is a federal database run by the Federal Trade Commission that lets consumers opt out of most commercial telemarketing calls. It went live in 2003 under the Do-Not-Call Implementation Act, and it now holds more than 245 million phone numbers [1]. If your business makes outbound telemarketing calls to U.S. consumers, you almost certainly have to comply.
The legal authority sits in two places. The FTC enforces the Telemarketing Sales Rule (16 CFR Part 310). The FCC enforces the parallel ban under the Telephone Consumer Protection Act, 47 U.S.C. § 227, which makes it unlawful "to initiate any telephone solicitation to... a residential telephone subscriber who has registered his or her telephone number on the national do-not-call registry" [2]. Both agencies can sue. So can private plaintiffs, and that is where most of the real financial pain comes from.
Who is exempt? Purely charitable fundraising (with no commercial pitch attached), political calls, survey calls with no sales component, and calls to businesses sit outside the registry's reach. Calls to your own customers within 18 months of their last transaction are also exempt under the established business relationship rule. That window closes fast, and the burden of proving it falls on you. When in doubt, scrub anyway.
State laws add another layer. Many states run their own do not call list databases with tighter rules, shorter re-scrub windows, or broader definitions of who has to comply. The federal registry does not preempt stricter state requirements [3].
How do you register your organization to access the DNC list?
The FTC's access point is donotcall.gov. Here is the exact sequence.
First, go to donotcall.gov and click the link for telemarketers and sellers. You create an account using your organization's legal name, EIN or tax ID, and a contact email. The system assigns you an Organization ID and a Subscription Account Number (SAN), which you need every time you re-subscribe or download data [4].
Second, choose your area codes. You can select any combination of the 200-plus U.S. area codes. The first five area codes in a 12-month subscription period are free. After that, the FTC charges $72 per area code per year (as of 2024), with a hard cap of $18,044 for unlimited national access [4]. If you call the whole country, the cap makes unlimited the obvious pick. If you are a small regional team hitting two or three metro markets, five free area codes might cover you entirely.
Third, pay and download. The registry hands you data as pipe-delimited or fixed-width text files. You download the full file once, then pull incremental updates (new registrations since your last download) each month. Keep a timestamped record of every download. That log is your evidence in a dispute.
Renewals are annual. If your SAN lapses, you lose legal access to the data, and any calls made during the gap are indefensible. Calendar your renewal 30 days early. For more on the access process, see how do I get the do not call list.
What does it actually cost to subscribe to the DNC registry?
The FTC publishes a plain fee schedule, so there is no guesswork [4].
| Access tier | Annual cost |
|---|---|
| First 5 area codes | Free |
| Each additional area code | $72/year |
| National unlimited access | $18,044/year |
A team calling a single state might need five to ten area codes. At $72 each, that is $360 to $720 a year after the free five. For teams dialing nationally, the $18,044 cap is a reasonable line item. A single valid TCPA complaint carries a statutory penalty of $500 to $1,500 per call [2]. One bad campaign erases years of subscription savings.
The FTC adjusts these fees periodically. The numbers above reflect the 2024 schedule. Verify at donotcall.gov before you budget.
Here is what people miss: the federal fee buys federal access, nothing more. If your state runs its own list (Florida, Indiana, Pennsylvania, and about a dozen others do), you pay for those separately. Florida's list has its own registration and fee structure run by the state [5]. Check your target states against the florida do not call list, indiana do not call list, and do not call list pa if you operate in those markets.
How do you scrub your call list against the DNC registry?
Downloading the registry is step one. Scrubbing, meaning actually removing matching numbers from your dial list before a campaign runs, is where most teams either get it right or hand a plaintiff their case.
The mechanics are simple. You compare your outbound phone list against the registry file. Any number that appears in the registry gets suppressed. The match has to run on the full ten-digit number, not the last seven digits, because the same seven-digit number lives in many area codes.
Most CRMs and dialer platforms have a built-in DNC scrub or a native tie-in to a scrub service. If yours does not, you can run a VLOOKUP in a spreadsheet for tiny lists, though that breaks down fast and hides errors. For lists over a few thousand records, use a dedicated scrubbing tool or API that compares your numbers against a current registry snapshot.
The FTC rule is clear: scrub no more than 31 days before you dial [3]. That is the outer limit, not a target. Pull your suppression file 45 days ago, and if someone registers on day 32, you are liable for the call. Serious operations scrub within 15 to 20 days as a buffer.
Document everything. Log the date of each scrub, the number of records removed, and the campaign name. If a complaint surfaces six months later, that paper trail is the difference between a quick dismissal and a six-figure settlement.
LeadCompliant's free number checker helps you spot-check individual numbers against the national registry before you build a full workflow. It is handy when you are sizing up a purchased lead list for the first time.
How often do you have to re-scrub your call lists?
Every 31 days, at minimum. That is the federal rule under 16 CFR § 310.4(b)(3)(iv) [3]. The registry updates continuously as consumers add new numbers, so a list scrubbed two months ago is legally stale.
Re-scrubbing in practice is lighter than it sounds. You do not re-download the entire registry every month. The FTC portal lets you pull incremental files containing only numbers added since a specific date. Pull the incremental update, append those numbers to your suppression list, and re-run your active campaign files against the updated list.
Evergreen campaigns are the trap. If you dial one large list over weeks or months, set a fixed calendar cycle and never break it. Some teams tie the re-scrub to payroll or billing dates so it can't get skipped. The worst pattern I see: teams scrub once at launch, then assume they are covered for the whole run. A 45-day campaign scrubbed only at the start is out of compliance by day 32.
State lists may run shorter re-scrub clocks. Check each state's rule on its own.
What phone numbers are actually on the DNC registry?
Any U.S. residential phone number can be registered, and wireless numbers have been registerable since the registry launched in 2003 [1]. The idea that cell phones sit under a separate federal layer is a common myth. Consumers register their cell numbers on donotcall.gov the same way they register landlines.
Numbers stay on the registry permanently. There used to be a five-year expiration, but Congress killed it in 2007 with the Do-Not-Call Improvement Act [6]. A number registered in 2005 is still protected today unless the consumer removes it or the number gets reassigned to a new subscriber.
Reassignment is a real risk. If a number was on the DNC list under one subscriber and then went to a new person who never registered it, you could technically call it. But you have to know it was reassigned, and that is hard to verify. The safer move is to treat any DNC-listed number as off-limits unless you hold fresh, documented consent from the current subscriber.
For more on which numbers are covered, see mobile phone do not call list and do not call list number.
What are the penalties for calling a number on the DNC registry?
The FTC can seek civil penalties of up to $53,088 per violation as of 2024. That figure climbs every year under the Federal Civil Penalties Inflation Adjustment Act [7]. The FCC has its own penalty authority under 47 U.S.C. § 227. Private plaintiffs can sue for $500 per call, or $1,500 per call when the violation was willful or knowing [2].
The math turns ugly quickly. A campaign that dials 500 DNC-registered numbers once is a potential $750,000 private liability at $1,500 a call. Courts have generally certified TCPA class actions, so a single systemic scrubbing failure can be existential for a small business.
Enforcement history sets the range. The FTC has won multi-million dollar judgments against outbound call centers. In 2022 it sued several companies for DNC and robocall violations, with settlements landing between $1 million and $10 million depending on scale [8]. Private TCPA class actions have settled for far more.
One nuance matters. Express written consent from the specific person you are calling can override the DNC ban for that individual. The consent has to be real, documented, and unambiguous. Buying a lead list and assuming consent was collected upstream is not a defense. You need to produce the consent record for every registered number you dial.
For a deeper look at enforcement, see do not call list report and the ftc do not call list overview.
How do state DNC lists work alongside the federal registry?
The federal registry sets a floor. States can and do go higher. About a dozen states run their own do-not-call lists with separate registration, separate fees, and sometimes stricter rules on exemptions, consent, or re-scrub timing [3].
The practical result: you may need to subscribe to and scrub against several lists. A company calling Florida residents handles both the FTC's federal list and Florida's state list. Same for Indiana, Pennsylvania, Wyoming, Texas, and others. State lists are never folded into your federal subscription automatically.
Some states apply rules to B2B calls, which the federal registry largely ignores. If you call businesses in certain states, read the state telemarketing statute before you assume you are exempt.
A few states adopt the federal registry as their own, so there is no separate state database to buy. Do not assume that without checking. The National Association of Attorneys General and individual state AG sites are the right places to confirm current rules [9].
For state-specific guidance, the do-not-call telemarketer list article breaks down registration requirements by state.
How do you handle the established business relationship (EBR) exemption?
The EBR exemption is the most misused carve-out in DNC compliance. It lets you call a customer who is on the registry when you have an existing relationship, defined as a prior transaction, inquiry, or application inside a set time window [3].
Transactions and inquiries run on different clocks. For a transaction (a purchase, a payment, a contract), the window is 18 months from the last transaction. For an inquiry (a quote request, a lead form, a question), the window is just three months from the date of the inquiry. Once those windows close, the EBR is gone and the DNC registration controls.
You have to document the EBR. That means timestamped records of the transaction or inquiry, the phone number tied to it, and the customer's identity. A spreadsheet without dates proves nothing. A CRM record with a clear transaction date and phone number does the job.
A consumer can also revoke the EBR at any time by telling you to stop calling. That revocation goes into your internal do-not-call list immediately. Internal DNC maintenance is a separate requirement from federal registry compliance, and it runs right alongside it.
The dnc registry article covers internal suppression list requirements next to the federal registry in more detail.
What is the internal do-not-call list requirement?
Beyond the federal and state registries, every telemarketer has to keep its own internal do-not-call list under 16 CFR § 310.4(b)(1)(iii) [3]. When a consumer asks not to be called, you add their number to your internal list within a reasonable time (most practitioners treat 30 days as the standard, though the FTC guidance implies faster is better) and honor that request for at least five years.
Internal DNC requests arrive through several channels. A consumer says it out loud on a call. They send an email. They click an opt-out link. They reply to a text. All of those funnel into one suppression list that covers every campaign you run.
A consumer on your internal DNC list gets treated exactly like a name on the federal registry, even when they are not on it. The EBR exemption does not override an internal DNC request. Once someone says stop, stop.
Training your reps to capture and log opt-out requests matters as much as the scrubbing itself. A rep who forgets to log a "take me off your list" request is a direct liability sitting inside your own team.
How do you set up an ongoing DNC compliance process?
One-time scrubbing is not a compliance program. Here is what a real, repeatable process looks like for a small outbound team.
Step 1: Subscribe to the federal registry at donotcall.gov and any applicable state lists. Download the full file for your area codes.
Step 2: Identify every state you call. Subscribe to each state's list where one exists. For states like florida do not call list and indiana do not call list, that means a separate account and fee.
Step 3: Build or integrate a suppression database. This combines the federal file, any state files, and your internal DNC list into one master suppression file. Every new lead list gets scrubbed against this before it touches your dialer.
Step 4: Set a 31-day re-scrub calendar for active campaigns. Pull incremental updates from the federal registry and any state registries on schedule. Log the date and record count for each update.
Step 5: Train your team. Every person who dials, every person who enters leads, and every manager who approves campaigns has to know what a DNC request looks like and what to do with it.
Step 6: Audit quarterly. Pull a sample of recent calls and confirm none of those numbers sat on the suppression list at the time of the call. Find a mismatch, and you stop the campaign, find the process failure, then resume.
For teams that want a documented version, LeadCompliant's compliance kit includes a ready-to-use scrubbing checklist and a suppression log template. The free tools handle individual number lookups to complement your bulk workflow.
What records do you need to keep for DNC compliance?
The FTC's Telemarketing Sales Rule requires telemarketers to keep records for 24 months [3]. The FCC's TCPA rules carry similar retention expectations. Litigation takes years, so many compliance attorneys recommend holding records for four.
What to keep:
- Dated downloads of registry files (federal and state)
- Scrub logs showing which campaigns were scrubbed, against which list version, on which date
- Lead list provenance records (where each list came from, what consent was represented at purchase)
- Internal DNC request logs with timestamps and the name or ID of the rep who took the request
- Consent records for any number you call that appears on the registry
- Training records showing which employees received DNC compliance training and when
Storage format matters less than completeness and retrievability. A folder of timestamped CSV exports in cloud storage is fine. What is not fine is leaning on your dialer vendor to hold records you cannot pull yourself once you end the contract. Own your evidence.
Frequently asked questions
How long does it take for a number to appear on the DNC registry after someone registers?
The FTC adds registered numbers within 24 hours, but telemarketers are not required to honor the registration until 31 days after the consumer signs up [1]. That 31-day buffer gives businesses time to pull and process updated files. If you scrub within that window, you are covered even if you dial the number before the 31 days run out.
Can I call a cell phone that is on the DNC registry if I have consent?
Yes. Express written consent from the called party overrides the DNC registration for that specific number. The consent has to be specific, documented, and obtained by you directly, not assumed from a third-party lead source. Under 47 U.S.C. § 227, consent for autodialed or prerecorded calls to cell phones requires a signed written agreement, on paper or electronically [2].
Does the DNC registry apply to text messages?
The national DNC registry technically covers voice calls, not SMS. But the FCC has consistently ruled that the TCPA's ban on autodialed calls to cell phones applies to texts, and the FTC's Telemarketing Sales Rule covers telemarketing texts. Registering on donotcall.gov does not automatically block texts, yet the TCPA consent rules for texts are strict on their own terms [2].
What is a safe harbor under the DNC rules?
The TSR and FCC rules both offer a safe harbor if you accidentally call a registered number, provided you keep written procedures, train personnel, subscribe to the registry, scrub within 31 days, and the violation came from error rather than a systemic failure [3]. The safe harbor is not automatic. You have to prove every element. It protects against penalties but does not necessarily block private lawsuits.
Do I have to scrub against state DNC lists separately?
Yes, if you call into states that run their own lists. About a dozen states have separate registries. Florida, Indiana, Pennsylvania, and Wyoming are common examples. Subscribing to the federal registry does not cover state lists. Identify every state you call into, check whether it maintains its own list, subscribe, and scrub against it separately.
How do I know if a number was reassigned since it was put on the DNC registry?
The FCC created the Reassigned Numbers Database (RND), a separate subscription service at reassigned.fcc.gov, to help callers check whether a number went to a new subscriber [7]. It does not integrate with the DNC registry. For high-risk or high-volume campaigns, running numbers through the RND before dialing is a reasonable extra step to cut liability.
What happens if I buy a lead list and those numbers are on the DNC registry?
Buying a lead list does not shift liability to the vendor. You are responsible for scrubbing every number you dial, wherever it came from. If listed numbers are DNC-registered and you call them without valid consent, the violation is yours. Scrub every purchased list before it enters your dialer, demand consent representations from vendors, and treat those representations as a starting point, not a shield.
Can a business number be on the national DNC registry?
The national registry is meant for residential subscribers, and business-to-business calls are generally exempt from the federal DNC rules. But some business numbers are actually residential lines, and some states extend DNC protection to certain business solicitations. If you are calling a number and you are not sure it is a business line, scrub it anyway.
How do I report a company that violated the DNC rules by calling me?
Consumers can file complaints at donotcall.gov or by calling 1-888-382-1222. The FTC compiles these complaints and uses the aggregate data to pick enforcement targets. Consumers can also complain to the FCC at fcc.gov and may bring private lawsuits under the TCPA in federal or state court without first going through a federal agency [2].
Does the EBR exemption apply if I bought a company that had an existing relationship with the customer?
Possibly, but this is unsettled territory. The FTC's position is that an EBR can transfer in some acquisition scenarios, but you have to show the original relationship meets the definition and that the timeframes have not expired. Get legal advice before you rely on an acquired EBR to justify calling DNC-registered numbers.
How many numbers are currently on the DNC registry?
The FTC reported more than 245 million registered phone numbers in its most recent annual data [1]. Registration has grown steadily since the registry launched in 2003. The scale means that for most consumer audiences, a large slice of your raw lead list is likely registered, which is why scrubbing before every campaign matters financially as much as legally.
What is the difference between the FTC and FCC DNC rules?
Both agencies enforce DNC protections, but under different statutes. The FTC enforces the Telemarketing Sales Rule (16 CFR Part 310) against telemarketers. The FCC enforces 47 U.S.C. § 227 (the TCPA), which covers autodialed calls and prerecorded messages to cell phones more broadly. Both share the same registry database. A single call can break both sets of rules at once.
Is there a free way to check a phone number against the DNC registry?
Individual consumers can verify their own number at donotcall.gov at no charge. Businesses cannot legally access the full registry for free beyond the first five area codes. For spot-checking individual numbers during lead qualification, some compliance tools offer free single-number lookups against the registry, which helps you judge lead quality before committing to a full campaign scrub.
Sources
- FTC, National Do Not Call Registry Data Book FY2023: The National Do Not Call Registry holds over 245 million registered phone numbers.
- 47 U.S.C. § 227, Telephone Consumer Protection Act, Cornell LII: It is unlawful to initiate any telephone solicitation to a residential telephone subscriber who has registered their number on the national do-not-call registry; private plaintiffs may recover $500 to $1,500 per violation.
- FTC, Telemarketing Sales Rule, 16 CFR Part 310: Telemarketers must scrub call lists against the registry no more than 31 days before dialing and maintain internal DNC lists for at least five years; records must be kept for 24 months.
- FTC, National Do Not Call Registry for Telemarketers and Sellers: The first five area codes are free; each additional area code costs $72 per year; national unlimited access is capped at $18,044 per year.
- Florida Department of Agriculture and Consumer Services, Florida Do Not Call Program: Florida operates its own state do-not-call list with separate registration and fee requirements from the federal registry.
- Do-Not-Call Improvement Act of 2007, Public Law 110-187: Congress eliminated the five-year expiration period for DNC registrations in 2007; numbers now stay on the registry permanently until removed by the subscriber.
- FTC, Press Releases and Enforcement Actions (Telemarketing): FTC enforcement actions for DNC and robocall violations have resulted in settlements ranging from $1 million to $10 million depending on the scale of violations.
- National Association of Attorneys General (NAAG), State AG Offices Directory: Individual state attorneys general websites are the authoritative source for verifying whether a state maintains its own do-not-call list and its specific requirements.