How to get TCPA liability insurance for a small sales team

Last updated 2026-07-10

What is TCPA liability insurance and does it actually cover telemarketing lawsuits?

TCPA liability insurance pays your legal defense costs and any settlement or judgment when someone sues your company under the Telephone Consumer Protection Act, 47 U.S.C. § 227 ^[1]. That statute lets private plaintiffs sue for $500 per negligent violation and $1,500 per willful violation, with no cap on class size ^[1]. A class action covering 10,000 contacts can threaten $5 million to $15 million before your lawyer even files an answer.

Here is the trap. This coverage does not live in most standard commercial general liability (CGL) policies. CGL covers bodily injury and property damage. A robocall or an unwanted text is neither, so courts routinely find CGL carriers have no duty to defend TCPA claims. The coverage you actually need sits in one of three places: a standalone TCPA endorsement, a Media Liability policy (sometimes called Advertising Injury or Communications Liability), or a Technology E&O policy that names TCPA and Telemarketing Sales Rule exposure in its coverage grant.

Not every insurer writes this. As of 2024, a small set of specialty markets underwrite TCPA risk for small teams, including certain Lloyd's of London syndicates, Markel, and Tokio Marine HCC, plus a few admitted carriers that vary by state. A retail broker who writes commercial auto and BOP all day probably won't know these markets exist.

Why do small outbound teams need TCPA insurance specifically?

Small teams get sued just as often as large ones, sometimes more. Plaintiffs' attorneys file TCPA suits by scanning for predictable violations: calls to numbers on the National Do Not Call Registry, texts sent without express written consent, and autodialed calls to a cell number without prior express consent ^[1]. None of that requires targeting a big company. It requires finding a violation.

The statutory damages are the problem. In most torts you have to prove actual loss. TCPA plaintiffs collect per-violation damages without proving a single dollar of harm. The FCC's one-to-one consent rule, adopted in December 2023, made the exposure larger for lead-gen teams by requiring consent be specific to one seller instead of bundled across multiple buyers ^[2]. If your team bought leads from a vendor who used a generic opt-in checkbox, each call on that list is a potential $500 exposure.

Look at real outcomes. Cash App agreed to a TCPA-related class settlement reported around $15 million in 2024 ^[3]. Credit One Bank settled TCPA claims for figures reported in the tens of millions ^[4]. Those are large companies. The per-call math that drove those settlements applies to a 10-rep team dialing 500 numbers a day.

Insurance does not replace compliance. It means one lawsuit does not bankrupt you while you're still sorting out what happened. Think of it as the fire extinguisher, not the smoke detector. You still need the detector, which is where your do not call list scrubbing and consent records come in.

What types of policies actually cover TCPA claims?

Four policy structures matter. Each puts your TCPA coverage in a different place, and the wording decides whether you're really covered.

Media Liability / Advertising Injury. This is the most common home for TCPA coverage in a specialty policy. It covers claims from content you publish or distribute, and some forms include unauthorized use of a telephone or electronic channel. Read the coverage grant and the exclusions. Some forms exclude claims arising from violation of any statute, which guts your TCPA protection entirely.

Technology E&O. If your team runs a dialing platform, CRM, or SMS tool, some Tech E&O carriers include TCPA claims as a covered "wrongful act." Tokio Marine HCC and similar carriers have issued endorsements adding TCPA to their Tech E&O forms. Premium for a small team runs roughly $3,000 to $7,000 per year at $1 million limits ^[12].

Standalone TCPA endorsement. A few carriers attach a TCPA-specific endorsement to an existing BOP or E&O policy. These are the cleanest on coverage clarity because there's no fight over whether "advertising injury" includes a text message. Limits tend to be lower, $500,000 to $2 million.

D&O / management liability with a TCPA rider. Less common for pure sales teams. If your company has a board or investors, some D&O carriers add a TCPA rider. This mostly protects founders from derivative claims, not the underlying plaintiff suits.

One thing that almost never works: claiming TCPA defense costs under a standard CGL policy after the fact. Federal courts have consistently held that TCPA violations fall outside CGL bodily-injury and property-damage grants ^[5]. Buy the right product before you need it.

Policy Type	Typical Limits Available	Typical Annual Premium (Small Team)	TCPA Coverage Clarity
Media Liability	$1M, $5M	$2,500, $8,000	Medium (depends on form)
Tech E&O with endorsement	$500K, $2M	$3,000, $7,000	High (explicit)
Standalone TCPA endorsement	$500K, $2M	$1,500, $5,000	High (explicit)
Standard CGL	$1M, $2M	Bundled with BOP	Very Low (usually excluded)

How much does TCPA liability insurance cost for a small team?

Plan on roughly $2,000 to $8,000 per year for $1 million in coverage for a team under 20 people making outbound calls or sending SMS. Nobody has perfectly clean published data here, because this is a specialty market and premiums aren't reported in aggregate the way auto or home rates are. The numbers below come from broker quotes, published insurer fact sheets, and the few surveys that touch marketing liability. Treat them as a planning range.

That range is wide because underwriters weight a handful of factors heavily:

• Call volume. A team dialing 200 numbers a day looks nothing like one dialing 2,000.
• Consent documentation. Can you prove every contact opted in, and how? Teams with signed, TCPA-compliant consent forms get better rates.
• Prior claims or FCC complaints. One FCC complaint on your record can double your premium or trigger a declination.
• Use of an autodialer. Underwriters still ask whether you use an ATDS. After Facebook v. Duguid in 2021 ^[6] the definition narrowed, but insurers still treat predictive dialers and ringless voicemail as higher risk.
• Industry vertical. Financial services, insurance, and debt collection pay more because plaintiff attorneys target those industries.

A $2 million limit for the same team might cost $4,000 to $12,000 per year. That sounds like a lot until you compare it to the $25,000 to $75,000 in legal fees to defend even one non-class TCPA claim through summary judgment, before any settlement.

How do you actually find a broker who can place TCPA insurance?

This is where most small teams get stuck. You call your existing commercial broker, they quote a BOP with CGL and maybe E&O, nobody mentions TCPA, and you feel covered. You're not.

You need a broker with access to specialty or excess and surplus (E&S) lines markets. Ask directly: "Do you have access to Lloyd's of London syndicates or other E&S carriers that write TCPA and telemarketing liability?" If they hesitate, find someone else.

Three kinds of brokers place this coverage:

1. Tech and media specialty brokers. Firms like Embroker, Founder Shield, and Coalition run online workflows with underwriting staff who know what TCPA means. They cater to startups and small companies and can usually get a bindable quote in 24 to 72 hours. 2. Marketing services specialty brokers. Some brokers focus on ad agencies, marketing firms, and call centers. They have direct lines to the admitted and non-admitted carriers that write communications liability. 3. E&S wholesalers. If your retail broker is willing to work the market, they can approach wholesale brokers (American Risk Specialists, Burns & Wilcox, others) with relationships to the right syndicates. This takes longer, usually 5 to 10 business days.

Tell any of these brokers exactly what your team does: number of reps, daily call volume, whether you send SMS, what dialing technology you run, what consent mechanism you use, and your annual revenue. Vague applications get vague quotes, or declinations.

What information do underwriters ask for when quoting TCPA coverage?

Underwriters for communications liability ask questions that feel invasive but map directly to how likely you are to get sued and lose. Answer honestly. Misrepresentation on an insurance application voids coverage.

Here is what the application usually covers:

• Business description and revenue (they want to confirm you're not quietly running a debt-collection shop while calling yourself a software sales team)
• Outbound calls per day and per year
• Whether you use an ATDS, a predictive dialer, or manual dialing
• Whether you send SMS or MMS, and how many per month
• How you obtain consent (opt-in forms, lead purchases, existing customer lists)
• Whether you scrub against the National DNC Registry and state DNC lists ^[7]
• Whether you have a written TCPA compliance policy
• Whether you've had prior TCPA claims, FCC complaints, or FTC investigations
• Whether you buy leads from third parties, and if so, who

Teams that can show written consent records, a documented DNC scrubbing process, and a compliance policy get better terms. Underwriters price the probability of a claim, and your paper trail is the evidence your probability sits below the average applicant. If you haven't built those processes yet, a free resource like the LeadCompliant compliance kit can help you document the basics before you shop.

If you buy leads, be ready to explain the vendor's consent language. Since the FCC's one-to-one consent rule ^[2], generic multi-seller opt-ins no longer meet the express written consent standard for cold calling under the TCPA.

Does TCPA insurance cover class action lawsuits or just individual claims?

It covers both, if the policy is written right. Most specialty TCPA policies cover individual and class action claims under the same policy, subject to the aggregate limit. That aggregate is the total the insurer will pay across all claims in the policy period. If your aggregate is $1 million and a class action settles for $2 million, you owe the difference. That's why many compliance attorneys push $2 million or $3 million limits even for small teams doing real volume.

Watch for a separate "class action sublimit," which sits below the per-occurrence limit. A policy might read $1 million per occurrence but $500,000 aggregate for class actions. That difference is real money. Read it.

Class actions also drive higher defense costs because of the certification fight. Beating class certification is often the main battle in a TCPA case, and it happens before any settlement talk. A well-built policy pays defense costs on top of the limit ("defense costs in addition to limits") instead of eroding the coverage amount. Ask your broker about this by name. Defense-inside-limits policies are worth less for TCPA exposure, because a complex case can burn $200,000 to $400,000 in defense alone.

What compliance steps lower your TCPA insurance premium and your lawsuit risk at the same time?

Underwriters discount premiums for documented compliance. Plaintiffs' attorneys hunt for documented violations. Both sides read the same files. Getting your compliance in order before you shop is the single move that improves both numbers.

The steps that move the needle most:

Scrub the DNC Registry before every campaign. The FTC runs the National Do Not Call Registry and requires telemarketers to check it, with numbers scrubbed no more than 31 days before a call ^[7]. Automated, logged scrubbing looks much better to underwriters. Learn how to access the list at how do i get the do not call list.

Document express written consent. The TCPA requires "prior express written consent" for autodialed or prerecorded calls to cell phones and for most marketing texts ^[1]. That consent has to be clear, conspicuous, and not bundled with other terms. Keep the record, timestamp it, attach it to the contact in your CRM.

Maintain an internal DNC list. Any consumer who asks you to stop must go on your internal do-not-call list and stay honored for at least five years ^[8]. That's separate from the national registry.

Train your reps. Documented training is evidence of good faith. Willful violations cost $1,500 per call; negligent ones cost $500 ^[1]. Showing a judge you had a training program and your rep went off script isn't a full defense, but it shifts the "willful" conversation.

Audit your dialing technology. If you run a cold call platform, know whether it has ATDS characteristics under your state's law. Some states use autodialer definitions broader than the post-Duguid federal standard ^[6].

None of this is complicated. All of it builds a paper trail that helps you with insurers and plaintiffs' counsel both.

Are there TCPA insurance exclusions that small teams commonly miss?

Yes, and missing one can mean your insurer denies the claim after you've spent six months in litigation.

The intentional acts exclusion. This is the most dangerous. Some policies exclude coverage for intentional violations of law. TCPA defendants often argue the call was accidental (wrong number, stale consent), but if a court finds your calling practice was intentional, some insurers use this exclusion to walk. Look for a policy that limits the intentional acts exclusion to fraud or criminal acts, not merely knowing violations of a statute.

The contractually assumed liability exclusion. If your contract with a client says you'll indemnify them for TCPA claims, some policies won't cover that assumed liability. Indemnification clauses in vendor contracts matter more than people think.

Prior acts and retroactive date issues. Claims-made policies only cover claims from acts after the retroactive date. If you've been calling for two years and buy coverage today with a retroactive date of today, last year's calls aren't covered. Push the retroactive date back as far as possible, ideally to your founding date.

Third-party lead liability. Some policies exclude claims from purchased lead lists. That's catastrophic for teams that buy data. Ask about it directly. If your vendor's consent is defective, that's exactly the moment you need coverage.

State law claims. The TCPA covers federal claims. California, Florida (FTSA), and Washington run their own calling laws with their own damages ^[9]. Confirm your policy covers state statutory claims, not federal TCPA alone.

How do recent TCPA court decisions and FCC rules change what insurers will write?

Insurers price on expected claim frequency and severity. When the law shifts, underwriting follows. Two recent changes matter a lot.

First, the FCC's one-to-one consent rule. In December 2023 the FCC adopted rules requiring consent for marketing calls and texts be granted to one specific seller at a time, not bundled across a lead generator's network of buyers ^[2]. The old model, where a consumer checks a box saying "I agree to be contacted by our partners" and that consent gets sold to 20 companies, no longer satisfies the standard. Underwriters know this reshaped the risk for teams that buy leads, and applications that still describe a lead-purchase model draw extra scrutiny.

Second, Facebook, Inc. v. Duguid (2021). The Supreme Court held that an ATDS under the TCPA must use a random or sequential number generator ^[6]. The opinion states the definition covers equipment with "the capacity either to store a telephone number using a random or sequential number generator, or to produce a telephone number using a random or sequential number generator" ^[6]. That narrowed the count of dialing systems that qualify. For insurance, it slightly lowered the risk of teams using CRM-based click-to-dial. It did not kill TCPA risk. It pushed more claims toward DNC and consent violations instead of pure autodialer claims.

For text message marketing, the risk profile hasn't improved. SMS claims keep coming because consent records for texts tend to be weaker than for calls, and consumers react to unwanted texts in ways that produce complaints and suits.

The FCC keeps the current TCPA rulemaking record at fcc.gov, and it's the primary source for what rules are in force ^[10].

What should a small team do right now to get covered in the next 30 days?

Here is a plan that works. Four weeks, start to bound coverage.

Week 1: Assess your actual exposure. Count daily call volume, list your dialing tools, pull your consent records, and confirm whether active DNC scrubbing is running. Write it down. That document is your underwriting submission.

Week 2: Contact two or three specialty brokers. Skip your existing commercial broker for the first call. Go straight to a tech or media specialty broker (Embroker, Founder Shield, and similar) and ask for a TCPA or communications liability quote. Give them your volume, consent process, and technology. Get at least two competing quotes. They're free.

Week 2, parallel track: Fix your consent documentation. If you can't show a broker clean consent records, you'll get a worse rate and you'll lose in court. Use your CRM to timestamp and store consent. If your consent forms are vague or bundled, update them before your policy renews.

Week 3: Compare quotes on four dimensions. Does the coverage grant name TCPA claims? Is the retroactive date pushed back far enough? Are class actions covered at the same limit or a lower sublimit? Are defense costs inside or outside the policy limits?

Week 4: Bind coverage and store it. Once you bind, put the policy somewhere your operations lead and your lawyer can reach in an emergency. TCPA suits move fast. Plaintiffs file, serve, and demand a response within weeks. Knowing who to call on day one matters.

LeadCompliant's free compliance kit has the consent form templates and DNC scrubbing checklist underwriters ask about, which makes the whole sequence faster.

What do TCPA lawsuits actually look like when they hit a small team?

Small-team TCPA cases rarely open as class actions. They usually start as individual complaints: an FCC complaint, a demand letter from a plaintiff's attorney, or a single-plaintiff federal filing. The attorney tests your response.

If your documentation is clean and you carry insurance, you respond fast, your insurer assigns defense counsel, and the case often settles for $2,000 to $10,000 within a few months. If your documentation is a mess or you're uninsured, the same case grows. The attorney seeks discovery, finds more violations in your records, and either amends to add class claims or uses the threat of certification to extract a bigger settlement.

The cash app tcpa class action settlement and the credit one tcpa settlement are big-company examples, but the mechanism is identical: a lawyer found a systematic violation, gathered a class, and settled for less than the risk of trial. Your exposure scales with your call volume. A team dialing 10,000 numbers a month with a consent defect isn't far behind those companies in theoretical exposure.

The TCPA does not require the plaintiff to prove they were harmed. The statute at 47 U.S.C. § 227(b)(3) lets a person bring an action "to recover for actual monetary loss from such a violation, or to receive $500 in damages for each such violation, whichever is greater" ^[1]. No harm required. No damages cap. That sentence is the whole reason this insurance exists.

Frequently asked questions

Does a standard business owner's policy (BOP) cover TCPA lawsuits?

Almost never. BOP policies include commercial general liability, built for bodily injury and property damage. Courts in multiple circuits have ruled that TCPA claims don't qualify as "bodily injury" or "property damage" under standard CGL forms, so the carrier has no duty to defend. You need a separate Media Liability, Tech E&O, or standalone TCPA endorsement. Assume your BOP leaves you exposed on telemarketing claims until you verify otherwise in writing.

How much TCPA insurance does a small outbound team actually need?

Most compliance advisors suggest a minimum of $1 million per occurrence and $2 million aggregate for teams making more than 100 outbound contacts a day. If you send SMS at any scale, move to $2 million per occurrence. The math is plain: $1,500 in willful damages times 1,000 contacts is $1.5 million before defense costs. Size your limits to your worst-case call volume, not your average day.

Can I get TCPA insurance if I buy leads from third-party vendors?

Yes, but it's harder. Some underwriters exclude claims from purchased lead lists entirely. Others cover it if you can show the vendor's consent language meets the FCC's one-to-one consent standard. You'll need to produce the vendor's opt-in form and consent language during underwriting. Teams that buy leads without auditing vendor consent are a harder risk to place and pay higher premiums.

What is the FCC's one-to-one consent rule and how does it affect insurance applications?

The FCC's December 2023 order requires TCPA consent for marketing calls and texts be granted to one specific seller at a time, not shared across a network of lead buyers ^[2]. That ended the bundled opt-in model common in lead generation. For insurance, applications that still describe a lead-purchase model draw extra scrutiny. If your consent process doesn't fit the rule, some carriers decline to write you.

Does TCPA insurance cover text message (SMS) marketing violations?

It can, but only if the coverage grant names electronic communications or SMS. Some Media Liability forms mention telephone and electronic communications broadly. Others are written around print or broadcast and leave SMS in a gray zone. Ask your broker to confirm in writing that the policy covers claims from unauthorized text messages. Since SMS TCPA claims are among the most frequently filed, this is not a detail to assume.

What's the difference between a claims-made and occurrence TCPA policy?

A claims-made policy covers claims filed during the policy period, whenever the underlying act happened, as long as it's after the retroactive date. An occurrence policy covers acts during the policy period, whenever the claim is filed. Most specialty TCPA policies are claims-made. The retroactive date matters enormously: push it back to your founding date if you can. If you cancel a claims-made policy, buy tail coverage for claims filed after cancellation.

How long does it take to get TCPA insurance coverage bound?

For a small team with clean documentation and under $5 million in revenue, specialty brokers like Embroker or Founder Shield can usually get a bindable quote in 24 to 72 hours and bind within the same week. Going through a wholesale E&S broker takes longer, usually 5 to 10 business days. If you're in active litigation or have pending FCC complaints, expect a longer review or a declination.

What does TCPA insurance cost per year for a 5-person sales team?

A 5-person team making around 500 calls a day with documented consent should expect $2,000 to $4,500 per year for $1 million in coverage, based on typical specialty pricing. Teams using predictive dialers or buying third-party leads pay toward the higher end. Teams with prior TCPA complaints pay more or get declined. These aren't published rates; they come from broker quotes and industry forum data, so treat them as a planning range.

Do I need TCPA insurance if I only call existing customers?

Your risk is lower with existing customers, because the TCPA's established business relationship standard offers some protection for calls to people you've done business with recently. But "existing customer" is not a blanket exemption. Autodialed calls to cell phones still need prior express consent, even from customers, and DNC Registry rules still apply. The risk is lower, not zero. A modest policy still makes sense if you call cell phones at any volume.

Will TCPA insurance pay for a settlement, or just defense costs?

A well-structured TCPA policy covers both defense costs and settlement payments, up to your limits. The key question is whether defense costs sit inside or outside the limits. If they erode the limit, a case that costs $300,000 to defend leaves only $700,000 for settlement on a $1 million policy. Defense-outside-limits (also called defense in addition to limits) is better for TCPA exposure and worth asking about by name.

Can an individual sales rep be personally sued under the TCPA?

Courts have generally held the TCPA targets the company, not individual employees, because the statute aims at entities that initiate solicitations. But if a rep owns the business, or a court pierces the corporate veil, personal exposure exists. Officers and owners of small companies sometimes face personal liability in FTC or state AG enforcement actions, which is separate from private plaintiff TCPA suits. Corporate structure matters here.

Does TCPA insurance cover state-level telemarketing law violations like Florida's FTSA?

It depends on the policy language. Standard TCPA policies cover federal claims under 47 U.S.C. § 227. Florida's Telephone Solicitation Act, California's rules, and Washington's electronic communication law ^[9] are separate statutes with their own damages. Some Media Liability policies cover "telemarketing laws" broadly; others list only federal statutes. If you operate in Florida or California, confirm your policy covers state statutory claims. Florida's FTSA allows $500 per call, matching the federal structure.

What happens to my TCPA coverage if I switch dialing software mid-year?

Tell your broker promptly. Switching to a new dialing platform, especially one with predictive or autodialing features, is a material change in your risk. Failing to disclose it can give an insurer grounds to deny a claim from the new platform. Most policies require notice of material changes in operations. It's a short phone call, and it protects your coverage.

Is there any free or low-cost TCPA compliance help before I buy insurance?

Yes. The FTC publishes the Telemarketing Sales Rule and National DNC Registry access procedures for free at ftc.gov ^[7]. The FCC publishes TCPA orders and guidance at fcc.gov ^[10]. LeadCompliant offers a free TCPA compliance kit with consent form templates and a DNC scrubbing checklist, which many brokers ask to see during underwriting. Documented compliance before you apply generally results in better rates.

Sources

1. U.S. Government, 47 U.S.C. § 227, Telephone Consumer Protection Act (via Cornell Legal Information Institute): TCPA authorizes $500 per violation and $1,500 per willful violation; requires prior express written consent for autodialed calls to cell phones
2. Ninth Circuit Court of Appeals, CGL / TCPA coverage decisions: Federal circuit courts have consistently held CGL policies do not cover TCPA claims as they fall outside bodily injury and property damage coverage grants
3. U.S. Supreme Court, Facebook, Inc. v. Duguid, 592 U.S. 395 (2021): Supreme Court held that an ATDS under TCPA must use a random or sequential number generator, narrowing the autodialer definition
4. FTC, National Do Not Call Registry and Telemarketing Sales Rule: FTC requires telemarketers to scrub numbers against the National DNC Registry, with numbers checked no more than 31 days before a call
5. FTC, Telemarketing Sales Rule, 16 C.F.R. Part 310: Telemarketers must maintain internal DNC lists and honor do-not-call requests for at least five years
6. Florida Statutes § 501.059, Florida Telephone Solicitation Act (FTSA): Florida's FTSA provides $500 per violation for unauthorized telephone solicitations, mirroring TCPA damages structure at state level
7. Insurance Information Institute, business liability coverage overview: Standard CGL policies cover bodily injury and property damage; specialized communications and media liability policies cover statutory and regulatory claims outside standard CGL scope
8. Embroker, Technology E&O insurance overview: Technology E&O policies with TCPA endorsements for small teams typically run $3,000 to $7,000 per year at $1 million limits