How to win deals against competitors who cut TCPA corners

Last updated 2026-07-11

Why do TCPA corner-cutters seem to win in the short term?

They call more people. Simple as that.

A competitor who ignores the do not call list can dial a purchased lead list without scrubbing it against the National DNC Registry, without getting prior express written consent for cell phones, and without honoring internal opt-outs. That expands their reachable universe by a lot. More dials means more conversations. More conversations means more closed deals this quarter.

They also move faster. Proper consent collection takes time. Landing pages need disclosures, forms need opt-in language, SMS flows need a double opt-in if you want solid protection. A competitor who skips those steps gets to market a week earlier and calls twice as many contacts.

So the short-term math looks painful for the compliant team. Your manager sees lower connect rates. Your competitor's manager brags about pipeline velocity. Leadership starts asking uncomfortable questions about your process.

Here is what that short-term math ignores. Liability stacks up with every illegal contact. Under 47 U.S.C. § 227, each violation can draw $500 in statutory damages, and a court that finds a willful or knowing violation can treble that to $1,500 per call or text ^[1]. A company making 50,000 unconsented calls does not have a sales advantage. It has a $75 million contingent liability sitting on its books, waiting to be found.

What does TCPA actually say about calling and texting without consent?

The Telephone Consumer Protection Act, codified at 47 U.S.C. § 227, bars using an automatic telephone dialing system (ATDS) or a prerecorded voice to call or text a cell phone without prior express written consent ^[1]. The FCC's 2012 order tightened that standard, killing the prior business relationship exception for cell phone calls and requiring written consent that names the specific seller ^[2].

Calls to residential landlines on the National DNC Registry follow a different but equally firm rule. You need an established business relationship or a prior express invitation to call. Even that relationship expires. It runs 18 months after the last purchase, or 3 months after an inquiry ^[3].

The statute says violators face "not less than $500 in damages" per violation, and a court "may, in its discretion" award up to three times that amount for willful or knowing violations ^[1]. Class actions are the real weapon. One plaintiff attorney represents a class of 100,000 people who each got two illegal texts, and the arithmetic hits $100 million in exposure before anyone files a motion.

The FCC has reinforced this framework again and again. The most recent example is the 2024 one-to-one consent rule, which requires a single consent to authorize a single seller, not a network of lead buyers ^[4]. That rule alone erases a large slice of the shared-lead consent model many competitors rely on.

For a plain-language map of how these rules fit together, the tcpa hub on LeadCompliant is a decent starting point before you dig into the statute itself.

How big are real TCPA settlements and judgments?

The numbers are not theoretical. They are on the record, with docket numbers.

The cash app tcpa class action settlement and the credit one tcpa settlement are two well-documented examples. Credit One Bank agreed to a $12.5 million settlement in 2020 over allegations it called consumers on their cell phones after they revoked consent ^[5]. The Cash App matter involved a $6 million settlement fund. Neither is an outlier.

Krakauer v. Dish Network produced a $61 million jury verdict, one of the largest TCPA verdicts on record, after the court found willful violations and trebled damages ^[6]. Drake v. FirstKey Homes settled for $4.5 million. Dish also took a separate $280 million FTC judgment over the same kind of conduct (a related agency action, not a TCPA private suit).

Here is a rough picture of how settlement sizes cluster by company type.

Company size	Typical settlement range	Common trigger
Small business (under 50 employees)	$50K - $500K	Purchased list without DNC scrub
Mid-market (50-500 employees)	$500K - $10M	ATDS use without written consent
Enterprise	$5M - $300M+	Systematic consent failures at scale

Sources: reported federal court settlements and FTC enforcement records ^[5][6].

The point is not to scare you. The point is that these numbers are your ammunition when you sell against a competitor cutting corners. Your prospect needs to know what their vendor's liability looks like if that vendor is also their agent, or if the prospect gets named in a joint venture.

Can a prospect or buyer share TCPA liability with the vendor cutting corners?

Yes. This is the part most buyers never hear.

The FCC's 2013 declaratory ruling held that a seller can be vicariously liable for TCPA violations committed by a third-party telemarketer acting with apparent authority ^[7]. Courts have run that logic further, into situations where a brand or buyer controls the dialing activity, approves the script, or accepts leads generated through illegal contacts.

If your competitor is a lead vendor calling on behalf of your prospect's brand, your prospect can end up named in the lawsuit. That happens more often than buyers expect. Class action attorneys name every party with a traceable connection to the call.

This is a productive conversation to have in a competitive deal. You are not threatening the prospect. You are handing them information their current vendor probably never volunteered. Ask them three things. Has the existing vendor shown proof of consent for each contact? Does that vendor scrub the National DNC Registry before every campaign? Is there indemnification language in the contract? Most buyers have never asked any of them.

How do you turn your compliance into a competitive advantage in a sales meeting?

Lead with economics, not ethics.

Compliance teams sometimes pitch around "doing the right thing." Fine internally. It rarely closes a deal. The argument that works is risk-adjusted cost. A competitor offering 10,000 calls at $0.03 each looks cheap at $300. But if 15% of those calls hit unconsented cell numbers, that is 1,500 potential $500 violations, or $750,000 in statutory exposure. The $300 service has a $750,000 tail.

Your pitch:

1. Show your consent documentation process. Screenshot the opt-in form, the disclosure language, the timestamp, the IP address log. That is the evidence that defeats a TCPA claim. Your competitor cannot show it because they do not have it.

2. Provide your DNC scrub certificate. Every reputable cold calling operation should be able to produce a dated, signed record showing when the list was scrubbed against the National DNC Registry and internal opt-outs. If your competitor cannot produce one, say so.

3. Quantify the comparison. Pull two or three publicly reported settlements (Credit One, Krakauer, any recent case in the vertical) and show what similar conduct cost a similarly sized company. Let the prospect do the math.

4. Address the speed objection head on. Yes, your compliant process takes longer. It typically adds three to seven days to campaign setup. Ask the prospect whether a one-week delay is worth eliminating seven-figure exposure. Most rational buyers say yes.

You are not selling compliance. You are selling a lower total cost of customer acquisition once litigation risk is priced in.

What documentation should you have ready to prove your TCPA compliance?

Most small teams fail here even when they are compliant in practice. They do the right thing but cannot prove it. That gap costs them in lawsuits and in competitive deals both.

Here is what you need on hand.

Consent records. For each cell phone contact, keep a timestamped record showing who consented, when, from what IP address, and to which specific seller. The FCC's 2024 one-to-one consent rule makes the "specific seller" part especially important ^[4]. A general lead form mentioning "marketing partners" will not hold up anymore.

DNC scrub logs. Keep evidence that you pulled a current version of the National DNC Registry and your internal suppression list before each campaign. The Registry has to be checked within 31 days of a call ^[3]. Save the scrub receipt.

Revocation procedures. Document how you honor opt-outs. The FCC's 2023 ruling on revocation of consent clarified that consumers can revoke through any reasonable means, and callers must honor it within a reasonable time (the agency floated 10 business days as a benchmark) ^[8].

Calling time records. Calls must land between 8 a.m. and 9 p.m. local time of the called party ^[3]. Your dialer logs should confirm this.

LeadCompliant's free compliance kit bundles templates for consent disclosures and DNC scrub certificates that match current FCC guidance. That paper trail is what separates you from a competitor who gets hauled into a class action with no records.

For text message marketing, the bar is just as high: prior express written consent, a clear opt-out mechanism in every message, and a record showing each subscriber's opt-in timestamp.

How do you respond when a prospect says your competitor is 'just as compliant' but cheaper?

Ask for proof. Politely, specifically, right away.

Say something like: "That's great to hear. Can you ask them to share their consent capture template and their most recent DNC scrub certificate for this list? We provide both for every campaign, and I want to make sure you're comparing apples to apples."

Most corner-cutting competitors will stall or produce documents that fall apart under scrutiny. A consent template that says "by submitting this form you agree to be contacted by our partners" is not valid prior express written consent under the post-2012 FCC standard ^[2]. A DNC scrub certificate dated six months ago does not satisfy the 31-day freshness rule ^[3].

If the competitor does produce solid documentation, respect that. They may actually be compliant and just more efficient. Competition is good. But a team competing on price while holding full TCPA compliance is a rare animal, and the documents usually reveal the gap.

Do not attack the competitor personally or make accusations you cannot support. Just ask for the paper. The paper does the work.

What happens when a corner-cutting competitor gets sued, and how does that affect you?

A few things happen, and several can work in your favor.

First, the news travels. TCPA class action filings are public records on PACER. A well-known settlement or verdict in your vertical gets talked about at conferences, in trade publications, and in LinkedIn posts by plaintiff attorneys who use it for marketing. Your prospects hear about it. Follow up after a high-profile settlement in your space and the conversation gets much easier.

Second, the competitor's operational capacity shrinks. Settlement negotiations, litigation holds, and insurance claims eat time. A company fighting a $2 million TCPA class action is not running at full sales capacity.

Third, their insurance position changes. TCPA exclusions are common in commercial general liability policies now. Many insurers added explicit TCPA exclusions after the litigation wave of the 2010s and 2020s. A competitor hit with a large judgment may find they are uninsured for it, which can be fatal for a small company.

None of this means you should wait for a competitor to get sued before making your case. But it does mean you should have a plan to accelerate outreach to that competitor's book of business the moment litigation goes public.

Is there a risk that being too compliance-focused loses you deals on price or speed?

Yes. Honest answer.

Some buyers genuinely do not care. They know their vendor cuts corners, they think the risk is remote, and they are optimizing for this quarter's pipeline. You will lose some of those buyers. That is probably fine. A buyer who knowingly runs TCPA-violating campaigns is also the buyer who will try to rope you into their liability if you have any downstream tie to them.

For most buyers, the risk math changes once they have been through it once. Companies that received a TCPA demand letter, even if they settled cheaply, tend to become excellent customers for compliant vendors afterward. Targeting companies with prior TCPA exposure is a legitimate and often overlooked prospecting strategy. Court records and settlement announcements are public.

The other honest caveat: compliance is not a substitute for results. If your compliant calling process produces worse outcomes because your contact rates crater, fix that problem. Compliance should constrain how you contact people, not kill your ability to reach them. The cold call is not dead. It just needs proper consent documentation for cell phones and a current DNC scrub for landlines.

What should a small outbound team's TCPA compliance process look like in practice?

It does not have to be complicated. Most small teams either overbuild it or skip it entirely. The actual requirements are specific but manageable.

For outbound calls:

• Scrub your list against the National DNC Registry every 31 days ^[3]. If you call fewer than 1,000 different area codes a year, you can access the Registry through the FTC's Telemarketing Sales Rule process. Check ftc.gov for current fee schedules ^[9].
• Maintain your own internal DNC list. Anyone who asks you not to call goes on it within 30 days and stays there at least five years ^[3].
• If you call cell phones with an ATDS or a prerecorded message, have prior express written consent in your records before the first dial ^[2].
• Call only between 8 a.m. and 9 p.m. local time of the called party ^[3].
• Identify yourself and your company at the start of every call.

For outbound SMS:

• Treat every text as if it carries the same consent requirement as an ATDS call to a cell phone, because it probably does ^[1].
• Put a clear opt-out instruction in your first message and honor every STOP reply promptly.
• Keep your opt-in records indefinitely. In litigation, you may need to prove consent for a message sent three years ago.

For a deeper breakdown of what counts as a valid do not call telemarketer list scrub and how to maintain your internal suppression file, those resources cover the mechanics that trip up most small teams.

LeadCompliant's free DNC checker lets you verify individual numbers before a campaign, useful for spot-checking lists from new lead sources before you load them into your dialer. Run new lists through it as a first pass, then do the full Registry scrub through your dialer or a list hygiene service.

How do you track whether a competitor is likely violating TCPA?

You do not need a private investigator. Public sources are enough.

PACER (pacer.gov) indexes all federal court filings. Search your competitor's company name plus "TCPA" and you will find any complaints or class action notices ^[10]. TCPA class actions land in federal court because the statute creates federal question jurisdiction.

The FCC publishes its enforcement actions at fcc.gov, and the FTC publishes Do Not Call enforcement actions at ftc.gov ^[12]. Both are updated regularly and searchable.

Consumer complaint databases at the FCC and FTC are public records through FOIA, and several third-party aggregators publish summaries of common complaint targets.

A competitor generating a large volume of consumer complaints often precedes formal litigation by six to eighteen months. That window is exactly when you want to be talking to their clients about switching.

You can also just call yourself. Have someone on your team opt into a competitor's funnel with a dedicated test number and watch what contact volume and methods they use. Document everything. If they call a cell phone with a robocall and you have no record of giving written consent, you have direct evidence of a potential violation. This is not entrapment. It is standard regulatory investigation methodology.

What is the FCC's 2024 one-to-one consent rule and why does it matter for this fight?

The FCC's December 2023 order, effective January 2025, requires a single consent form to authorize calls and texts from only one seller at a time ^[4]. The old model, where a consumer filled out one web form and consented to contact from "marketing partners" (a network of undisclosed buyers), is gone.

This rule matters because a large part of the shared-lead industry ran on that old model. Lead aggregators sold the same consumer record to five, ten, or twenty buyers, all relying on one form that mentioned partners generically. Under the new rule, each seller needs their own consent.

For compliant sellers, this is an advantage. Competitors who bought leads from aggregators using the old model are now sitting on lists that lack valid consent under current rules. If they keep calling from those lists, each call is a potential violation.

The practical move: if you are competing against a vendor who uses purchased shared leads from before January 2025, ask your prospect whether the vendor re-consented that list under the new standard. They probably have not, because re-consenting a large list is expensive and operationally painful. That is a real, specific weakness you can point to in a sales conversation.

The FCC grounded the rule in its authority under 47 U.S.C. § 227(b) and (c), and the order sits in the FCC's rulemaking record ^[4].

Frequently asked questions

Can I report a competitor who I believe is violating TCPA?

Yes. You can file a complaint with the FCC at fcc.gov and with the FTC at donotcall.gov. Private citizens can also file TCPA lawsuits directly in federal or state court without going through an agency. Competitors, trade associations, and industry members have all used this mechanism. The FCC accepts informal complaints that inform enforcement priorities, even when they do not lead to immediate action.

What is the statute of limitations on TCPA claims?

The TCPA does not specify its own limitations period, so federal courts generally apply a four-year statute under 28 U.S.C. § 1658, which covers federal statutory claims without their own period. Some state courts apply a shorter state period if the claim is brought there. Four years is the number most practitioners cite. Liability from calls made today stays open until 2029.

Does TCPA compliance cost more than the competitor's cheaper service?

Often yes, in direct costs. DNC Registry access has a subscription fee tiered by area codes accessed, consent management platforms charge per record, and list hygiene services add per-contact costs. A rough estimate for a small team doing 10,000 calls per month is $200 to $800 in compliance infrastructure. That cost disappears fast against even a single demand letter, which typically starts at $5,000 to $50,000 to resolve.

How do I get access to the National Do Not Call Registry?

The FTC operates the Registry through its Telemarketing Sales Rule process. Organizations subscribe at donotcall.gov. Small organizations calling fewer than 1,000 area codes per year pay a tiered fee; broader access costs more. You can also use third-party list hygiene or dialer services that maintain a live Registry feed and handle scrubbing automatically. See the how do i get the do not call list resource for the current process.

Are cell phones covered differently than landlines under TCPA?

Yes, significantly. Calling or texting a cell phone with an ATDS or prerecorded message requires prior express written consent regardless of whether the number is on the DNC Registry. Landlines on the National DNC Registry require an established business relationship or invitation to call, but do not carry the same written consent standard for live calls. The mobile phone do not call list section covers the cell-specific rules in detail.

What counts as an automatic telephone dialing system (ATDS) under TCPA?

The Supreme Court's 2021 decision in Facebook v. Duguid narrowed the ATDS definition to systems that use a random or sequential number generator to store or produce numbers to be called ^[11]. A dialer that calls from a pre-loaded list using human initiation arguably is not an ATDS under that standard. The practical advice: even if your dialer misses the narrowed ATDS definition, prerecorded messages to cell phones still require consent, and state laws may apply a broader standard.

Can a one-person sales team face a TCPA class action?

Yes. The TCPA has no minimum size threshold. Plaintiff attorneys look for patterns. If one person sends 5,000 texts without consent, that is 5,000 potential $500 violations, or $2.5 million in exposure. Small teams get targeted because they often lack legal resources to fight, which makes them quicker to settle. Size is not protection.

What should I do if my company receives a TCPA demand letter?

Do not ignore it, and do not respond without a lawyer who handles telecommunications or class action defense. Preserve all calling records, consent records, and DNC scrub logs immediately. That documentation is your primary defense. Many demand letters come from professional serial plaintiffs testing whether you will settle cheaply; others represent a class and carry real exposure. A TCPA defense attorney can tell the difference within a day of reviewing your records.

Does the TCPA apply to B2B calls?

Mostly yes. The TCPA applies to cell phone numbers regardless of whether the number belongs to a business or a consumer. A business employee who gets an unconsented ATDS call on their cell phone has a potential TCPA claim. The National DNC Registry primarily covers residential numbers, so B2B landline calls to registered numbers are a narrower issue, but cell phone consent requirements apply universally.

How does the FCC's 2024 one-to-one consent rule change what counts as valid consent?

Effective January 2025, a consumer's consent on a web form must specifically authorize one named seller, not a list of unnamed marketing partners. Lead aggregators who sold shared leads on generic partner consent language can no longer validate those lists for their buyers. Each buyer in a shared-lead model now needs individual consent from each consumer before making contact. This rule came from the FCC's December 2023 order under 47 U.S.C. § 227.

What is prior express written consent and how do I document it?

Prior express written consent means a signed written agreement (electronic signatures count) where the consumer clearly authorizes calls or texts to a specific number using an ATDS, from a specifically identified seller, after being told they do not have to consent as a condition of purchase. Document it with a timestamped form submission record, the submitter's IP address, the exact disclosure language shown, and the name of the seller authorized. Keep that record indefinitely.

How often do I need to scrub my call list against the DNC Registry?

You must check the Registry no more than 31 days before calling any number on your list, per FTC Telemarketing Sales Rule requirements. If your list is older than 31 days since the last scrub, re-scrub before calling. Most dialer platforms automate this on a rolling basis so you never accidentally call a number that registered since your last scrub.

What are the calling hours allowed under TCPA?

Calls must be made between 8 a.m. and 9 p.m. local time of the called party, not the caller. If you call from New York to someone in California, their local time controls. This is set by FCC regulation under the TCPA framework. Violating calling hours is a separate violation from consent failures, and each call outside permitted hours is its own potential $500 to $1,500 liability.

Is there a way to verify a competitor is buying leads with bad consent before bringing it up to a prospect?

The most direct method is to enter a competitor's lead funnel with a dedicated test phone number and document every contact you receive. If they call your cell phone with a robocall and you never gave written consent, that is direct evidence of a violation. Federal court filings on PACER and FCC consumer complaint data can also show whether a competitor has prior allegations. Both sources are public and free to access.

Sources

1. U.S. Code, 47 U.S.C. § 227, Telephone Consumer Protection Act: TCPA statutory damages are $500 per violation, trebled to $1,500 for willful or knowing violations
2. FCC, 2012 TCPA Order (FCC 12-21), prior express written consent requirement: FCC 2012 order eliminated prior business relationship exception for cell phone calls and required written consent naming the specific seller
3. FTC, Telemarketing Sales Rule, 16 C.F.R. Part 310: DNC Registry must be checked within 31 days of a call; calling hours are 8 a.m. to 9 p.m. local time; internal DNC lists must be maintained five years
4. FCC, December 2023 TCPA One-to-One Consent Order (FCC 23-107): FCC 2024 rule requires a single consent to authorize only one specifically identified seller, effective January 2025
5. FTC, Legal Library, cases and proceedings (Credit One Bank TCPA settlement, 2020): Credit One Bank settled TCPA class action for $12.5 million in 2020 over unconsented cell phone calls after revocation
6. Krakauer v. Dish Network, U.S. Court of Appeals, Fourth Circuit, No. 18-1518: Krakauer v. Dish Network produced a $61 million jury verdict upheld on appeal for willful TCPA violations
7. FTC, National Do Not Call Registry, donotcall.gov: Organizations must subscribe to the National DNC Registry through the FTC process; fees are tiered by area codes accessed
8. PACER, Public Access to Court Electronic Records, pacer.gov: TCPA class action filings are publicly searchable federal court records through PACER
9. Supreme Court of the United States, Facebook, Inc. v. Duguid, 592 U.S. 395 (2021): Supreme Court narrowed ATDS definition in 2021 to systems using random or sequential number generators to produce numbers