Is it against the law to record phone calls?

Last updated 2026-07-09

What federal law says about recording phone calls

The federal Wiretap Act, codified at 18 U.S.C. § 2511, makes it a federal crime to intentionally intercept or record any wire, oral, or electronic communication without authorization. The key word there is "intentionally." Accidental recordings are treated differently than deliberate ones, but courts rarely believe the recording was accidental when you run outbound sales calls for a living.

The federal standard is a one-party consent rule. Under 18 U.S.C. § 2511(2)(d), a person may record a call if that person is a party to the conversation and consents to the recording. That means if you are on the call and you hit record, federal law is satisfied, at least at the federal level. You do not need the other person's permission under federal law alone.

Civil damages under the Wiretap Act run from $100 per day of violation up to $10,000 per violation, whichever is greater, plus attorneys' fees and the real possibility of punitive damages. ^[1] Criminal penalties can reach five years in prison for first offenses. Nobody who has been prosecuted under this statute wanted to find out how seriously federal prosecutors take it.

The Wiretap Act is the floor. States can and often do go further.

What is the difference between one-party and two-party (all-party) consent?

One-party consent means only one person on the call needs to agree to the recording. If you are that one person, you can record freely under that standard. Eleven states and Washington D.C. apply all-party consent, sometimes called two-party consent, which requires every person on the call to be told and to agree before the recording starts. ^[2]

The all-party states as of mid-2025 are California, Connecticut, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, New Hampshire, Oregon, Pennsylvania, and Washington. D.C. also requires all-party consent. Several other states have laws that are genuinely ambiguous and have been argued both ways in court, including Nevada and Hawaii.

Here is a simplified breakdown:

Consent standard	States/jurisdictions	Recording without notifying others?
All-party (all-party consent)	CA, CT, FL, IL, MD, MA, MI, MT, NH, OR, PA, WA, D.C.	Illegal without notice and consent
One-party (federal minimum)	All other U.S. states	Legal if you are a party to the call
Stricter business-specific rules	CA, IL	Additional requirements for commercial recordings

For outbound sales teams, the practical problem is that you rarely know where the person you are calling is physically located. You might be in Texas (one-party state) calling someone who is sitting in California (all-party state). California law applies to that call because the recipient is in California. ^[3] That is the rule that trips people up most often.

Which states require all parties to consent to call recording?

Thirteen jurisdictions in the U.S. currently require all parties on a call to consent before it is recorded. The penalties and exact requirements vary state by state, so treating them all identically is a mistake.

California's Invasion of Privacy Act (Penal Code §§ 630-638.55) is arguably the toughest in the country. ^[3] Violators face criminal penalties of up to $2,500 per violation and one year in jail for a first offense, plus civil damages. Illinois adds a class 4 felony for first offenses under its Eavesdropping Act (720 ILCS 5/14-2). Pennsylvania's Wiretapping and Electronic Surveillance Control Act (18 Pa. C.S. § 5703) carries criminal penalties of up to two years in prison per violation. ^[4]

Florida (Fla. Stat. § 934.03) follows all-party consent and has produced a steady stream of civil lawsuits from consumers who were recorded without consent during sales calls. ^[10] Maryland's Wiretapping and Electronic Surveillance Law requires all-party consent and has been used to challenge recordings made by both employers and telemarketers.

If your team calls into any of these states, you need a disclosure at the start of every call, something like: "This call may be recorded for quality and training purposes." Getting the person to continue the conversation after that notice creates an implied consent argument, though the strongest protection is an express verbal acknowledgment. See our full breakdown of recorded phone call laws for what each state specifically requires.

For state-specific detail: Pennsylvania call recording laws, Maryland call recording laws, New York call recording law, and Georgia call recording law.

Does it matter which state the caller or the recipient is in?

Yes, and this is where most teams get into trouble. The general rule in courts interpreting state wiretapping laws is that the more protective state law applies when parties are in different states. If either party is in an all-party consent state, you are safer assuming all-party consent rules apply to that call. ^[5]

Some courts have applied the law of the state where the recording actually occurs, which is typically where the caller is. Others have applied the law of the state where the person being recorded is located. Because there is no single definitive federal ruling that resolves all interstate conflicts cleanly, the safest approach for any outbound team is to treat every call as if it falls under all-party consent requirements and play the recording disclosure at the start.

This matters especially for cloud-based call centers and distributed teams. If you have agents in Texas calling leads in California and Massachusetts, your system-level disclosure needs to cover those recipients from the start of the call, not whenever you feel like mentioning it.

For Texas specifically, the state follows a one-party consent standard under Tex. Penal Code § 16.02, but because Texas teams often call into all-party states, the practical compliance posture needs to be all-party. ^[11] See Texas call recording laws for more detail.

Do law firms record phone calls, and are they exempt?

Law firms record calls, and no, they are not categorically exempt from call recording laws. Attorneys are still bound by the same federal and state wiretapping statutes as everyone else. What changes is how bar ethics rules layer on top.

The American Bar Association Model Rules of Professional Conduct do not have a blanket prohibition on attorneys recording calls, but some state bar associations do. ^[12] A handful of state bar opinions have historically prohibited attorneys from recording clients or opposing parties without disclosure, treating undisclosed recording as a form of deception prohibited by the rule against dishonest conduct. California, by contrast, allows attorney recording as long as state law is satisfied.

In practice, law firms that handle litigation, debt collection calls, or intake calls routinely record for quality control and evidentiary purposes. Debt collection law firms are frequent targets of TCPA and state wiretapping suits from consumers who allege their calls were recorded without consent, and those cases have produced real judgments.

So the answer to "do law firms record phone calls" is yes, commonly, but they still need to comply with the same consent rules as any other business caller. The law firm label does not create a carve-out.

What happens if you record a call without the required consent?

At the federal level, violating the Wiretap Act exposes you to both criminal prosecution and civil liability. The civil damages provision at 18 U.S.C. § 2520 allows plaintiffs to recover the greater of actual damages or $10,000 per violation, plus punitive damages and attorneys' fees. ^[1] Class actions are the main mechanism used against businesses, because each recorded call to each unconsented recipient is a separate violation.

At the state level, penalties vary sharply. California allows $5,000 in statutory damages per violation under Penal Code § 637.2, and courts have found that civil suits do not require proof of actual harm. ^[3] Illinois imposes criminal felony charges. Pennsylvania allows civil suits alongside criminal exposure.

Beyond the statutes, there is the practical reality of class action exposure. A call center making thousands of recordings per day without proper disclosures is not facing one violation. It is facing one violation per call. Settlements in call recording class actions have ranged from a few hundred thousand dollars for small operations into the tens of millions for larger ones. The actual settlement amounts vary widely and depend on the volume of calls, the states involved, and how clear-cut the violation was.

The TCPA itself (47 U.S.C. § 227) does not directly govern call recording, but TCPA violations and recording violations often appear in the same lawsuit because both arise from the same call. ^[6] If you want to understand the broader TCPA framework, our TCPA law overview covers the consent, calling hours, and prerecorded message requirements that typically travel alongside recording claims.

What counts as valid consent for recording a phone call?

Consent for call recording and consent under the TCPA are related concepts but not identical requirements. For recording specifically, consent means the person knew the call was being recorded and agreed to continue anyway, or affirmatively said yes.

Express consent is the cleanest. A verbal "I agree this call may be recorded" or a checkbox on a web form before a callback is scheduled both qualify. Implied consent is more contested. Courts have found that continuing a call after a clear disclosure creates implied consent, but the disclosure has to be unambiguous and come at the very start of the call, before any substantive conversation.

Beep tones, once commonly used as notice that recording was occurring, are no longer considered sufficient consent in most jurisdictions. A beep every 15 seconds tells someone the line is being recorded but does not obtain their agreement. Several courts and state AGs have rejected the beep-tone standard as consent.

For business calls, the most defensible approach is a scripted opening disclosure: "This call is being recorded for quality and training purposes. By continuing, you consent to this recording." Document your agents following this script consistently. Spot-check recordings to verify compliance. If you use an auto-dialer or preview dialer that plays an opening message, that message should contain the disclosure before the agent picks up.

For a state-by-state look at how consent is defined differently, see our telephone call recording laws guide.

Does TCPA apply to call recording?

The TCPA (47 U.S.C. § 227) and the Wiretap Act address different problems. The TCPA governs how, when, and with what consent you can place calls or send texts, particularly using automated systems. ^[6] The Wiretap Act governs whether you can record the calls you do make. They are separate statutes with separate consent requirements.

That said, TCPA consent and recording consent are often obtained together in practice. If a consumer signed a web form that says "I consent to receive calls and to those calls being recorded," both problems are addressed. If you only got TCPA consent without mentioning recording, you have covered your TCPA exposure but not your recording exposure in all-party states.

The FCC enforces the TCPA through its own authority and has issued rules implementing 47 U.S.C. § 227 through 47 C.F.R. Part 64. ^[7] The Department of Justice and U.S. Attorneys enforce the criminal Wiretap Act. State attorneys general enforce state wiretapping laws. These are genuinely different enforcement channels, which is one reason why recording violations tend to generate civil suits more than criminal referrals in practice, even though the criminal exposure is real.

One practical overlap: TCPA class actions often include a state wiretapping count as a parallel claim, because plaintiffs' attorneys know that adding a recording count increases settlement pressure without requiring much additional proof beyond showing a call was recorded.

Are there any exemptions, and who is allowed to record without consent?

The Wiretap Act contains several exemptions, but none of them apply cleanly to commercial sales or marketing calls. The main ones worth knowing:

Law enforcement can record with a court order or under specific statutory authority. That is not relevant to your outbound sales team.

Communications providers (phone companies, ISPs) can monitor communications for service and network management purposes under 18 U.S.C. § 2511(2)(a). This is how carriers capture metadata, not how your VoIP platform stores call recordings for you.

Certain business extension exemptions exist for employers monitoring calls on business extensions in the ordinary course of business. Courts have read this narrowly. It generally does not mean an employer can secretly record personal calls, and it has been litigated heavily in customer service contexts with inconsistent results.

Consent-based exemptions are the ones most businesses actually use. If everyone on the call consents, no violation occurs under either the federal or state statutes.

Government entities have broader authority in some contexts, particularly law enforcement, but private businesses operating outbound call centers have essentially no carve-outs available other than consent.

Here is the bottom line. If you are a private business recording outbound sales or marketing calls, your only reliable protection is compliance, meaning disclosure and consent, not exemption.

What should outbound sales teams actually do to stay compliant?

Here is what a practical compliance posture looks like for a team making outbound calls:

First, add a recording disclosure to every call. The safest version runs at the start of the call before any substantive conversation. Script it into your agent opening, or play it as an automated message before the agent connects. Something like: "This call may be recorded for quality and training purposes." In all-party states, you ideally want a verbal acknowledgment, but disclosure plus continuation is your fallback.

Second, document the disclosure practice. If you are using a dialer, configure it to log that the disclosure played. If agents deliver it manually, monitor a random sample of calls to verify. Paper trails matter when you are defending a class action.

Third, run a list check before assuming you can call someone. Your TCPA exposure and your recording exposure often come in tandem. If you are calling people who did not consent to be called in the first place, adding a recording disclosure does not solve the root problem. LeadCompliant's free TCPA tools let you check consent status and scrub lists before you dial, which is the most efficient place to catch problems before they become lawsuits.

Fourth, pay attention to where your recipients are located. If your CRM has state data on your leads, flag the all-party states and ensure your dialer or script handles those calls with a stronger disclosure flow.

Fifth, review your call recording vendor's terms. Some call recording platforms store recordings in jurisdictions with their own rules. Make sure you know where recordings are stored and what access controls exist, because a data breach exposing call recordings of unconsented parties creates compounded liability.

For Georgia teams or anyone calling Georgia numbers, there is a specific nuance around group calls: see Georgia recording consent law for group audio calls.

How do recording laws apply to text messages and automated calls?

Text messages are not phone call recordings in the traditional sense, but they raise related legal questions. Federal law treats stored electronic communications differently from intercepted wire communications. The Stored Communications Act (18 U.S.C. § 2701) governs access to stored messages, while the Wiretap Act covers interception in transit. For most outbound SMS compliance questions, the TCPA is the primary framework, not the Wiretap Act. ^[8]

Prerecorded voice messages (robocalls) are covered by the TCPA under 47 U.S.C. § 227(b)(1), which requires prior express written consent before delivering a prerecorded message to a cell phone for non-emergency purposes. ^[6] These are not "recordings" in the wiretapping sense. They are outbound audio files delivered as calls. But they do require their own form of consent entirely separate from the recording disclosure question.

Automatic call recording by your platform (recording inbound responses to outbound calls, for example) is still subject to wiretapping law. If your system captures the consumer's voice when they press 1 or speak a response, that capture is a recording and needs to satisfy the same consent standards.

For a broader picture of how text message rules interact with call rules, see our text message marketing facts guide, and for Indiana-specific call recording questions, see Indiana call recording laws.

What does a legally sound call recording disclosure actually sound like?

Most teams overthink the wording. Courts have not required magic words. What they have required is that the disclosure be audible, come before substantive conversation, and actually convey that recording is happening.

A compliant disclosure can be as short as: "This call may be recorded for quality and training purposes." For all-party states, stronger versions add: "By continuing this call, you consent to being recorded. If you do not consent, please let us know now."

Avoid burying the disclosure at the end of a long legal recitation nobody listens to. Avoid rushing it so fast it is unintelligible. If you have an international caller base, consider whether disclosure in English only is sufficient for recipients who primarily speak another language, though this is an edge case for most U.S. outbound teams.

For businesses that use hold music or an IVR before connecting to an agent, the disclosure should play before the agent picks up, not after. California courts have held that disclosure needs to happen at the outset, and "outset" means before the person says anything of substance.

Document the disclosure language in your call scripts, in your agent training materials, and in your dialer configuration. If you ever face a class action, showing a consistent, documented practice of disclosure from a specific date forward is the difference between a defensible record and a default judgment.

Frequently asked questions

Is it illegal to record a phone call without telling the other person?

Under federal law, one party on the call can record without telling the others. But in 11 states plus D.C., including California, Florida, Illinois, and Pennsylvania, all parties must consent before recording starts. If you are calling someone in an all-party state from a one-party state, the all-party rule likely applies. Violating it can mean criminal charges, civil damages of up to $10,000 per violation federally, or up to $5,000 per call under California law.

Can I record a phone call for personal use without consent?

In one-party consent states, yes: if you are on the call, you can record it for personal use. In all-party consent states, personal use does not create an exemption. California, Pennsylvania, and Illinois all apply their all-party consent rules regardless of whether the recording is for personal or commercial purposes. The safest habit is to disclose recording at the start of any call you intend to keep, regardless of state.

Which states require both parties to consent to a recorded phone call?

California, Connecticut, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, New Hampshire, Oregon, Pennsylvania, Washington, and Washington D.C. all require all-party consent as of mid-2025. The statutes and penalties differ: California allows $5,000 per violation in civil damages; Illinois treats first offenses as a class 4 felony. Several other states, including Nevada and Hawaii, have laws argued both ways in court and should be treated as all-party for safety.

Does the TCPA require consent to record calls?

No. The TCPA governs whether you can place automated or prerecorded calls at all and requires prior express written consent for autodialed or prerecorded calls to cell phones. Recording consent is governed by the federal Wiretap Act (18 U.S.C. § 2511) and state wiretapping statutes. These are separate legal requirements. You can have TCPA consent without recording consent in all-party states, and vice versa.

What are the penalties for recording a phone call illegally?

Federal Wiretap Act civil damages run up to $10,000 per violation plus attorneys' fees and potential punitive damages. Criminal penalties reach five years in prison. California adds up to $5,000 per call in civil damages and up to one year in jail. Pennsylvania and Illinois carry felony criminal exposure. In a class action context, per-call damages across thousands of recorded calls can produce settlement exposure in the millions before litigation costs are added.

Do I need to tell someone at the start of a call that it is being recorded?

Yes, in all-party consent states you must disclose recording before substantive conversation begins, not at the end. In one-party states you technically do not need to disclose at all since you are the consenting party. But a standard opening disclosure, something like: "This call may be recorded for quality and training purposes," covers you in both scenarios and is the practical standard for any professional outbound operation.

Do law firms have to follow call recording laws?

Yes. Law firms are not exempt from federal or state wiretapping statutes. Attorneys face the same one-party and all-party consent rules as any business caller. Additional ethics rules from state bar associations may impose stricter disclosure requirements on attorneys recording opposing parties or clients. A handful of state bars have issued opinions treating undisclosed recordings as a form of prohibited deception under professional conduct rules, independent of whether the recording was legal under the wiretapping statute.

Can an employer record employee phone calls?

In some circumstances, yes. The Wiretap Act has a business extension exemption for calls monitored in the ordinary course of business, but courts have read it narrowly. Employees must generally be told that work calls may be monitored or recorded, either through a policy notice or a call disclosure. Recording purely personal calls made on business lines falls outside the exemption in most court readings. State laws add another layer: all-party states apply to employer-employee call monitoring the same way they apply to commercial calls.

What if the person I am calling is in a different state than me?

The more protective state law generally applies, meaning if either party is in an all-party consent state, you should treat the call as subject to all-party consent rules. Courts have not uniformly resolved interstate call recording conflicts, but the safest practical rule is: if your lead list includes anyone in California, Florida, Pennsylvania, Illinois, Maryland, Massachusetts, Connecticut, Michigan, Montana, New Hampshire, Oregon, or Washington, run a recording disclosure at the start of every call regardless of where your team sits.

Is it legal to record a phone call in California without consent?

No. California's Invasion of Privacy Act (Penal Code §§ 630-638.55) requires all parties to consent before a call is recorded. Violations carry criminal penalties up to $2,500 per violation and one year in jail for a first offense, plus civil damages of $5,000 per violation under Penal Code § 637.2. California is the most litigated all-party consent state in the country, and class actions under its statute have produced some of the largest settlements.

Does a beep tone on the line count as consent to record?

No, not in most jurisdictions. A beep tone gives notice that recording may be occurring but does not constitute consent. Courts and state attorneys general in California and other all-party states have specifically rejected beep tones as sufficient to establish consent. The current standard requires an affirmative verbal disclosure and continuation of the call or, ideally, an express verbal agreement. Beep tones went out of favor legally around the same time touch-tone phones did.

How does recording consent differ from TCPA consent?

TCPA consent authorizes you to place the call at all, using an autodialer or prerecorded message. Recording consent authorizes you to capture the audio of the conversation once the call is connected. You need both, independently. TCPA consent language typically covers calling permissions. Recording consent language covers what happens to the call once it connects. A single consent form can address both, but only if the language specifically mentions both the calling permission and the recording permission.

What is the federal one-party consent rule for phone recordings?

Under 18 U.S.C. § 2511(2)(d), it is not a violation of the federal Wiretap Act to record a call if you are a party to the conversation and you consent to the recording. In other words, a single participant recording their own call satisfies federal law. This is the one-party consent standard. It does not override stricter state laws, so one-party federal consent does not protect you from liability under California's, Pennsylvania's, or Illinois's all-party consent statutes.

What disclosures should an outbound sales call recording include?

At minimum, state that the call is being recorded before any substantive conversation. In all-party states, give the person an opportunity to object. A practical script: "This call may be recorded for quality and training purposes. By continuing, you consent to this recording." Document the disclosure in your call scripts and your dialer configuration. Spot-check recordings to verify agents are actually delivering it. A consistent, documented practice is your strongest defense if a recording violation claim is filed.

Sources

1. U.S. Department of Justice, 18 U.S.C. § 2520 (Civil Remedies under the Wiretap Act): Civil damages under the Wiretap Act are the greater of actual damages or $10,000 per violation, plus punitive damages and attorneys' fees
2. National Conference of State Legislatures, Recording Phone Calls and Conversations: Eleven states and D.C. require all-party consent for call recording
3. California Legislative Information, Penal Code §§ 630-638.55 (Invasion of Privacy Act): California requires all-party consent; violations carry up to $2,500 criminal fine and $5,000 civil damages per violation
4. Pennsylvania General Assembly, 18 Pa. C.S. § 5703 (Wiretapping and Electronic Surveillance Control Act): Pennsylvania requires all-party consent and criminal penalties of up to two years in prison per violation
5. Cornell Law School Legal Information Institute, 18 U.S.C. § 2511 (Wiretap Act): Federal Wiretap Act requires at least one-party consent; the one-party exemption under § 2511(2)(d) applies only when the consenting party is a participant in the communication
6. Cornell Law School Legal Information Institute, 47 U.S.C. § 227 (Telephone Consumer Protection Act): The TCPA governs placement of automated and prerecorded calls and requires prior express written consent for prerecorded calls to cell phones
7. Cornell Law School Legal Information Institute, 18 U.S.C. § 2701 (Stored Communications Act): The Stored Communications Act governs access to stored electronic communications; it differs from the Wiretap Act's interception standard
8. Florida Legislature, Fla. Stat. § 934.03 (Security of Communications): Florida requires all-party consent under § 934.03; violations constitute a felony of the third degree
9. Texas Legislature Online, Tex. Penal Code § 16.02 (Unlawful Interception, Use, or Disclosure of Wire, Oral, or Electronic Communications): Texas follows a one-party consent standard under Tex. Penal Code § 16.02
10. American Bar Association, Model Rules of Professional Conduct: ABA Model Rules do not categorically prohibit attorney call recording, but state bar ethics opinions in some jurisdictions impose stricter disclosure requirements on attorneys