TCPA, Consent, and Call Recording: What Pay-Per-Call Buyers Should Know

What is the TCPA and why does it matter to a call buyer?

First, the line that matters most: this is general information for business owners, not legal advice. Telemarketing law changes, courts disagree, and states add their own rules. Confirm anything that affects your business with counsel.

The Telephone Consumer Protection Act (TCPA) is the 1991 federal law, enforced by the FCC and through private lawsuits, that restricts how businesses may call and text consumers. Its best-known rules cover autodialed calls, prerecorded messages, calls to numbers on the National Do Not Call Registry, and calling hours. Statutory damages run from $500 per violation up to $1,500 for willful violations, assessed per call or text, so class actions can become very expensive.

A buyer of inbound calls is not placing the calls the TCPA targets. But buyers can still be exposed in two ways: through what they do after the call, and through the conduct of the provider generating calls on their behalf.

How is an inbound call different from outbound telemarketing?

The TCPA's core restrictions are about calls made to a consumer. When a homeowner sees an ad and dials a tracked number, the homeowner initiated the contact. Nobody autodialed them, nobody played a recording at them, and their own outgoing call does not trigger Do Not Call rules. That is why consumer-initiated inbound calls are widely considered the lower-risk end of telemarketing.

The distinction depends on the call actually being consumer-initiated. A call that started as an outbound robocall and was then transferred to you is not inbound in any meaningful sense, even though it arrives on your inbound line. The label inbound describes how the call reaches you; the law cares how it started.

When does a buyer step onto the outbound side?

Almost every business eventually calls or texts the customer back: to confirm an appointment, follow up on a quote, or return a missed call. At that point you are making the call, and the rules apply to you.

• Manual callbacks to someone who just called you about your service are generally the lowest-risk follow-up. Under federal telemarketing rules an inquiry typically creates an established business relationship that permits follow-up for a limited period, commonly described as three months
• Text messages are treated seriously under the TCPA. Do not put a caller into an automated text sequence unless you have the consent your counsel says you need, and honor opt-outs immediately
• Keep your own internal do-not-call list and honor requests on it, even from people who called you first
• Several states have their own telemarketing statutes, sometimes called mini-TCPAs, with stricter rules on hours, texts, or consent. Florida, Oklahoma, and Washington are frequently cited examples

What are the rules on recording calls?

Call recording is governed by a mix of federal and state law. Federal law and many states require the consent of one party to the conversation. A significant minority of states require every party's consent, which is why you hear 'this call may be recorded' so often. California, Florida, Illinois, Pennsylvania, and Washington are among the states generally treated as all-party consent states, and which state's law applies to an interstate call is not always simple.

For a pay-per-call buyer, the practical approach is straightforward. If the program records calls, callers should hear a recording notice before the conversation begins, and your team should assume every call is recorded. Ask your provider how the notice is delivered and whether it plays regardless of the caller's state. If you record on your own phone system as well, the same rules apply to you.

How do Do Not Call rules apply to inbound calls?

The National Do Not Call Registry restricts telemarketing calls to registered numbers. A consumer on the registry who calls you has not violated anything, and neither have you by answering. The registry becomes relevant when you call them back for marketing outside the window an inquiry allows, or add them to broader outreach. Treat the national registry, your internal list, and state lists as things your follow-up process must respect, not as something that blocks inbound calls.

What should you ask a call provider about traffic sources?

Because a buyer can be exposed by how calls are generated, the questions you ask a provider are part of your compliance program. Reasonable providers expect these questions and answer them plainly.

• Where do the calls come from? Search ads, organic search, display, radio, TV, and directories are common legitimate sources. Vague answers are a red flag
• Are any calls generated by outbound dialing, prerecorded messages, or ringless voicemail and then transferred to me? The answer you want is no
• Do you use incentivized traffic, meaning people paid, rewarded, or entered into a sweepstakes for calling? The answer you want is no
• Do you buy or resell calls from third-party networks or affiliates, and how do you monitor their sources?
• How is the recording notice delivered, how long are recordings retained, and who can access them?
• Will you put your traffic-source commitments in writing?

Why does 'no robocalls, no incentivized traffic' matter so much?

Those two commitments address the two biggest risks in buying calls. Robocall-generated transfers import TCPA exposure, because the consumer did not initiate the contact, and regulators and courts have in some circumstances held the business that benefits from a call responsible for calls made on its behalf. Incentivized traffic produces callers who wanted a reward, not your service, so it wastes money even when it is legal.

A provider that generates calls from people who searched for your service and chose to dial is selling something fundamentally different from a provider that manufactures call volume. The price per call may look similar. The risk and the close rate are not.

What should a buyer do in practice?

• Get your provider's traffic-source and recording practices in writing
• Write down your follow-up rules: who calls back, how soon, whether texts are used, and how opt-outs are handled
• Keep an internal do-not-call list and honor it
• Review your process with a lawyer who handles telemarketing and privacy in your state, especially before adding texting or automation, and revisit it yearly