TCPA Explained: Rules for Cold Calling and Texting Businesses

Quick answer: The TCPA (Telephone Consumer Protection Act) governs calls and texts in the US. Cold calling and texting are not banned, but the rules are real: automated/prerecorded calls and most marketing texts generally require prior express consent, the National Do Not Call Registry must be respected for marketing calls, and texting carries especially strict consent expectations. Penalties run roughly $500–$1,500 per violating call or text, which adds up fast. B2B has some narrower exposure than consumer outreach, but it is not exempt — and rules tighten over time. This is general information, not legal advice.

Phone and text outreach can be powerful, but they're regulated far more tightly than email, and the penalties are per-message — so a careless texting blast can become a six-figure problem quickly. The TCPA is the main federal law here, enforced by the FCC, and it's worth understanding before you pick up the phone at scale. Talk to a qualified attorney for your specific situation; what follows is the plain-English lay of the land.

What the TCPA actually covers

The TCPA regulates telemarketing calls, autodialed calls, prerecorded/artificial-voice calls, and text messages. The FCC administers it. The core ideas:

• Consent — automated or prerecorded marketing calls, and most marketing texts, generally require prior express written consent. Manual calls have different (but not zero) requirements.
• Do Not Call — marketing calls must respect the National Do Not Call Registry and any internal do-not-call requests.
• Identification and honesty — you must identify who's calling and why, and honor opt-outs.
• Time-of-day rules — telemarketing calls are restricted to reasonable hours.
• Autodialer restrictions — using automated dialing technology to call cell phones without consent is a core TCPA risk area.

Texting is the strictest channel

Cold texting deserves special caution, because people treat unsolicited texts as far more intrusive than email and the law reflects that. Marketing texts generally require prior express written consent, and 'I found their cell number' is not consent. The combination of strict consent rules and per-message penalties makes mass cold texting one of the riskiest things you can do in outreach. If you text, do it only to contacts who have genuinely opted in, include clear opt-out instructions (like 'reply STOP'), and honor opt-outs immediately.

The per-message structure is what makes the TCPA dangerous: at roughly $500–$1,500 per violating call or text, a single automated blast to a few thousand numbers without consent can theoretically expose you to penalties in the millions. Volume is exactly what turns a small mistake into a catastrophic one here.

B2B isn't a free pass

A common myth is that the TCPA only applies to consumers, so business-to-business calling is unrestricted. It's more nuanced. Some TCPA provisions and Do-Not-Call rules center on residential and personal lines, which gives B2B calling to business landlines somewhat more room than consumer outreach. But the moment you're calling or texting cell phones — and many business contacts are cell numbers — or using autodialers and prerecorded messages, you're squarely in TCPA territory regardless of B2B intent. Treating 'it's B2B' as a blanket exemption is how companies get into trouble.

Rules tighten — assume stricter, not looser

TCPA interpretation and FCC rules evolve, and the trend has consistently been toward stricter consent requirements, not looser ones — including moves toward more granular, one-to-one consent for marketing calls and texts. The safe posture is to assume the rules will get tighter and build your process to the stricter standard now, rather than relying on a permissive reading that may not survive the next update. Compliance built for today's loosest interpretation ages badly.

Practical ways to stay on the right side

• Get and document consent before automated calls or marketing texts — keep records of when and how.
• Scrub against the Do Not Call Registry and maintain your own internal do-not-call list.
• Honor opt-outs immediately and suppress those contacts everywhere.
• Be careful with autodialers and prerecorded messages to cell phones — this is the highest-risk zone.
• Identify yourself and your purpose on every call, and stick to reasonable calling hours.
• When in doubt, prefer channels and approaches with clearer consent — and get legal advice before scaling phone or text outreach.

Because the channels differ so much in risk, many teams lead with email (governed by the more permissive CAN-SPAM — see is cold email legal) for cold outreach, and reserve calls and especially texts for warmer contacts who've engaged or opted in. Whatever mix you choose, build suppression and consent tracking into your process from the start. Platforms like JYNI help by keeping outreach, opt-outs, and contact preferences in one place, so a do-not-contact request is respected across channels rather than slipping through a gap between tools.

Bottom line: cold calling and texting are legal but tightly regulated, the penalties are per-message and large, texting is the strictest channel, and B2B is not exempt. Build consent and suppression into your process, assume the rules will tighten, and get qualified legal advice before you scale phone or text outreach.