What Are the Penalties for Calling a Phone Number on the Do Not Call List?

Type: Blog
Topic: Do Not Call Solution

Businesses that call a phone number on the National Do Not Call (DNC) List without a valid exemption can face serious financial and legal consequences. The FTC’s Telemarketing Sales Rule (TSR) and the Telephone Consumer Protection Act (TCPA) set strict rules for telemarketing outreach, and penalties can accumulate fast when violations span multiple calls or campaigns. 

Key penalties at a glance: 

• TSR civil penalties of up to more than $53,000 per non-compliant contact, enforced by the FTC 
• TCPA statutory damages of $500 to $1,500 per violation, with $1,500 applying to willful conduct 
• Additional fines under state DNC laws and mini-TCPA statutes 
• Class-action litigation exposure, where settlements routinely reach into the millions 

PossibleNOW’s Do Not Call compliance software helps businesses avoid these penalties by automating list scrubbing, enforcing suppression rules, and maintaining audit-ready compliance records across federal, state, and internal registries. 

In the following sections, you’ll find information on:

Federal DNC Penalties Under the TSR and TCPA 

Federal penalties for DNC violations come from two distinct regulatory tracks, each with its own enforcement mechanism. 

TSR Penalties Enforced by the FTC 

The TSR governs telemarketing practices and the National Do Not Call Registry. Businesses that contact numbers on the registry without a valid exemption face civil penalties of up to more than $53,000 per non-compliant contact. The FTC enforces these penalties and can pursue action against both the company and any vendors conducting outreach on its behalf. 

TCPA Penalties and Enforcement 

The TCPA is enforced through multiple channels. Consumers can sue businesses directly under the statute’s private right of action, with statutory damages of $500 per violation, increasing to $1,500 when the court finds the conduct was willful. These damages apply to unauthorized telemarketing calls, robocalls, and text messages, whether the contact was made in-house or through a vendor. 

The FCC also has authority to pursue administrative fines against violators, and state attorneys general can bring their own enforcement actions under the TCPA and applicable state statutes. 

Factors That Influence Penalty Severity 

Several factors affect how penalties are assessed: 

• Volume of violations: Multiple calls to protected numbers compound fines quickly. 
• Intent and willfulness: Deliberate or repeated violations carry higher penalties. 
• Prior compliance history: Organizations with documented violations face increased scrutiny. 
• Corrective actions: Businesses that demonstrate existing compliance systems and prompt remediation may face reduced penalties. 
• Documentation quality: Strong audit trails and scrub receipts support a defensible position. 

For a deeper overview of how these obligations apply to outbound programs, see PossibleNOW’s beginner’s guide to TCPA. 

Class-Action Lawsuits and Litigation Risk 

The TCPA’s private right of action means consumers can sue businesses directly for unauthorized contact, and the statute does not require proof of actual damages. That low barrier to filing creates significant litigation exposure, particularly for outbound programs that touch large volumes of numbers. 

A single complaint can serve as the basis for a class-action lawsuit, especially when records show similar violations across multiple calls, campaigns, or time periods. TCPA-related class-action settlements routinely reach into the millions, and even cases resolved outside of court carry substantial legal fees. 

Professional TCPA litigators add another layer of risk. These plaintiffs deliberately engage with businesses to establish a basis for claims, and the volume of TCPA-related lawsuits continues to grow. PossibleNOW’s TCPA litigator list helps businesses identify known plaintiffs before outreach, reducing this exposure. 

A clear understanding of consumer rights under Do Not Contact laws is essential for recognizing where litigation risk originates and how to manage it. 

State-Level Penalties and Mini-TCPA Statutes 

Federal penalties are only part of the picture. Many states enforce their own telemarketing regulations, and violations at the state level can compound federal exposure significantly. 

• State DNC registries: A few states, such as Florida and Louisiana, maintain their own Do Not Call registries with requirements that go beyond the National Registry. 
• Mini-TCPA statutes: States like Florida, Oklahoma, and Maryland have enacted their own telemarketing laws that impose additional damages and stricter consent standards. 
• Compounding penalties: Businesses operating across multiple states can face overlapping federal and state violations from a single campaign, multiplying total financial exposure. 

A fragmented compliance approach, where federal and state rules are managed separately or inconsistently, creates the greatest risk for multi-state operations.mers can sue for damages of $500 to $1,500 per violation, depending on whether the violation was willful while the TSR has fines up to $50,000 per violation.

How Businesses Can Avoid Do Not Call Penalties 

Avoiding DNC penalties requires a proactive, documented compliance program. The following six practices address the most common sources of violations. 

1. Scrub Contact Lists at Least Every 31 Days 

The TSR requires sellers and telemarketers to scrub calling lists against the National Do Not Call Registry at least once every 31 days. In addition, businesses should scrub against applicable state DNC lists. States such as Florida and Louisiana maintain their own registries with separate requirements. 

2. Verify Numbers Against the Reassigned Numbers Database 

The FCC’s Reassigned Numbers Database (RND) tracks telephone numbers that have been permanently disconnected and reassigned to new subscribers. Calling a reassigned number is one of the most common paths to a TCPA violation, because consent obtained from the original subscriber does not transfer to the new one. 

3. Maintain Internal DNC Lists and Honor Opt-Outs Promptly 

Every organization that conducts outbound telemarketing must maintain an internal DNC list of consumers who have directly requested not to be contacted. Opt-out requests must be honored as soon as possible and no later than 10 business days after receipt. 

Federal law requires internal DNC records to be maintained for at least 5 years, though some states require 10 years, and many businesses choose to retain these records indefinitely as a best practice. Text opt-outs should be treated as call opt-outs and vice versa. If a consumer replies “STOP” to a text, that number should be suppressed from calls as well. 

4. Check for Valid Exemptions Before Outreach 

Before contacting a number on the National or state DNC list, businesses must verify whether a valid exemption applies. The two primary exemptions are: 

• Prior express consent or permission from the consumer, whether written or oral 
• An established business relationship (EBR), meaning the consumer has a recent purchase history or inquiry with the business. EBR exemptions are time-limited and do not apply indefinitely, and some states do not permit EBR-based calls at all.  

Both exemptions should be verified systematically before every campaign. Consent can be revoked, EBR windows can expire, and an entity-specific opt-out from the consumer overrides any active EBR. This means that a consumer who was exempt from the DNC list at the start of a campaign may not be weeks or months later. 

5. Monitor Vendor Compliance Across the Ecosystem 

Courts have consistently found that brands are responsible for the actions of their third-party marketing partners, including lead aggregators and remarketers, under TCPA and TSR vicarious liability standards. If a vendor contacts a number that should have been suppressed, the liability falls on the business, not just the vendor. 

Vendors should receive updated suppression lists and consent details on a consistent schedule. Contracts should clearly require adherence to TCPA and TSR rules, and regular vendor audits help verify that lead sources and calling practices remain compliant. 

6. Train All Staff on DNC Rules 

All employees, contractors, and vendors involved in outbound contact must be trained on current DNC compliance requirements.   helping businesses stay compliant with both federal and state regulations while minimizing the risk of costly penalties.

How PossibleNOW Helps Businesses Avoid DNC Penalties 

PossibleNOW provides enterprise-grade tools that automate compliance and reduce the risk of costly DNC violations. 

• DNCSolution® automates scrubbing against national, state, and internal DNC registries, verifies numbers against the Reassigned Numbers Database, identifies known TCPA litigators, and enforces suppression rules before outreach reaches dialers. Every scrub generates auditable receipts that support a defensible compliance position. 
• MyPreferences® centralizes consent and preference data across brands, channels, and business units. It captures opt-ins, opt-outs, and revocations in real time and distributes that data to CRM, call center, and marketing automation platforms, closing the gaps that lead to accidental violations. 
• RegInfoHub® delivers up-to-date regulatory intelligence across federal, state, and channel-specific requirements, helping compliance teams stay current on calling rules, consent standards, and penalty thresholds as regulations change. 

DNC penalties can accumulate quickly, and liability extends across the entire vendor ecosystem. A documented, automated compliance program is the most effective protection against fines, litigation, and reputational damage. 

To evaluate your current compliance posture or strengthen your DNC program, contact PossibleNOW today.