Is Cold Calling Legal? US Rules Explained

Is cold calling legal? Yes. In the United States, cold calling is legal for businesses that follow the federal telemarketing rules and the laws of the states they call. For consumer calls that means scrubbing against the National Do Not Call Registry, keeping your own do-not-call list, calling only from 8 a.m. to 9 p.m. local time, identifying yourself, and never using a prerecorded voice or autodialer without the right consent.

Calls to businesses face fewer federal rules, but not none. This guide summarizes the main rules as of October 23, 2026. It is general information, not legal advice, so check your own calling program with a lawyer.

What federal rules apply to cold calling?

Two federal rulebooks govern sales calls: the FCC’s rules under the Telephone Consumer Protection Act (TCPA), and the FTC’s Telemarketing Sales Rule (TSR).

The calling-hours rule has state variations; telemarketing calling hours by state lists the ones confirmed in each statute.

Can you cold call numbers on the Do Not Call Registry?

You can’t make telemarketing calls to numbers on the National Do Not Call Registry unless an exception applies. The registry lists consumer phone numbers whose owners do not want telemarketing calls. Before calling consumers, a seller or telemarketer has to check its lists against a copy of the registry that is no more than 31 days old (16 CFR 310.4).

Access is through the FTC’s telemarketer site and is priced per area code: for the year that began on October 1, 2026, the first five area codes are free, each additional area code costs $85, and no single entity pays more than $23,425 (FTC announcement). The mechanics of DNC scrubbing are a separate guide.

Two exceptions matter for sales teams. You may call a registered number if you have an established business relationship with the person (a purchase or transaction in the last 18 months, or an inquiry or application in the last 3 months), or if they gave you their express agreement in writing. Both exceptions end the moment the person asks your company to stop calling (FTC guidance for businesses).

Is B2B cold calling legal?

Yes. B2B cold calling faces far fewer federal rules than consumer calling. The TSR exempts most calls to businesses, although since 2024 its ban on misrepresentation applies to business-to-business calls as well (16 CFR 310.6). The National Do Not Call Registry is for personal numbers, and business lines are generally outside it.

The line is blurrier than it looks. Many owners and buyers answer on personal mobiles, and the FCC applies its do-not-call and calling-hours rules to calls to mobile numbers too (47 CFR 64.1200). If your list mixes business and personal numbers, treat it as a consumer list: scrub it and respect consumer calling hours. Some state laws, such as Florida’s licensing rules, also reach certain business calls.

When do you need consent to cold call?

You need consent when the call uses an autodialer or a prerecorded or artificial voice. Calls like these to a mobile number need the called person’s prior express consent, and the FCC requires prior express written consent when they are telemarketing (47 CFR 64.1200). A prerecorded telemarketing call to a home line needs written consent as well.

In 2021 the Supreme Court narrowed the federal definition of an autodialer to equipment that uses a random or sequential number generator to store or produce the numbers it calls (Facebook v. Duguid). Since then, a dialer that calls numbers from your own list, rather than generating them, is generally not an autodialer under that definition. Whether a power dialer counts as an autodialer gets its own guide.

State mini-TCPA laws can be broader:

• Florida. The Florida Telephone Solicitation Act requires prior express written consent for telephonic sales calls made with an automated system for selecting and dialing numbers or a prerecorded message (Fla. Stat. 501.059).
• Oklahoma. The Oklahoma Telephone Solicitation Act, enacted as HB 3168 in 2022, requires prior express written consent for telephonic sales calls that use an automated dialing system or a recorded message (HB 3168, enrolled).

Live calls placed by a rep who is on the line, with no recorded message, are the least restricted kind of sales call. They still have to follow the do-not-call, calling-hours and caller ID rules.

What changed with the FCC’s 2026 opt-out order?

On September 30, 2026, the FCC adopted a Report and Order, FCC 26-67, that revises how people revoke consent to robocalls and robotexts (FCC 26-67). Callers may now designate one or more exclusive revocation methods, as long as they disclose them clearly: an automated voice or keypress opt-out on the call, standard reply words to a text, or a designated website or phone number (FCC news release). The order also lets a revocation apply only to the category of informational call it was aimed at, and asks for comment on shortening the deadline for honoring revocations.

For a team making live cold calls without consent, the practical rule stays the same: when someone asks not to be called again, put the number on your internal do-not-call list and stop. The federal rules on how fast to honor a request are covered separately. Check the order’s effective date in the Federal Register before you change any opt-out process.

Which state rules are stricter?

States add their own layers on top of the federal rules:

• Calling hours and days. Several states end calls at 8 p.m., a few start at 9 a.m., and some ban Sunday or holiday calls. Florida, for example, allows sales calls only from 8 a.m. to 8 p.m. in the called person’s time zone and limits them to three calls in 24 hours on the same subject (Fla. Stat. 501.616).
• State do-not-call lists. Some states keep their own lists alongside the national one, such as Massachusetts (201 CMR 12.00).
• Registration and licensing. Many states require telemarketers to register, and some to post a bond, before calling their residents. Florida requires a license for commercial telephone sellers who solicit Florida purchasers, including from other states (Fla. Stat. 501.605).
• Area-code presumptions. Florida presumes that a sales call to a Florida area code reaches someone in Florida (Fla. Stat. 501.059), so a number does not leave the law just because its owner moved.

A checklist before your first cold call

1. Decide whether each list is consumer or business, and treat mixed lists as consumer lists.
2. Scrub consumer numbers against the National Do Not Call Registry at least every 31 days, plus any state lists, and keep proof that you did.
3. Load your own do-not-call list and check it before every dial.
4. Set calling hours for each state, in the contact’s local time.
5. Use live reps, and no prerecorded messages without written consent.
6. Show a caller ID number you own, one that rings somewhere a person can take a removal request. Registering it also helps against Spam Likely labels.
7. Say who you are, which company you represent and why you are calling at the start of every call. A tested opening can do this in one sentence.
8. Write it down: a do-not-call policy, training for every rep, and records of calls and requests. Keeping call recordings needs consent in some states.

Where Rapidialer fits

Rapidialer is built for live calling. Its Power Dial places one call per rep from the rep’s browser, so every answered call reaches the rep who placed it, and it does not play prerecorded messages or drop voicemails. It keeps an organization-wide Do Not Call list that blocks listed numbers at dial time, lets you set calling hours for each list in the contact’s local time, and uses only phone numbers bought in your own Twilio account as caller ID, not Twilio Verified Caller IDs. It does not check numbers against the National Do Not Call Registry or state lists, so scrub consumer lists before you import them.