Insurance Dialer for AEP 2026: Number Health and CMS Rules From October 15 to December 7

What should an insurance agency change about its dialing before October 15?

TL;DR: An insurance agency has three things to fix before October 15: the permission behind every call, the health of the numbers it calls from, and the hours it dials in. Medicare Annual Enrollment runs October 15 to December 7 and marketing of CY2027 plan offerings opens on October 1, 2026, so the calendar loosens two weeks before the season starts while the calling rules stay put.

• What changes on October 1, 2026: CMS eliminated the 48-hour wait between a completed Scope of Appointment and a personal marketing appointment, and from that date the new SOA rules apply to all CY2027 marketing and communications.
• What does not change: when you market Medicare Advantage or Part D as a plan's agent or broker, 42 CFR 422.2264(a)(2)(iv) still prohibits telephone solicitation of beneficiaries. The federal hours rule at 47 CFR 64.1200(c)(1) governs telephone solicitations to residential subscribers, and under 64.1200(f) a call placed with the called party's prior express invitation or permission is not a solicitation. Run the 8 a.m. to 9 p.m. window on every dial anyway.
• Why numbers burn in AEP: carriers score the behavior of the calling number, and a purchased list of several thousand records pushed through a handful of numbers is what those models exist to catch.
• Where to start: dials per number per day. In our own platform data the 75th-percentile rep places 70 to 83 outbound dials on a business day, so any number carrying more than one busy rep's day is the first fix.

Why does AEP break dialing setups that work the rest of the year?

Most agencies do not find out their numbers are flagged until the season is running, and by then the lead spend is committed and the calendar has no give. Insurance and financial services account for roughly 21 percent of the substantive external calls in our own sales conversations, read across three sample weeks spread over June to September 2026: 510 transcribed calls read in full, about 265 of them substantive external conversations. The problem named first is nearly always numbers flagged spam likely. Most cities stopped picking up. A whole state pool started showing as spam.

Answer rate is the constraint every other number in the season runs through. Hiya's State of the Call 2026 reports that 86 percent of unknown calls go unanswered. Hiya sells branded caller ID, so read that as an industry measurement of the problem and not a vendor's proof of a cure. Lead cost is fixed the moment the list is bought and attempts compress into eight weeks, so anything that drags answer rate down costs you conversations you already paid for.

One framing has to go before it costs an agency a contract. AEP is not a cold calling season for Medicare products. When you market Medicare Advantage or Part D as a plan's agent or broker, 42 CFR 422.2264(a)(2)(iv) prohibits telephone solicitation of beneficiaries, along with robocalls, texts and voicemail. Read the scope clause with it: the section governs beneficiary contact by the MA organization or its agents and brokers, so it binds your Medicare book specifically. It is not a rule about your final expense, med supp or property and casualty lines, which sit under the TCPA and your state's rules like any other outbound program. Paragraph (a)(3) is the other half: a call is not unsolicited where the beneficiary consents to it or initiates the contact. Permission to contact, beneficiary-initiated calls and inbound leads who asked for a licensed agent. That is the motion for the Medicare season.

What changes on October 1, 2026, and what does not?

The Scope of Appointment rules change and the solicitation rules do not. CMS finalized the new SOA requirements in the Contract Year 2027 Medicare Advantage and Part D final rule published in the Federal Register on April 6, 2026, which states that CMS "is finalizing the proposal to eliminate the 48-hour waiting period required between the SOA completion and a personal marketing appointment" at 42 CFR 422.2264(c)(3)(i) and 423.2264(c)(3)(i). The same rule sets the date: its new marketing and communications policies are "applicable for all contract year 2027 marketing and communications, beginning October 1, 2026." CMS restated both points for agents and brokers in its HPMS guidance memo "Frequently Asked Questions Related to New Scope of Appointment Rules," dated May 26, 2026, and its fact sheet on the CY2027 final rule describes the shift as removing restrictions on the time and manner by which beneficiaries can have conversations with licensed agents and brokers. The enrollment window sits where it always has: Open Enrollment runs October 15 to December 7, coverage effective January 1.

The hours rule is the one agencies most often state back to me wrongly. 47 CFR 64.1200(c)(1) binds telephone solicitations placed to residential subscribers, and 64.1200(f) says a call placed with the called party's prior express invitation or permission is not a telephone solicitation, so most of what a consented, inbound-led Medicare book dials is not inside that prohibition at all. Hold every dial to 8 a.m. to 9 p.m. in the contact's local time anyway: consent is something you have to prove later rather than assert during an audit, several states set tighter windows, and the tighter rule is the one you are held to. We keep the calling hours rules and how they apply state by state in a separate post.

Why does dialing purchased lead lists burn phone numbers?

A spam label is a score, not a blacklist. Carrier analytics vendors watch how a number behaves: how many calls it places, how short they are, how many go unanswered, how many people mark them unwanted. When the score crosses a threshold, the terminating carrier shows a warning to its own subscribers. No dialer applies that label. A mislabel can be disputed and carriers do correct them, but there is no consumer-facing appeals desk an agency can walk up to on a Tuesday in November, which is exactly why the remediation route runs through a vendor that already holds the carrier relationships. It is a request in a queue with no guaranteed outcome, not a lever you pull mid-season on a number you need this week.

Two mechanics get confused in almost every AEP conversation, which sends teams shopping for the wrong fix. STIR/SHAKEN attestation is signed at the originating service provider: 47 CFR 64.6301(a)(2)(ii) puts that duty on the voice service provider that originates the call, not on a dialer and not on a number-reputation product. It authenticates the caller and does not decide whether a call gets labeled. Branded display is a separate registration on a separate carrier system, which is why a number can carry a registered brand and still be labeled when its reputation is poor.

What an agency controls is short: the ratio of dials to numbers, the dialing pattern, list hygiene, the window and whether the number is registered for branded display. Adding numbers without lowering dials per number per day changes nothing, and a purchased Medicare list dialed hard in week one produces the exact burst of unanswered calls these models watch for. For the full mechanics, we wrote up how a number ends up marked scam likely.

How many dials per number per day is too many?

Every agency asks this and almost nobody answers it. On our own platform, measured across rep-days with an assigned user between September 1, 2025 and August 31, 2026, the median rep places roughly 19 to 27 outbound dials on a business day and the 75th-percentile rep places 70 to 83. Auto-dialer traffic no user owns is excluded, and the medians are interpolated in ten-dial bins.

That band describes one rep's day, not a ceiling for a number, and there is no ceiling to hand you: no carrier publishes the threshold its models use, so any target ratio printed here would be invented. Hold your own dial volume and pool size against the band instead, then watch what the labels on your own numbers do.

So the working rule, a planning rule rather than a compliance line: if a single number carries more than one 75th-percentile rep's day of dialing, roughly 70 to 83 dials, the pool is your problem before the script is. Size the pool against your planned dial volume, not the seats you bought, while there is still time to add numbers and let them settle.

My number is already flagged. Can it be clean before AEP opens?

September is when a labeled number is fixable. November is not. Two figures from Aloware customer data set the stakes and the shape of the recovery: answer rates can drop by as much as 80 percent when a number is labeled, and teams see a 20 to 30 percent increase in pickup rates within days of remediation landing.

What nobody controls is the date it goes through, because the carriers decide that. Open remediation now and build the pool as though that number will not carry AEP. A number you rest in September is one you can bring back in January. A number you keep dialing hard through October teaches the carrier the same lesson every day and drags the rest of the pool down with it.

What does a number-health routine look like from now to December 7?

Run it in order, finish the first three items before October 1 rather than after, and put one person's name on the whole routine. It fails in most agencies because nobody owns it once the season gets loud.

1. Audit the pool this week. Count your numbers, count your planned daily dials, divide, and hold the answer against the 70 to 83 band above.
2. Register branded display now, not in November. Registration runs through carrier review, and nobody outside the carriers can promise a date.
3. Fix consent capture at the source. Every lead has to arrive with a record of how permission was given and when. A lead vendor who hands you a number and no consent record is selling you the call and the risk together.
4. Put the SOA step into the workflow for October 1. From that date the appointment can follow the form the same day, which is a throughput gain only when the form is part of the flow rather than something a producer remembers.
5. Set the dialing window to the contact's local time. Not the office's. An East Coast agency that starts dialing Arizona at 8 a.m. its own time is calling people at 5 a.m. A power dialer should enforce the window itself, pushing out-of-window contacts to the bottom of the list rather than leaving it to a producer's judgement at 7:55 in the morning.
6. Weeks one to five: watch answer rate per number, then rotate and retire. Per campaign is too coarse, because a pool average hides the two numbers already gone. When a number's answer rate falls off a cliff, take it out and leave it out.
7. Weeks six to eight, and after December 7: protect the pool. Do not add fresh numbers in the last two weeks and expect them to carry the crunch, because a brand-new number has no reputation and no reputation is not the same thing as a good one. Then keep the pool warm through the quiet months, because a number that sits silent all year and then carries a full season looks like the pattern carriers filter for.

How does Aloware run that routine for an insurance team?

All of it can be done with a spreadsheet and discipline. What a platform changes is whether the routine survives week four.

• NumberGuard is the number-health layer. It scans the reputation of your numbers, tests them on real devices, works with the carriers to correct mislabeled numbers, and handles caller ID whitelisting. It covers US numbers and starts from $100 a month for 1 to 20 numbers. It prevents the label by managing the behavior that triggers one, and gives a mislabel a route to the carriers an agency on its own does not have. No product can order a carrier to drop a label on demand.
• Branded Calling is the display layer. It registers your business identity so a recognizable name shows on supported carriers instead of ten anonymous digits. Answer-rate work, never a repair for a number already gone bad.
• Local Presence assigns an outbound caller ID geographically matched to the contact being called. Coverage is arranged in packages sized to where you actually dial, so a book concentrated in three states and one spread across thirty are not the same purchase. In a sample of 1,399 Aloware accounts, 67.6 percent use local presence numbers, counting real usage rather than accounts with the feature switched on. Sizing and price sit on the pricing page.
• Opt-outs and do-not-call entries are enforced inside Aloware. Aloware honors what your team captures there, and does not scrub against the national or state do-not-call registries. That subscription stays with the agency, along with the 31-day condition that comes with relying on the registry error safe harbour.
• The consent record has to live in the CRM. If your agency runs on HubSpot, the integration logs every call and message onto the same HubSpot record that carries the consent and SOA properties your team maintains, instead of leaving the three in systems that disagree by November. It moves call and message activity. The consent field and SOA status stay yours to define and keep current.

NumberGuard, Branded Calling and Local Presence together are what we call the Pickup Stack, a paid add-on rather than something that arrives with a seat, and a line item an agency decides on in September. The inbound side needs its own plan too, because beneficiary-initiated calls are the cleanest volume of the season and the easiest to drop on the floor. We covered the answering side in our piece on AI voice agents in the insurance industry.

Bottom line

The October 1 change gives agencies back a day and a half on every appointment. It does not hand anyone permission to cold call a Medicare beneficiary, and it does nothing for a number pool carriers stopped trusting last season. The agencies that come out of December 7 ahead ran number health as a weekly routine with an owner.

Do one thing today: divide your planned daily dial volume by the count of outbound numbers you own. If a single number is carrying more than 70 to 83 dials a day, add numbers before you buy another lead.

To see what that looks like on your own numbers before AEP opens, book a demo and we will walk your pool, your dialing window and your consent capture with you.