Is Auto Dialing Legal? Auto Dialer Laws by Dialer Mode

TL;DR: Auto dialing is legal in the United States. What the law regulates is not dialing from a list, it is three separate things a dialing setup can trigger, and buyers usually ask about only one.

• Trigger one, the autodialer. After Facebook v. Duguid (2021), equipment only counts as an "automatic telephone dialing system" if it stores or produces numbers using a random or sequential number generator. Dialing a known CRM list usually does not.
• Trigger two, the recorded voice. The same subsection also covers calls made with an artificial or prerecorded voice. A press-1 greeting or a voicemail drop hits this trigger even when the dialer is not an autodialer.
• Trigger three, everything else. Calling hours, the national registry, your internal do-not-call list, abandoned-call limits and consent revocation bind telemarketing calls whatever equipment placed them.
• Damages are per call. $500 per violation under 47 U.S.C. 227(b)(3), trebled for willful or knowing violations. On a dialing floor that arithmetic moves fast.
• States write their own rules. Florida keys its consent requirement to an "automated system for the selection and dialing of telephone numbers", with no random-or-sequential test at all, so the federal narrowing does not travel.
• New on September 30, 2026. The FCC adopted FCC 26-67. Once it takes effect, a caller may pick one or more of three FCC-listed opt-out methods, disclosed on the call or in the text, as the only ones it accepts. An opt-out from one kind of informational message can then be read as covering only that kind, which replaces the January 31, 2027 revoke-all date. The effective date comes in a later FCC Public Notice. Until then, any reasonable method still revokes consent.

Last updated: October 5, 2026

Is auto dialing legal for a sales team?

Most teams ask whether auto dialing is legal about two weeks before they sign a dialer contract, and they ask it as one question. It is three questions, and the vendor demo answers none of them.

Yes, auto dialing is legal. The Telephone Consumer Protection Act does not ban dialing software. It conditions certain calls on consent, it puts conduct rules on telemarketing calls regardless of the equipment, and it hands the person you called a private right of action. Under 47 U.S.C. 227(b)(3) that person can recover actual damages or "$500 in damages for each such violation, whichever is greater," and a court may treble the award for a willful or knowing violation.

One note before any of it. This is a buyer's map, not legal advice. When Texas SB 140 took effect we sent our own customers a written notice about it, and the notice said the same thing this post says: the obligation sits with the business making the calls, so take the specifics to your own counsel.

Per violation means per call and per text, so a team of fifteen reps clearing 200 dials a day does not need many bad records before the exposure stops being theoretical. The useful question is which of the three triggers your setup touches, and who owns each one. If you are still assembling the shortlist itself, our roundup of the best sales dialers covers the field. This post is about what to ask once you have one.

What counts as an autodialer after Facebook v. Duguid?

This is the trigger everyone knows about, and it is the one that got narrower.

The statute defines the system as equipment with the capacity "(A) to store or produce telephone numbers to be called, using a random or sequential number generator; and (B) to dial such numbers." For years plaintiffs read that first clause loosely enough to sweep in any system that stored a list. The Supreme Court closed it in April 2021. In Facebook, Inc. v. Duguid, the Court held that "to qualify as an 'automatic telephone dialing system' under the TCPA, a device must have the capacity either to store a telephone number using a random or sequential number generator, or to produce a telephone number using a random or sequential number generator."

The Court rejected the broad reading partly because it "would capture virtually all modern cell phones," which would push the statute onto ordinary conduct like speed dialing.

The consequence for an outbound team is straightforward. A dialer working through specific, known numbers pulled from your CRM is not generating them randomly or sequentially. That is the entire point of the list. So for most sales dialing, trigger one is not the one that bites.

The mistake is stopping there.

Which dialer mode triggers which rule?

Dialer modes are not a marketing taxonomy. They describe who initiates the call and what plays when someone answers, and those are the two facts the law keys on. For the mechanics rather than the legal read, our breakdown of auto dialer versus power dialer versus predictive dialer covers how each one paces.

Read the fourth column again, because it is the one the category gets wrong. The federal prohibition covers calls made "using any automatic telephone dialing system or an artificial or prerecorded voice," and that "or" is doing enormous work. A progressive setup that plays a recorded greeting and asks the contact to press 1 is placing a prerecorded-voice call. Duguid says nothing about it, because Duguid was about the other half of the sentence. The same goes for voicemail drops and for any message your dialer leaves on an answering machine.

Key takeaway: Duguid narrowed one of the three triggers, not the statute. A dialer that never touches a random or sequential number generator can still place a prerecorded-voice call, still abandon calls into dead air, and still dial a number sitting on your own do-not-call list.

The rules that apply no matter which dialer you buy

These come from 47 CFR 64.1200 and they bind telemarketing calls regardless of how the call was placed. This is the list to hand your ops lead.

• Calling hours. No telephone solicitation "before the hour of 8 a.m. or after 9 p.m. (local time at the called party's location)." Local time at their end, not yours, which is a scheduling problem the moment you dial across time zones. We go deeper on this in our guide to keeping a dialer session inside TCPA calling hours.
• The national registry. You must be working from a version of the national do-not-call registry "obtained from the administrator of the registry no more than 31 days prior to the date any call is made." Thirty-one days, every list, every time.
• Your own internal list. A request to stop has to be recorded and the number added to your do-not-call list at the time the request is made. Our explainer on what a do-not-call list is covers how the internal list and the federal registry differ.
• Abandoned calls. No more than three percent of telemarketing calls answered live by a person may be abandoned, and a call counts as abandoned "if it is not connected to a live sales representative within two (2) seconds of the called person's completed greeting." Two seconds. This single rule is the reason dial-ahead pacing is a compliance decision and not a productivity one.
• Revocation. Under the rule in force today, a called party may revoke consent "by using any reasonable method." Requests "must be honored within a reasonable time not to exceed ten business days from receipt." The FCC rewrote this paragraph on September 30, 2026, and the new version takes effect on a date a later Public Notice will set. The ten business days survive it.
• Established business relationship. The exemption runs on a clock, generally eighteen months from the subscriber's purchase or transaction. It is not permanent and it is not a substitute for consent records.

Does the B2B exemption cover business calls?

Partly, and the part it does not cover is the expensive one.

The scoping is right there in the rule text. Both the calling-hours restriction and the national registry run to a residential subscriber. No person may initiate a telephone solicitation to "any residential telephone subscriber before the hour of 8 a.m. or after 9 p.m.", or to "a residential telephone subscriber who has registered his or her telephone number on the national do-not-call registry." Business lines sit outside those two.

Then read the consent prohibition next to it. That one covers calls placed with an autodialer or an artificial or prerecorded voice "to any telephone number assigned to a paging service, cellular telephone service, specialized mobile radio service, or other radio common carrier service." No residential qualifier anywhere in that sentence. Your prospect's mobile is a cell number whether or not their employer pays the bill, and the number in your CRM is a mobile far more often than a desk line. So the B2B framing that holds for the registry does not carry across to the trigger most sales dialing actually touches. Where that line falls for your list is a counsel question, not a vendor question.

What changed in 2025 and 2026?

Three things changed, and most 2026 explainers were written before the third one. The January 2025 vacatur and the January 2026 waiver are the two that get misread. The September 30, 2026 order rewrote the revocation paragraph the January 2026 waiver sits on.

January 2025: the one-to-one consent rule was struck down. The FCC's 2023 order would have required advertiser-specific consent, plus a requirement that the calls be logically and topically associated with the interaction that produced the consent. On January 24, 2025 the Eleventh Circuit vacated it. The court wrote that it agreed "the FCC exceeded its statutory authority under the TCPA because the 2023 Order's new consent restrictions impermissibly conflict with the ordinary statutory meaning of 'prior express consent'" (Insurance Marketing Coalition Ltd. v. FCC, No. 24-10277). Reading the current text of 64.1200 confirms it: the one-to-one language is not in the rule.

January 2026: the "revoke everything" requirement was pushed to 2027. This is the change most 2026 explainers get backwards. In an order adopted January 6, 2026, the FCC extended the waiver of section 64.1200(a)(10) "to the extent the rule requires callers to treat a request to revoke consent made by a called party in response to one type of informational message as applicable to all future robocalls and robotexts from that caller on unrelated matters." The new date is January 31, 2027, and the September order below replaces it on the day that order takes effect.

Only the cross-purpose reach of a revocation was delayed. The FCC said so in the same order: the waiver "does not alter the status quo relating to any other prior Commission rules or rulings addressing revocation of consent." The revocation rule itself stood, and it stands today. Until the September order below takes effect, someone can still revoke by any reasonable method, and you still have ten business days. If your team read "delayed to 2027" and relaxed the opt-out process, that was the wrong conclusion.

September 30, 2026: the FCC rewrote the revocation rule. In FCC 26-67, adopted September 30 and released October 1, 2026, the Commission amended 47 CFR 64.1200(a)(10), (11) and (12). The amendments take effect 30 days after Federal Register publication, on a date the FCC will name in a later Public Notice. On that day they supersede the January 31, 2027 date. Until then nothing changes on the ground. Once the order is in force, here is what moves for a sales team:

• You may designate how consent gets revoked. The three choices are an automated voice or key-press opt-out on the call, a reply text using one of seven standardized words, or a website or phone number you name. The seven words are stop, quit, end, revoke, opt out, cancel and unsubscribe. Designate one or more, disclose it clearly and conspicuously on the call or in the text, and you are not required to process a revocation made any other way. A text sender that designates the reply keyword meets the disclosure duty by putting one of those seven words in every message, as long as it honors all seven.
• Designate nothing and the current standard stays. You must honor a revocation made by any reasonable means. A request made some other way carries a rebuttable presumption that consent was revoked, once the consumer shows the request was made.
• Marketing revocations still revoke all marketing. The order lets a caller read an opt-out sent in reply to one category of informational calls or texts as limited to that category. A revocation sent in reply to a marketing call or text still revokes consent to every marketing call and text from your company.
• Ten business days is unchanged. So is the five-minute window for the confirmation text: one sent within five minutes that only confirms the opt-out is presumed to sit inside the consumer's consent. The Further Notice attached to the order asks whether to shorten the ten business days, with seven as the proposal on the table.

The designation has limits on a dialing floor. A prerecorded or AI-voice telemarketing call still has to offer the automated voice or key-press opt-out that 64.1200(b)(3) requires, and the order says the designation does not alter that. A prospect on a residential or wireless line who tells a live rep to stop calling has made a do-not-call request under 64.1200(d)(3). That number goes on your internal list at the time of the request, whatever method you designated. Build the designation into your texts and your call scripts. Keep the one-keystroke suppression in front of every rep.

Do state laws change the answer?

Yes, and this is where the federal narrowing stops helping.

Florida. The Florida Telephone Solicitation Act makes it unlawful to place an unsolicited sales call "if such call involves an automated system for the selection and dialing of telephone numbers or the playing of a recorded message when a connection is completed to a number called without the prior express written consent of the called party" (Fla. Stat. 501.059(8)(a)). Read that trigger next to the federal one: no random-or-sequential test anywhere in it. A separate section sets a tighter window than the federal rule, barring solicitation calls "before 8 a.m. or after 8 p.m. local time in the called person's time zone" and capping contact at three calls "to a person over a 24-hour period on the same subject matter or issue, regardless of the phone number used to make the call" (Fla. Stat. 501.616(6)). The consent provision carries its own private right of action: a called party aggrieved by a violation of that section may recover actual damages or $500, whichever is greater, trebled at the court's discretion for a willful or knowing violation (Fla. Stat. 501.059(10)).

Texas. Senate Bill 140, effective September 1, 2025, rewrote the definition of "telephone solicitation" in the Business and Commerce Code to mean a call "or other transmission, including a transmission of a text or graphic message or of an image," made to induce a purchase (Texas S.B. No. 140). Marketing texts to Texas residents now sit inside the state telemarketing regime, with its registration requirements and its private remedies. That is the change we wrote to customers about. If your team texts as well as calls, treat the text channel as separately regulated rather than as an extension of the calling policy.

The pattern generalises even where the details differ. A state can write its own trigger, narrow the calling window, cap frequency and attach its own damages. Your calling map is a compliance map, and the honest version of "which states can we dial" goes to counsel who has seen your list.

How Aloware approaches this

We built around the first column of that table rather than the last, and it is a deliberate trade.

• The Power Dialer is 1:1. One known contact at a time, when the rep is ready. One line, one live call, a human on our end from the first ring.
• No predictive or parallel dialing, on purpose. Dial-ahead pacing buys dials by manufacturing abandoned calls, and the three percent rule is not a suggestion. The full reasoning is in what a parallel dialer is and why we do not build one.
• Progressive and preview dialing exist as sequence-based steps on the plans that include Sequences, switched on per account after review rather than by self-serve toggle.
• Suppression is enforced at the contact, not the number. Marking a contact do-not-contact blocks calls and texts across every number on that record, and a STOP from one number opts out all of them. On long-code and toll-free numbers the recognized keywords are STOP, STOPALL, STOP ALL, UNSUBSCRIBE, CANCEL, END, QUIT, REVOKE, OPTOUT, OPT OUT and REMOVE, which covers the FCC's seven standardized words. The match is exact keyword only, so "please stop texting me" does not trigger an opt-out and needs a person to honor it. The state lives in a table that is never purged, so deleting and re-importing a contact restores it rather than clearing it. That is what Compliant Calling covers.
• Dialing windows are set at the account level, with a session option that pushes out-of-window contacts down the list instead of failing them.
• Two limits worth knowing before you ask. We do not scrub against the national or state do-not-call registries. That subscription and that obligation are yours. And contact-level opt-out enforcement covers long-code and toll-free traffic, not short codes.

One more thing, because it is the argument buyers actually came for. If the goal is more conversations, more simultaneous lines is the expensive way to buy them and the one that creates the exposure. Answer rate is the other lever, and it is a number-reputation problem rather than a pacing problem, which is the job NumberGuard and the other Pickup Stack add-ons do. Our explainer on why calls get labelled spam covers where the pickup rate actually goes.

What to ask before you sign a dialer contract

Take this into the demo. A vendor who cannot answer it in one call has told you something.

1. Which modes does this product actually run, and which one will my team be in by default?
2. Does anything prerecorded ever play to the contact, including press-1 greetings and voicemail drops?
3. How does the system pace calls relative to agent availability, and what is the measured abandonment rate?
4. Can I set a dialing window, and does it evaluate the contact's local time or my office's?
5. When someone opts out, does the block apply to that number or to every number on the contact record?
6. Does opting out of texts also stop calls, and can I see which number triggered it and when?
7. What happens to compliance state when a contact is deleted and re-imported from my CRM?
8. Which parts of registry scrubbing and consent capture remain my responsibility? Get this one in writing.
9. Once FCC 26-67 takes effect, which opt-out methods does the platform recognize on its own, and how does it let us disclose the designated method on the call and in each text?

The bottom line

Auto dialing is legal. What gets sales teams in trouble is almost never the autodialer question: it is a recorded greeting nobody classified as a prerecorded-voice call, a registry list that aged past 31 days, a contact who said stop on one number and kept getting texts on another, and a pacing setting bought for productivity that runs an abandonment rate nobody measures.

So do one thing this week before you sign anything: sit down with the nine questions above and get your vendor's answers in writing. Everything else follows from what that document says, including which parts you have to hand to your own counsel.

This post is general information for buyers evaluating dialing software. It is not legal advice, and no part of it creates an attorney-client relationship. Talk to your own counsel about your list, your states and your consent records.

Want to see what a 1:1 power dialer looks like with the suppression and scheduling controls switched on? Book a demo and bring your compliance questions with you.