Are auto dialers legal? TCPA rules, consent and calling limits

Yes, auto dialers are legal in the United States. No federal law bans the software. The Telephone Consumer Protection Act (TCPA) and the FCC's rules control how you use it: which numbers you dial, what consent you hold, whether a live person or a recording answers, and what happens when the dialer connects a call before an agent is free. Get those wrong and the exposure is $500 per call, up to $1,500 if a court finds the violation willful. A 2,000-call day with no valid consent can produce a lawsuit worth more than the business.

This post covers what the law regulates, the consent levels that apply to different calls, the specific rules for predictive dialers, and how the courts narrowed the legal definition of "autodialer" in 2021. It also covers why that narrowing mattered less than many sales teams assumed. This is a plain-English overview, not legal advice. If your calling program is large or your consent comes from bought leads, have a TCPA attorney review it.

What the TCPA actually regulates

The TCPA (47 U.S.C. § 227) and the FCC rules under it regulate five separate things. People often blur them together:

1. Calls to cell phones made with an "automatic telephone dialing system" (ATDS). These need prior express consent, and prior express written consent if the call is telemarketing.
2. Calls using an artificial or prerecorded voice. These need consent whether or not any autodialer is involved. In 2024 the FCC confirmed that AI-generated voices count as "artificial."
3. Telemarketing to numbers on the National Do Not Call Registry, unless you have an established business relationship or written permission.
4. Calling hours. Telemarketing calls are allowed between 8 AM and 9 PM in the recipient's local time, and several states set tighter windows. We break those down in TCPA calling hours by state.
5. Company-specific do-not-call requests. If someone tells you to stop, you put them on your internal DNC list and you stop.

The dialer question mostly concerns items 1 and 2. A clean, consented list keeps you safe on item 1, but you can still violate items 2 through 5 with a perfectly lawful dialer.

The consent levels, and which calls need which

The type of call decides how much consent you need. The dialing hardware is a separate question.

Prior express consent can come from the person giving you their number for a related purpose, such as listing it on a service form. Prior express written consent is stricter. It needs a signed agreement (an e-signature or checkbox counts under the E-SIGN Act) that clearly authorizes marketing calls or texts using automated technology to that specific number. It must also state that consent isn't a condition of purchase. We cover the difference in detail in prior express written consent vs implied consent.

Two recent changes matter here:

• The FCC's "one-to-one consent" rule never took effect. That rule would have required consent to name a single seller. The Eleventh Circuit vacated it in January 2025, so consent shared across multiple named sellers is not automatically invalid. It still has to be clear and specific.
• Revocation got easier for consumers. Under the FCC's newer revocation rules, people can revoke consent by any reasonable means, such as replying "stop," saying it on a call or emailing. You generally have 10 business days to honor the request. Your dialer and your texting tool both need to see that opt-out.

Predictive dialers: the rules that apply even with consent

A predictive dialer dials more numbers than you have free agents, betting that most calls won't connect. When more people answer than predicted, some calls get "abandoned": the person says hello and hears silence or a hang-up. (We explain the mechanics in predictive dialer vs auto dialer.)

The FCC's abandoned-call rules (47 CFR 64.1200(a)(7)) apply to telemarketing calls no matter how good your consent is:

• 3% cap. No more than 3% of calls answered by a live person can be abandoned, measured per campaign over a 30-day period.
• 2-second rule. A call counts as abandoned if a live agent isn't on the line within 2 seconds of the person's completed greeting.
• Required message. Every abandoned call must play a prerecorded message within those 2 seconds. The message identifies the seller, gives a callback number and offers an automated opt-out.
• Ring time. Unanswered calls must ring for at least 15 seconds or four rings before the dialer disconnects.
• Records. You must keep records showing compliance for at least two years.

Here is the math on the 3% cap. Say a campaign gets 4,000 live answers in a month. You can abandon at most 120 of them. A predictive dialer tuned aggressively to cut agent idle time can pass that cap in a single afternoon. Multi-line and triple-line setups raise the same issue, which we cover in multi-line dialers for cold calling.

How the courts redefined "autodialer"

For years, plaintiffs argued that almost any system able to dial from a stored list counted as an ATDS. Under that reading, nearly every modern dialer, and arguably every smartphone, triggered the cell-phone consent rule.

Facebook v. Duguid (2021)

The Supreme Court rejected that reading. In Facebook, Inc. v. Duguid, it held that an ATDS must have the capacity to either store or produce telephone numbers using a random or sequential number generator. A system that only dials numbers from a customer list doesn't qualify just because it dials automatically.

Since then, most federal courts have held that list-based dialers, including many predictive and power dialers, fall outside the ATDS definition. A minority of plaintiffs have pushed a theory based on a footnote in the opinion, arguing that a generator used to pick the order of numbers from a list still counts. Most courts have rejected that theory, but it hasn't disappeared.

McLaughlin v. McKesson (2025)

In June 2025 the Supreme Court held that district courts aren't bound by the FCC's interpretations of the TCPA and must read the statute themselves. That matters for questions the FCC has tried to settle, such as what "artificial voice" or "prior express consent" means. Expect more variation between courts for a few years.

Why Duguid didn't make dialing "safe"

Many teams read Duguid as permission to dial anyone. It wasn't, for four reasons:

• Prerecorded and AI voice rules don't depend on the ATDS definition. A ringless voicemail or an AI voice agent still needs consent.
• DNC, calling hours and internal opt-out rules apply to every call, including hand-dialed ones.
• The abandonment rules still govern predictive telemarketing.
• States wrote their own definitions. Florida's FTSA, Oklahoma's OTSA and Maryland's law were written or expanded with broader language after Duguid. Florida amended its law in 2023 to cover systems that automatically select and dial numbers, which narrowed it but left it broader than the federal test in some readings. If you call into those states, their definitions apply too.

Texts count as "calls" under the TCPA, so the same consent analysis covers automated SMS. That is why text campaigns should go only to people who opted in or replied. Cold outreach belongs on the phone and in the mail, where the rules above apply.

A practical compliance checklist before you dial

Whatever dialer you use, these steps reduce risk:

1. Match consent to the call. Sales calls with any automation or recorded voice need written consent you can produce. Store the opt-in time, the form wording and the page URL in your CRM or lead source. For the documentation side, see how to document SMS consent.
2. Scrub the National DNC Registry at least every 31 days, and keep your internal DNC list current.
3. Scrub known TCPA litigators. A small group of serial plaintiffs files a large share of TCPA suits.
4. Check the FCC Reassigned Numbers Database for older lists. Consent belongs to the person, not the number.
5. Enforce local calling hours using the contact's area code, applying the stricter state window where one exists.
6. If you use predictive mode, monitor abandonment daily, not only at the end of the 30-day window.
7. Route every opt-out, whether by voice, text or email, to one suppression list your dialer and texting tool both read.

What scrubbing costs vs what it prevents

Ready's standalone TCPA & DNC Litigator Scrub checks each number against known TCPA-litigator and DNC-complainer lists for $0.005 per contact. You can scrub a list with POST /v1/scrub or one number with GET /v1/scrub/:phone (docs). For a 10,000-contact list:

10,000 × $0.005 = $50

Scrubbing doesn't make you lawsuit-proof, and it doesn't replace consent. It does remove the numbers most likely to sue. We run the fuller comparison in the math: one TCPA lawsuit vs scrubbing your whole list.

Where a manual dialer fits

The simplest way to stay clear of the ATDS question and the abandonment rules is to have a human start every call. That is how we built the Ready Dialer. It is click-to-call from the dial pad in the Ready dashboard or GoHighLevel, with consented call recording and transcripts, inbound calls that ring the open pad, and a Missed call card in the Inbox thread for each call you miss. It has no predictive, power or queue auto-dialing and no voicemail drop. If your team needs high-volume predictive dialing, a dedicated predictive tool is the right fit, and you should run it with the 3% cap in mind.

Billing is $0.025 per minute, with each started minute billed as a full minute. Only answered time is billed, so ring-outs and busy lines cost nothing. A call that reaches voicemail counts as answered.

Worked example (assumptions stated): a rep places 300 calls in a day, 60 are answered (including voicemail), and each answered call is rounded up to an average of 3 billed minutes.

60 × 3 × $0.025 = $4.50

The other 240 calls cost $0. A manual dialer still has to follow DNC, calling-hours and opt-out rules, but it removes most of the autodialer and abandonment risk.

The takeaway

Auto dialers are legal. The software itself carries little risk. The risk comes from dialing people without the right consent, using recorded or AI voices without permission, abandoning more than 3% of answered telemarketing calls, ignoring DNC and calling hours, and assuming Duguid settled everything when state laws and post-2025 court rulings are still shifting.

Before you choose a dialer, decide what consent you hold and what kind of calls you're making. Pick the dialer mode that fits that consent. Then scrub before every campaign. If you want to see how a manual dial pad, list scrubbing and consented SMS work together in one account, you can create a Ready account. The first 20 one-to-one texts are free so you can test it before committing.