Here's the workflow half the wholesaling world runs on: pull a list of distressed or absentee-owner properties, run the addresses through a skip-trace tool to get phone numbers, load those numbers into a texting platform, and fire off a "Hey, are you interested in selling your property at 412 Maple?" blast to a few thousand people you've never spoken to.
That workflow is a lawsuit generator. Not "might be" — is. And the people who send those texts almost never understand the exposure until a demand letter shows up.
Full disclosure: I work for Ready, an SMS platform, and one of the things we sell is a litigator-scrub add-on I'll cover below. I'm not going to pretend a scrub makes cold texting safe, because it doesn't. But I do want you to understand exactly where the risk lives, because most of the advice floating around real-estate forums is either wrong or dangerously optimistic.
The number that should stop you: $500 to $1,500 per text
The Telephone Consumer Protection Act (TCPA) sets statutory damages of $500 per violating message, tripled to $1,500 if the violation is found to be willful or knowing. There's no cap. There's no "we only sent one."
Do the math on a single 5,000-number cold blast where, say, everything about it violates the statute:
- 5,000 texts × $500 = $2,500,000
- If willful: 5,000 × $1,500 = $7,500,000
You will not actually face a $7.5M judgment on your first blast — most cases settle, and plaintiffs' attorneys go after collectible defendants and repeat senders. But the per-message math is why TCPA plaintiff firms exist as a business model. One motivated recipient with a screenshot and a lawyer is a very bad afternoon. A litigator who was deliberately sitting on a phone number waiting for texts is worse.
Why "it's just a text asking if they want to sell" isn't a defense
The instinct is: "I'm not selling anything, I'm asking to buy. That's not marketing." Doesn't matter. Under the TCPA framework and the FCC's rules, an unsolicited text to a cell number sent using automated technology, without prior express consent, is the exposure — whether you're pitching a timeshare or asking to buy someone's house.
Two facts stack against the cold-text wholesaler specifically:
- No prior express written consent. A skip-traced number is, by definition, a number the person never handed to you. There's no opt-in, no relationship, no form they filled out.
- The number is a cell. Skip-trace lists are overwhelmingly mobile numbers now. The TCPA's tightest protections apply to cell phones.
There's also the National Do Not Call Registry and its state analogs, which apply to telephone solicitations. And several states — Florida (the FTSA), Oklahoma, Washington — have their own mini-TCPA statutes with their own per-message damages and their own plaintiff bars. Florida's law in particular turned into a cottage industry before it was amended.
The narrow paths that are actually legal
I want to be honest about what is available, because "never text a seller" isn't realistic advice and it's not what the law says.
Prior express written consent. If the property owner opted in — filled out a form on your "we buy houses" landing page, texted a keyword to your number, checked a box with clear disclosure language — you have consent. This is the clean path. It's also the one that produces warm leads, which is the actual business you want.
An established business relationship, carefully. If someone has previously transacted or inquired with you, some limited outreach paths open up. This is narrow and fact-specific — talk to a lawyer before leaning on it.
Direct mail and phone-call rules are different from text rules. Ringless voicemail and cold calling live under a separate (though still regulated) set of rules than SMS. This is part of why voice outreach still has a place in wholesaling — more on that below.
What is not a path: buying a "compliant, TCPA-safe" list from a data vendor. There is no such thing as a list that carries consent for you. Consent runs to the party the person opted in with. A vendor cannot transfer it by selling you a spreadsheet.
Where litigator and DNC scrubbing actually helps — and where it doesn't
This is the part I have to be careful about, because it's my own product.
Ready offers a standalone TCPA & DNC Litigator Scrub at $0.005 per contact. One pass checks each number against known TCPA-litigator lists and DNC-complainer lists, and auto-suppresses the matches before you send. On our platform, that pairs with quiet-hours enforcement (holding sends outside the recipient's permitted local hours) and automatic STOP/opt-out handling that propagates across campaigns so a suppressed number stays suppressed.
Here's the honest framing. Scrubbing does two real things:
- It removes the known professional litigators — the people who maintain aged cell numbers specifically to bait texters and who file cases as a business. Those are your highest-dollar, most-motivated plaintiffs.
- It removes known DNC complainers — people with a demonstrated history of reporting.
What scrubbing does not do:
- It does not create consent. A non-litigator who never opted in can still sue.
- It does not make an unconsented blast legal. It reduces the concentration of the most dangerous recipients; it doesn't change the statute.
Run the cost side, because it's cheap relative to the exposure it mitigates. Scrubbing a 5,000-number list:
- 5,000 × $0.005 = $25
Twenty-five dollars against a single $500-to-$1,500 per-message downside is not a hard trade. But framing it as "insurance" is where people fool themselves. It's risk reduction, not immunity, and the ultimate compliance responsibility is always the sender's. If your entire model depends on texting people who never opted in, a scrub lowers the odds of hitting a pro plaintiff — it does not make the practice compliant.
What "10DLC registered" does and doesn't cover
Wholesalers hear "get registered for 10DLC and you're good." Registration and consent are two different things, and conflating them is a common, expensive mistake.
- 10DLC registration (brand + campaign, roughly ~$10/mo per brand and ~$20/mo per campaign in carrier fees) is what keeps carriers from filtering your traffic. It's a deliverability and carrier-trust requirement. Ready handles the whole registration in-app, usually approved in 1–3 days.
- Consent is what keeps you out of court. It's a legal requirement.
You can be fully 10DLC-registered and still be committing a per-message TCPA violation on every cold text. The carrier lets it through; the plaintiff's attorney doesn't care that it got delivered. If you're new to this, our 10DLC explainer walks through what registration actually is — and separately, our piece on managing many GHL sub-accounts and their 10DLC registrations is worth reading if you run one brand across multiple markets.
There's a useful parallel in healthcare texting, where the line between a message you have consent for and one you don't is drawn very precisely — the same "one opt-in doesn't cover every message type" logic applies to you. See the consent-wall breakdown for reminder vs. marketing texts.
A more defensible playbook
If you want to keep texting sellers and sleep at night, restructure the funnel so the text is the second touch, not the first.
- Lead with channels that carry their own rules. Cold outbound calls and voicemail drops operate under different (still regulated) rules than SMS. A voicemail drop that earns a callback turns a cold contact into an inbound conversation — and inbound gives you a natural moment to capture consent. If you go this route, the voicemail-drop callback mechanics matter more than you'd think. Ready's Power Dialer includes voicemail drop and auto-text so an interested seller can be moved onto text with consent captured.
- Capture consent at the point of interest. Landing pages with clear opt-in language, keyword-to-text on your bandit signs and mailers, forms that record attestation. Ready records opt-in attestation for bulk and API sends, so you build an audit trail as you go.
- Scrub before every send anyway. Even on a warm, opted-in list, run the litigator/DNC scrub. Consent gets revoked, numbers get recycled, and $0.005 is nothing.
- Let STOP mean stop, everywhere. Automatic opt-out propagation means a seller who replies STOP once can't be re-added by a different campaign later — which is exactly the fact pattern plaintiffs love to build a case on.
The practical takeaway
Cold-texting skip-traced numbers is not a gray area — it's per-message exposure of $500 to $1,500 with no cap, sent to a list of people who never gave you consent, on channels increasingly patrolled by attorneys who do this for a living. A $25 litigator scrub on a 5,000-number list removes your most dangerous recipients, and it's worth doing. But it does not create consent, and no tool can.
The durable version of this business puts consent first: cold-call or mail to open the door, capture opt-in when the seller shows interest, then text a warm list you can actually defend. That funnel is slower to fill and dramatically cheaper to defend.
If you want the compliance pieces — in-app 10DLC, litigator/DNC scrubbing, quiet-hours, and automatic opt-out — in one place, that's what we built at Ready. You can start on 2,500 free credits without a card at app.tryready.com/signup and test the scrub before you ever send. And genuinely: run your specific list and tactics past a TCPA attorney. This post is operator context, not legal advice.