Are auto dialers legal? Auto dialer laws explained (2026)

Short answer: auto dialers are legal in the United States, but they are the most heavily regulated tool in sales. The Telephone Consumer Protection Act (TCPA), Federal Communications Commission (FCC) rules, and a patchwork of state mini-TCPAs don't ban dialers; they ban specific conduct: automated calls and texts to wireless numbers without the right consent, prerecorded messages, and calls to Do Not Call numbers. Get the conduct right and a dialer is an ordinary, lawful tool. Get it wrong and the penalties are per call. This guide explains what the auto dialer laws actually restrict, what counts as an autodialer after the Supreme Court's key ruling, and the cautious way to run a high-volume calling day in 2026.

Quick answers: are auto dialers illegal, and is autodialing legal for B2B?

Are auto dialers illegal? No. In the US an auto dialer is legal equipment; the law restricts how it is used. Under 47 U.S.C. 227(b)(1)(A) and 47 CFR 64.1200(a), it is unlawful to place a call to a cellular number using an automatic telephone dialing system or an artificial or prerecorded voice without the called party's prior express consent (prior express written consent for advertising and telemarketing calls). A live person dialing one number at a time from a list they chose is a different situation from a system that generates numbers and dials them.

What is an auto dialer, legally? The statute's term is "automatic telephone dialing system": equipment with the capacity to store or produce numbers to be called using a random or sequential number generator, and to dial them (47 U.S.C. 227(a)(1), read narrowly by the Supreme Court in Facebook v. Duguid, 2021). A "power dialer" that walks a list you imported, one call at a time, is not described by that wording. Cold Call X is a power dialer.

Is autodialing legal for B2B? Partly, and B2B does not switch the rules off. The Do Not Call registry rules in 47 CFR 64.1200(c) protect a "residential telephone subscriber", so they do not cover a business landline. But the consent rule for autodialed or prerecorded calls to cellular numbers (227(b)(1)(A)(iii); 64.1200(a)(1)(iii)) is keyed to the type of number, not to who owns it, so a business owner's mobile number is covered. Prerecorded telemarketing messages to residential lines are restricted separately. The cautious B2B approach is the same as everywhere else: live voice, your own number, your own suppression list, and no robocalls or automated texts to mobiles. Mixed and small-business lists often contain home or mobile numbers, which is why scrubbing everything is the safer habit.

What the TCPA actually regulates

The Telephone Consumer Protection Act of 1991 is the backbone of every auto dialer rule in the US. Despite its reputation, the TCPA doesn't outlaw dialing equipment, it restricts three behaviors, mostly aimed at protecting wireless numbers and residential privacy:

• Autodialed and prerecorded calls or texts to cell phones without the required level of prior consent (the strictest tier, generally written consent, applies to telemarketing).
• Artificial or prerecorded voice messages to residential lines for telemarketing, subject to narrow exceptions.
• Telemarketing calls to numbers on the National Do Not Call Registry, plus calling outside the roughly 8 a.m.–9 p.m. local-time window and failing to identify yourself at the recipient's request.

The FCC enforces the TCPA, interprets gray areas, and can adopt new rules, which is how the one-to-one consent rule (effective January 2025) closed the lead-generation loophole: buying a lead whose "consent" bundled dozens of marketers no longer counts. Consent must name each individual company. State attorneys general and private class actions enforce alongside the FCC, and several states (Florida, Oklahoma, Washington, and others) run their own broader dialing and text-message statutes on top of the federal floor.

What counts as an "autodialer" (the definition that matters)

Everything turns on the definition of an automatic telephone dialing system (ATDS). The statute defines it as equipment with the capacity to store or produce telephone numbers to be called, using a random or sequential number generator, and to dial them. For years, courts split on what that meant, and plaintiffs' lawyers argued that almost any bulk-dialing software qualified.

The Supreme Court resolved the core question in Facebook, Inc. v. Duguid (2021): to be an ATDS, the equipment must have the capacity to use a random or sequential number generator to store or produce numbers. Software that simply dials a fixed, human-supplied list, one number after another, in the order the user chose, does not meet the federal definition. That is why a person tapping through a contact list on an iPhone, with the phone placing each call, sits on the safe side of the line: nothing is generating or guessing numbers.

Three honest caveats. First, some courts and several state laws read "autodialer" more broadly than the federal definition. Second, plaintiffs' lawyers keep testing the edges, a 2024 federal appellate decision added nuance that litigants still argue about. Third, the practical risk driver usually isn't the dialer anyway; it's prerecorded voice, automated texting, and consent quality. A tool that stays inside "dials my imported list, live voice, my own number" avoids all three.

Dialer modes, ranked by legal risk

Not all dialing features carry the same exposure. Ranked from most to least risky, based on where TCPA enforcement and class actions actually concentrate:

Cloud dialer platforms add a second, non-legal problem: calls routed through shared VoIP number pools get flagged as spam by carriers, so answer rates collapse. Dialing from your own number, the number people can call back, is both the cautious and the better-answered path. The iPhone auto dialer setup works exactly this way. Comparing calling models in depth? The power dialer vs. parallel dialer guide breaks down when each one fits.

Consent: the three tiers

Consent is the currency of TCPA compliance. There are three tiers, and matching the tier to the call type is most of the game:

1. Prior express written consent

Required for telemarketing calls or texts to wireless numbers using an autodialer or prerecorded voice. Since January 2025, the FCC's one-to-one rule means the consent must name your specific company, bundled "I agree to receive calls from partners" language no longer qualifies. This is the tier lead-gen callers keep getting wrong.

2. Prior express consent (oral or implied)

Required for non-telemarketing autodialed or prerecorded calls to wireless numbers, appointments, account notices, deliverables. Giving a company your cell number for that relationship generally implies this tier.

3. No consent needed

Live, one-at-a-time calls placed by a human, including with equipment that only walks your own list, plus purely personal calls, emergencies, and several healthcare and informational exemptions. A human being, speaking live, dialing imported contacts, is outside the autodialer rules entirely.

The three Do Not Call layers

"Do Not Call" is not one list, it's three, and a cautious caller maintains all of them:

• Federal National DNC Registry. For telemarketing, numbers on the registry are off-limits (exceptions: prior express permission, an established business relationship within its allowed window, and personal or non-commercial calls). Registry access is subscription-based; telemarketers must scrub at least every 31 days.
• State mini-DNC lists. Several states operate their own registries with different rules on top of the federal one.
• Your internal suppression list. Federal law requires telemarketers to keep their own do-not-call list and honor any do-not-call request within a reasonable time, for at least five years. If someone says "never call me again," that's a permanent stop regardless of which list they're on.

Note what the DNC rules do not cover: purely personal calls and most pure B2B prospecting sit outside the telemarketing definition. But scrubbing everything is cheaper than a class action. Recruiters, insurance agents, and real estate pros prospecting FSBOs all commonly call inside these rules. A posted FSBO number is not an exemption: the FCC treats an agent asking a FSBO owner for the listing as a telephone solicitation (see the FSBO guide for the details). The rest is in our industry guides.

What changed in 2025–2026

• Jan 2025, FCC one-to-one consent rule. Lead-generation consent must name each company individually; bundled partner consent is invalid for TCPA consent purposes.
• Mar 2026, Fifth Circuit rejection. A federal appeals court struck down the FCC's prior-express-written-consent rule as exceeding the agency's authority (reported by Holland & Knight, March 2026). The practical effect: the consent landscape is in genuine flux, with the FCC expected to respond. Treat stricter consent as the safer operating assumption while the dust settles.
• Ongoing state expansion. Florida, Oklahoma, Washington and others enforce broader dialing/texting statutes with their own definitions and damages, federal compliance is the floor, not the ceiling.

If you read older guides (most ranking articles were written in 2023–2024 and never updated), they predate all of this. The working assumptions for 2026: named consent, live voice on mobile numbers unless consented, DNC scrubbing as routine hygiene.

The compliance-cautious way to dial at volume

Put together, the rules point to one configuration as the cautious lane for individual salespeople and small teams:

• Dial a list you compiled or imported, never numbers generated or scraped by the tool. Imported CSV or spreadsheet lists of people with a plausible reason to hear from you.
• One call at a time, live voice. You tap, the phone dials, you speak. No prerecorded messages, no automated texts, no abandonment.
• Your own number, your own carrier. Recognizable caller ID people can call back, better answer rates than flagged VoIP pools, and no shared-number risk.
• Scrub against the National DNC Registry for telemarketing lists, and maintain an internal suppression list forever.
• Call 8 a.m.–9 p.m. recipient local time, tighter in practice: several states cut the window to 8 p.m. or start at 9 a.m. (calling hours by country and state), and real answer-rate windows are narrower still, per our best-time-to-call data.
• Identify yourself honestly, name, company, purpose, and honor stop requests instantly.

That is precisely how Cold Call X is built: it's an iPhone app that walks your imported list, CSV or Google Sheets, placing each call through your own carrier from your own number. It never generates, guesses, or scrapes numbers, includes a built-in do-not-call suppression list, and keeps you speaking live. It doesn't scrub the National DNC Registry for you (that subscription is yours to maintain), but it keeps the dialing mechanics inside the cautious lane. See how the iPhone dialer works here.

Quick takeaways

• Dialers are legal; the TCPA restricts conduct, consent-less automated wireless calls, prerecorded voice, DNC calls, not equipment.
• Post-Duguid, an autodialer requires random-or-sequential number generation; dialing your own imported list live doesn't qualify.
• Since Jan 2025, lead-gen consent must name your company specifically; a March 2026 court ruling put the stricter FCC rule in flux, stay conservative.
• Damages run $500–$1,500 per call, so compliance math beats volume math every time.
• The cautious configuration: imported list, live voice, own number, DNC scrub + suppression list, business hours.