DNC Compliance for Aged Leads: What Every Agent Must Know (2026)

Compliance is the topic nobody in the lead industry wants to talk about. Lead vendors don't bring it up because it might scare buyers. Agents don't ask because they don't want to hear the answer. And the result is a lot of professionals calling leads without understanding the rules — which is a $500-$1,500-per-call mistake waiting to happen.

Here's the truth: you absolutely can call aged leads legally. But there are rules, and ignorance isn't a defense. DNC scrubbing, TCPA compliance, SMS consent, calling hours, and record-keeping all matter — and the penalties for getting it wrong are severe enough to end a business.

This guide covers the complete compliance landscape for aged lead buyers in 2026: what the law requires, how DNC scrubbing works, the TCPA checklist every agent needs, SMS and email rules, and what to demand from your lead vendor.

Disclaimer: This is educational guidance, not legal advice. Compliance requirements vary by state and change frequently. Consult a licensed attorney for legal questions specific to your situation.

The Compliance Landscape for Lead Buyers

Multiple federal and state laws govern how you contact leads. Understanding the framework prevents costly violations.

TCPA (Telephone Consumer Protection Act). The big one. The TCPA regulates phone calls, text messages, and faxes to consumers. It requires prior express consent before making marketing calls, limits the use of auto-dialers, and establishes rules for calling hours and caller ID display. Violations carry penalties of $500-$1,500 per call — and class action lawsuits are common.

FCC 1:1 Consent Rule. Implemented in 2025, this rule changed lead generation significantly. Previously, a consumer could give consent on a single form and have their information shared with multiple companies. Under the new rule, consent must be given on a one-to-one basis — the consumer must specifically agree to be contacted by each individual company. This affects how leads are generated upstream, but your responsibilities as the caller remain the same: verify that proper consent was obtained and DNC scrub before calling.

National Do Not Call (DNC) Registry. Maintained by the FTC, this registry contains phone numbers of consumers who've requested not to receive telemarketing calls. You must check your lead lists against this registry before making calls. Registration is free for lists up to a certain size, with fees for larger lists.

State-Specific DNC Lists. Many states maintain their own DNC registries in addition to the federal list. States like California, Florida, New York, Texas, and Pennsylvania have state-level lists that you must also check. If you're calling leads in multiple states, you need to scrub against each state's list.

CAN-SPAM Act. Governs commercial email messages. Less restrictive than TCPA — you can email leads without prior consent as long as you include an opt-out mechanism, your physical address, and honest subject lines. Still, best practice is to have some form of consent or prior relationship.

Can You Legally Call Aged Leads?

Yes — with proper DNC scrubbing and consent verification.

Here's how the legal framework applies specifically to aged leads:

Prior express consent. When a consumer fills out a web form requesting a quote, information, or a callback, they're giving prior express consent to be contacted. This consent is what makes calling internet leads legal in the first place — the prospect asked to be contacted.

Does consent expire? This is the key question for aged leads. The TCPA doesn't specify an explicit expiration for consent, but the FCC has indicated that consent should be "reasonably recent." Industry practice treats consent as valid for 3-12 months, though some attorneys recommend a more conservative window. Leads aged 30-90 days are well within any reasonable interpretation. Leads aged 6-12 months are still defensible but warrant extra caution.

What the FCC 1:1 consent rule means for aged leads. The 1:1 rule primarily affects lead generators — the companies that create and sell leads. It requires that the consumer specifically consented to be contacted by YOU (or a clearly identified company), not just a generic "marketing partners" category. For aged lead buyers, this means you should verify with your vendor that leads were generated under 1:1 consent standards. Leads generated before the rule went into effect may have been collected under the old multi-company consent model.

The bottom line: Aged leads are legal to call if (1) the consumer gave consent when they filled out the form, (2) you've DNC scrubbed the list, and (3) you follow TCPA calling rules. The age of the lead doesn't make calling illegal — lack of consent or failure to DNC scrub does.

DNC Scrubbing — What It Is and Why It's Non-Negotiable

DNC scrubbing is the process of checking your lead list against federal and state Do Not Call registries and removing any numbers that appear on those lists. It's not optional — it's required by law, and the penalties for skipping it are severe.

What DNC scrubbing does:

• Checks every phone number on your list against the National DNC Registry
• Checks against applicable state DNC registries
• Flags or removes numbers that appear on any registry
• Provides a "clean" list of numbers you're legally permitted to call

How to scrub your leads:

• Through your vendor. Reputable aged lead vendors like AgedLeadStore include DNC scrubbing before delivery. This is the easiest option — your leads arrive already scrubbed.
• Through your CRM. Some CRM platforms include DNC checking. GoHighLevel and other platforms offer built-in or add-on DNC tools.
• Through third-party services. DNC scrubbing services check your lists for a per-lead fee, typically $0.01-$0.05 per number.
• Directly through the FTC. You can access the National DNC Registry directly at donotcall.gov for a fee based on list size.

How often to scrub:

• Before EVERY new campaign — even if you bought the same type of leads from the same vendor last month
• Minimum quarterly for any leads in long-term nurture
• Numbers can be added to the DNC registry at any time, so a list that was clean 90 days ago may have new DNC entries

The cost of non-compliance:

• $500 per violation for standard TCPA infractions
• $1,500 per violation for willful or knowing violations
• These are PER CALL penalties — calling 100 leads on the DNC list isn't a $500 fine, it's potentially $50,000-$150,000
• Class action lawsuits can multiply damages further
• Individual agents have been fined and lost their licenses over DNC violations

DNC scrubbing costs pennies. Non-compliance costs thousands. There is no scenario where skipping the scrub is worth the risk.

TCPA Compliance Checklist for Aged Lead Campaigns

Use this checklist before every aged lead campaign. Print it, bookmark it, and review it every time you import a new batch of leads.

Before You Call:

• DNC scrub completed. Federal and applicable state registries checked. Flagged numbers removed from your calling list.
• Prior express consent documented. You can demonstrate that the lead gave consent when they filled out the form. Your vendor should provide documentation of the consent language used on the opt-in form.
• 1:1 consent verified. For leads generated after the FCC 1:1 rule implementation, verify that consent was specific to your company or a clearly identified partner relationship.
• Lead data reviewed. Phone numbers are valid US formats. State licensing verified — you're only calling leads in states where you're licensed.

During Your Calls:

• Calling during permitted hours. Calls made between 8:00 AM and 9:00 PM in the lead's LOCAL time zone. Not your time zone — theirs.
• Caller ID displayed. Your real phone number or a properly registered business number is shown. No caller ID spoofing.
• Identify yourself immediately. State your name and company within the first few seconds of the call.
• Opt-out honored immediately. If a prospect says "don't call me again" or "take me off your list," honor it instantly and permanently. Update your internal DNC list.

For Every Campaign:

• Opt-out mechanism on every contact. Phone calls: honor verbal opt-out requests. Texts: include "Reply STOP to opt out." Emails: include unsubscribe link.
• Records retained. Keep records of your DNC scrubbing, consent documentation, and opt-out requests for a minimum of 5 years.
• Internal DNC list maintained. Beyond the federal and state registries, maintain your own list of prospects who've asked not to be contacted. Check every campaign against this list.
• State-specific rules reviewed. Some states have additional requirements beyond federal law (enhanced calling restrictions, additional consent requirements, or stricter penalties).

SMS/Text Compliance for Aged Leads

Text messaging has stricter compliance requirements than phone calls, and many agents don't realize the distinction until they get a cease-and-desist letter.

Prior express written consent is required for marketing texts. The TCPA requires "prior express written consent" for text messages — a higher bar than the "prior express consent" needed for phone calls. This means the original opt-in form must have specifically authorized text message communication, not just phone calls.

How to verify SMS consent for aged leads:

• Ask your vendor whether the opt-in form included SMS consent language
• Look for specific language like "I agree to receive calls and text messages" on the original form
• If you can't verify SMS consent, don't text — call instead

Opt-out requirements for text messages:

• Include "Reply STOP to opt out" (or similar language) in every marketing text
• Honor opt-out requests immediately and permanently
• Don't send additional texts after a STOP request — not even a confirmation text

Penalties for non-compliant texting:

• Same as TCPA phone violations: $500-$1,500 per message
• Text message class actions are among the most common TCPA lawsuits
• Volume makes this especially risky — sending 500 texts to a list with SMS compliance issues creates 500 potential violations

Best practices for aged lead texting:

• Use your CRM's built-in SMS compliance features (automatic STOP handling, opt-out tracking)
• Keep texts conversational, not spammy — personalize with the prospect's name
• Limit text frequency — 2-3 texts in a 7-day follow-up cadence is reasonable
• Always identify yourself in the text

Email Compliance (CAN-SPAM)

Email is the lowest-risk channel for aged lead outreach from a compliance standpoint, but there are still rules to follow.

CAN-SPAM requirements for commercial emails:

• Opt-out mechanism required. Every commercial email must include a clear way to unsubscribe. Honor unsubscribe requests within 10 business days.
• Physical address required. Your business mailing address must appear in every email.
• Honest subject lines. The subject line cannot be deceptive or misleading about the email's content.
• Identify as an ad. If the email is a marketing message, disclose that fact (most businesses handle this through footer language).
• "From" line accuracy. The sender name and email address must accurately identify who's sending the message.

Why email is lower risk than phone or text:

• CAN-SPAM doesn't require prior consent for commercial emails — you can legally email someone without them opting in (though having consent is always better practice)
• Penalties are per-campaign rather than per-message
• Maximum penalty is $51,744 per violation, but enforcement against individual agents is rare
• Most email service providers (Mailchimp, your CRM's email tool) have built-in compliance features

Best practices for emailing aged leads:

• Use your CRM's email tools, which handle unsubscribe links and physical address automatically
• Don't buy or scrape email lists — use the emails that came with your purchased leads
• Respect unsubscribes immediately
• Keep your sending reputation clean to avoid spam filters

Industry-Specific Compliance

Beyond TCPA and DNC rules, your specific industry may have additional compliance requirements.

Insurance agents:

• State Department of Insurance (DOI) rules govern solicitation practices
• Medicare marketing has additional CMS (Centers for Medicare & Medicaid Services) restrictions — scope of appointment requirements, prohibited contact periods, and marketing material approvals
• E&O insurance is essential — compliance mistakes can trigger claims
• Some states require specific disclosures during insurance solicitation calls

Mortgage loan officers:

• TILA (Truth in Lending Act) and RESPA (Real Estate Settlement Procedures Act) govern advertising and disclosures
• NMLS licensing requirements — only contact leads in states where you're licensed and registered
• Fair lending laws prohibit discriminatory practices in lead selection or outreach
• State-specific mortgage solicitation rules may apply

Solar sales professionals:

• State-specific solicitation rules vary significantly
• Some municipalities have door-to-door solicitation ordinances that may apply to phone solicitation
• HOA restrictions can affect solar installations — be transparent about potential limitations
• State licensing requirements for solar contractors/salespeople

What Your Lead Vendor Should Provide

A reputable aged lead vendor handles the upstream compliance so you can focus on selling. Here's what to expect — and demand — from your vendor:

DNC scrubbing (included or clearly documented). Your vendor should scrub leads against federal and state DNC registries before delivery. Ask whether this is included in the lead price or an add-on service. Leads that arrive without DNC scrubbing shift all the compliance risk to you.

Consent documentation. Your vendor should be able to explain — and provide documentation of — how each lead was generated. What website did the prospect fill out a form on? What consent language appeared on that form? Did the form include SMS consent? Was consent given under 1:1 standards?

Data source transparency. Where do the leads come from? Reputable vendors will disclose their lead generation sources. Be wary of vendors who can't or won't explain their lead generation process — you can't verify compliance if you don't know how the lead was created.

Return policy for non-compliant leads. What happens if you receive a lead with a disconnected number, a wrong number, or a number that shouldn't have passed DNC scrubbing? Reputable vendors have return policies for bad data.

Browse aged leads at AgedLeadStore — all leads are DNC-scrubbed before delivery, with no contracts required. Use promo code BILLRICE for a discount on your first order.

FAQ

Do I need to DNC scrub aged leads?

Yes — always, no exceptions. Every lead list must be checked against federal and state Do Not Call registries before you start calling. This applies regardless of the lead's age, source, or how recently your vendor scrubbed them. Consumers can add their number to the DNC registry at any time, so a list that was clean when your vendor scrubbed it may have new entries by the time you call. The cost of scrubbing is pennies per lead; the cost of a single DNC violation is $500-$1,500.

Can I text aged leads?

Only if the original consent included specific SMS permission. The TCPA requires "prior express written consent" for marketing text messages — a higher standard than the consent needed for phone calls. Ask your lead vendor whether the opt-in form included SMS consent language. If you can't verify SMS consent, stick to phone calls and email. When you do text, always include "Reply STOP to opt out" and honor opt-out requests immediately.

What happens if I call someone on the DNC list?

Fines of $500 per call for standard violations, up to $1,500 per call for willful violations. These penalties are per-call, meaning calling 100 DNC-listed numbers could result in $50,000-$150,000 in fines. Beyond monetary penalties, DNC violations can trigger class action lawsuits, state regulatory action, and in some cases, loss of your professional license. The penalties are intentionally severe to ensure compliance — and they apply equally to solo agents and large call centers.

Does the FCC 1:1 consent rule kill aged leads?

No — the 1:1 consent rule changes how leads are generated, not how you work them. Previously, a consumer could consent on one form and have their data sold to many companies. Now, consent must be specific to each company. For aged lead buyers, this means verifying with your vendor that leads were generated under 1:1 consent standards. It also means lead quality may actually improve — each lead specifically consented to be contacted by fewer companies, which can mean less competition and warmer prospects. For a deeper analysis, see our guide on the FCC consent rule and lead buying.

How often should I re-scrub my lead lists?

Before every new campaign at minimum, and quarterly for any leads in long-term nurture sequences. Phone numbers can be added to the DNC registry at any time — a number that was clean when you bought the lead may be on the registry when you call three months later. If you're running ongoing nurture campaigns that contact leads over weeks or months, periodic re-scrubbing ensures you're always working a compliant list. Most scrubbing services charge $0.01-$0.05 per number, making frequent scrubbing extremely affordable relative to the risk of non-compliance.

Stay Compliant, Stay in Business

Compliance isn't an obstacle to working aged leads — it's a business requirement that protects your livelihood and your reputation. The agents who take compliance seriously are the ones who build sustainable businesses. The ones who cut corners eventually pay the price.

DNC scrub every list. Verify consent. Follow calling rules. Document everything. It takes minutes and costs pennies — and it's the difference between a growing business and a six-figure fine.

Ready to work compliant aged leads? Browse DNC-scrubbed aged leads at AgedLeadStore — insurance, mortgage, solar, and more. No contracts required. Use promo code BILLRICE for a discount on your first order.