TCPA Rules for AI Phone Calls: What US Businesses Must Know

Any business that relies on AI-powered phone agents making calls to customers is already within one of the most regulated areas of US telecom law. The Telephone Consumer Protection Act (TCPA) was originally designed to prevent spam robocalls. Today, it holds for your AI voice agent too – and the consequences of a botched job are severe.

In February 2024, the FCC resolved an old conundrum: AI-generated voices are considered "artificial or prerecorded voices" under the TCPA. One decision had all the difference for businesses embracing AI phone technology. TCPA rules now apply to you, whether you're using your AI agent for inbound customer support, appointment booking, or outbound sales campaigns.

The following guide explains what these rules are, what has recently changed, and how your business can remain fully compliant without hampering growth.

What Is TCPA and Why Does It Apply to AI Calls?

The Telephone Consumer Protection Act was enacted into law in 1991 to ensure that consumers are not subjected to unwanted automated calls and texts. Provides the FCC with jurisdiction over automated dialing, prerecorded messages, and outbound calls to mobile and residential phones without consent.

Businesses had long taken the stance that Artificial Intelligence (AI) voice technology was in the middle ground for a long time, as “AI voice” is not exactly a robocall, right? The FCC cleared up the confusion. All voices created by an AI system are subject to the TCPA's definition of "artificial or prerecorded voice" and will be treated in the same manner as a traditional robocall under every provision of the TCPA.

Why this matters for your business:

1. Any AI phone call made without proper consent can trigger a fine of $500 to $1,500 per call
2. There is no aggregate cap—meaning a single non-compliant AI calling campaign of 10,000 calls creates up to $15 million in potential legal exposure
3. Class action lawsuits targeting AI calling companies settled in the $5M to $20M range in 2025 and 2026

The law does not care whether your AI voice agent sounds remarkably human. If it is automated and it is calling people, TCPA rules apply.

The Core TCPA Rules Every Business Must Follow

1. You Must Get Consent Before Calling

Consent is the foundation of every TCPA-compliant AI calling campaign. The type of consent required depends on the purpose of your call.

Prior Express Consent (PEC) — required for informational or transaction calls like reminders to make an appointment, update orders, or email account notifications. This could be done orally or in writing.

Prior Express Written Consent (PEWC) — for AI Marketing and/or Promotional phone calls. This should be a signed (or electronically signed) stand-alone agreement that:

1. Explicitly indicates the consumer will receive automated calls or AI calls
2. Is not buried inside the general terms and conditions
3. Cannot be a condition of making a purchase
4. Must identify your company specifically by name

Starting January 27, 2025 (and reaffirmed for 2026), the FCC's one-to-one consent rule took effect. This means a consumer must give consent specifically to your business — not to a lead generator who then sells that consent to multiple companies. If you purchase leads, you must verify that the consent on record names your company directly.

2. You Must Disclose That You Are Using AI

Every AI-initiated call must identify your business by name at the very beginning of the call. Also, your AI agent should reveal that they are an AI call or an automated system — NOT a human.

A compliant opening is the phrase "Hi, this is an AI assistant calling about your recent query.

The FCC's Notice of Proposed Rulemaking (NPRM) in August, 2024, takes this one step further by suggesting a formal requirement for disclosure of AI in calls. As of mid-2026, this rule is not yet finalized, but state attorneys general and plaintiffs' lawyers are already using the existing framework to win cases. Smart businesses are building this disclosure into their AI scripts now.

3. You Must Provide Easy Opt-Out Options

Every AI call must include an automated system capable of recognizing opt-out requests. Your AI agent must be able to detect phrases like:

1. "Stop calling me."
2. "Remove me from your list."
3. "Don't call again."
4. "Unsubscribe"

The FCC added more variations of a keyword to the list that your system needs to recognize, effective April 11, 2025. The consumer may opt out at any time and the opt out must be carried out within 10 business days. This means updating your dialer, your CRM and your internal Do Not Call list.

4. You Must Respect Calling Hours

TCPA allows outbound calls only between 8:00 AM and 9:00 PM, in the recipient's local time zone, not yours! If you are a New York business calling a California customer, you are required to use California's local time to determine if it is a legal hour to call.

Some States have even narrower windows, so always check your state-level rules for the States your customers are located in.

5. You Must Scrub Against the Do Not Call Registry

Before any outbound AI calling campaign, your contact list must be checked against the National Do Not Call (DNC) Registry. This scrub must happen at least once every 31 days to maintain what is called "safe harbor" protection. Additionally, 11 states maintain their own separate DNC lists — your lists must be cross-checked against both.

Access to the National DNC Registry costs approximately $88 per area code annually. That is a very small cost compared to the exposure of calling a number that is on the list.

What Changed in 2024, 2025, and 2026

The rules governing AI phone calls quickly change. Here is the timeline of the most important updates:

February 2024 — FCC Declaratory Ruling: AI-generated voices are officially classified as artificial or prerecorded voices under TCPA. All prior loopholes around AI voice technology are closed.

August 2024 — FCC NPRM: FCC formally proposes AI disclosure requirements for any calls generated by AI, including the required consent language explicitly mentioning AI usage. As of mid-2026, this rule has yet to be finalized.

January 27, 2025 — One-to-One Consent Rule Effective: Shared or multi-seller consent no longer satisfies TCPA's prior express written consent standard. Each consumer must consent to calls from a single, named seller for a specific topic.

April 11, 2025 — Expanded Opt-Out Recognition: AI dialers must recognize a broader set of opt-out phrases, and all opt-out requests must be processed within 10 business days.

2026 — Increased FCC Enforcement Budget: The FCC has allocated additional resources specifically for AI-related compliance enforcement this year. State-level activity is also rising, with Texas, Georgia, Pennsylvania, and New York all pushing AI-specific calling legislation.

Penalties for TCPA Violations — The Real Numbers

The financial risk of TCPA non-compliance is not theoretical. Here is what businesses face:

1. $500 per call for negligent violations
2. $1,500 per call for willful or knowing violations
3. No aggregate cap — every single call is a separate violation
4. FCC civil penalties of up to $10,000 per call for intentional robocall law breaches
5. Class action settlements averaging $12.4 million, with recent AI-focused cases settling in the $5M to $20M range

Beyond the financial damage, TCPA violations damage brand reputation, invite regulatory scrutiny, and can restrict your ability to run future marketing campaigns. The FTC also received over 2 million complaints about unwanted calls in 2023 alone — enforcement appetite is high.

TCPA Compliance Checklist for AI Phone Calls

Before your AI agent makes a single outbound call, run through this checklist:

Consent:

1. Obtained prior express written consent for all marketing calls to mobile numbers
2. Consent is specific to your company — not shared with other sellers
3. Consent records include timestamp, IP address, source URL, and disclosure language
4. Consent is not tied to any purchase condition

Disclosure:

1. AI agent identifies your business by name at the start of every call
2. AI agent discloses that it is an automated or AI system, not a human

Opt-Out:

1. Automated opt-out detection is active and recognizes expanded keyword list
2. Opt-out requests update your dialer, CRM, and internal DNC list within 10 days

Call Timing:

1. All calls are restricted to 8:00 AM to 9:00 PM in the recipient's local time zone

DNC Scrubbing:

1. Contact list has been scrubbed against the National DNC Registry within the last 31 days
2. List has also been checked against applicable state DNC registries

Caller ID:

1. Caller ID displays a valid, callable phone number that routes back to your business
2. No random or rotating numbers that could appear as "Scam Likely"

Record Keeping:

1. All consent records retained for a minimum of 5 years
2. Call logs, DNC scrub logs, and opt-out records maintained in tamper-proof format

B2B vs. B2C: Is There a Difference?

Many businesses assume that calling other businesses (B2B) means TCPA rules do not apply. That is partially true — calls to a publicly listed corporate landline generally fall outside TCPA's strictest provisions.

However, the moment you call a mobile phone — even if it belongs to a business executive — TCPA applies with the same full force as a consumer call. If your AI agent calls a business decision-maker on their cell phone, you need PEWC just as you would for any consumer campaign.

Always verify whether the numbers in your B2B list are landlines or mobile numbers before deploying AI calling campaigns.

How Inboxx.ai Helps You Stay Compliant

At Inboxx.ai, our AI voice agents are built with compliance in mind from the ground up. Our platform is designed for US businesses that need the efficiency of AI-powered calling without the legal risk of non-compliant outreach.

Our AI voice agents are configured to:

1. Identify your business and disclose AI use at the start of every call
2. Recognize opt-out phrases and immediately update suppression lists
3. Restrict outbound calling to permitted hours based on the recipient's time zone
4. Support consent record-keeping and CRM integration so your compliance trail stays clean

Whether you are running inbound customer support, outbound appointment reminders, or lead qualification campaigns, Inboxx.ai gives you the automation power you need while keeping you on the right side of TCPA rules.

Want to see it in action? Book a free demo with our team and we will walk you through exactly how our AI voice agents work within a compliant framework.

FAQs

Do AI phone calls count as robocalls under TCPA?

Yes. FCC has officially designated AI-generated voices as "artificial or prerecorded voices" for TCPA, since February 2024, which means the regulations on robocalls apply to AI voice calls.

What type of consent do I need before making AI marketing calls?

You must obtain Prior Express Written Consent (PEWC), a stand-alone purchase agreement signed by your company name, which is not required to be a condition of purchase.

What happens if a customer asks my AI agent to stop calling?

You are required to receive the opt-out within 10 business days and to update your dialer, CRM and internal Do Not Call list. Doing so in response to an opt-out request constitutes another TCPA violation.

Can I use AI phone calls for B2B outreach without TCPA restrictions?

For public listed corporate landlines only. For a business contact, all TCPA requirements are in effect (even the marketing call before express written consent requirement).

How often do I need to check the Do Not Call Registry?

Once at least every 31 days. The more often you scrub your list, the greater the safe harbor protection and the less the risk of compliance.

Conclusion

The days of choosing not to comply with TCPA for AI phone calls are over, and so is the trend. The FCC 2024 decision shut down the remaining loopholes, the 2025 one-to-one consent rule clarified the form and content of the consent, and budgets are increasing for 2026. AI compliance is not a matter of choice but a requirement for businesses aiming to scale without risk of legal repercussions.

The good news is that it is possible to achieve AI calling compliance. By leveraging AI voice technology and the right consent infrastructure, disclosure scripts, and a reliable platform like Inboxx.ai to manage the technical compliance layer, your business can grow faster, serve customers better, and do the right thing, all while staying within the law.