Compliance Guide

TCPA Compliance When Buying Leads: What You Need to Know in 2026

The Telephone Consumer Protection Act (TCPA) governs how businesses can contact consumers by phone, text, and autodialer — and it applies to you even though you didn't collect the lead yourself. Buying a non-compliant lead doesn't transfer the legal risk away from you; it adds you to it. Here's what to check before you buy, and how to handle leads once you've purchased them.

What TCPA requires

In short, TCPA requires "prior express written consent" before a business — or anyone calling on its behalf — contacts a consumer using an automated telephone dialing system, an artificial or prerecorded voice message, or a text message, especially for marketing purposes. The consent has to be:

• Specific: The consumer needs to know what they're agreeing to be contacted about, and by what means (calls, texts, autodialed, etc.).
• In writing (including electronic): A checkbox or signature captured at the point the consumer submits their information, not assumed because they filled out a form.
• Not a condition of purchase: The disclosure has to make clear that agreeing to be contacted isn't required to receive whatever the consumer was seeking (a quote, a rate comparison, etc.).
• Documented and time-stamped: You need a record of exactly what language the consumer agreed to and when.

Violations carry statutory damages of $500 per call/text (and up to $1,500 for willful violations) — and TCPA suits are frequently filed as class actions, which is how a single bad batch of leads can turn into a six- or seven-figure liability.

The consent standard used on SellBuyLeads

Every lead form on SellBuyLeads captures consent using the same disclosure standard before submission is allowed:

"By clicking Submit, I provide my electronic signature and express written consent to be contacted at the number I provided by licensed professionals using automated telephone dialing systems, artificial/prerecorded messages, or text messages. I understand this is not a condition of purchasing any goods or services."

That consent — along with the exact timestamp it was captured — travels with every lead you buy on the marketplace. It's available to you as documentation if your right to contact a purchased lead is ever questioned.

The risk of buying from non-compliant sources

If you buy leads from a vendor that can't produce a consent record and a timestamp, you are the one holding the liability when you make the call — not the vendor. Courts have repeatedly held that purchasing a lead list doesn't transfer consent obligations; the calling party is responsible for verifying consent exists before dialing. Warning signs of a non-compliant lead source:

• No consent language disclosed anywhere in the listing or sale.
• No timestamp or source URL for when/where the lead opted in.
• Leads sold in bulk with no age or recency information at all.
• A vendor unwilling to provide consent documentation on request.

Treat the absence of documented consent as a hard pass, regardless of how attractive the price is.

Best practices once you've bought a compliant lead

• Call promptly. Consent doesn't expire instantly, but contacting a lead soon after purchase — and within a reasonable window of when they opted in — keeps you closest to the intent the consumer expressed.
• Honor opt-outs immediately. If a consumer asks to stop being contacted, stop — on every channel, not just the one they used to opt out.
• Keep your own records. Store the consent documentation you received with the lead, along with your own call/text logs, for as long as your compliance counsel recommends (commonly 4+ years given TCPA's statute of limitations).
• Scrub against the National DNC Registry and your own internal do-not-call list before outbound calling, even for leads with documented consent — consent and DNC status are handled separately under TCPA in some contexts.
• Don't over-contact. Repeated, aggressive dialing of the same lead increases both legal exposure and the chance of a complaint, regardless of consent status.

Related reading: The Insurance Agent's Complete Guide to Lead Generation and How to Turn Your Unused Leads Into Revenue.