Date: October 26th, 2026 Author: Tracerfy Team

TCPA Compliance for Real Estate Investors in 2026: What Actually Changed

TCPA compliance

An investor pulls 2,000 property records, skip traces the owners, and launches a calling and texting campaign. Some numbers reach the wrong people. One homeowner replies "STOP." Another says they never agreed to marketing messages.

These problems highlight a critical distinction. Accurate contact data does not automatically give an investor the legal right to use it for outreach. Under the Telephone Consumer Protection Act (TCPA), locating a phone number and obtaining permission to call or text it are two separate matters. This guide explains the key TCPA changes in 2026, the rules for each outreach method, and how investors can build a compliant prospecting process.

Key Takeaways

  • Skip-traced numbers are not consent. A number from property records or skip tracing does not authorize autodialed, prerecorded, AI-voice, or ringless voicemail marketing.
  • The FCC rewrote its opt-out rules on September 30, 2026 (FCC 26-67). For marketing, one opt-out still stops all of a caller's marketing robocalls and robotexts.
  • Opt-outs must be honored within 10 business days, and any reasonable request counts.
  • The one-to-one consent rule never took effect. A federal appeals court vacated it in January 2025.
  • AI voices and ringless voicemail require consent.
  • Damages run $500–$1,500 per violation, and Florida, Oklahoma, Maryland, and Texas add stricter state rules.

What Is TCPA Compliance in Real Estate?

Telephone Consumer Protection Act is a 1991 federal law that restricts how agents, brokers, and investors use automated phone calls, text messages, and prerecorded messages to market properties.

For real estate investors, wholesalers, and acquisition teams, the TCPA governs cold calls, bulk SMS, ringless voicemail, AI voice agents, and outreach using purchased leads. Which rules apply depends on the technology used, the purpose of the message, the consent you hold, and where the recipient lives.

What Are the New TCPA Rules for 2026?

Two federal developments changed how consent revocation works in 2026. Neither loosens the rules for real estate marketing.

January 6, 2026: the "revoke-all" rule was delayed. A 2024 FCC rule would have made one opt-out apply to every type of robocall and robotext a caller sends. The FCC pushed that requirement to January 31, 2027 (DA 26-12).

September 30, 2026: the FCC replaced that rule (FCC 26-67). The new order:

  • Lets callers limit an opt-out from an informational call (such as a fraud alert) to that category only.
  • Lets callers designate one clearly disclosed opt-out method, but not for advertising or telemarketing.
  • Keeps the rule that matters to investors: an opt-out from a marketing robocall or robotext revokes consent for all of that caller's future marketing robocalls and robotexts.

The order takes effect 30 days after Federal Register publication. The FCC is also considering cutting the 10-business-day deadline to 7.

What happened to the one-to-one consent rule?

The FCC's 2023 order would have required lead-generation consent to name one seller at a time. In Insurance Marketing Coalition v. FCC (January 24, 2025), the Eleventh Circuit vacated that rule before it took effect. Consent still has to be valid, but the one-to-one requirement is not federal law.

TCPA Rules by Outreach Method

Outreach method Consent needed for marketing to a cell phone? Federal DNC rules apply? Main risk
Manually dialed live call No consent rule for the dialing method Yes, if it's a "telephone solicitation" DNC-listed numbers, calling hours
Power or predictive dialer Only if it's an ATDS (rare after Duguid) Yes Broader state "automated system" laws
Bulk SMS platform Same ATDS test Disputed after Steidinger (2026) Carrier 10DLC rules, state texting laws
Ringless voicemail Yes (FCC, 2022) Yes Sending to skip-traced cells
AI voice or prerecorded message Yes, written consent for telemarketing (FCC, 2024) Yes Treating AI like a live caller

Autodialers. In Facebook v. Duguid (2021), the Supreme Court held that an automatic telephone dialing system (ATDS) must be able to use a random or sequential number generator. Most list-based dialers and SMS tools don't qualify, but ask your vendor how the system works rather than relying on labels like "manual mode."

AI and prerecorded voices. The FCC ruled on February 8, 2024 that AI-generated voices are "artificial" voices under the TCPA (FCC 24-17). An AI acquisition agent is legally a robocall, not a live caller.

Ringless voicemail. The FCC ruled in 2022 that ringless voicemail is a "call." Marketing ringless voicemail to a cell phone requires prior express written consent.

Prior express consent vs. prior express written consent

  • Prior express consent is permission given before the call, such as providing a number for a related purpose.
  • Prior express written consent is required for telemarketing with an ATDS or artificial or prerecorded voice. It must be a signed written agreement (e-signatures count) that names the seller, authorizes those calls or texts, and states that consent isn't a condition of purchase.

A skip tracing report or a vendor's "TCPA compliant" label is neither.

Do Not Call Rules: Do Offers to Buy a House Count?

The federal Do Not Call (DNC) rules apply to "telephone solicitations," meaning calls encouraging someone to buy, rent, or invest in property, goods, or services. An investor asking to buy a home is doing something different, and several courts agree:

  • Coffey v. Fast Easy Offer (D. Ariz. 2025) and Aussieker v. Aghazadeh (E.D. Cal. 2025) held that a pure offer to buy a home is not a telephone solicitation.
  • A March 2026 Northern District of Georgia decision let claims proceed where texts allegedly implied paid services such as title or escrow fees.

These are district court rulings; the result depends on what your message offers, and the argument covers DNC claims only. It doesn't remove consent requirements for AI voice, prerecorded calls, or ringless voicemail.

Scrub anyway. The federal safe harbor requires a National DNC Registry copy no more than 31 days old, an internal do-not-call list, and calls only between 8 a.m. and 9 p.m. recipient local time. Scrubbing is cheaper than defending a class action over an unsettled question.

Can Real Estate Investors Text Property Owners Found Through Skip Tracing?

Only after checking the method, the consent, and the lists. The FCC treats texts as "calls," so the autodialer and consent rules apply, and in 2023 it extended DNC rules to marketing texts.

Whether texts count for the DNC private lawsuit right is now disputed. After McLaughlin Chiropractic v. McKesson (2025) ended mandatory deference to FCC interpretations, the Seventh Circuit held in Steidinger v. Blackstone Medical Services (July 2026) that texts are not "telephone calls" under § 227(c)(5). Most other courts disagree, so don't rely on it outside Illinois, Indiana, and Wisconsin.

Carrier rules matter too. Businesses texting from 10-digit numbers must register under A2P 10DLC and follow the CTIA Messaging Principles, which require documented opt-in. Carriers can block cold texts to skip-traced lists even when no law is broken.

Before texting a skip-traced number, confirm where the number came from, how the platform sends messages, whether the number is on a DNC or suppression list, and whether the owner previously opted out.

Is Skip Tracing Legal for Real Estate Investors?

Yes. Locating property owners' contact information from public records and commercial data is legal and widely used by investors, lenders, and attorneys. The limits apply to how you use the data:

  • Outreach is governed by the TCPA, DNC rules, state telemarketing laws, and carrier rules.
  • Certain data uses, such as credit, employment, or tenant-screening decisions, are restricted under the Fair Credit Reporting Act.

Skip tracing tells you who to contact. TCPA compliance decides whether and how you may contact them. Tracerfy's real estate skip tracing handles the first step, and your outreach process must handle the second.

Purchased leads and reassigned numbers

Buying leads doesn't transfer your liability to the vendor. Ask for the original consent language, when and where consent was captured, and whether it names your business. Check the FCC's Reassigned Numbers Database when you rely on consent from a number's previous owner. A database "no" gives you a safe harbor if the number turns out to be reassigned.

How to Check a Skip-Traced Lead Before Contacting the Owner

Before contacting a property owner, verify more than just their phone number. Start by checking whether the number is likely to belong to the intended owner and whether it may have been reassigned. Next, review your consent records, particularly if you plan to use an autodialer, AI voice, prerecorded message, or ringless voicemail. Screen the number against applicable Do Not Call lists and your internal suppression list, and check for previous opt-out requests. If the data comes from a skip tracing service, remember that accurate contact information helps you reach the right person, but it does not establish permission to contact them.

How Should Investors Handle Opt-Outs?

Any reasonable request revokes consent, including "STOP," "QUIT," "END," "REVOKE," "OPT OUT," "CANCEL," "UNSUBSCRIBE," "don't text me again," or a verbal "remove my number." Honor it within 10 business days. Investor outreach is marketing, so apply it to all marketing channels.

  1. Capture the date, channel, number, and wording.
  2. Suppress the number in your CRM, dialer, SMS platform, and vendor lists.
  3. Block re-imports from new skip tracing or lead files.
  4. Keep records of the request and the action taken.

One confirmation text is allowed if it contains no marketing.

How to Manage TCPA Compliance Across Large Lead Lists

Suppose you have 2,000 property records ready for outreach. Instead of uploading the entire list directly into your dialer, divide the process into manageable checks. First, verify contact details and identify each owner's state to determine applicable calling hours and restrictions. Next, screen numbers against relevant Do Not Call and internal suppression lists, then confirm that the consent requirements match your planned outreach method. Remove records with unresolved consent or opt-out issues from campaigns that require permission. Finally, document your checks and maintain a process for updating records and honoring future opt-outs. Bulk skip tracing tools can help build your list, but compliance checks must happen before outreach.

State Mini-TCPA Laws

State Calling hours Limit Notable rules
Florida (FTSA) 8 a.m.–8 p.m. 3 per 24 hrs, same subject Consent for automated systems; consumers must reply STOP before suing over texts
Oklahoma (OTSA) 8 a.m.–8 p.m. 3 per 24 hrs Private right of action, $500–$1,500
Maryland 8 a.m.–8 p.m. 3 per 24 hrs Consent for automated systems
Texas (SB 140, 2025) 9 a.m.–9 p.m. Mon–Sat; noon–9 p.m. Sun — Covers texts; seller registration and $10,000 security; private right of action

For multistate campaigns, a safe default is 9 a.m.–8 p.m. local time, no more than three attempts per day, and scrubbing against state DNC lists.

For investors managing high-volume campaigns, understanding skip tracing costs can help them balance data expenses with lead quality and outreach efficiency. However, lower costs should never come at the expense of verifying contact information or completing the necessary compliance checks before contacting property owners.

What Are the 5 Major Types of TCPA Violations?

  1. Autodialed, prerecorded, AI-voice, or ringless voicemail calls to cell phones without consent.
  2. Telemarketing to numbers on the National DNC Registry.
  3. Ignoring opt-outs or failing to keep an internal DNC list.
  4. Prerecorded telemarketing to residential landlines without prior express written consent.
  5. Calling outside allowed hours or without identifying the caller.

What Are the TCPA Penalties?

Robocall and autodialer claims Do Not Call claims
Statute § 227(b)(3) § 227(c)(5)
Damages $500 per violation; up to $1,500 if willful Same
Threshold One call or text can count More than one call in 12 months
Defense Consent Consent or reasonable DNC procedures

State attorneys general can also sue, the FCC can issue fines, and state-law damages stack on top. For example, 1,000 non-compliant texts could mean $500,000 in statutory damages, or $1.5 million if a court finds the violations willful. Class actions turn one flawed process into exposure across every number in the campaign.

TCPA Compliance Checklist for Real Estate Investors

  • Identify how each campaign calls or texts: live, dialer, SMS platform, ringless voicemail, or AI voice.
  • Get prior express written consent before any AI, prerecorded, or ringless voicemail marketing.
  • Scrub against the National DNC Registry (≤31 days old), state lists, and your internal list.
  • Apply state hours and call limits based on the recipient's location.
  • Register SMS campaigns under A2P 10DLC.
  • Verify vendor consent records and check the Reassigned Numbers Database.
  • Process every opt-out across all marketing channels within 10 business days.
  • Train callers, keep records, and audit vendors quarterly.

Frequently Asked Questions

The Telephone Consumer Protection Act, a 1991 federal law restricting telemarketing calls, autodialed and prerecorded calls, and text messages.

Yes. Manually dialed live calls don't require TCPA consent, but you must follow DNC rules, calling hours, state laws, and opt-out requests.

Yes. Texts are treated as calls for consent purposes. Whether DNC lawsuits cover texts is disputed after the Seventh Circuit's 2026 Steidinger decision.

The FCC, state attorneys general, and private plaintiffs. The FTC enforces the National Do Not Call Registry.

Emergency calls, calls with prior express consent, and, for DNC rules, calls to people with an established business relationship (a transaction within 18 months or an inquiry within 3 months). Cold outreach rarely qualifies.

Only with prior express written consent for marketing. The FCC treats it as a call.

Build a Compliant Outreach Process

Good prospecting needs both accurate data and a lawful way to use it. Find owners through skip tracing, then decide separately whether and how each one may be contacted: check the method, consent, DNC status, state rules, and opt-out history. Explore Tracerfy's bulk skip tracing to build your list, then run it through the checklist above.