Yes, AI cold calling is legal in the United States in 2026, if you follow the rules for artificial and prerecorded voices. Since a February 2024 FCC ruling, an AI voice counts as "artificial" under the TCPA. Most AI sales calls need prior express written consent, plus Do Not Call scrubbing, legal calling hours, and opt-out handling.
Legality depends less on the technology and more on how you use it. A compliant AI call to a consenting contact during permitted hours is fine. An AI sales call without consent to a number on the National Do Not Call Registry is a violation. It would be exactly the same violation with a prerecorded message.
Legal disclaimer: This article is general information, not legal advice. Telemarketing law is complex, changes often, and varies by state and situation. Nothing here creates an attorney-client relationship. Before you launch any AI calling program, consult a qualified attorney who can review your specific facts, scripts, and jurisdictions.
This page is the yes/no answer and a state-rules overview. When you are ready to set up your program, use our step-by-step TCPA compliance checklist for AI calling.
Key Takeaways
- AI cold calling is not illegal by itself. The FCC's February 2024 ruling means AI and cloned voices count as "artificial or prerecorded voice" calls under the TCPA.
- Most AI sales calls to cell phones and residential lines require prior express written consent. An existing relationship is not enough.
- You must scrub against the National Do Not Call Registry and honor internal opt-out requests.
- Federal calling hours run 8 a.m. to 9 p.m. in the called party's local time. Some states are stricter.
- States add their own rules, including all-party call-recording consent and their own consent laws for automated sales calls.
- Compliance is the operator's job. Tools can help enforce it, but they do not take on your liability.
What the TCPA actually regulates
The Telephone Consumer Protection Act is the backbone of U.S. telemarketing law. It was passed in 1991 and is enforced by the FCC, with the Federal Trade Commission (FTC) running the related Telemarketing Sales Rule. The TCPA restricts calls made with an automatic telephone dialing system and calls that deliver an "artificial or prerecorded voice." For a while, marketers argued that AI voices were a gray area. The FCC closed that gap.
The FCC adopted its declaratory ruling (FCC 24-17) on February 2, 2024 and released it on February 8. It confirms that the TCPA's limits on "artificial or prerecorded voice" calls cover current AI technologies that generate human voices. That is why AI cold calling now sits inside existing robocall rules instead of a loophole. The ruling did not create a new law. It clarified that current law already applies.
The practical result is consent. Under the FCC's rules at 47 CFR 64.1200, most telemarketing calls that use an artificial or prerecorded voice to a residential or wireless number need prior express written consent. That is a specific, documented agreement. It is not something you can infer from a past purchase or a lead form that never mentioned automated calls.
What "prior express written consent" means
Prior express written consent is a written agreement, signed by the person (electronic signatures count). It must clearly authorize the seller to deliver marketing calls using an autodialer or an artificial or prerecorded voice. It must name the phone number the calls go to and include a clear disclosure of what the person is agreeing to. Vague checkboxes buried in unrelated terms rarely meet the standard. If a regulator or a plaintiff's attorney asks for proof, you should be able to show exactly what the person agreed to and when.
The National Do Not Call Registry still applies
Consent is only part of the picture. The National Do Not Call Registry sets a hard limit on who you can cold call at all. Numbers on the registry are off-limits for telemarketing unless you have an established business relationship or documented consent that fits an exemption. This applies to AI calls exactly as it applies to human ones.
In practice, that means three habits. Scrub your lists against a registry version no more than 31 days old. Keep your own internal Do Not Call list. Suppress any number that asks you to stop. An AI dialer that calls a registered number without a valid exemption creates the same liability a human would. Automation does not reduce the exposure. It can raise it, because violations happen faster and at scale.
Calling hours, identification, and opt-out rules
Even with consent and a clean list, the mechanics of each call matter. Federal rules limit telemarketing calls to 8 a.m. through 9 p.m. in the called party's local time zone, not yours. Some states narrow that window or add weekend and holiday limits. A call that is fine in one state can be a violation across a state line at the same clock time.
Identification is also required. Artificial and prerecorded voice messages must state the identity of the business responsible for the call at the very beginning, and give a phone number for it. Telemarketing calls with an artificial voice must also offer an automated, interactive opt-out, by voice or key press, during the call itself. That request must be honored promptly.
Speed cuts both ways here. Because AI dialers place calls far faster than people, one setup mistake can multiply violations before anyone notices. A wrong time-zone mapping or a stale DNC scrub is enough. That is why enforced guardrails matter more with AI than with manual calling.
These requirements are why platform controls matter. TheDisruptor.AI supports compliance features such as calling-hour windows tied to the contact's time zone and automated opt-out handling. Those controls help you operate within the rules, but they do not make you compliant on their own. The duty to get consent, scrub lists, and honor opt-outs stays with the operator.
State laws can be stricter than federal law
State law is where many AI callers get caught off guard. Several states go beyond the federal baseline. Here is an overview of the areas that matter most.
Call-recording consent
If your AI agent records calls, and many do for quality and training, recording law varies by state. California is an all-party consent state. Its Penal Code section 632 bars recording a confidential communication without the consent of all parties. Other states require only one party's consent. When you call across state lines, the stricter rule can apply. The safe practice is a clear recording notice at the start of the call.
State telemarketing laws ("mini-TCPAs")
Some states have their own telemarketing statutes, often called "mini-TCPA" laws. They can add consent rules, registration, or specific disclosures. Florida is a good example. Its Telephone Solicitation Act (section 501.059) bars unsolicited sales calls that use an automated system to select and dial numbers, or that play a recorded message, without prior express written consent. It also requires sellers to transmit their caller ID number. People who receive violating calls can sue for $500 or actual damages, which a court can triple for willful violations.
AI-disclosure rules
A growing number of states are considering or adopting rules that require disclosing when a caller is an AI rather than a human. This area is changing fast and differs by state. Treat AI disclosure as a live compliance question and confirm the current rules in every state you call. Review it with counsel before you scale.
A simple way to handle state differences
- Know where each number lives. Map area codes and addresses to states and time zones before you dial.
- Use the strictest common rule. A shorter calling window, a recording notice, and an early AI disclosure on every call cover most states.
- Check the states you call most. Review those statutes with counsel at least once a year.
Practical compliance practices for AI cold calling
Compliant AI calling is a process. A short checklist keeps the moving parts in view. None of this replaces legal review, but each item reflects the rules above. The full version, with sources for each rule, is our AI calling TCPA compliance checklist.
- Get and document consent. Collect prior express written consent where required, and store proof you can produce on demand.
- Scrub against the DNC Registry. Check the national registry at least every 31 days and keep your own internal suppression list.
- Respect local calling hours. Map every number to the called party's time zone. Enforce the 8 a.m. to 9 p.m. window, and tighten it where states require.
- Identify yourself. Have the AI state the responsible business at the start of the call and give a callback number.
- Offer an easy opt-out. Provide an in-call way to stop future calls and honor it right away across your systems.
- Disclose recording and, where required, AI use. Announce recording up front and follow state disclosure rules for automated callers.
- Keep records. Log consent, scrubs, opt-outs, and call details so you can show good-faith compliance.
Different industries layer on their own norms. If you work in real estate, our guide to AI cold calling for real estate investors covers common outreach scenarios. If your stack lives in a CRM, here is how teams handle running AI calling through GoHighLevel. Weighing whether to use AI at all? Compare AI and human cold callers side by side.
Frequently asked questions
Is AI cold calling illegal?
Not by itself. AI cold calling is illegal only when it breaks existing telemarketing rules. Examples include calling without required consent, ignoring the Do Not Call Registry, calling outside permitted hours, or failing to identify the caller and honor opt-outs. Used within those rules, it is generally lawful. Because the FCC's 2024 ruling treats AI voices as artificial, the consent bar is often higher than people expect.
Do I need consent to make AI cold calls?
Usually yes for marketing calls. Under the TCPA, most telemarketing calls that use an artificial or prerecorded voice to a wireless or residential number need prior express written consent. Some narrow exceptions and different rules apply to certain informational or non-commercial calls. Confirm those with counsel, since they depend on the facts.
Are there special rules in California or other states?
Yes. States set their own rules on top of federal law. California is an all-party recording-consent state, so recorded AI calls generally need everyone's consent. Florida has its own telemarketing law requiring written consent for automated or recorded sales calls. Other states have their own statutes and, increasingly, AI-disclosure proposals. Always check the rules for both your state and the state you are calling.
Do I have to disclose that the caller is an AI?
It depends on where you call. Federal rules already require the business to identify itself at the start of any artificial-voice message. Beyond that, AI-identity disclosure rules are still developing, and some states are moving toward them. Clear disclosure is a defensible best practice. Confirm the current rule in each state before you rely on staying silent.
What happens if I violate the TCPA?
The TCPA lets people sue for $500 per violation, and a court can triple that for willful or knowing violations. Regulators and state attorneys general can also take action. Because AI dialers work at scale, violations can multiply quickly. That is why documented consent, list scrubbing, and opt-out handling are core risk controls, not nice extras.
Can a compliance-focused calling tool make me compliant?
No tool can do that by itself. Platforms can enforce calling windows, manage opt-outs, and log activity, which lowers the chance of an accidental violation. But getting consent, scrubbing lists, and following state law remain your job as the operator.
The bottom line
AI cold calling is legal in the United States when you treat it like the regulated telemarketing it is. The 2024 FCC ruling settled the core question by placing AI and cloned voices under the TCPA's artificial and prerecorded voice rules. Consent, Do Not Call compliance, calling hours, identification, and opt-out handling all apply. Add state recording-consent, mini-TCPA, and disclosure rules, and the picture is manageable but detailed. Build your program around documented consent and reliable guardrails. Then verify the specifics for every state you call before you scale.
Legal disclaimer: This article is general educational information and not legal advice. Laws referenced here change and vary by jurisdiction, and their application depends on your specific facts. Do not rely on this article as a compliance determination. Consult a qualified attorney licensed in the relevant states before launching or expanding any AI calling program.