An automated call is not automatically illegal in the United States. Usually, the answer depends on the number called, the technology used, whether you consented, and the message's purpose.
A sales robocall to a cell phone is a warning sign. It generally needs prior express written consent. Political, charity, survey, emergency, and informational calls can follow different rules.
The federal framework comes mainly from the Telephone Consumer Protection Act (TCPA), FCC rules, and the National Do Not Call Registry. States may add protections. The FCC's consumer guide to stopping unwanted robocalls and texts is a useful starting point.
Got one? Save the message before deleting it. Write down the number called, the displayed number, what the caller wanted, and whether you heard a person, recording, or AI voice.
Which rule applies to the call?
The TCPA statute covers specified autodialed calls, artificial or prerecorded voices, telephone solicitations, and unsolicited fax advertisements. It does not outlaw every automated call.
| Call or message | General federal starting point |
|---|---|
| Autodialed or prerecorded call to a cell phone | Usually needs prior express consent. A telemarketing call generally needs prior express written consent. Emergency and other narrow exceptions may apply. |
| Artificial or prerecorded voice to a home landline | TCPA restrictions apply. A sales call generally needs prior express written consent, subject to limited exceptions. |
| Live person dialing manually | May fall outside autodialed and prerecorded-call restrictions, but Do Not Call and calling-time rules can still apply. |
| Automated marketing text | Can raise consent and opt-out issues similar to a robocall. The message and number called still matter. |
| Political, charity, survey, or informational call | The registry does not cover every call in these groups. Cell-phone, prerecorded-voice, state-law, and caller-ID rules may still apply. |
Consent and registry status answer different questions. Being off the Do Not Call Registry does not give an automated caller permission to use your number.
Permission has to fit the call
Having your number is not the same as having permission to call it.
For telemarketing, prior express written consent generally must be clear and obtained before the call. The wording and the surrounding context matter.
A purchase, contest entry, lead form, or other submission may put your number into a seller's system. It does not, by itself, show that every later seller had permission to call.
Revocation deserves a paper trail. Tell the caller or business to stop through a reasonable method, then keep the request and its date. If calls continue after a clear opt-out, save each one.
Prerecorded telemarketing messages should provide an opt-out method at the beginning. Use that option only if the message appears legitimate; an obvious scam may use links or keypad prompts to collect information or identify active numbers.
The registry has a narrower job
Registration can reduce some sales calls. It does not block every unwanted call.
You can register up to three numbers online through the FTC's National Do Not Call Registry FAQs. If the process sends a confirmation email, open it and click its link within 72 hours. The FTC says registration does not expire unless the number is disconnected.
Telemarketers generally have 31 days to update their lists after registration. Calls may still come from a business you authorized, an organization outside the registry's scope, or a scammer ignoring the law.
Your own do-not-call request to a business is separate. Make that request through a channel that leaves a record when possible.
At home, federal telemarketing rules generally bar calls before 8 a.m. or after 9 p.m. in your local time.
Some exceptions do not make a sales pitch lawful
Some calls can be lawful without the same permission a sales robocall needs. The exception depends on the call's details.
FCC materials list school-closing and flight-information calls as examples permitted to landlines. Those examples do not turn a sales pitch into an informational call.
Some healthcare reminders may fit a limited exemption when they meet the applicable conditions and are not marketing. HIPAA compliance alone does not authorize every robocall.
Political campaigns may not be covered by the registry in the same way as sales callers. Automated or prerecorded calls to cell phones can still trigger TCPA restrictions.
Turns out, the label alone will not settle the issue. Read the message and note the technology used.
AI voices, spoofing, and STIR/SHAKEN
An AI voice does not avoid the TCPA simply because it sounds natural. The FCC has treated AI-generated and cloned voices as artificial voices under the law, so the artificial-voice rules can apply.
Caller ID is not proof of identity. Scammers can display a local number, a government number, or a real business's number.
Thing is, STIR/SHAKEN is about caller-ID authentication, not trust. Participating voice providers can use it to authenticate caller-ID information, but it does not show that the caller is honest, the offer is real, or you gave consent.
Provider safeguards help, but they are not a consumer guarantee. The FCC also requires telecommunications providers to take steps against unlawful robocalling and spoofing. Its unwanted communications resources cover these enforcement areas.
What to do after a robocall
Do not leave the first voicemail to chance. Use this sequence:
- End the call safely. Do not provide passwords, payment details, Social Security numbers, or one-time codes. Do not call back an unfamiliar number.
- Save the evidence. Record the date, time, displayed number, callback number, company name, message, and whether you heard a recording or AI voice. Keep voicemails, screenshots, and texts in their original form.
- Revoke permission. If you recognize the sender, clearly say that you revoke permission and want no further calls or texts. Use the stated opt-out method for a legitimate message, but avoid links or keypad prompts in an obvious scam.
- Check the registry. Register your number if you have not already. Note the registration date before reporting later sales calls.
- Report the conduct. Use the FTC for phone scams and Do Not Call issues. Use the FCC for unwanted robocalls, texts, caller-ID spoofing, and related communications problems.
- Protect your accounts after a loss. If you shared bank or card information, contact the financial institution using the number on your card or statement. Change affected passwords and ask what account protections are available.
Where to report it
Match the reporting route to what happened.
| Problem | Useful first route | Details to include |
|---|---|---|
| Sales call after your number was registered or after a company-specific opt-out | FTC complaint resources linked from the FTC registry FAQ | Registration date, caller identity, date, time, and the words used to opt out |
| Robocall, unwanted text, spoofed caller ID, or recorded message | FCC consumer complaint resources in its robocall and unwanted communications guide | Displayed number, message, callback number, screenshots, and voicemail |
| Phone scam or attempted fraud | FTC reporting resources, plus your financial institution if money or account details were involved | Payment method, transaction details, affected account, and copies of messages |
| Threatening or emergency call | Local emergency or law enforcement services when there is an immediate safety concern | Exact threat, time, number, and any saved message |
The FTC says complaint information may be shared with other enforcement agencies. A complaint creates a record, but it does not guarantee an investigation, refund, or individual legal recovery.
When a private claim may be possible
Some TCPA violations can support a private lawsuit. The statute provides $500 in statutory damages per violation, and a court may increase that amount to as much as $1,500 for a willful or knowing violation.
Those figures are not automatic payments. A court still has to decide whether the call violated the law, whether consent existed, who was responsible, and how the violations should be counted.
FCC enforcement penalties are a separate government matter.
Keep call logs, messages, opt-out requests, consent forms, and registry information. If you are considering legal action, check your state's filing deadline and call-recording rules, then speak with a licensed attorney or legal aid provider.
Common misunderstandings
These assumptions can send a complaint down the wrong path.
| Belief | What it misses |
|---|---|
| Being on the Do Not Call Registry blocks every unwanted call | The registry mainly covers telemarketing. Scams and several non-sales categories may still get through. |
| Political robocalls are always legal | The registry has limited reach, but automated calls to cell phones and prerecorded voices can trigger separate rules. |
| A familiar caller ID proves the caller is real | Caller ID can be spoofed. Verify a business through contact information you find independently. |
| STIR/SHAKEN means a call is safe | It helps authenticate caller-ID data. It does not approve the caller or the offer. |
| Pressing a key always stops future calls | It may be a valid opt-out on a legitimate message, but scammers may use interaction to identify active numbers. |
To be honest, the most useful next step is simple: save the next voicemail or screenshot before deleting it, note its date, time, number, and purpose, and send the report to the agency that matches the problem.