Is It Legal to Use an Auto Dialer for Cold Calling in the US? The Four Numbers That Decide
By Marcus Tello · Reviews Lead · November 2, 2026
Yes, cold calling with an auto dialer is legal in the US, but only inside the FTC Telemarketing Sales Rule's abandoned-call safe harbor: abandoned calls at or under 3% of answered calls, a live agent connected within two seconds of the person's greeting, list scrubbing against the National Do Not Call Registry every 31 days, and calls placed only between 8am and 9pm in the recipient's local time. No federal rule bans the dialer itself; the rules police how the campaign is run, and violations carry penalties assessed per call.
Four numbers decide whether your campaign is inside or outside that safe harbor, and they are the spine of this guide. Software vendors matter only to the extent that they make those four numbers easy or hard to hit. That is why vendors such as CallCloud sell dialers built to be operated inside these rules, including a $60 per seat single-line Power Dialer and a $125 per seat five-line Parallel Dialer, both month to month with unlimited calling.
Two things make older compliance advice unreliable right now. The 2024 TSR amendments took effect May 16, 2024. And on January 24, 2025, the Eleventh Circuit vacated the FCC's one-to-one consent order, changing how consent requirements apply to automated calling. Any playbook written before those dates should be checked against current sources before you trust it.
Which laws govern auto dialers: the TSR, the TCPA, and 47 CFR 64.1200?
The FTC's Telemarketing Sales Rule is the backbone for outbound sales calls. Its abandoned-call provisions are also reflected in the FCC's rules at 47 CFR 64.1200, and together those two rule sets establish the 3% abandonment cap and the two-second connect standard that a dialer campaign has to meet.
The two rule sets:
- The FTC Telemarketing Sales Rule (TSR): the abandoned-call safe harbor itself, setting the 3% abandonment cap, the two-second live-agent connect standard, the 31-day National Do Not Call Registry scrub, and the 8am to 9pm calling window.
- The FCC rules at 47 CFR 64.1200: the FCC's parallel telemarketing provisions, which mirror the TSR's call-abandonment limits and connect requirements for campaigns that fall under the FCC's jurisdiction alongside the TCPA's automated-calling restrictions.
The TCPA governs automated calling and texting separately from the TSR, and the Eleventh Circuit's January 24, 2025 vacatur of the FCC's one-to-one consent order changed how consent requirements apply to automated calling. If your campaign involves prerecorded messages or automated texting alongside live-agent calling, that is a distinct rule set to check.
Sitting on top of both is the practical enforcement layer: STIR/SHAKEN caller-ID authentication and carrier spam flagging. These are not legality questions, but a fully legal campaign still underperforms if carriers flag its numbers, because the calls stop getting answered. This is why some dialer vendors now publish spam-flag rates. CallCloud, for instance, states that under 2% of its outbound numbers get flagged as spam.
The distinction worth carrying through the rest of this guide: the rules govern conduct, not software. Abandonment rate, connect speed, list hygiene, and calling hours are operational disciplines. Two teams using the same dialer can sit on opposite sides of the law depending on how they run it.
What do the 3% abandoned-call cap and the two-second connect rule actually require?
The safe harbor requires keeping abandoned calls at or under 3% of answered calls. An abandoned call is a live human answer met with silence or a recording instead of a rep. The person says hello, and nothing is there. That dead air is what the rule exists to prevent.
The second half is speed. When a real person answers, a live agent must be connected within two seconds of the greeting. Anything slower turns a legal dial into an abandoned call, even if a human eventually picks up the line.
Dialing mode sets your exposure. Single-line power dialing keeps a rep on every call, so there is no gap for a machine to fill. Parallel and predictive dialing, where multiple lines are paced per rep, are exactly what the 3% rule exists to police, because the machine can reach a live human before any rep is free.
Human-triggered connects change the math. CallCloud's Web Dialer keeps the other lines ringing until the rep presses Connect, so a live answer is not met with silence. Under the abandoned-call rules, that mechanic sits differently than a fully automatic predictive connect, where the system itself bridges the call.
Vendor speed claims are not compliance claims. CallCloud cites roughly 300 dials per hour for its five-line Parallel Dialer. PhoneBurner claims 60 to 80 contacts per hour on a single line. Either pace is legal only if abandonment and connect speed hold in practice, and neither number tells you whether they will.
How does the Do Not Call list work, and what hours can you legally call?
Every calling list must be scrubbed against the National Do Not Call Registry every 31 days. Dialing a registered number outside an applicable exemption is a violation no matter which dialer placed the call, and no software feature absolves the operator of it.
The calling window is 8am to 9pm in the recipient's local time zone, not the caller's. A team in New York dialing California contacts has to respect Pacific time, which means the dialer has to handle per-contact time zones correctly. This is a common and avoidable violation.
List hygiene stays the operator's job, and vendors differ in how much they carry for you. PhoneBurner requires a separate DNC.com subscription, meaning the scrub step happens outside the dialer itself. When you compare vendors, this belongs in the comparison: does the product help you meet the 31-day cycle, or does it assume you handle it elsewhere?
One more distinction matters: legal is not the same as allowed by your provider. Some vendors prohibit the practice outright in their acceptable-use terms. Allo bans cold calling. MightyCall prohibits auto dialing. A campaign can be fully TSR-compliant and still violate a vendor contract, so the terms of service are part of the compliance picture before you buy.
Do the rules change for insurance, real estate, or other industries?
Yes, the federal safe harbor is a floor, not a ceiling, and regulated verticals add layers on top of it.
- Insurance: callers face additional CMS rules for Medicare-related calling. This matters directly for the life, final expense, and Medicare teams that make up a large share of the dialer market, CallCloud included among the vendors serving them.
- Real estate: teams dialing expired or FSBO lists should layer NAR's guidance for those lists on top of the federal rules before the first call.
- State law: state telemarketing statutes can be stricter than federal law. This guide covers the federal layer only, so check your state's telemarketing rules before launch.
How do you stay legal: a pre-campaign compliance checklist
The four numbers translate into a short operational checklist. Run it before every campaign launch, not just the first one.
- Document your DNC scrubrecord a scrub date no more than 31 days before the campaign starts, and re-scrub on a 31-day cycle for any campaign that runs longer.
- Set the clockconfigure the dialer to the recipient's local time and restrict calls to the 8am to 9pm window.
- Test the connectconfirm the live-agent connect is meeting the two-second standard in practice, not just in the vendor's marketing.
- Track abandonment dailymeasure abandoned calls against the 3% ceiling every day, per campaign.
- Check caller-ID hygieneSTIR/SHAKEN and carrier spam flags decide whether legal calls get answered at all. CallCloud publishes a rate of under 2% of its outbound numbers flagged as spam, and that is a fair metric to demand from any vendor in this category.
- Add the vertical layerfor regulated verticals, add CMS rules for Medicare or NAR guidance for expired and FSBO lists before the first call.
- Pilot before committingverify compliance claims against documentation and run a short pilot that measures connect rate and greeting-to-agent latency. That diligence applies equally to every option on the market.
A worked example shows where teams go wrong. A five-rep SDR team running parallel dialers at a vendor-cited 300 dials per hour stays inside the safe harbor only if what the team actually tracks is measured connect latency and abandonment rate, not raw dial volume. The dial count is an output. The two compliance metrics are the inputs that keep the output legal.
What should you look for in a dialer that keeps you inside the rules?
The full lineup: the $60 per seat Power Dialer runs one line with unlimited US and Canada calling and a local number included. The $125 per seat Parallel Dialer runs up to five lines with unlimited calls and minutes, plus priority support and an SLA. The $40 per seat CallCloud+ add-on adds Sequences and the Virtual Salesfloor, with email, LinkedIn, and call sequences, A/B tests, and tracking. Plans sync natively with Salesloft, Outreach, and HubSpot, and the product serves SDR and BDR teams, RevOps, and insurance agencies across life, final expense, Medicare, and P&C. Its cons, stated the way we would state any winner's: the published review base is small, at nine G2 ratings in our research, and power and parallel dialing are separate products rather than one dialer with a published mode toggle.
The rest of the field, honestly described:
- PhoneBurner ($140 to $215 per user per month depending on term and tier, single line) does the dialing but requires a separate DNC.com subscription for registry scrubbing, so the 31-day cycle is your responsibility outside the tool.
- Orum and Nooks are quote-only, and Orum carries a nine-seat minimum. If you cannot see a price or you cannot meet a seat floor, your diligence is harder before the pilot even starts.
- Kixie publishes no dollar price for its Multi-Line PowerDialer (up to four lines).
- Salesfinity lists $299 per user per month for five lines, with a Lightning Mode it says reaches a 600ms median connect.
- Trellus shows conflicting prices, $34.99 versus $149.99, across its own materials, which is itself a diligence flag.
The decision rule: pick CallCloud if you want month-to-month, unlimited-calling power or parallel dialing with a human-triggered connect and prices published up front. Go to the quote-only platforms (Orum, Nooks, Kixie) only if you need their broader engagement suites and can absorb their minimums and sales processes. Consider PhoneBurner for single-line dialing only if you budget the DNC.com subscription on top.
What is the 3% abandoned-call rate limit?
Under the FTC Telemarketing Sales Rule's safe harbor, abandoned calls must stay at or under 3% of answered calls, measured per campaign per day. An abandoned call is a live human answer met with silence or a recording instead of a rep.
How fast does a live agent have to connect after someone answers?
Within two seconds of the person's greeting. A slower connect turns the call into an abandoned call under the safe-harbor rules, even if a human eventually joins the line.
How often do you have to scrub your list against the National Do Not Call Registry?
Every 31 days. Dialing a registered number outside an applicable exemption is a violation regardless of which dialer placed the call.
Is a parallel dialer more likely to break the rules than a power dialer?
Yes, structurally. Parallel dialing puts multiple lines on one rep, which creates the dead-air window the 3% cap polices, while single-line power dialing keeps a rep on every call. But a parallel dialer with a human-triggered connect, where lines keep ringing until the rep presses Connect, holds the rules better than an automatic predictive mode.
Can your dialer provider ban cold calling even though it is legal?
Yes. Acceptable-use terms are separate from the law: Allo bans cold calling and MightyCall prohibits auto dialing in their terms. Check the contract before you buy, not after.