Real Estate TCPA Compliance Guide: Protecting Your Business While Growing Your Pipeline
Introduction: Why TCPA Compliance Matters for Real Estate Today
The Telephone Consumer Protection Act applies directly to real estate agents, teams, and brokerages, and the consequences for getting it wrong are not abstract. In recent years, Anywhere Real Estate (formerly Realogy) agreed to a roughly $20 million settlement over alleged calls to consumers on the Do Not Call registry. HomeSmart International and two of its brokers were named in a class action for unsolicited marketing texts sent through a CRM platform. These are not edge cases. They are the kind of lawsuits that can hit any agent or team running outbound prospecting without a compliance framework, especially when critical steps like consent segmentation and wireless-number identification are missed.
This guide is a practical roadmap for compliant calling, texting, and lead generation across the real estate industry, not just abstract legal theory. For dialer-specific cold calling rules, Sure Send maintains a dedicated resource at suresend.ai/l/tcpa-cold-calling-compliance-real-estate/. This article covers the full legal landscape surrounding consent, violations, and compliant prospecting across every channel.
Here is what is at stake:
- Each TCPA violation can result in fines from hundreds to thousands of dollars: $500 per negligent violation, up to $1,500 per willful violation, per call or text.
- Non-compliance can lead to lawsuits from consumers, including class actions that aggregate exposure into the millions.
- TCPA violations can damage a business’s reputation significantly, eroding trust with clients and referrals.
- On the flip side, agents who follow TCPA regulations build higher-quality pipelines, earn consumer trust, avoid the legal issues that derail careers, and stand out from competitors.
TCPA Basics: What the Telephone Consumer Protection Act Actually Covers
The Telephone Consumer Protection Act (47 U.S.C. § 227) is a federal law signed into law in 1991 to protect consumers from unwanted calls, texts, and prerecorded messages. The Federal Communications Commission administers the TCPA and its regulations, while the Federal Trade Commission manages the National Do Not Call Registry.
Core coverage areas include:
- Telemarketing calls to residential and wireless phone numbers
- SMS and MMS text messages sent for marketing or promotional purposes
- Prerecorded messages and artificial voice calls, including AI-generated voices (which the FCC classified as “artificial or prerecorded” in February 2024)
- Use of automated dialing systems (autodialers) to initiate contact without manual dialing
The distinction between “telemarketing” and “informational” communications matters for real estate agents. Telemarketing messages are those encouraging a consumer to purchase, engage in rental activity, or make an investment in property, goods, or services. A text confirming a showing time is informational. A text promoting your buyer consultation services is telemarketing. Telemarketing calls and texts require stricter consent (prior express written consent), while informational messages may only need prior express consent (oral or implied).
TCPA is enforced through three channels:
- FCC enforcement actions and rulemaking
- FTC enforcement related to the Do Not Call Registry
- Private lawsuits and class actions brought directly by individuals; this is where the largest financial exposure sits for most real estate businesses
Key Definitions Every Real Estate Agent Must Know
Understanding these terms is essential for staying on the right side of TCPA rules:
- Telephone solicitation: Any call or text made for the purpose of encouraging someone to purchase, rent, or invest in property, goods, or services. In real estate, this includes listing pitches, buyer representation offers, mortgage referrals, and invitations to listing appointments.
- Prior express consent: Permission given orally or through conduct (e.g., providing a phone number on a form for a specific purpose). Sufficient for informational, non-marketing communications.
- Prior express written consent: A signed, written agreement (including electronic signatures and web form checkboxes) authorizing telemarketing contact. Marketing calls using automated telephone dialing systems require prior express written consent. Calls using autodialers require the same.
- Autodialer / automatic telephone dialing system (ATDS): Equipment capable of storing or producing telephone numbers and dialing them without human intervention. Courts continue to debate the precise boundaries, but any SMS blast tool or auto dialers should be treated as covered.
- Artificial or prerecorded voice: Any voice message not delivered live by a human agent. This now includes AI-generated or synthetic voices, so voicemail drops using voice cloning are subject to TCPA.
- Informational vs. marketing message: Texting an open house reminder to someone who requested it is informational. Promoting a new buyer consultation offer to a cold lead is marketing. The classification changes what consent you need.
- Called party vs. intended recipient: The “called party” is whoever actually receives the call or text at a given phone number. If a number has been reassigned, calling the new owner without consent is still a violation, even if your records show the previous owner opted in.
These definitions directly shape how you contact leads, engage clients, and sell your services day-to-day, so agents need to understand them before contacting leads.
Federal TCPA Rules vs. State “Mini-TCPA” Laws
Federal TCPA rules set the floor for compliance, but many states have enacted stricter “mini-TCPA” telemarketing statutes that real estate agents must also follow. Compliance with state mini-TCPA laws may impose stricter requirements than the federal TCPA, and states may impose additional penalties for violations beyond federal statutory damages.
Key state-level issues to watch:
- Florida requires telephone solicitor registration and bonding in certain cases, with its own statutory penalties for violations.
- Oklahoma has enacted mini-TCPA provisions that expand the definition of regulated automated technology beyond the federal standard.
- Washington’s House Bill 1497 tightens solicitation consent requirements and restricts calling hours more aggressively than federal law.
- Several states (including Maryland, New Jersey, and Connecticut) limit calling and texting hours to windows narrower than the federal 8 AM to 9 PM local time standard, cap daily contact attempts, or require additional disclosures.
When you prospect across state lines (which happens constantly in real estate with relocation leads and out-of-area referrals), the consumer’s physical location and the state law governing the called party’s area typically determine which rules apply. If your farming areas or lead sources span multiple states, coordinate with local counsel or your brokerage compliance team to map which regulations affect your outreach.
The Consent Framework: From Implied Permission to Express Written Consent
Think of consent as a ladder with four rungs, each granting permission for different types of contact:
- No consent: You have no permission to contact the consumer for marketing. Cold outreach without consent is the highest-risk activity under TCPA.
- Implied consent: The consumer provided their phone number in a context that suggests they expect to hear from you (e.g., a sign call from a yard sign), but did not explicitly agree to marketing. This covers limited informational follow-up only.
- Prior express consent: The consumer verbally or in writing agreed to receive communications from you, sufficient for non-marketing, informational calls or texts (e.g., a transaction update).
- Prior express written consent: The consumer signed or electronically agreed to receive marketing communications, including through automated dialers and prerecorded messages. Prior express written consent is required for autodialed sales calls and telemarketing texts to cell phones.
Real estate examples at each level:
- A prospect calls the number on your yard sign → implied consent for informational follow-up, not automated marketing blasts.
- A buyer registers on your IDX website and checks a box agreeing to receive property alerts → prior express consent for those alerts; may need express written consent for broader telemarketing purposes.
- A homeowner fills out a home valuation form with a clear, compliant consent disclosure → prior express written consent for marketing calls and texts.
Note on the FCC’s 2023 to 2024 new TCPA regulations: The FCC issued rules in December 2023 (FCC 23-107) requiring “one-to-one” consent, meaning consent must explicitly name the specific entity contacting the consumer, not through shared lead lists or blanket “marketing partners” language. However, in January 2025 the Eleventh Circuit vacated those provisions as exceeding the FCC’s statutory authority. As of late 2026, those new rules are not in effect, but the underlying principle (that clear, traceable consent tied to your business is safer) remains best practice.
Express Written Consent: What It Must Include for Real Estate Marketing
Express written consent is required for telemarketing calls and texts made using automated dialers or prerecorded messages. Here is what a compliant consent statement must include:
- Clear identification of the real estate business (your brokerage, team, or individual practice) that will be initiating contact
- Explicit mention that the consumer is agreeing to receive telemarketing or marketing communications
- Notice that an autodialer, prerecorded voice, or artificial voice may be used
- Disclosure of approximate message frequency (e.g., “up to 4 messages per month”)
- A statement that consent is not a condition of purchase: the consumer does not need to agree in order to buy or sell a property
- Instructions for how to opt out (e.g., “Reply STOP to cancel”)
A sample consent block for a home valuation form:
“By submitting this form, I consent to receive marketing calls and text messages from [Your Brokerage Name] at the phone number provided, including calls made using an automated dialing system or prerecorded voice. Message frequency varies; message and data rates may apply. Consent is not required to purchase or sell a property. Reply STOP to opt out.”
Consent must be documented and stored for a minimum of 5 years. Systems like Sure Send automatically store the timestamp, IP address, consent version, and the exact language the consumer saw at the time of opt-in. Maintaining that documentation for the full retention period is part of a defensible compliance process and your best defense if a lead later claims they never agreed to receive communications.
Valid forms of express written consent include electronic signatures, unchecked web form checkboxes the consumer actively selects, and SMS opt-in keyword confirmations (e.g., texting “YES” to confirm).
Real Estate Lead Generation Under TCPA: Safe vs. Risky Channels
Not all lead generation sources carry the same TCPA risk. Understanding the difference protects your business and your pipeline.
Compliant lead sources:
- IDX and home search registrations on your own website with clear consent language
- Landing pages for home valuations, property alerts, or buyer guides, with proper opt-in checkboxes
- Open house sign-in sheets that include printed consent disclosures (and are digitized into your CRM)
- Facebook lead ads where the form includes a consent disclosure naming your brokerage
Riskier lead sources:
- Purchased cold lists from unnamed aggregators with no verifiable consent trail
- Shared or aged lead data where consent was given to a different company or for a different purpose
- Generic “real estate leads” sold by aggregators who use broad “marketing partners” language instead of naming your business
Before you load any phone number into a CRM or dialer, evaluate the lead provider’s consent language and proof of express written consent. Ask to see the exact form the consumer completed. If the provider cannot produce it, that lead is a liability, not an asset.
Sure Send and ezVerify.ai can validate and document consent on inbound leads before they enter automated outreach sequences, so you are not building campaigns on a foundation of unverified data. This matters because each violation of TCPA can result in fines from hundreds to thousands of dollars, and a single batch of bad leads can generate class-action-level exposure.
National Do Not Call Registry, Internal DNC Lists, and Real Estate
The National Do Not Call Registry is managed by the FTC. It applies to every entity making telemarketing calls, including independent contractor real estate agents and small teams. Consumers can join the National Do Not Call Registry to reduce unwanted telemarketing calls, and telemarketing calls cannot be made to registered numbers. Calling a number on the registry can lead to significant fines.
DNC compliance essentials:
- Lead scrubbing should occur regularly, ideally every month, and before each new calling campaign. The registry is updated frequently, requiring regular checks. The standard benchmark is scrubbing at least every 31 days.
- Maintain an internal Do Not Call list and honor requests within 10 business days. Companies must honor do-not-call requests within 10 business days of receiving them.
- Real estate agents must scrub call lists against the registry; this is non-negotiable for all outbound prospecting, whether you are a solo agent or running a 50-person team, and they must not contact individuals who have opted out or whose numbers appear on applicable do-not-call lists.
There are established business relationship exceptions allowing contact under specific conditions. For example, if a consumer recently inquired about your services or completed a transaction with you, you may have a limited window to contact them even if they are on the registry. However, do not rely on these exceptions casually; they are narrow, time-limited, and heavily litigated.
A CRM like Sure Send automates DNC list integration and suppression through ezVerify.ai, so agents are not manually checking every phone number against the registry before making calls. The system blocks suppressed numbers from entering call queues or text campaigns automatically.
Calculating TCPA Exposure: How Fines and Lawsuits Add Up
TCPA liability is calculated per violation, meaning per call or per text message, and the numbers escalate fast.
Statutory damages under federal law:
- $500 per negligent violation (each unauthorized call or text)
- Up to $1,500 per willful or knowing violation (treble damages)
- State mini-TCPA laws may stack additional penalties on top of federal damages
A concrete example for a real estate team:
- You send 3,000 outbound marketing texts via an autodialer to unvetted phone numbers without verified express written consent.
- At the base rate of $500 per text, your exposure is $1,500,000.
- If a court finds the violations willful, that triples to $4,500,000.
- Add legal defense costs, settlement overhead, and potential state-level damages.
For context, the Realogy (Anywhere Real Estate) settlement reached approximately $20 million for alleged calls and texts to people on the DNC registry, covering roughly 298,000 claimants.
Beyond direct financial penalties, exposure includes:
- Carrier or platform terminations (losing your phone numbers or texting capability)
- Reputational damage that affects referrals, online reviews, and client trust
- Injunctions that restrict your ability to prospect entirely
Robust TCPA compliance programs and documented consent histories significantly reduce both risk and settlement pressure. Federal courts consistently look at whether the defendant had reasonable compliance procedures in place when assessing damages.
Documenting Consent and Revocation: Building a Defensible Audit Trail
If it is not documented, it did not happen. That is the governing mindset for TCPA compliance in the real estate industry.
For each lead, your system should store this documentation because it becomes essential in the event of a complaint, lawsuit, or compliance dispute:
- The phone number and the consent text shown at the time of opt-in
- A timestamp of when consent was given
- The IP address or source identifier (web form, SMS keyword, open house sheet)
- The channel through which consent was captured
- The version of the consent language displayed (so you can prove what the consumer saw on a given date)
- All consent status changes, including revocations
Consumers can revoke consent at any time, requiring prompt action. Compliant revocation methods include:
- Replying “STOP” to an SMS message
- Clicking an unsubscribe link
- Verbally requesting removal during a live agent call
- Sending a written request via email or mail
Opt-out mechanisms must be included in all marketing communications and honored immediately; in practice, within 24 to 48 hours at most. Your CRM must process revocations across all channels, not just the one the consumer used to opt out.
Sure Send’s CRM plus ezVerify.ai logs and surfaces consent events and opt-out requests at the contact level, providing a retrievable audit trail if challenged. This means that if a consumer files a complaint or a lawsuit, you can pull up the exact form they completed, the date they consented, every communication sent afterward, and any system actions or revocations that serve as evidence in that event.
Designing Compliant Multi-Channel Outreach (Calls, SMS, Email, Voicemail)
A typical real estate outreach sequence might combine phone calls, text messages, and emails over a 10 to 14 day window. Each step in that sequence must respect the lead’s consent level and DNC status.
Key principles:
- Even though email is governed by CAN-SPAM rather than TCPA, phone calls and texts in the same sequence still require appropriate consent under TCPA.
- Calls can only be made between 8 AM and 9 PM local time under federal law, and some states restrict the window further.
- Ringless voicemail, group texting, and SMS short codes are higher-risk tactics. Use them only when express written consent is clear and well-documented.
- Every automated step (whether it is a scheduled text, a voicemail drop, or a triggered call task) must check consent status and DNC flags before initiating contact.
Channel | Minimum Consent Required | Typical Real Estate Use Case |
|---|---|---|
Manual phone call (no autodialer) | Prior express consent; DNC scrub | Following up with an open house attendee |
Autodialed or prerecorded call | Prior express written consent | Automated appointment reminders or listing promos |
Marketing SMS/MMS | Prior express written consent | Property alert texts, new listing announcements |
Informational SMS | Prior express consent | Showing confirmation, transaction update |
CAN-SPAM compliance (opt-out required) | Drip campaigns, newsletters, market reports | |
Ringless voicemail | Treat as prerecorded; prior express written consent recommended | Market update voicemail drops |
Structuring Your Real Estate Website and Forms for TCPA Compliance
Your website is often the first place consent is captured, and the first place it can go wrong.
Best practices for forms:
- Place consent language directly adjacent to the submit button on forms like “Instant Home Valuation,” “Schedule a Showing,” and “Get Pre-Approved.” It must be visible without scrolling past the CTA.
- Never use pre-checked boxes for telemarketing consent. The consumer must take an affirmative action (clicking an unchecked checkbox) to grant permission.
- Use separate checkboxes when appropriate: one for general client communications (showing updates, transaction info) and another for promotional calls and texts.
- Display the consent disclosure in readable font, not buried in a linked terms page. The disclosure should be on the form itself.
For recordkeeping:
- Store static snapshots or version histories of each form’s consent language, so you can prove exactly what a consumer saw on a specific date.
- When form language is updated, archive the previous version with its effective date range.
Sure Send-powered sites and integrations ensure that consent captured on IDX or landing pages flows directly into CRM contact records with no manual re-entry: the consent text, timestamp, and source are automatically attached to the lead record.
CRM as the Compliance Hub: Using Sure Send for TCPA & DNC Management
Your CRM should be the single source of truth for consent, DNC status, communication history, and audit trails across every agent and campaign in your real estate business.
Sure Send capabilities relevant to TCPA compliance include:
- A built-in dialer with consent-aware calling: the system checks consent status before allowing a call to initiate, preventing agents from accidentally calling suppressed or non-consented numbers.
- Automatic DNC scrubbing via ezVerify.ai, integrated directly into the contact database so suppression happens before outreach, not after a complaint.
- Consent status fields on every contact record, showing the type of consent, the date it was captured, the source, and the current status (active, revoked, expired).
- Trigger-based automation that respects opt-out requests: if a contact replies “STOP” or is flagged as DNC, all scheduled calls, texts, and voicemail drops are automatically canceled.
Smart Lists and the Take Action queue can be configured to exclude suppressed phone numbers while still enabling compliant follow-up with opted-in leads. This means your agents spend time on contacts they are legally permitted to reach while benefiting from centralized compliance knowledge instead of relying on memory, improving both compliance and conversion rates.
Call transcription, notes, and outcome logging capture verbal opt-outs and consent confirmations in an evidentiary format. If a lead says “don’t call me again” during a conversation, that revocation is documented and actionable in the system.
Generic CRMs that were not built for real estate TCPA compliance force agents to manage these rules manually, and maintaining compliance that way increases the chance of mistakes, which is where legal issues and lawsuits originate.
Training Your Team: Embedding TCPA Compliance Into Daily Habits
Compliance tools only work if your team needs to understand not just how the tools work, but why the TCPA and do-not-call rules matter.
Onboarding steps for new real estate agents:
- TCPA 101 overview covering the consent framework, DNC rules, statutory penalties, what outreach is permitted, and why certain rules are critical
- Review of internal brokerage policies on outbound prospecting
- Hands-on walkthrough of consent fields, DNC indicators, and opt-out workflows in Sure Send
- Script practice that includes required disclaimers, opt-out language, and proper identification of the business
Ongoing training:
- Quarterly refresher sessions covering new FCC orders, year-to-year guidance updates, state mini-TCPA changes, or brokerage policy updates. Use real case studies (like the HomeSmart and eXp Realty lawsuits) to discuss what went wrong and how to avoid it.
- Simple daily prospecting checklists: verify consent status before initiating contact, confirm phone numbers are not on DNC lists, log opt-outs immediately after a call.
Sure Send’s Win the Day coaching loop can incorporate compliance checkpoints alongside activity metrics like calls, conversations, and appointments, so compliance is part of the daily performance process, not a separate afterthought.
Safely Scaling Automated Campaigns and AI in Real Estate Outreach
AI-powered tools (automated SMS sequences, chatbots, predictive lead scoring) amplify both opportunity and TCPA risk. When you scale outreach volume, you scale violation exposure at the same rate unless every workflow is built on a solid consent framework.
Guidelines for scaling safely:
- Every automated workflow must check consent status and DNC flags before sending any call, text, or voicemail. No exceptions.
- Cap daily contact attempts per consumer to avoid the appearance of harassment and to respect state-level limits where they exist.
- AI-generated voice messages (voice cloning, synthetic speech) are classified as artificial or prerecorded voice under TCPA, so they require the same consent as traditional prerecorded messages.
- Ensure that automation does not re-engage contacts who have revoked consent, even if they re-enter a workflow through a different trigger.
A compliant trigger-based campaign example:
- A homeowner fills out a property alert signup form on your website with full express written consent.
- Sure Send’s automation verifies consent status and DNC clearance via ezVerify.ai.
- The system sends tailored follow-up texts and emails only to the opted-in phone number and email address.
- If the contact replies “STOP,” all future automated outreach is immediately canceled, and the revocation is logged.
Sure Send’s automation builder and AI-native architecture enforce these rules in the background, so high-volume real estate teams stay compliant while scaling lead generation without manual gatekeeping at every step.
Auditing, Monitoring, and Continual Improvement of Your TCPA Program
TCPA compliance is an ongoing process, not a one-time project. Regular audits of TCPA compliance activities are essential to catch gaps before they become lawsuits.
Recommended audit cadence and scope:
- Set quarterly or biannual audits that review a sample of call recordings, text templates, consent logs, and DNC scrubbing reports.
- Involve both marketing and legal or compliance resources when adjusting scripts, adding new lead sources, or changing automation logic.
- Report findings to brokerage leadership and document corrective actions taken.
Helpful KPIs to track:
- Opt-out rate per campaign (a spike may indicate messaging problems or consent quality issues)
- Complaint volume from consumers or carriers
- Percentage of leads with verified consent records in the CRM
- Frequency of DNC hits caught before outreach (higher is better: it means your scrubbing works)
Sure Send makes audits easier by centralizing communication history and system logs. Brokers can pull reports, spot risky patterns early, and verify that every agent on the team is following the process. Compliance is not a destination; it is a discipline that protects your pipeline, your reputation, and your customers every day.
When to Get Legal Help and Where to Learn More
Consult qualified legal experts when you are launching new large-scale SMS campaigns, buying third-party lead lists, expanding into new states with aggressive mini-TCPA laws, or adopting new technologies like AI voice or ringless voicemail. Counsel and specialized vendors can also bring technical and regulatory knowledge when evaluating new outreach programs. These are inflection points where the cost of legal counsel is a fraction of the cost of a mistake.
This guide is for educational purposes and does not constitute legal advice for specific transactions or disputes. TCPA rules evolve through FCC rulemaking and federal courts decisions; what is accurate on one date may shift with the next ruling or report.
Primary resources for staying current:
- FCC TCPA rule summaries and declaratory rulings
- FTC guidance on the National Do Not Call Registry
- NAR legal updates focused on consumer protection act TCPA issues in real estate
- State attorney general offices for state-specific telemarketing guidelines
For dialer-specific best practices, including call pacing, caller ID rules, and live agent requirements, explore Sure Send’s dedicated TCPA cold calling compliance resource for real estate.
Pairing strong legal guidance with a TCPA-aware CRM like Sure Send is the safest path for sustained real estate growth. The agents and teams who treat compliance as a discipline, not a burden, are the ones who protect trust that might otherwise send prospects to competitors.