Is B2B Cold Calling Legal? TCPA & DNC Rules (2026)
B2B cold calling is legal in the U.S. when a live rep calls business prospects at reasonable hours, says who they are and stops when asked. The risk sits in the details: the TCPA's robocall rules cover business cell phones, registered mobile numbers can count as residential under Do Not Call rules, and state laws add their own hours and opt-out rules. This guide explains what is allowed, what the B2B exemptions really cover, and the setup that keeps a calling program compliant.

Key takeaways
- B2B cold calling is legal in the U.S. when a live rep calls a business line at reasonable hours, identifies themselves honestly and honors opt-outs.
- The FTC's Telemarketing Sales Rule exempts most B2B calls from its Do Not Call rules, but since 2024 its bans on misrepresentation apply to B2B calls too.
- The TCPA has no general B2B exemption: prerecorded messages, ringless voicemail and AI voices sent to cell phones need prior consent, even when the phone is used for work.
- Registered mobile numbers can count as residential under Do Not Call rules, so scrub every list and keep one global suppression list.
- TCPA damages are $500 per violation, up to $1,500 if willful, which is why class actions target sloppy telemarketing.
- Canada, the UK and Germany each have their own rules; Germany is the strictest and expects at least presumed consent before a B2B sales call.
On this page
- The Short Answer
- Which Laws Govern B2B Cold Calls in the U.S.?
- Are There Exemptions for B2B Calls?
- Does the TCPA Apply to Business-to-Business Calls?
- Is B2B Cold Calling Legal Outside the U.S.?
- What Makes a B2B Cold Call Illegal?
- A Compliant B2B Cold Calling Setup
- Is Cold Calling Still Worth It?
- How SalesHive Keeps Cold Calling Compliant
- The Bottom Line
The Short Answer
Yes. B2B cold calling is legal in the United States. A live rep dialing a business line, during normal hours, to pitch a business product, and stopping when asked, is exactly what the rules allow.
What gets companies sued is not cold calling itself. It is the way some teams do it:
- Robocalls, prerecorded voicemail drops or AI voices sent to cell phones without consent
- Calling mobile numbers on the National Do Not Call Registry and assuming "it's B2B, so it's fine"
- Ignoring someone who already said "don't call me again"
- Calling outside legal hours, or misrepresenting who you are and what you sell
The rest of this guide explains the rules behind each of those lines, what the exemptions for B2B calls really cover, how the picture changes in Canada, the UK and Germany, and the setup we use to keep a calling program on the right side of them.
One note before we start: this is a practical guide from a team that runs outbound calling every day, not legal advice. If you are building a high-volume program, have counsel review your specific setup.
Which Laws Govern B2B Cold Calls in the U.S.?
Three layers apply to almost every U.S. sales call:
| Rule | Who enforces it | What it controls | How B2B is treated |
|---|---|---|---|
| Telemarketing Sales Rule (TSR) | FTC | Do Not Call Registry, honesty in sales calls, recordkeeping | Most B2B calls are exempt, with two important exceptions |
| Telephone Consumer Protection Act (TCPA) | FCC, state attorneys general and private lawsuits | Robocalls, autodialers, prerecorded and AI voices, Do Not Call, calling hours | No general B2B exemption |
| State telemarketing laws | State attorneys general and private lawsuits | Hours, call frequency, registration, state do-not-call lists | Varies by state; some protect businesses too |
The mistake we see most often is treating the TSR's B2B exemption as if it covered all three layers. It does not.
Are There Exemptions for B2B Calls?
Yes, but they are narrower than most sales teams think.
The FTC's Telemarketing Sales Rule
The TSR exempts calls between a telemarketer and a business made to sell that business goods or services. That is why the federal Do Not Call Registry rules in the TSR generally do not apply to B2B calls.
Two exceptions matter:
- You still cannot lie. Since a 2024 amendment, the TSR's bans on material misrepresentations and false or misleading statements apply to B2B calls too. Making up a referral, pretending to be the prospect's current vendor or misstating price or terms is a federal violation even when the buyer is a business.
- Nondurable office and cleaning supplies are fully covered. Calls selling things like paper, toner or cleaning products to businesses get no exemption.
There is also a practical limit: if you call someone at work to sell them something for personal use, that is a consumer call, not a B2B call.
The TCPA
The TCPA has no general B2B exemption. Its rules split into two parts, and calling a business line only takes you out of one of them:
- Robocall rules (prerecorded or artificial voices and autodialers) apply to any cell phone, whether the person uses it for business or personal calls.
- Do Not Call rules protect residential subscribers. A real business line is outside them. A cell phone often is not (more on that below).
State laws
States write their own telemarketing rules, and many reach further than federal law. Florida is a good example. Its telephone solicitation law bars calling a "consumer, business, or donor" who has already asked not to be called, and its telemarketing act limits covered sales calls to 8 a.m. to 8 p.m. local time and no more than three calls in 24 hours on the same subject. Whether a given B2B call falls under those rules depends on what you sell, so check the states you call most with counsel instead of assuming a federal exemption carries over.
Does the TCPA Apply to Business-to-Business Calls?
Yes, in two specific ways. This is where almost all real legal risk in B2B calling sits.
1. Robocalls and AI voices to cell phones need consent
The TCPA bars non-emergency calls to a cell phone made with an autodialer or with an "artificial or prerecorded voice" unless the person gave prior express consent. For marketing calls, FCC rules require that consent to be in writing. It does not matter that the number belongs to a VP of Operations who uses it for work.
Three things fall inside this rule that sales teams often miss:
- Prerecorded voicemail drops. A recorded message is a prerecorded voice. In 2022 the FCC also ruled that "ringless" voicemails that skip the ring and land straight in voicemail are calls under the TCPA.
- AI voice agents. In February 2024 the FCC ruled that AI-generated voices count as "artificial" voices under the TCPA, so an AI agent cold calling cell phones needs the same consent a robocall does.
- Autodialers, in a narrower way than before. In Facebook v. Duguid (2021), the Supreme Court held that equipment only counts as an autodialer if it uses a random or sequential number generator to store or produce numbers. Most modern sales dialers that call a list of known numbers fall outside that definition, but some state laws define autodialers more broadly, and the prerecorded and artificial voice rules apply no matter what dialer you use.
A live rep talking to a live person on a cell phone is not a robocall. That is the simplest way to keep this rule from touching your program.
2. Do Not Call rules can reach business cell phones
The TCPA's Do Not Call rules bar telephone solicitations to residential subscribers who registered on the national registry, and the FCC applies them to wireless numbers. A business main line or desk line is not residential. A cell phone is murkier: in Chennette v. Porch.com (2022), the Ninth Circuit held that registered cell phones used for both business and personal calls are presumed residential. A few district courts have since gone the other way, so the question is unsettled and depends on where you are sued.
The practical takeaway is simple. If a mobile number is on the registry, treat it as protected unless you have consent.
What a violation costs
The TCPA lets the person you called sue for $500 per violation, and a court can triple that to $1,500 if the violation was willful or knowing. For Do Not Call claims, the person must have received more than one call in 12 months. Those numbers add up fast in a class action, which is why plaintiffs' firms watch telemarketing so closely.
Calling hours
Federal rules bar telephone solicitations to residential subscribers before 8 a.m. or after 9 p.m., local time at the called person's location. Some states set a shorter window, like Florida's 8 p.m. cutoff above. Since you often cannot tell whether a mobile is "residential," the simple rule is to call every number inside the strictest window that applies to its location.
Why the rules are getting harder to predict
In June 2025, the Supreme Court held in McLaughlin Chiropractic v. McKesson that district courts do not have to follow the FCC's interpretation of the TCPA. Courts now decide for themselves what the statute means. That cuts both ways: some FCC positions that hurt callers may not hold up, but some that protected callers may not either. "We followed an old FCC ruling" is a weaker defense than it used to be, which is another reason to stay in the clearly safe zone.
And enforcement pressure is not going away. The FTC reports about 258.5 million active registrations on the National Do Not Call Registry as of September 30, 2025, with robocalls making up most of the complaints it receives.
Is B2B Cold Calling Legal Outside the U.S.?
Usually yes, but the rules follow the person you are calling, not where your rep sits. Here is how the three markets U.S. teams call most often compare.
Canada
Calls to businesses are exempt from Canada's National Do Not Call List rules, so you do not need to buy or scrub against the national list for B2B calls. The rest of the CRTC's Unsolicited Telecommunications Rules still apply:
- Register first. Every telemarketer must register with the National DNCL operator, even one that only makes exempt B2B calls. Registration is free and is separate from buying a list subscription.
- Keep your own do-not-call list and honor requests to be added to it.
- Call inside Canadian hours: 9:00 a.m. to 9:30 p.m. on weekdays and 10:00 a.m. to 6:00 p.m. on weekends, in the recipient's local time. Some provinces are stricter for certain activities.
- Identify yourself and follow the separate rules for automated dialing-announcing devices.
United Kingdom
UK law allows live marketing calls to businesses without consent, with conditions. Under PECR, as the ICO explains, you:
- Cannot call numbers on the CTPS or TPS unless that business told you it wants your calls. Companies register on the Corporate TPS, while sole traders and some partnerships register on the regular TPS, so B2B lists need screening against both.
- Cannot call anyone who has already objected to your calls.
- Must say who is calling and display a number they can call back.
- Need specific consent for automated (recorded) calls, to businesses and individuals alike.
For the personal data side, most teams rely on legitimate interests under UK GDPR for live B2B calls. The stakes went up in 2026: since 5 February 2026, the ICO can fine PECR breaches up to £17.5 million or 4% of global turnover under the Data (Use and Access) Act 2025.
Germany (the strictest common market)
Germany's Unfair Competition Act (UWG, section 7) treats unwanted advertising calls as an unreasonable nuisance. Calls to consumers need prior express consent. Calls to businesses need at least presumed consent: concrete reasons to believe this particular business would welcome your call, usually an existing relationship or an offer closely tied to its core business. A published phone number on its own does not count, and if the first call goes badly, you cannot keep presuming.
The famous fine of up to €300,000 from the Bundesnetzagentur applies to unlawful calls to consumers. A bad B2B call is more likely to bring a cease-and-desist letter (Abmahnung) from a competitor, a trade association or the business you called, along with legal costs and contractual penalties for repeat violations. Data protection fines under GDPR can also apply when the call itself was not allowed.
In practice: treat Germany as warm-calling only. Call German businesses when there is a real prior relationship or a clear, documented fit with their core business, and use email, events and content to start the conversation otherwise. Other EU countries set their own rules, so check each market before you add it to a calling campaign.
What Makes a B2B Cold Call Illegal?
Put the rules together and the illegal patterns are easy to name:
| Practice | Why it is a problem |
|---|---|
| Prerecorded voicemail drops or AI voice calls to cell phones without written consent | TCPA robocall rules apply to business cell phones |
| Calling registered mobile numbers without consent | Courts may treat them as residential under Do Not Call rules |
| Calling again after someone asked you to stop | Breaks state laws like Florida's and the FCC's internal do-not-call rules where the number counts as residential, and burns your brand |
| Calling outside legal hours in the recipient's time zone | Federal and state hour limits |
| Misrepresenting who you are, why you are calling or what it costs | TSR misrepresentation rules apply to B2B calls since 2024 |
| Spoofing caller ID to mislead | The Truth in Caller ID Act bars it when the intent is to defraud, cause harm or wrongfully obtain anything of value |
| Running a "consumer" offer through a B2B list | Calls about personal-use products are consumer calls, with no B2B exemption |
None of these are things a good outbound program needs. That is the encouraging part: the compliant way to cold call is also the way that books better meetings.
A Compliant B2B Cold Calling Setup
Here is the setup we recommend to clients and run ourselves. None of it requires reps to memorize statutes; the system carries the rules.
1. Know what kind of number you are calling
Tag every number by type (company main line, direct dial, mobile) and by country. Line type drives risk: business landlines are the safest, mobiles carry both the robocall and Do Not Call questions, and international numbers follow the rules of where the person is, not where your rep sits.
2. Have live reps place the calls
Live, rep-initiated calls keep you out of the TCPA's robocall rules. Save prerecorded voicemail drops, ringless voicemail and AI voice agents for contacts who gave written consent, or skip them in cold outreach entirely. A rep leaving a live voicemail in their own voice is fine.
3. Scrub before every campaign, and suppress forever
- Scrub lists against the National Do Not Call Registry and the state lists for the states you call, even for "business only" campaigns. It is the cheapest insurance you will buy.
- Keep one internal do-not-call list. When anyone says "take me off your list," log it once and suppress that number everywhere: CRM, dialer and email.
- Re-check before you re-import an old list. Re-uploaded spreadsheets are how opted-out people get called again.
4. Let the dialer enforce calling windows
Set calling hours by the recipient's local time zone, using the strictest window for each state you call. Do not leave this to reps doing time zone math in their heads.
5. Open every call honestly
Say who you are, what company you are with and why you are calling, in the first sentence or two. For example:
"Hi Alex, this is Jordan with Acme Analytics. I'm calling because we help finance teams cut month-end reporting time, and I wanted to see if that's even relevant for you. Did I catch you at a bad time?"
Train reps to accept "not interested, don't call again" on the first ask. Arguing with an opt-out is both a compliance risk and a waste of a dial. For more openers that stay direct and honest, see our B2B cold calling script templates.
6. Keep records
Record calls where the law allows (and disclose recording where state law requires it), keep consent records with source and date, and keep your scrub and suppression history. If a complaint ever comes in, records are what let you show what actually happened.
7. Review the setup when something changes
Revisit your dialer settings, scripts and target geographies whenever you add a new state or country, adopt new calling technology (especially anything with AI voices), or when a major ruling lands. The law here has moved a lot since 2021.
Is Cold Calling Still Worth It?
Yes, if you run it this way. The rules mostly punish shortcuts: blasting recorded messages, dialing bought lists without scrubbing, and pushing past opt-outs. Teams that call targeted lists with live reps and a relevant reason to reach out stay well clear of those lines, and those same habits are what turn dials into meetings.
The phone remains one of the fastest ways to start a real conversation with a decision maker, especially when it works alongside email and LinkedIn rather than on its own. If you are weighing whether to use it at all, our guide to warm calling vs cold calling covers when each approach fits, and our cold calling benchmarks for B2B teams show what good looks like.
How SalesHive Keeps Cold Calling Compliant
Most of the setup above is built into how SalesHive runs cold calling programs for clients:
- DNC scrubbing is built into our platform. Lists are scrubbed through our DNC.com integration before reps dial.
- Time zone automation keeps every call inside legal calling windows, so reps focus on conversations instead of the clock.
- Live, trained reps place every call. Our core calling team is US-based, with a Philippines-based option as a separate path if that fits your budget better.
- Every call is recorded, so you can listen to any conversation, and your dedicated strategist uses real calls to coach reps and tighten scripts.
Since 2016, SalesHive has booked more than 129,000 meetings for 2,285 clients. Engagements run month to month with no long-term contracts, and you can see current packages on our pricing page.
If you want the pipeline from cold calling without building the compliance machinery yourself, book a strategy call and we will walk through how a calling or appointment setting program would work for your market.
The Bottom Line
B2B cold calling is legal. Live calls to business prospects, at reasonable hours, with honest openers and real respect for opt-outs, are exactly what U.S. law allows. The legal trouble sits in automation pointed at cell phones, registered mobile numbers, ignored opt-outs and international calls made without checking local rules.
If you do five things this quarter, do these:
- Tag every number in your CRM by line type and country.
- Turn on Do Not Call scrubbing and one global suppression list before any campaign launches.
- Keep prerecorded, ringless and AI voice messages away from cell phones unless you have written consent.
- Set dialer calling windows by the recipient's local time.
- Give reps an opener that says who they are, where they work and why they are calling.
