Skip to content
All articles
Cold Calling

Is B2B Cold Calling Legal? TCPA & DNC Rules (2026)

B2B cold calling is legal in the U.S. when a live rep calls business prospects at reasonable hours, says who they are and stops when asked. The risk sits in the details: the TCPA's robocall rules cover business cell phones, registered mobile numbers can count as residential under Do Not Call rules, and state laws add their own hours and opt-out rules. This guide explains what is allowed, what the B2B exemptions really cover, and the setup that keeps a calling program compliant.

Updated October 4, 2026 Brendan Burnett 13 min read
Is B2B Cold Calling Legal? TCPA & DNC Rules (2026)
The short version

Key takeaways

  • B2B cold calling is legal in the U.S. when a live rep calls a business line at reasonable hours, identifies themselves honestly and honors opt-outs.
  • The FTC's Telemarketing Sales Rule exempts most B2B calls from its Do Not Call rules, but since 2024 its bans on misrepresentation apply to B2B calls too.
  • The TCPA has no general B2B exemption: prerecorded messages, ringless voicemail and AI voices sent to cell phones need prior consent, even when the phone is used for work.
  • Registered mobile numbers can count as residential under Do Not Call rules, so scrub every list and keep one global suppression list.
  • TCPA damages are $500 per violation, up to $1,500 if willful, which is why class actions target sloppy telemarketing.
  • Canada, the UK and Germany each have their own rules; Germany is the strictest and expects at least presumed consent before a B2B sales call.
On this page

The Short Answer

Yes. B2B cold calling is legal in the United States. A live rep dialing a business line, during normal hours, to pitch a business product, and stopping when asked, is exactly what the rules allow.

What gets companies sued is not cold calling itself. It is the way some teams do it:

  • Robocalls, prerecorded voicemail drops or AI voices sent to cell phones without consent
  • Calling mobile numbers on the National Do Not Call Registry and assuming "it's B2B, so it's fine"
  • Ignoring someone who already said "don't call me again"
  • Calling outside legal hours, or misrepresenting who you are and what you sell

The rest of this guide explains the rules behind each of those lines, what the exemptions for B2B calls really cover, how the picture changes in Canada, the UK and Germany, and the setup we use to keep a calling program on the right side of them.

One note before we start: this is a practical guide from a team that runs outbound calling every day, not legal advice. If you are building a high-volume program, have counsel review your specific setup.


Which Laws Govern B2B Cold Calls in the U.S.?

Three layers apply to almost every U.S. sales call:

Rule Who enforces it What it controls How B2B is treated
Telemarketing Sales Rule (TSR) FTC Do Not Call Registry, honesty in sales calls, recordkeeping Most B2B calls are exempt, with two important exceptions
Telephone Consumer Protection Act (TCPA) FCC, state attorneys general and private lawsuits Robocalls, autodialers, prerecorded and AI voices, Do Not Call, calling hours No general B2B exemption
State telemarketing laws State attorneys general and private lawsuits Hours, call frequency, registration, state do-not-call lists Varies by state; some protect businesses too

The mistake we see most often is treating the TSR's B2B exemption as if it covered all three layers. It does not.


Are There Exemptions for B2B Calls?

Yes, but they are narrower than most sales teams think.

The FTC's Telemarketing Sales Rule

The TSR exempts calls between a telemarketer and a business made to sell that business goods or services. That is why the federal Do Not Call Registry rules in the TSR generally do not apply to B2B calls.

Two exceptions matter:

  1. You still cannot lie. Since a 2024 amendment, the TSR's bans on material misrepresentations and false or misleading statements apply to B2B calls too. Making up a referral, pretending to be the prospect's current vendor or misstating price or terms is a federal violation even when the buyer is a business.
  2. Nondurable office and cleaning supplies are fully covered. Calls selling things like paper, toner or cleaning products to businesses get no exemption.

There is also a practical limit: if you call someone at work to sell them something for personal use, that is a consumer call, not a B2B call.

The TCPA

The TCPA has no general B2B exemption. Its rules split into two parts, and calling a business line only takes you out of one of them:

  • Robocall rules (prerecorded or artificial voices and autodialers) apply to any cell phone, whether the person uses it for business or personal calls.
  • Do Not Call rules protect residential subscribers. A real business line is outside them. A cell phone often is not (more on that below).

State laws

States write their own telemarketing rules, and many reach further than federal law. Florida is a good example. Its telephone solicitation law bars calling a "consumer, business, or donor" who has already asked not to be called, and its telemarketing act limits covered sales calls to 8 a.m. to 8 p.m. local time and no more than three calls in 24 hours on the same subject. Whether a given B2B call falls under those rules depends on what you sell, so check the states you call most with counsel instead of assuming a federal exemption carries over.


Does the TCPA Apply to Business-to-Business Calls?

Yes, in two specific ways. This is where almost all real legal risk in B2B calling sits.

1. Robocalls and AI voices to cell phones need consent

The TCPA bars non-emergency calls to a cell phone made with an autodialer or with an "artificial or prerecorded voice" unless the person gave prior express consent. For marketing calls, FCC rules require that consent to be in writing. It does not matter that the number belongs to a VP of Operations who uses it for work.

Three things fall inside this rule that sales teams often miss:

  • Prerecorded voicemail drops. A recorded message is a prerecorded voice. In 2022 the FCC also ruled that "ringless" voicemails that skip the ring and land straight in voicemail are calls under the TCPA.
  • AI voice agents. In February 2024 the FCC ruled that AI-generated voices count as "artificial" voices under the TCPA, so an AI agent cold calling cell phones needs the same consent a robocall does.
  • Autodialers, in a narrower way than before. In Facebook v. Duguid (2021), the Supreme Court held that equipment only counts as an autodialer if it uses a random or sequential number generator to store or produce numbers. Most modern sales dialers that call a list of known numbers fall outside that definition, but some state laws define autodialers more broadly, and the prerecorded and artificial voice rules apply no matter what dialer you use.

A live rep talking to a live person on a cell phone is not a robocall. That is the simplest way to keep this rule from touching your program.

2. Do Not Call rules can reach business cell phones

The TCPA's Do Not Call rules bar telephone solicitations to residential subscribers who registered on the national registry, and the FCC applies them to wireless numbers. A business main line or desk line is not residential. A cell phone is murkier: in Chennette v. Porch.com (2022), the Ninth Circuit held that registered cell phones used for both business and personal calls are presumed residential. A few district courts have since gone the other way, so the question is unsettled and depends on where you are sued.

The practical takeaway is simple. If a mobile number is on the registry, treat it as protected unless you have consent.

What a violation costs

The TCPA lets the person you called sue for $500 per violation, and a court can triple that to $1,500 if the violation was willful or knowing. For Do Not Call claims, the person must have received more than one call in 12 months. Those numbers add up fast in a class action, which is why plaintiffs' firms watch telemarketing so closely.

Calling hours

Federal rules bar telephone solicitations to residential subscribers before 8 a.m. or after 9 p.m., local time at the called person's location. Some states set a shorter window, like Florida's 8 p.m. cutoff above. Since you often cannot tell whether a mobile is "residential," the simple rule is to call every number inside the strictest window that applies to its location.

Why the rules are getting harder to predict

In June 2025, the Supreme Court held in McLaughlin Chiropractic v. McKesson that district courts do not have to follow the FCC's interpretation of the TCPA. Courts now decide for themselves what the statute means. That cuts both ways: some FCC positions that hurt callers may not hold up, but some that protected callers may not either. "We followed an old FCC ruling" is a weaker defense than it used to be, which is another reason to stay in the clearly safe zone.

And enforcement pressure is not going away. The FTC reports about 258.5 million active registrations on the National Do Not Call Registry as of September 30, 2025, with robocalls making up most of the complaints it receives.


Usually yes, but the rules follow the person you are calling, not where your rep sits. Here is how the three markets U.S. teams call most often compare.

Canada

Calls to businesses are exempt from Canada's National Do Not Call List rules, so you do not need to buy or scrub against the national list for B2B calls. The rest of the CRTC's Unsolicited Telecommunications Rules still apply:

  • Register first. Every telemarketer must register with the National DNCL operator, even one that only makes exempt B2B calls. Registration is free and is separate from buying a list subscription.
  • Keep your own do-not-call list and honor requests to be added to it.
  • Call inside Canadian hours: 9:00 a.m. to 9:30 p.m. on weekdays and 10:00 a.m. to 6:00 p.m. on weekends, in the recipient's local time. Some provinces are stricter for certain activities.
  • Identify yourself and follow the separate rules for automated dialing-announcing devices.

United Kingdom

UK law allows live marketing calls to businesses without consent, with conditions. Under PECR, as the ICO explains, you:

  • Cannot call numbers on the CTPS or TPS unless that business told you it wants your calls. Companies register on the Corporate TPS, while sole traders and some partnerships register on the regular TPS, so B2B lists need screening against both.
  • Cannot call anyone who has already objected to your calls.
  • Must say who is calling and display a number they can call back.
  • Need specific consent for automated (recorded) calls, to businesses and individuals alike.

For the personal data side, most teams rely on legitimate interests under UK GDPR for live B2B calls. The stakes went up in 2026: since 5 February 2026, the ICO can fine PECR breaches up to £17.5 million or 4% of global turnover under the Data (Use and Access) Act 2025.

Germany (the strictest common market)

Germany's Unfair Competition Act (UWG, section 7) treats unwanted advertising calls as an unreasonable nuisance. Calls to consumers need prior express consent. Calls to businesses need at least presumed consent: concrete reasons to believe this particular business would welcome your call, usually an existing relationship or an offer closely tied to its core business. A published phone number on its own does not count, and if the first call goes badly, you cannot keep presuming.

The famous fine of up to €300,000 from the Bundesnetzagentur applies to unlawful calls to consumers. A bad B2B call is more likely to bring a cease-and-desist letter (Abmahnung) from a competitor, a trade association or the business you called, along with legal costs and contractual penalties for repeat violations. Data protection fines under GDPR can also apply when the call itself was not allowed.

In practice: treat Germany as warm-calling only. Call German businesses when there is a real prior relationship or a clear, documented fit with their core business, and use email, events and content to start the conversation otherwise. Other EU countries set their own rules, so check each market before you add it to a calling campaign.


What Makes a B2B Cold Call Illegal?

Put the rules together and the illegal patterns are easy to name:

Practice Why it is a problem
Prerecorded voicemail drops or AI voice calls to cell phones without written consent TCPA robocall rules apply to business cell phones
Calling registered mobile numbers without consent Courts may treat them as residential under Do Not Call rules
Calling again after someone asked you to stop Breaks state laws like Florida's and the FCC's internal do-not-call rules where the number counts as residential, and burns your brand
Calling outside legal hours in the recipient's time zone Federal and state hour limits
Misrepresenting who you are, why you are calling or what it costs TSR misrepresentation rules apply to B2B calls since 2024
Spoofing caller ID to mislead The Truth in Caller ID Act bars it when the intent is to defraud, cause harm or wrongfully obtain anything of value
Running a "consumer" offer through a B2B list Calls about personal-use products are consumer calls, with no B2B exemption

None of these are things a good outbound program needs. That is the encouraging part: the compliant way to cold call is also the way that books better meetings.


A Compliant B2B Cold Calling Setup

Here is the setup we recommend to clients and run ourselves. None of it requires reps to memorize statutes; the system carries the rules.

1. Know what kind of number you are calling

Tag every number by type (company main line, direct dial, mobile) and by country. Line type drives risk: business landlines are the safest, mobiles carry both the robocall and Do Not Call questions, and international numbers follow the rules of where the person is, not where your rep sits.

2. Have live reps place the calls

Live, rep-initiated calls keep you out of the TCPA's robocall rules. Save prerecorded voicemail drops, ringless voicemail and AI voice agents for contacts who gave written consent, or skip them in cold outreach entirely. A rep leaving a live voicemail in their own voice is fine.

3. Scrub before every campaign, and suppress forever

  • Scrub lists against the National Do Not Call Registry and the state lists for the states you call, even for "business only" campaigns. It is the cheapest insurance you will buy.
  • Keep one internal do-not-call list. When anyone says "take me off your list," log it once and suppress that number everywhere: CRM, dialer and email.
  • Re-check before you re-import an old list. Re-uploaded spreadsheets are how opted-out people get called again.

4. Let the dialer enforce calling windows

Set calling hours by the recipient's local time zone, using the strictest window for each state you call. Do not leave this to reps doing time zone math in their heads.

5. Open every call honestly

Say who you are, what company you are with and why you are calling, in the first sentence or two. For example:

"Hi Alex, this is Jordan with Acme Analytics. I'm calling because we help finance teams cut month-end reporting time, and I wanted to see if that's even relevant for you. Did I catch you at a bad time?"

Train reps to accept "not interested, don't call again" on the first ask. Arguing with an opt-out is both a compliance risk and a waste of a dial. For more openers that stay direct and honest, see our B2B cold calling script templates.

6. Keep records

Record calls where the law allows (and disclose recording where state law requires it), keep consent records with source and date, and keep your scrub and suppression history. If a complaint ever comes in, records are what let you show what actually happened.

7. Review the setup when something changes

Revisit your dialer settings, scripts and target geographies whenever you add a new state or country, adopt new calling technology (especially anything with AI voices), or when a major ruling lands. The law here has moved a lot since 2021.


Is Cold Calling Still Worth It?

Yes, if you run it this way. The rules mostly punish shortcuts: blasting recorded messages, dialing bought lists without scrubbing, and pushing past opt-outs. Teams that call targeted lists with live reps and a relevant reason to reach out stay well clear of those lines, and those same habits are what turn dials into meetings.

The phone remains one of the fastest ways to start a real conversation with a decision maker, especially when it works alongside email and LinkedIn rather than on its own. If you are weighing whether to use it at all, our guide to warm calling vs cold calling covers when each approach fits, and our cold calling benchmarks for B2B teams show what good looks like.


How SalesHive Keeps Cold Calling Compliant

Most of the setup above is built into how SalesHive runs cold calling programs for clients:

  • DNC scrubbing is built into our platform. Lists are scrubbed through our DNC.com integration before reps dial.
  • Time zone automation keeps every call inside legal calling windows, so reps focus on conversations instead of the clock.
  • Live, trained reps place every call. Our core calling team is US-based, with a Philippines-based option as a separate path if that fits your budget better.
  • Every call is recorded, so you can listen to any conversation, and your dedicated strategist uses real calls to coach reps and tighten scripts.

Since 2016, SalesHive has booked more than 129,000 meetings for 2,285 clients. Engagements run month to month with no long-term contracts, and you can see current packages on our pricing page.

If you want the pipeline from cold calling without building the compliance machinery yourself, book a strategy call and we will walk through how a calling or appointment setting program would work for your market.


The Bottom Line

B2B cold calling is legal. Live calls to business prospects, at reasonable hours, with honest openers and real respect for opt-outs, are exactly what U.S. law allows. The legal trouble sits in automation pointed at cell phones, registered mobile numbers, ignored opt-outs and international calls made without checking local rules.

If you do five things this quarter, do these:

  1. Tag every number in your CRM by line type and country.
  2. Turn on Do Not Call scrubbing and one global suppression list before any campaign launches.
  3. Keep prerecorded, ringless and AI voice messages away from cell phones unless you have written consent.
  4. Set dialer calling windows by the recipient's local time.
  5. Give reps an opener that says who they are, where they work and why they are calling.
Questions, answered

Frequently asked questions

Yes. In the U.S., a live rep calling a business line during normal hours to sell a business product is legal. The legal risk comes from prerecorded messages, ringless voicemail or AI voices sent to cell phones without consent, calling mobile numbers on the Do Not Call Registry, ignoring opt-out requests, calling outside legal hours, and misrepresenting who you are or what you sell.
No. Cold calls made by a live person are legal in the U.S. Calls to consumers have more limits than calls to businesses: you cannot make telemarketing calls to residential numbers on the National Do Not Call Registry without an exemption or permission, and robocalls or AI voice calls to cell phones need prior consent. Calls to businesses are mostly exempt from the FTC's Do Not Call rules, but not from the TCPA's robocall rules.
Yes, in two ways. First, the TCPA's robocall rules cover any cell phone, including one used for business, so prerecorded messages, ringless voicemail and AI voice calls to mobiles need prior consent (written consent for marketing). Second, its Do Not Call rules protect residential subscribers, and some courts presume that a registered cell phone used for both business and personal calls is residential. Live calls to business landlines are largely outside both rules.
Yes, but they are narrow. The FTC's Telemarketing Sales Rule exempts most calls to businesses, which takes them out of its Do Not Call Registry rules. Since 2024, though, its bans on misrepresentations and false statements apply to B2B calls, and calls selling nondurable office or cleaning supplies get no exemption. The TCPA has no general B2B exemption, and state laws vary.
For pure business lines, federal law generally does not require it. In practice you should scrub anyway, because B2B lists are full of mobile numbers that courts may treat as residential, and some state rules reach further than federal ones. Scrubbing is cheap; one Do Not Call lawsuit is not. Also keep an internal do-not-call list and honor every opt-out.
Generally yes, when a live rep is on the call. After the Supreme Court's 2021 Facebook v. Duguid decision, a dialer only counts as an autodialer under the TCPA if it uses a random or sequential number generator, which most sales dialers do not. Some state laws define autodialers more broadly, and any prerecorded or artificial voice message to a cell phone still needs consent, whatever dialer sends it.
Not to cell phones without prior consent. In February 2024 the FCC ruled that AI-generated voices are artificial voices under the TCPA, so AI calls to mobiles follow the same consent rules as robocalls, which means prior express written consent for marketing calls. Live reps supported by AI tools are a different matter; the rule is about the voice on the call.
Federal rules limit telephone solicitations to residential subscribers to 8 a.m. to 9 p.m. in the called person's local time, and some states are stricter. Florida, for example, limits covered sales calls to 8 a.m. to 8 p.m. Since many B2B numbers are mobiles, the safe approach is to call every number inside the strictest window for its location.
In Canada, yes: calls to businesses are exempt from the National Do Not Call List rules, but you must register with the National DNCL operator, keep an internal do-not-call list and call between 9:00 a.m. and 9:30 p.m. on weekdays or 10:00 a.m. and 6:00 p.m. on weekends. In the UK, live B2B calls are allowed unless the number is on the TPS or CTPS or the business objected, and you must identify yourself. Germany is strict: calls to businesses need at least presumed consent, meaning concrete reasons to believe the business would welcome the call.
No. It is practical guidance from a team that runs B2B calling programs every day, based on the statutes, regulations and court decisions linked in the article. Laws differ by state and country and keep changing, so have counsel review your specific program before you scale it.
Your next conversation

What does this mean for your team?