A practical guide to TCPA obligations for companies that purchase consumer leads — consent requirements, record-keeping, and how Dreamy Leads protects you.
The Telephone Consumer Protection Act (TCPA), enacted in 1991 and significantly expanded in 2015 and 2024, regulates how businesses may contact consumers by phone, text, and fax. For lead buyers in insurance, mortgage, solar, and debt verticals, the most relevant provision is the express written consent requirement for calls and texts to mobile numbers using an automated telephone dialing system (ATDS).
Penalties for TCPA violations range from $500 to $1,500 per call or text — and class action TCPA suits have resulted in eight-figure settlements for companies that purchased leads without proper consent documentation. TCPA compliance is not optional for any company operating a call center or texting leads.
Under the TCPA, express written consent for autodialed or prerecorded calls must:
The 2024 FCC order (effective January 2025) added an additional requirement: one-to-one consent. A consumer's consent to one company cannot be used to contact them on behalf of a different company. Each seller who contacts a consumer must have been specifically named or described in the consent the consumer provided.
Every lead in our network is generated with consent language that:
Each consent event is logged with: the verbatim consent text displayed at the time of submission, the consumer's IP address, the timestamp (UTC), the URL of the page, and the lead ID. This record is retained for a minimum of 5 years and is available to buyers on written request.
When you purchase a lead from Dreamy Leads, the consent record we provide covers your right to make the initial contact. However, you remain responsible for:
If a consumer or their attorney contacts you claiming a TCPA violation, request the lead ID from the complaint and contact us immediately at dreamyleads@gmail.com. We will provide the full consent record for that lead ID within 24 hours. The consent record — including the verbatim consent text, IP, timestamp, and page URL — is your primary defense documentation.