TCPA Opt-Out Requirements: Timing, Confirmation, and Penalties

Under the Telephone Consumer Protection Act, TCPA opt-out requirements obligate any business sending automated calls or texts to accept a consumer’s revocation of consent through any reasonable method, stop further robocalls and robotexts to that number as soon as practicable, and in no event later than 10 business days after receiving the request. Ignoring an opt-out exposes the company to $500 per unwanted call or text, tripled to $1,500 if a court finds the violation willful.¹

How Consumers Can Revoke Consent

The FCC’s guiding principle is that a business cannot funnel consumers into one company-preferred channel to stop the calls. Revocation can happen orally or in writing, through any method that clearly communicates the intent to stop.² The 2024 order, most provisions of which took effect in April 2025, codified this and required businesses to accept opt-outs through text replies, emails, phone calls, website forms, and verbal requests during live conversations.³

When a consumer uses a method the business itself has set up, such as an unsubscribe link or an in-app toggle, that opt-out is automatically deemed reasonable. When the consumer uses some other method, there is a rebuttable presumption that the method was still reasonable, and the burden falls on the business to explain why it wasn’t.³

Text Opt-Out Keywords

Seven words, sent as a reply to an incoming text, count automatically as a valid opt-out: “stop,” “quit,” “end,” “revoke,” “opt out,” “cancel,” and “unsubscribe.” The FCC treats any of these as a per se reasonable revocation, meaning the business cannot argue the request was ambiguous.⁴

These aren’t the only phrases that work. Replies such as “leave me alone” or “enough” are also valid if a reasonable person would understand them as a request to stop.⁴ The focus is the consumer’s intent, not their precision. Someone who tells a live agent “take me off your list” has opted out just as effectively as someone who texts “STOP.”

If a business uses a texting protocol that doesn’t support reply messages, it must disclose that limitation in every text and provide an alternative opt-out method, such as a phone number or website link, directly in each message.

Voice Call Opt-Out Mechanisms

Every automated telemarketing call must include an interactive opt-out mechanism, activated by voice command or keypress, that lets the recipient request removal during the call. When the recipient uses it, the system must automatically record the caller’s number to the company’s do-not-call list, end the call, and stop further telemarketing calls to that number.⁴

The mechanism and its instructions must be presented within two seconds of caller identification at the start of the call. For calls that reach voicemail or an answering machine, the recorded message must include a toll-free number connecting directly to the automated opt-out system.

How Fast the Business Must Act

Two deadlines apply, depending on the type of communication:

Consent revocation for robocalls and robotexts: as soon as practicable, and no later than 10 business days after receiving the request.³
Telemarketing do-not-call requests: up to 30 days to record the request and add the consumer to the company’s internal do-not-call list.⁴

These are ceilings, not targets. Any message sent after the deadline passes creates an independent violation with its own damages. “We were still within the processing window” is a weak argument when a consumer holds a screenshot of the opt-out reply and a follow-up text that came three days later.

The One Permitted Confirmation Message

After an opt-out, a business may send exactly one additional text confirming the request was received. That confirmation does not violate the TCPA as long as it contains no marketing or promotional content, simply confirms the opt-out, and is the only message sent after revocation. If it goes out within five minutes, the FCC presumes it falls within the consumer’s original consent. A longer delay shifts the burden to the sender.⁴

One narrow exception to the no-marketing rule: if the consumer was subscribed to multiple message categories from the same sender, the confirmation may ask whether the opt-out applies to all categories or just the one that prompted the reply. If the consumer responds with another “STOP” or doesn’t respond at all, the revocation applies to everything, and a second clarification request is prohibited.³

The moment a confirmation text includes a coupon, a link to a sale, or any language designed to win the customer back, it becomes a new unauthorized contact. That is where companies get into trouble most often.

Record-Keeping

Do-not-call requests must be kept for at least five years from the date they were made.⁴ The record should include the phone number, the date the request was received, and the method used to communicate it. Businesses must also maintain a written do-not-call policy, make it available on demand, and train anyone involved in placing calls.

The five-year clock matters in litigation. If a consumer opted out three years ago and starts receiving calls again because the company purged its records early, the company has no defense. Sloppy record-keeping drives most large TCPA settlements. Companies that end up paying seven-figure judgments usually aren’t ignoring opt-outs on purpose. They lost track of them.

Where the Standard Rules Bend

Cross-Channel Revocation Is Not Yet in Force

The 2024 rules include a provision requiring that an opt-out made in response to one type of message (say, a marketing text) apply to all future robocalls and robotexts from that business, even on unrelated topics. The FCC delayed that requirement first to April 2026, then to January 31, 2027.⁵ Until it takes effect, an opt-out from marketing texts does not automatically extend to unrelated informational messages from the same company. A consumer who asks to stop hearing from you rarely draws fine distinctions between message categories, though, so cautious operators treat opt-outs broadly regardless.

Nonprofit and Political Calls

Tax-exempt nonprofits and entities placing political or other non-commercial calls may make up to three prerecorded calls to a residential landline within any 30-day period without prior consent. Even so, every call must still include an automated opt-out mechanism presented within two seconds of caller identification, and any opt-out request must be honored within 30 days and kept for five years. The exemption does not apply to calls or texts to wireless numbers, which still require prior express consent.⁴

Healthcare and Financial Institution Messages

Certain time-sensitive messages from healthcare providers and financial institutions, such as appointment reminders, prescription notifications, and fraud alerts, have their own exemptions. Each message must offer an easy way to stop future messages, and for texts the recipient must be able to opt out by replying “STOP.” For these exempted categories, “STOP” is the exclusive opt-out mechanism, a narrower approach than the seven-keyword standard that applies to marketing texts.⁴

Penalties for Ignoring an Opt-Out

The TCPA gives consumers a private right of action in state court. For each violation, a person can recover their actual monetary loss or $500 in statutory damages, whichever is greater. If a court finds the violation was willful or knowing, it can triple that amount to $1,500 per violation.¹

For do-not-call violations specifically, the consumer must have received more than one violating call within a 12-month period from the same entity before suing. A company that can show it established and followed reasonable procedures to prevent violations has an affirmative defense, but that defense crumbles without the five years of records the rule requires.¹

Per-violation damages add up quickly in class actions. A single unwanted text sent to 10,000 people who already opted out carries potential exposure of $5 million at the base rate, or $15 million if a court finds willfulness. That math is why TCPA litigation has become one of the most active areas of consumer class action practice, and why processing opt-outs correctly is cheaper than defending against them.

1
Office of the Law Revision Counsel. 47 USC 227 – Restrictions on Use of Telephone Equipment
2
Federal Communications Commission. Rules and Regulations Implementing the Telephone Consumer Protection Act of 1991 – Section: Consent and Called Party
3
Federal Communications Commission. Rules and Regulations Implementing the Telephone Consumer Protection Act of 1991
4
eCFR. 47 CFR 64.1200 – Delivery Restrictions
5
Federal Communications Commission. Order Extending Waiver of Section 64.1200(a)(10)