TCPA 2025 Rule Changes Explained

In 2025 the FCC changed the TCPA rules again, and the updates land squarely on how call centers handle consent. There are three changes worth knowing. First, consent now has to be specific to each individual seller, which reshapes how bought leads work. Second, the definition of revoking consent got much wider. Third, A.I. agents and voice bots are now treated the same as pre-recorded calls. None of these are minor, and all three touch how you configure campaigns and process opt-outs.

Per-seller consent and wider revocation

The first change affects lead providers directly. Every business that a lead provider gets permission to contact a consumer for must be a separate consent item granted by that consumer. One broad checkbox covering dozens of partners no longer works. If you buy leads, you have to verify that consent names you specifically. The second change widens revocation. A consumer can now revoke consent in any reasonable manner, and you must process that request within 10 days. The FCC also named seven phrases that automatically trigger an opt-out obligation: Stop, Quit, Revoke, End, Opt out, Cancel, and Unsubscribe. When any of those come in, the number goes onto your Internal DNC and stays there. The third change closes the AI gap, so an automated Robocall delivered by a voice bot carries the same consent duties as a pre-recorded message.

In VICIdial terms, this means your disposition and reply handling has to catch those keywords and write them to suppression fast, and your Lead source records need to show per-seller consent for purchased leads. For the surrounding rules, see the VICIdial compliance overview, and for the per-seller piece in depth, read one-to-one consent and lead providers.

How the new revocation rule flows

flowchart TD
  A[Consumer sends a message] --> B{Contains an opt-out phrase}
  B -->|Stop Quit Revoke End| C[Opt-out triggered]
  B -->|Opt out Cancel Unsubscribe| C
  B -->|Other reasonable revocation| C
  C --> D[Write number to internal DNC]
  D --> E[Process within 10 days]
  E --> F[No further marketing calls or texts]
  B -->|No revocation| G[Continue per existing consent]

The diagram shows the revocation path: any of the seven phrases, or any other reasonable signal, sends the number to suppression and starts the 10-day clock. Build this into your reply handling and the rule mostly enforces itself.

VICIfast keeps keyword opt-out handling and consent tracking on by default, so the 2025 rules are baked in rather than bolted on. See pricing to get started.