Education only, not legal advice. Rules vary by state and change often. This lesson reflects public sources as of ; confirm every requirement with your own counsel and the regulator before relying on it.
Why this is the riskiest area for brokers
Brokers call and text a lot of people, many of them bought as leads, and many small business owners give their personal cell as the business number. Contact laws count each call or text, some let the person contacted sue directly, and class actions are common. That combination makes calling and texting the area where most small shops get hurt.
"It is business to business" helps less than people think. A sole proprietor's mobile number is often treated like a personal number, and the rules on autodialed calls and texts to cell phones do not depend on whether the call is about business financing.
Consent for calls and texts
Under the Telephone Consumer Protection Act (TCPA) and FCC rules, marketing calls and texts to mobile numbers made with an autodialer or a prerecorded or artificial voice generally need the person's prior express written consent. In practice that means a clear statement the person agreed to, naming who may contact them and how, that is not a condition of the purchase, signed or checked by them, with proof you can produce.
One 2025 development matters for lead buyers: the FCC's one-to-one consent rule, which would have required consent to name each seller individually, was vacated and dropped, as our disclosure laws guide notes. That does not make vague consent safe. Consent obtained by a lead vendor is only as good as the vendor's form and records, and you need to be able to get those records.
- Web forms you control: strongest. You wrote the consent text and you hold the record.
- Purchased leads: ask the vendor for the form, the consent text, the timestamp and the page URL for each lead before you text it.
- Aged leads and lists: consent may be old, may not name you and may not cover texts. Treat them as call-by-hand only until the merchant agrees again.
Do Not Call: national, state and your own
- The National Do Not Call Registry is a list of numbers telemarketers may not call without consent or another exemption. Sellers and telemarketers must access the registry and scrub their call lists on the schedule the FTC's rule sets. Business lines are generally outside it, but cell numbers of owners often are not.
- State lists and laws. Several states keep their own lists or have their own telemarketing laws, some stricter than the federal rules, including on texts.
- Your internal Do Not Call list. Anyone who asks you to stop goes on it, and stays on it across every rep, campaign and lead source. This is the list most often broken, usually because a lead is bought again from another vendor.
Opt-outs and calling hours
People can revoke consent by any reasonable means: replying STOP, saying "take me off your list" on a call, or emailing. Treat each as a full stop for that channel, record it, and make sure it reaches everyone who might contact that person. FCC rules set how quickly revocations must be honored; ask counsel for the current timeline.
The FTC's Telemarketing Sales Rule guidance says that without prior consent, telemarketing calls to a person's home are not allowed before 8 a.m. or after 9 p.m. local time at the called location. Several states set narrower windows or limit calls on certain days. The simple rule: dial by the merchant's time zone, not yours.
Email has its own law
CAN-SPAM covers commercial email, business to business included: accurate headers and subjects, your physical postal address, and a working unsubscribe you honor promptly.
What a consent record must hold
Checklist
0 of 6How the CRM helps
Merchants who apply through your application link agree to consent text naming your company, and Ferrylend stores a consent record per channel (call, SMS, email) with the exact text and its version, the page, IP address, browser and time; it moves to the owner's contact when the lead is converted. Leads and merchants can be marked Do Not Contact, and a deal cannot move to Funder Reviewing File while its merchant is marked do not contact or an owner has revoked consent. SMS with opt-outs and quiet hours, the click-to-call dialer, email campaigns with one-click unsubscribe, and consent audits are all Coming soon.
Questions
Do TCPA rules apply to business-to-business calls?
Often, yes. The rules on autodialed or prerecorded calls and texts to cell phones do not depend on whether the call is about business financing, and many owners use a personal mobile as the business number. Get counsel's view on your specific dialing setup.
Can I text a lead I bought from a vendor?
Only if the vendor's consent covers texts from your company and you can obtain the consent record (text, timestamp, page and source). Without that, call by hand or get fresh consent first. Confirm your approach with counsel.
Sources
Try it in the app
Signed in? Open the screen this lesson covers.
Finished this lesson?
0 of 7 lessons in Compliance basics
Progress is saved in this browser. Sign in to keep it across devices.
Related lessons
- Sales and merchant conversationsLead sources and what they really costLive transfers, aged data, UCC lists, web leads, referrals and partners compared, with a worked example of cost per funded deal by source.
- Sales and merchant conversationsFollow-up cadences that respect the merchantA sample follow-up cadence for new leads and pending deals, why every touch gets logged, how to honor opt-outs, and when to stop following up.
- Compliance basicsRecordkeeping checklist for every dealWhat to keep on each deal so you can answer a merchant, funder or regulator: application, consents, disclosures, statements, offers, contracts and messages.
- Compliance basicsWhy compliance matters when the product is not a loanAn MCA is usually not a loan, yet brokers and funders still face disclosure, registration, consent, advertising and privacy rules. What applies, and why.
- Help centerYour online application linkShare a link (or embed a form on your website) where merchants apply, upload bank statements and consent. Each application arrives as a new lead.
- Help centerImport leads from a spreadsheetBring in a CSV or Excel list of leads, or merchants with their owners: map the columns, choose how duplicates are handled, and assign the rows to reps.