May 4, 2026 · 9 min read
TCPA compliance checklist for small businesses making collection calls in 2026
The Telephone Consumer Protection Act carries $500–$1,500 per-call statutory damages and class-action exposure. Here is a plain-English compliance checklist for the specific rules that apply to invoice follow-up calls — not telemarketing.
TCPA compliance for invoice collection is different from telemarketing compliance. The law is the same law — the Telephone Consumer Protection Act, passed in 1991 and updated by the FCC multiple times since — but the specific provisions that matter differ. Invoice follow-up is not selling; it is recovering money owed. Here is what actually applies.
Rule 1: call windows. All outbound calls to consumers must happen between 8 AM and 9 PM in the recipient's local timezone. This is the federal floor; California (9 AM to 8 PM), Colorado, and several other states have tighter windows. The customer's local timezone, not yours. A business in California calling a customer in New York must apply the Eastern timezone — and vice versa. Calling at 7:30 PM Pacific to a New York customer is 10:30 PM Eastern: a TCPA violation.
Rule 2: AI and pre-recorded voice disclosure. Any call that uses an AI voice or a pre-recorded message must disclose this at the very start of the call, before any business reason is stated. The disclosure must be verbal, on the call. An email the day before saying 'you may receive an AI call' does not satisfy the requirement. The standard opener that satisfies this: 'This call may be recorded. I'm an AI assistant calling on behalf of [Your Business].'
Rule 3: no calls on Sundays (and some state-level Saturday restrictions). The federal TCPA allows calls on Saturdays inside the call window. California, Massachusetts, and some other states restrict Saturday calls or weekend calls for certain collection contexts. The safest default for first-party invoice follow-up is Monday through Saturday, inside the local-timezone window.
Rule 4: DNC and opt-out. A customer who says 'please don't call me' or 'stop calling' must be added to your DNC list immediately, with no further calls placed. Under TCPA, a single call after a verbal opt-out is a separate violation. Most state-level debt collection statutes (California Rosenthal Act, Florida FCCPA, Texas DCPA) require that a written cease-and-desist be honored within a specific timeframe. The safest implementation: stop on the call, log it, and never call that number again for that creditor.
Rule 5: cell phone numbers and autodialer rules. TCPA's strongest protections apply to calls made with an 'automatic telephone dialing system' (ATDS) to cell phones. The Supreme Court's 2021 Facebook v. Duguid decision narrowed the ATDS definition, but AI-voice calls placed by software still carry TCPA exposure because of the pre-recorded voice provisions, which apply regardless of ATDS status. When in doubt, treat every mobile number as TCPA-covered.
Rule 6: identify the caller. The call must identify the business on whose behalf it is being placed, within the call. 'I'm an AI assistant calling on behalf of [Your Business]' satisfies this. Calls that say 'this is an important message' without identification violate TCPA and several state statutes.
What statutory damages actually look like: $500 per violation for an inadvertent TCPA violation; $1,500 per violation for a knowing or willful violation. Class actions are common because plaintiffs' attorneys can aggregate thousands of individual violations into a single case. A small business that made 500 calls outside the permitted window — even inadvertently, if the timezone routing logic was wrong — faces $250,000 to $750,000 in potential statutory damages. The math is not theoretical; TCPA class actions against small businesses have settled in this range.
Syntharra's compliance layer applies these rules at the infrastructure level, before any AI model logic runs. Call windows are computed from the customer's billing address timezone. AI and recording disclosures are hardcoded on the opener. DNC flags stop calls before they are placed. The compliance architecture is documented at /compliance. State-specific TCPA floor extensions are at /collections-laws. This post is general information, not legal advice.