How Long Does TCPA Consent Last? What Insurance Agents Need to Know Before Dialing an Old Lead

Every agent with a few years in has a folder of old leads. Internet leads from last spring, a mailer batch from two years ago, a spreadsheet an upline handed over when someone quit. The question that comes up every time someone opens that folder is the same: these people said I could call them once, so can I still call them now?

The honest answer is that the law does not give you a date, which is why so many agents either treat old consent as permanent or treat it as worthless. Both are wrong. There is no expiration printed on consent, but there are several clocks running underneath it, and the risk on a given lead goes up steadily as they run. This is how I think about it, what I check before an old lead goes back into a queue, and what has to be on the record for any of it to hold up.

The short answer

Under the federal TCPA rules, prior express written consent does not expire on its own. The FCC was asked to put a time limit on it and declined. Consent lasts until the consumer revokes it, and revocation can happen any reasonable way: on a call, in a text reply, in an email, to your assistant. The consent records guide covers what a revocation does to your file.

That sounds like good news for the old folder. It is not, for three reasons. First, consent is only worth anything if you can produce it, and the older the lead, the less likely you can. Second, consent is given to named companies for a stated purpose, and most old leads were never yours to begin with. Third, the number attached to the consent is the thing that drifts. People change numbers, carriers recycle them, and the person who said yes may not be the person who picks up. None of those problems are about a date. All of them get worse with time.

The clocks that actually apply

Agents mix up several different rules when they talk about consent age. They are separate, and they cover different things. This is the table I wish someone had given me early.

The one agents lean on most is the inquiry exemption, and it is the one they misunderstand most. A lead form is an inquiry, so for 3 months you can call that person even if they are on the national DNC list. After 3 months, that exemption is gone. If the lead form also contained proper written consent naming you, the consent may still be alive after the 3 months, and consent is its own DNC exemption. If the form did not name you, then after 3 months you are calling a DNC-listed number with nothing to stand on. The EBR guide walks through both windows in detail.

Why old consent gets weaker even without a deadline

If the statute does not set a limit, where does the risk come from? From everything around the consent, not the consent itself.

The number moves

This is the biggest one. Consent attaches to a person, but you dial a number. Carriers recycle disconnected numbers, and a number that reached your lead eighteen months ago may now reach a stranger who never filled out anything. Their consent is zero. Courts have been consistent that the caller bears that risk, which is why the FCC built the Reassigned Numbers Database and the safe harbor that comes with using it. The reassigned numbers guide covers how to run the check. The short version: every lead older than a few months gets checked against the consent date before it is dialed again.

The person forgets

A consumer who filled out a form last week knows why you are calling. One who filled it out fourteen months ago does not, and "I never signed up for this" is the first sentence of a lot of complaints. You can be legally right and still end up explaining yourself to a state attorney general or a plaintiff's lawyer, and the cost of being right is not zero. Old consent that surprises people generates complaints. Complaints generate spam labels and demand letters.

The scope was narrower than you think

Read the actual consent language on the form your leads came from. It usually authorizes calls from specific named partners about a specific product. It may say "regarding your request" or "for a quote." Consent to be called about the quote they asked for in March is a shaky basis for a call about an annual review in the following January. The further your call drifts from what the form described, the less the form protects you, no matter the date.

State law adds its own layer

Several states have passed their own telemarketing statutes with definitions and consent requirements that do not match the federal ones, and some define consent narrowly enough that a generic lead-form checkbox may not satisfy them at all. Age does not fix that, but it makes it more likely that the rules changed between the day the consent was given and the day you dial. The state mini-TCPA guide has the ones that matter most for life agents.

The four questions before an old lead gets dialed

I run every aged record through the same four questions. If any answer is no, the lead does not go into a consent-based queue. It might still get a call, but a different kind, which I cover below.

1. Can I produce the consent?Not "the vendor says they had it." The form text, the timestamp, the number entered, and ideally a certificate or screen capture, sitting on the contact record. If all you have is a name and a number in a spreadsheet, the answer is no.
2. Does the consent name me? Me, my agency, or a company I am contracted to call on behalf of, listed on the form the consumer saw. A lead resold three times has consent for the first buyer, not for you. This is the question that kills most aged lists.
3. Has the number been reassigned since the consent date? Database check, logged with the date you ran it. No check, no safe harbor.
4. Is the number clear on the DNC lists as of this month? National list, scrubbed within the last 31 days, and my own internal list. A consent record that names me is a DNC exemption, but only if it survives questions one and two. My internal list overrides everything.

The pattern that shows up when you actually run this: most leads under 90 days pass. Most leads over a year fail on question one or two, not because consent expired but because the paperwork never made it to you in the first place.

What to do with a lead that fails

A lead with no usable consent is not a dead record. It is a cold record, and cold records have rules of their own that do not depend on consent at all. A live person manually dialing a number, one at a time, during calling hours, with the number scrubbed against the national and internal DNC lists, is not making an autodialed or prerecorded call. That is the ground the whole single-line power dialer approach stands on.

So the old folder gets split into two piles, not thrown out. The pile with real consent naming you, checked for reassignment, goes back into the normal queue with whatever cadence you use for fresh leads. The pile without goes into a cold queue: DNC-scrubbed monthly, manual dial only, inside hours, no texts, no voicemail drops, honest opener that says who you are and why you are calling in the first sentence. A DNC-listed number in the cold pile does not get called at all, because there is no exemption left to lean on.

The aged lead revival playbook covers what to say once you are on the line. The point here is just that the compliance posture is decided before the dial, by which pile the record is in, and the record should show which one.

Consent you generate yourself

Everything above is about consent someone else collected. Consent you collect yourself is the easy case, and it is the reason working your own leads is so much cleaner than working a purchased list. When the form is on your page, you control the language, it names you, the timestamp and the number are in your system the second it is submitted, and there is no question about who the consumer thought they were agreeing to hear from.

Two habits keep that consent healthy as it ages. First, store the full record at intake, not a flag that says "consented." A checkbox in a CRM proves nothing. The form text as shown, the timestamp, the IP if you have it, the number entered, and any certificate ID, on the contact, where it will still be in three years. Second, when someone becomes a client, note the policy and payment dates, because from then on the transaction exemption is running alongside the consent and it resets with every premium.

And when the consumer says stop, in any form, log it the same day and honor it everywhere. A revocation is the one thing that ends consent for certain, and the record of it is the one document you will be asked for first.

What has to be on the record

None of this survives contact with a demand letter if the information lives in a vendor portal you no longer have access to. For each lead, the contact record needs these fields, and I have made the case for most of them before in the CRM fields guide.

• Consent date and source. When the form was submitted and which form, so the inquiry clock and the reassigned-number check both have a starting point.
• Consent text and evidence. The actual disclosure, plus certificate ID or capture. If the consent names specific sellers, note whether you are one of them.
• Consent status. Verified for me, verified for someone else, unknown, or revoked. This is the field that decides which queue the record is allowed in.
• Last DNC scrub date. National and internal. Anything older than 31 days should block the dial.
• Reassigned-number check date and result. Logged per check, because the safe harbor is about what you knew on the day you called.
• Revocation date and channel. If it ever happens, this becomes the most important field on the record.

Every one of those fields is a date or a short status. None of them are hard to store. The hard part is doing it at intake, every time, so that a year from now the old folder is a set of records with answers instead of a set of names with a question mark.

How FEXmagnet handles it

FEXmagnet is a CRM and single-line power dialer for life agents, and consent age is treated as a property of the record, not something the agent has to remember. Consent source, date, and evidence live on the contact from import or webhook intake, and the consent status field controls which queues the record can enter. A lead marked verified for another seller, or unknown, cannot be added to a consent-based campaign and cannot be texted.

DNC scrubbing runs against the record at dial time, not just at import, so a lead that sat for six months is rescrubbed before the first call. A stop request from a live call or a text reply is one tap to internal DNC across every campaign, with the date and channel logged. And because the dialer places one call at a time with a live agent on the line, the cold pile has a compliant home too: manual, in hours, scrubbed, with the consent status visible on screen so you know which conversation you are walking into.

We are not a lead vendor. The product exists so the consent you already earned stays provable, and the leads you do not have consent for are still worked the safe way instead of thrown out.