TCPA Compliance for Offshore Call Centers: Complete Guide

A large share of the calls made to American consumers are placed from call centers in Pakistan, India, the Philippines, Latin America and elsewhere. A common and expensive misunderstanding in that industry is that US calling laws stop at the US border. They don't. The Telephone Consumer Protection Act (TCPA) and the Telemarketing Sales Rule (TSR) are about who receives the call, not where the agent sits.

This guide is written for offshore call center owners, operations managers and the US clients who hire them. It covers which US rules apply to calls placed from outside the country, who gets sued when things go wrong, and the practical controls that keep campaigns running.

Yes, US law applies to calls from outside the US

The TCPA protects people in the United States from unwanted calls. A sales call from Karachi, Manila or Bangalore to a phone in Texas is a call to a US resident, so:

• The National Do Not Call Registry applies.
• The consent rules for autodialed and prerecorded calls to cell phones apply.
• Federal calling hours apply, measured in the recipient's time zone.
• State laws such as Florida's and Oklahoma's mini-TCPAs apply to calls into those states.

The FTC and state attorneys general have repeatedly brought cases against telemarketing operations run from overseas, and against the US companies that hired them.

Who gets sued: the US client is in the firing line

Enforcing a judgment against a foreign call center is hard, so plaintiffs and regulators usually go after the US seller whose products were being sold. Under vicarious liability, a seller can be held responsible for calls a vendor made on its behalf, especially when the seller controlled the campaign, approved scripts, accepted the transfers or benefited from the sales.

That has two consequences for offshore centers:

1. Your clients will judge you on compliance. A US client who gets sued over your calls will drop you, and may try to recover costs from you under your contract.
2. Compliance is a sales advantage. Centers that can show documented scrubbing, consent records and call recordings win better clients and longer contracts.

The controls every offshore center needs

1. Know the client's consent sourceFor every lead, know where the consent came from and which company it names
2. Scrub every list before it hits the dialerFederal DNC, state lists, the client's internal list and litigators
3. Separate cell phones from landlinesAutodialed or recorded calls to cell phones need written consent
4. Dial only inside US calling hoursUse the recipient's time zone, with stricter state rules applied
5. Capture and honor opt-outs instantlyOne "don't call me" applies to every campaign for that client
6. Record calls and keep the evidenceRecordings, scrub reports and consent logs for at least four years

1. Get the consent story straight

Most offshore campaigns dial purchased or client-supplied leads. Before dialing, ask:

• What form did the consumer fill out, and what exact words did they agree to?
• Which company names appeared on that consent?
• When was the consent given, and can the lead seller prove it?

If the answer is "we don't know", the lead can still be called manually where the number isn't on a Do Not Call list, but not with an autodialer or recorded message to a cell phone. Read TCPA compliance for bought leads before buying any data.

2. Scrub against the right lists

Under the TSR's safe harbor, calls must be made using Do Not Call data no more than 31 days old. Each seller needs its own access to the registry, so the US client normally provides its Subscription Account Number or scrubs the data itself. On top of the federal list, check:

• State Do Not Call lists for the states you're calling.
• The client's internal list of people who asked not to be called.
• Known TCPA litigators, who generate a large share of lawsuits.

Carrier Fence does all of this in one upload, and each report shows the line type and calling hours for every number, which is exactly what an offshore team needs to plan the day. See how to scrub a call list before a campaign.

3. Mind the clock — the right clock

Your agents' shift is on local time; the law is on the recipient's. Calls are allowed between 8 a.m. and 9 p.m. in the recipient's time zone, and states like Florida, Oklahoma and Maryland end at 8 p.m. A Pakistan-based team starting an evening shift is dialing early morning on the US West Coast. Configure the dialer to enforce state-by-state call windows rather than trusting agents to check. Our free calling-time checker shows the allowed window for any number.

Times shown while the US observes daylight saving time; offsets change by an hour in winter.

4. Caller ID and STIR/SHAKEN

Calls must display a caller ID number that the consumer can call back to make a do-not-call request during business hours. Spoofing a number you don't control is illegal under the Truth in Caller ID Act when done to defraud or cause harm, and it destroys your answer rates once carriers spot it.

Calls that originate abroad and enter the US through a gateway provider usually carry weaker STIR/SHAKEN attestation, which makes them more likely to be labeled "Spam Likely". Work with reputable US carriers, use numbers registered to your client, and register those numbers with the analytics providers. See how to remove the Spam Likely label for the full process.

5. Train agents on opt-outs

The fastest route to a lawsuit is continuing to call someone who said "stop calling me". Train agents to:

• Recognize opt-out language in any form ("take me off your list", "don't call again", "not interested, stop").
• Disposition the call as do-not-call immediately.
• Never argue or try to reschedule.

The request must be added to the client's internal list and honored across every campaign for that client.

6. Keep records you can hand to a lawyer

When a complaint arrives, your client's lawyer will ask for the scrub report, the consent record and the call recording for that number. Store them by phone number and date, and keep them for at least four years, the federal statute of limitations for TCPA claims.

Contract terms offshore centers should expect

US clients increasingly write compliance into vendor agreements. Expect, and be ready to meet, clauses that require:

• Scrubbing against federal, state and internal DNC lists before every campaign
• Dialing only approved lists with documented consent
• Calling only within state-specific hours
• Using approved scripts with required disclosures
• Recording all calls and providing recordings on request
• Honoring opt-outs within the required timeframe
• Indemnifying the client for violations caused by the vendor

A center that already does all of this can turn the contract negotiation into a selling point.

A worked example: onboarding a new US client

An offshore center signs a US home-warranty client. A compliance-first onboarding looks like this:

1. Kick-off. The center asks for the client's lead sources, consent wording, internal do-not-call list and registry access arrangements.
2. Data review. One lead source can't produce consent records, so those leads are approved for manual dialing only, and only to numbers not on DNC lists.
3. Dialer setup. Time-zone and state rules are configured: 8 p.m. finish for Florida, Oklahoma and Maryland, Texas Sunday start at noon, a three-attempt daily cap.
4. Scripts. The client approves scripts that identify the client by name, describe the product accurately and handle opt-outs in one line.
5. Pilot. A small pilot runs for a week. The center reports contact rates, opt-outs and abandoned-call rates to the client.
6. Ongoing. Every new list is scrubbed before loading; working lists are re-scrubbed within 31 days; opt-outs are sent to the client daily.

That process takes a few days and turns compliance into something the client can see.

Common myths among offshore centers

Key terms

• Vicarious liability: responsibility of a seller for calls made on its behalf.
• Gateway provider: the US carrier that receives calls from foreign networks.
• Attestation: the STIR/SHAKEN level showing how well a carrier can vouch for the caller ID.
• Safe harbor: protection for occasional DNC mistakes when proper procedures are in place.

Frequently asked questions

Does the TCPA apply to call centers outside the US?

Yes. The TCPA and the Telemarketing Sales Rule apply to calls received in the United States, regardless of where the caller is located. Offshore call centers calling US numbers must follow the same Do Not Call, consent and calling-hour rules as US-based callers.

Who is liable if an offshore call center violates the TCPA?

The call center can be liable, and so can the US company whose products were being sold, under vicarious liability. In practice US sellers are sued most often, which is why they increasingly require proof of compliance from their vendors.

Which time zone do offshore agents need to follow?

The recipient's. Calls are allowed between 8 a.m. and 9 p.m. in the called person's local time, and several states are stricter. Dialers should enforce these windows automatically.

Can an offshore call center access the National Do Not Call Registry?

Registry access is tied to the seller. The US client normally provides its own access or scrubs lists itself, and a scrubbing service can process lists on the seller's behalf.

Do offshore centers need to register with US states?

Some states require telemarketers or sellers to register or post a bond before calling residents. Check the requirements for each state you call; see telemarketing registration by state.

This article is general information, not legal advice.