The 8-to-9 Rule: Federal Cold Calling Hours

Understanding federal cold calling hours is critical for compliance, as violations can lead to steep penalties and reputational harm. The 8 a.m.–9 p.m. window in the called party’s local time is the baseline set by the FTC’s Telemarketing Sales Rule (TSR) and the FCC’s Telephone Consumer Protection Act (TCPA). This rule applies to all residential calls, with exceptions for business-to-business (B2B) outreach under specific conditions.

The recipient’s time zone dictates compliance, not the caller’s location. Sales teams must align campaigns with the prospect’s local hours, as emphasized by Kixie’s research which notes that "designing campaigns around the prospect's local time" is non-negotiable. For example, a call to a California recipient at 9 p.m. local time would violate rules, even if the caller is in New York.

Penalties for noncompliance are severe. The FTC can impose fines up to $53,088 per violation, while the TCPA allows $500–$1,500 per call according to industry data. State laws further complicate matters, with at least 15 jurisdictions enforcing stricter rules. Oregon, for instance, limits calls to 8 a.m.–8 p.m. with a daily contact cap, while Texas restricts Sunday calls to noon–9 p.m.

To mitigate risk, businesses should adopt a narrower compliance window. Martal recommends 11 a.m.–8 p.m. Eastern Time, Monday–Friday, as a universally safe approach to avoid state-specific conflicts. Automated systems that enforce time restrictions and screen DNC lists are essential, given the surge in TCPA class actions—283 filings in March 2026 alone.

For teams like Worqd, which prioritizes permission-aware outreach and AI-driven lead conversion, adhering to these rules ensures seamless operations. By integrating compliance into workflows, businesses protect themselves while maintaining effective engagement.

• 15+ states have stricter cold calling rules than federal standards
• Penalties range from $500 to $1,500 per TCPA violation
• 11 a.m.–8 p.m. ET is recommended for universal compliance

State Restrictions: Where the Federal Window Isn't Enough

If your campaign touches Texas on a Sunday morning, the federal 8 a.m. start time just broke the law. The 8 a.m.–9 p.m. federal window is a floor, not a ceiling — and assuming it protects you in every state is one of the most expensive mistakes in outbound sales.

At least 15 states impose stricter rules than the federal baseline, and the differences go well beyond shaving an hour off the evening. Some states cap how often you can call; others ban entire days. And remember: federal rules use the called party's local time, not your rep's — so a Denver team dialing Rhode Island at 8 a.m. Mountain Time is already outside that state's 9 a.m. start.

Here are the state windows that trip up most multi-state campaigns:

• Oregon: 8 a.m.–8 p.m., plus a 3-contact daily cap under HB 3865, effective January 1, 2026.
• Texas: 9 a.m.–9 p.m. Monday–Saturday, with Sunday calls allowed only from noon; violations carry $5,000 penalties.
• Alabama: 8 a.m.–8 p.m., with no Sunday or holiday solicitation calls at all.
• Connecticut and Maryland: both narrow the day to 8 p.m., with Maryland adding a same-subject frequency limit.
• Rhode Island: the tightest window in the country — weekdays 9 a.m.–6 p.m., Saturdays 10 a.m.–5 p.m., no Sunday calls.

Nevada takes a different approach: residential solicitation between 8 p.m. and 9 a.m. is treated as a deceptive trade practice, per state telemarketing law summaries. That classification opens the door to enforcement beyond simple fines.

The stakes are rising fast. Q1 2026 set a record for TCPA class actions, with 283 filings in March 2026 alone and a 34.3% year-to-date increase through June. Penalties run $500–$1,500 per call under the TCPA, and up to $53,088 per FTC violation.

So how do you run a compliant multi-state campaign without memorizing 50 rulebooks? Apply the narrowest verified window governing your campaign, then layer on suppressions for recipient local time, Sundays, holidays, and state DNC requirements — the approach recommended by telemarketing compliance guides. For a single universal window, one analysis suggests 11 a.m.–8 p.m. Eastern, Monday–Friday.

This is also where vetting an outreach partner matters. If you work with a growth agency like Worqd, ask directly how its calling systems enforce state-specific hours and consent rules — enforcement should live in the technology, not in a rep's memory. As one compliance-focused professional put it, the teams that build compliance into daily systems are the ones that keep their pipelines intact.

Quiet Hours Aren't Enough: Building a Compliance Stack

Compliance with cold-calling hours is just the beginning of adhering to telemarketing regulations. Businesses must build a comprehensive compliance stack to avoid legal pitfalls and maintain trust with their audience. The federal baseline for cold calling hours in the United States is 8 a.m. to 9 p.m. in the called party's local time, as established by both the FTC's Telemarketing Sales Rule (TSR) and the FCC's Telephone Consumer Protection Act (TCPA). However, this window is just one layer of compliance.

To ensure full adherence, companies must scrub their lists against the Do Not Call (DNC) Registry at least every 31 days, according to industry research. Additionally, any opt-out requests must be honored within 10 business days, an essential practice to avoid hefty fines. Prior express written consent is necessary for AI/autodialed calls, and all relevant records must be kept for a specified period. The failure to comply with these regulations can result in penalties ranging from $500 to $1,500 per call under the TCPA, with FTC penalties reaching up to $53,088 per violation. Businesses that do not adhere to these guidelines risk significant financial and reputational damage.

• DNC scrubbing every 31 days is mandatory to avoid penalties.
• Opt-out requests must be honored within 10 business days.
• Prior express written consent is required for AI/autodialed calls.
• Accurate record-keeping is crucial to demonstrate compliance and avoid legal issues.

When choosing a provider, it's essential to evaluate their compliance practices thoroughly. This includes checking whether they follow all regulatory requirements, including scrubbing DNC lists frequently, honoring opt-outs promptly, and maintaining precise records. At Worqd, for example, we ensure that our AI-powered growth strategies are meticulously compliant with all telemarketing regulations. We prioritize permission-aware outreach and maintain detailed records to safeguard our clients' interests.

Compliance is not just about adhering to calling hours but about building a robust system that encompasses all regulatory requirements. Businesses must stay vigilant and proactive in their compliance efforts to protect themselves from legal risks and maintain customer trust. By establishing a comprehensive compliance stack, companies can focus on generating leads and converting them into booked calls, all while operating within the bounds of the law.

What to Ask a Growth Partner About Cold Call Compliance

Hiring someone to run your outreach shifts the compliance risk to their systems — or it should. With TCPA violations running $500–$1,500 per call and FTC penalties reaching $53,088 per violation, a growth partner's answers about compliance matter as much as their answers about results.

Ask any prospective partner three things before signing. First: how do they enforce calling hours? The federal window is 8 a.m. to 9 p.m. in the called party's local time, not the caller's, and at least 15 states impose stricter rules — Oregon caps calls at 8 p.m., Texas starts at 9 a.m., and Alabama bans Sunday calls entirely. A partner should enforce these windows automatically in their dialing and outreach systems, not rely on reps to remember.

Second: how do they track consent? Since the April 2025 revocation rules, opt-outs made through any reasonable method must be honored across all channels within 10 business days. That requires consent records tied to each contact, suppression lists maintained for at least four years, and DNC scrubbing every 31 days. If a partner can't show you how consent is captured and stored, treat that as a warning sign.

Third: how do they handle permission-aware targeting? The safest operational approach, according to telemarketing compliance guidance, is to apply the narrowest verified window governing a campaign, then layer suppressions for local time, Sundays, holidays, and state-specific DNC rules. Ask specifically what suppressions their systems apply before a single call goes out.

When you evaluate a partner, look for these concrete practices:

• Automatic hour enforcement based on recipient time zone, with state-specific windows layered on top
• Consent captured explicitly at the point of inquiry, with records kept and honored across channels
• Outreach that targets relevant, permission-appropriate accounts rather than blasting templates
• Human escalation paths, so after-hours inquiries get handled by systems that never call outside legal windows

This is how Worqd approaches it. Our outreach is personalized and permission-aware — targeted to relevant accounts rather than sprayed — and our booking process requires explicit consent before anyone is contacted. Our AI SDRs qualify every inquiry in under 60 seconds, 24/7, which means after-hours interest gets captured instantly without a human placing a single risky call outside permitted hours.

The stakes are rising. Q1 2026 set a record for TCPA class actions, with 283 filings in March alone. As one real estate professional put it, the teams who build compliance into their daily systems are the ones who keep their pipelines intact. Choose a partner who does the same.