Is it still TCPA-compliant to dial your aged refi database in 2026?
A practical walkthrough of what changed with the TCPA amendments, why BYOK voice-AI infrastructure matters, and how brokerages stay on the right side of the consent surface.
Every week a broker-owner asks us the same thing in a discovery call: "Is this even legal anymore?"
Short answer: yes, when you own the list and you own the number. The long answer is worth ten minutes of your time. It changes how you buy voice AI and it changes who carries the risk when something goes sideways.
What the 2024 TCPA amendments actually changed
The FCC's one-to-one consent rule and the DNC tightening that followed moved liability closer to the caller of record. Translation: if a vendor is dialing your list under their own phone number, their compliance posture becomes your compliance problem. Most AI dialer vendors ignore this because their entire model depends on controlling the calling infrastructure.
Two things matter now:
- Who bought the lead and captured consent? That's the consumer's trust relationship. Your brokerage, not the vendor.
- Who is the caller of record on the phone number? That's the party the FCC and state AGs will call when a complaint lands.
When those two answer to different entities, you've outsourced your compliance surface to a third party. When they answer to the same entity — you — the surface stays yours. That's the whole reason we built RefinanceFlows as BYOK.
Why BYOK survives the next regulatory cycle
Bring-your-own-keys means your Retell AI agent runs under your Retell account and dials out of your Twilio numbers. We never touch the carrier relationship. We supply the campaign logic, the script structure, the dispositioning, and the dashboard. You supply the consent surface.
The practical upshot:
- Your number is your caller-ID across 10DLC and voice. You control branded calling.
- Your Twilio recordings land in your S3 bucket. You're the custodian.
- When the FCC changes a rule (and they will), you swap us out in a weekend. No hostage taking, no data migration pain.
Is an aged refi list still dialable?
With the right consent on file, yes. A refi lead from 2021 that opted in for loan-related outreach still has standing consent unless you revoked it. The risk isn't dialing — it's dialing everyone without checking the consent column first.
Our sprint starts with a scrub pass: DNC, litigator-likelihood scores, consent flags, and any state-level carve-outs. Only the survivors get called. Fewer dials, cleaner risk profile, higher connect rate. Everyone wins.
The one-minute test
Before you sign with any voice-AI vendor, ask these four questions:
- Whose Twilio account pays for the minutes?
- Where do the call recordings live and who has the bucket credentials?
- If you cancel in 30 days, do you keep the numbers and the data?
- Who receives the FCC complaint when it comes?
If the answer to #1–#3 is "ours" and #4 is "you," the vendor has structured the relationship so their upside is their downside, not yours. That's the setup you want.
Want to see the compliance dashboard we ship? Book a 15-minute call and we'll walk the Iconic Mortgage deployment in real time.