New TCPA Regulations for 2026: How They Affect Surplus Fund Recovery

This article summarizes how we read current requirements as of January 2026 for our own operations. It is not legal advice. TCPA exposure is fact specific and the penalties are per call, so review your program with counsel before you scale any outreach channel.

Why surplus recovery sits in the blast radius

Almost every TCPA claim starts the same way. A consumer receives a call they did not ask for, on a mobile number, from a business they have no relationship with. That is a precise description of what surplus funds outreach looks like from the other end of the line.

The message being delivered is genuinely good news. That does not create an exemption. The statute does not weigh the value of the call to the recipient. It looks at consent, at the equipment used, at the number dialed, and at whether the recipient had asked not to be contacted.

What changed

Ringless voicemail is a call

The theory behind ringless voicemail was that dropping a message directly into a voicemail server is not a call because the handset never rings. Regulators rejected that reading. Ringless voicemail delivered to a wireless number is treated as a call to that number and carries the same consent requirements as a live dial.

For recovery agents this closes what had been a popular workaround. Voice drops to cold mobile numbers are not a safe alternative to cold calling. They are cold calling with a different delivery mechanism.

Consent is narrower and revocation is easier

Two related shifts matter. First, the definition of what counts as prior express consent has tightened, and consent obtained by one party can no longer be treated as consent for a list of affiliated marketing partners. Second, a consumer can revoke consent through any reasonable means, including a reply to a text message, and the revocation applies across channels rather than only to the channel it arrived on.

The operational consequence is that a stop request in a text message also ends your ability to call, and it has to propagate to every system you run within a short window. If your text platform and your dialer do not share a suppression list, you have a compliance gap that will eventually produce a violation.

Automated dialing technology is read broadly again

The scope of what counts as an automatic telephone dialing system has moved back and forth in the courts for years. The safe operating assumption in 2026 is that anything selecting or dialing numbers from a stored list with limited human involvement may be treated as covered equipment. Preview dialers with a human clicking each call are on firmer ground than power or predictive dialers.

What this means for a recovery workflow

1. 1Scrub every phone number against the federal do not call registry and against the applicable state list before the first attempt.
2. 2Maintain your own internal do not call list and honor requests immediately across phone, text, and voicemail.
3. 3Dial mobile numbers manually. A person selecting and initiating each call is the cleanest posture available.
4. 4Treat ringless voicemail as a call. Do not use it on cold mobile numbers.
5. 5Respect calling hours in the recipient's time zone, not yours.
6. 6Record the date, time, channel, number, agent, and outcome of every attempt, and retain it.
7. 7Re-scrub before any second campaign. Registrations change and a number that was clear last quarter may not be now.

Mail is the underrated channel

TCPA does not reach physical mail. For surplus recovery specifically, mail also performs better than most people expect, because the message benefits from being accompanied by an actual document.

A claimant who receives a copy of the sale accounting with the surplus figure highlighted can verify the claim independently before speaking to anyone. That converts better than a cold call from a stranger, and it carries a fraction of the regulatory risk. Several states also impose their own rules on written solicitations to foreclosed homeowners, including required disclosures, so mail is lower risk rather than no risk.

State law layers on top

Federal TCPA is the floor. A number of states have their own telemarketing statutes with shorter calling windows, broader definitions, and private rights of action that are easier to bring than a federal claim. Florida and Oklahoma have been particularly active. Several states also regulate contact with foreclosed homeowners specifically, separate from any telemarketing rule.

Working nationally means complying with the strictest rule that touches a given file. Our practice is to apply the tightest standard across the board rather than maintaining fifty variations of a calling script.

Documentation is the actual defense

In a TCPA dispute the recipient testifies that they never consented and never received a scrub. What decides the outcome is whether you can produce records showing otherwise. Firms lose these cases on missing records far more often than on bad intent.

• Date-stamped scrub results for every number, retained with the campaign
• The source of any consent claimed, with the exact language presented
• A complete attempt log with time zone applied
• Suppression list entries with the timestamp of the request and confirmation of propagation
• Evidence that the suppression list is applied across every outbound system

The short version for agents

Slow, documented, manually dialed outreach against scrubbed numbers is boring and it is durable. Automated blasting is fast and it is a liability that compounds with every number you add. In a business where a single claim can take four months to pay, trading durability for speed is a bad exchange.

If you want to talk through how a specific outreach program lines up against these rules, call us at (888) 545-8007.