DNC List Scrubbing: What the Rules Require and How to Do It

DNC list scrubbing means checking every number on a calling list against the National Do Not Call Registry, applicable state lists and your own internal opt-out list, then removing the matches before anyone dials. The federal minimum is a scrub at least every 31 days. In practice, a compliant team also needs state lists, an internal list that updates the moment someone says “stop,” and a record that proves it all happened.

This guide covers what the law requires, what a complete scrub includes, how to run it and what to look for in software.

TL;DR

• Federal rule: sellers and telemarketers must access the National Do Not Call Registry and remove registered numbers at least every 31 days.
• A real scrub has layers: the federal registry, state lists, your internal DNC list and, for many teams, litigator and wireless checks.
• The 31-day scrub is a floor. Opt-outs and reassigned numbers change between scrubs, so check again when the dialer launches the call.
• You stay legally responsible even when a vendor or platform does the scrubbing. Keep your own audit trail.

Table of Contents

• What DNC list scrubbing actually is
• What federal law requires
• The layers of a complete scrub
• Batch scrubs are not enough
• A scrubbing workflow that holds up
• How to choose DNC compliance software
• Our perspective: scrubbing belongs inside the dialer
• Run compliant outreach with RevRing
• Common mistakes to avoid
• FAQ
• Sources

What DNC list scrubbing actually is

A scrub compares your list of phone numbers with every list of people who have said they do not want telemarketing calls. Matches get removed or flagged. What remains is the set of numbers you may lawfully call for that campaign.

The lists involved are:

• The National Do Not Call Registry, run by the FTC.
• State Do Not Call lists, which some states maintain on top of the federal registry.
• Your internal (entity-specific) DNC list, made up of people who told you directly not to call again.
• Other suppression files, such as known litigator or serial-complainant lists, which are a risk-management choice rather than a legal mandate.

Most people assume scrubbing means a single federal check. That covers one layer of exposure out of several.

What federal law requires

The 31-day rule

Under the Telemarketing Sales Rule, sellers and telemarketers must access the registry and remove registered numbers from their lists at least every 31 days. That replaced the original three-month interval from the 2004 amendments. If you want the evidentiary side of this rule, our post on the 31-day scrub rule and TCPA safe harbor covers what court-ready records look like.

You need a Subscription Account Number

Access to the registry runs through a Subscription Account Number (SAN). The FTC’s guidance says every seller should subscribe, pay the fee and agree to the certification requirements to receive one. If you hire a third-party telemarketer or scrubbing provider, you share your SAN with them. That delegates the work, not the responsibility. The seller keeps the legal obligation.

What access costs

Fees are set by fiscal year, which starts October 1. For fiscal year 2026, the FTC set $82 for a single area code and a maximum of $22,626 for all area codes nationwide. Because fiscal year 2027 began on October 1, check the FTC’s registry site for the current figures before you budget.

Company-specific opt-outs

The registry is not the only list that binds you. Since the FCC’s February 2024 order, callers must honor company-specific do-not-call and consent-revocation requests for robocalls and robotexts within a reasonable time, not to exceed 10 business days. Treat 10 business days as the outer limit, not the target. The best practice is to suppress the number the same day.

The established business relationship exception

An established business relationship (EBR) lets you call someone on the registry in limited cases. According to the FTC, the consumer must have purchased, rented or leased from you within the prior 18 months, or made an inquiry or application within the prior 3 months. Three cautions:

1. You carry the burden of proving the relationship exists.
2. A request to be placed on your internal DNC list ends the EBR for telemarketing purposes.
3. The exception does not remove state-law requirements or other TCPA obligations, such as consent rules for autodialed or prerecorded calls and texts.

This is the question behind “can realtors call people on the DNC list?” and its cousins for insurance and legal intake. The answer is yes only if a valid exemption applies and you can document it. Cold prospecting from a purchased list does not qualify. If your situation is borderline, have a TCPA attorney review it before you dial.

The layers of a complete scrub

State lists

Several states run their own programs. One business advisory overview lists Colorado, Florida, Indiana, Louisiana, Massachusetts, Missouri, Oklahoma, Pennsylvania, Tennessee, Texas and Wyoming. Requirements, costs and exemptions vary, and states change their rules. Confirm each state’s current program with its regulator before you call into it. A multistate insurance or real estate team should treat the state layer as a standing task, not a one-time setup.

Wireless and line-type scrubbing

People search for “wireless DNC scrubbing” and “mobile number scrubbing” because cell numbers carry different consent expectations. Line-type scrubbing tags each number as wireless, landline or VoIP. That matters because calls and texts to mobile numbers made with automated technology generally require prior express consent or prior express written consent under the TCPA, and registry status is a separate question from consent. Passing a DNC check does not make an autodialed text to a mobile number lawful. Tag line type so your consent rules can key off it.

Litigator lists

These files flag numbers tied to people who have filed or been associated with repeated TCPA suits. They are not a legal requirement. Many regulated sales teams use them anyway as a cheap safeguard. If you do, log which version of the file you used and when.

Batch scrubs are not enough

A monthly batch scrub leaves gaps. Between runs, a prospect can register on the registry, tell your agent to stop calling or have their number reassigned to someone else. A list that was clean on the first of the month may not be clean on the twentieth.

That is why compliance practitioners argue for a just-in-time check: confirm the latest status, including consent revocation and reassignment, at the moment the dialer places the call. The 31-day scrub satisfies the minimum. The just-in-time check covers the changes the minimum misses.

A scrubbing workflow that holds up

1. Get your SAN and share it correctly. Register as the seller, pay for the area codes you actually call and give the SAN to any provider that scrubs for you. Keep the certification records.
2. Normalize the list. Standardize formats, remove duplicates and drop obviously invalid numbers before you scrub, so match results are cleaner.
3. Run the full scrub. Federal, state, internal and any suppression files you use. Record the date, the list versions and who ran it.
4. Tag line type and consent status. Keep a field for how and when consent or the EBR was established, with the proof.
5. Load only cleared numbers into campaigns. Do not let uncleared lists sit in the same queue as clean ones.
6. Suppress opt-outs immediately. When someone asks to stop, the number goes on your internal list the same day, across calls and texts, in every campaign. Software that automates opt-out handling makes the 10 business day ceiling a non-issue.
7. Re-scrub on a schedule shorter than 31 days. Many teams pick weekly or nightly. Add a dial-time check on top.
8. Keep the evidence. Scrub logs, opt-out timestamps and consent records are what you hand over in a dispute. Our compliance audit trail post walks through what to retain, and the telesales compliance checklist turns it into a routine.

How to choose DNC compliance software

Searches for the “best DNC scrubber” and “best DNC compliance software” usually end in a feature checklist. Weigh these criteria against your own risk profile:

• Where the scrub lives. Standalone upload tools suit occasional list checks. A high-volume team gets more from scrubbing built into the dialer, so numbers cannot reach an agent without a check. Industry analysis points the same way: large contact centers need platforms that integrate with the CRM for automated, real-time suppression and audit-ready reporting.
• Coverage. Federal, state, internal, litigator and line-type checks in one pass.
• Freshness. How often the underlying data refreshes, and whether checks run at dial time.
• Audit reporting. Can you export proof of a scrub for a given date and list?
• Opt-out handling. Does a “stop” on a call or text update every campaign automatically?
• Industry fit. Healthcare outreach may need a HIPAA business associate agreement. Insurance and legal teams have their own consent and disclosure rules.
• Pricing model. Per-match pricing suits sporadic use. Per-seat platforms suit teams that dial all day.

Whatever you choose, remember that no software moves liability off you. The FTC’s guidance puts the obligation on the seller, and state rules can be stricter than federal ones, so ask any vendor to show which lists it covers and how.

Our perspective: scrubbing belongs inside the dialer

We see the same pattern with agencies and call teams that come to us. They scrub a spreadsheet, upload it, and then a new CRM export, a purchased lead batch or an agent’s personal list slips into the queue unchecked. The scrub was done. The compliance wasn’t.

That’s why we build compliance infrastructure (TCPA, DNC and HIPAA BAA support) into the same platform that handles dialing, CRM connectivity and lead routing. When the check sits where the call is placed, there’s no manual hand-off to forget. We also integrate with the CRM you already have instead of asking you to replace it, so your records and your suppression logic stay in step.

Our advice, whatever tool you use: scrub more often than the law demands, make internal opt-outs instant, and keep every log. A team that can show its work on any date is a team that sleeps well. For deeper reading, see our guide to DNC compliance rules and fines and the consent management for texting post.

— Marc

Run compliant outreach with RevRing

If you run an insurance agency, real estate brokerage, legal intake team or healthcare practice, RevRing combines predictive dialing, CRM connectivity and compliance infrastructure in one cloud platform. Plans are billed per seat: Starter is from $39.99 per month per seat, Scale from $59.99 and Pro from $89.99, with Enterprise priced on request. Telephony, SMS and AI call scoring are usage-based add-ons. See the full pricing, find out how it works or start from the RevRing homepage.

Common mistakes to avoid

• Scrubbing once and reusing the list for months. The 31-day clock applies to your list, not to the day you bought it.
• Checking only the federal registry while dialing into states with their own lists.
• Letting the EBR stretch. The 18-month and 3-month windows are strict, and an opt-out ends the relationship for telemarketing.
• Handling opt-outs in the agent’s notes. If the “stop” does not reach a central suppression list, the next campaign will call that person again.
• Assuming the vendor carries the risk. It doesn’t.
• No records. A scrub you cannot prove is, in a dispute, a scrub that did not happen.

FAQ

How often do I have to scrub my list against the Do Not Call Registry?

At least every 31 days, according to the FTC’s report to Congress. Many teams scrub more often and add a check at dial time, because opt-outs and reassigned numbers change between scrubs.

Can I check whether a single number is on the registry?

Consumers can verify their own numbers on the FTC’s registry site. For business calling lists, sellers access the registry with a SAN, either directly or through a provider with whom they share it. Check the FTC’s current instructions for how access works for your account.

If my vendor scrubs my lists, am I covered?

No. Sharing your SAN with a provider delegates the task, but the seller remains responsible for making sure scrubbing happens, as the FTC’s Q&A for sellers explains. Ask for logs and verify them.

What happens if I call a number on the registry?

You risk enforcement and private lawsuits, depending on the facts and the exemption you can prove. Because penalties and case law change, talk to a TCPA attorney about your specific calling practices. Our DNC compliance rules post outlines the exposure in more detail.

Does scrubbing a number mean I can text it?

No. Registry status and consent are separate questions. Texting and autodialed calls to mobile numbers raise their own TCPA consent requirements, so keep consent records alongside your scrub logs.

Sources

• FTC Biennial Report to Congress, December 2025
• FCC Report and Order, adopted February 15, 2024
• FTC Q&A for Telemarketers and Sellers About DNC Provisions in the TSR
• FTC: Telemarketer fees to access the National Do Not Call Registry in 2026
• Wipfli: State Do Not Call lists
• 1Lookup: DNC scrubbing services analysis
• PossibleNOW: tools for managing do-not-contact lists