Can you legally call a lead who filled in your form?

Usually yes, if they gave you the number and asked to be contacted. The detail that matters is what you can prove later.

Updated 2026-08-06 · Kazfen

Contractors are increasingly nervous about this, and reasonably so. The Telephone Consumer Protection Act carries statutory damages per call, plaintiffs' firms actively look for violations, and "I did not know" is not a defence.

The general shape is not complicated. A homeowner who submits your form, provides their phone number, and asks to be contacted about a roof has given you a reason to call. The risk sits in the edges: how you call, when you call, what happens when they say stop, and whether you can prove any of it eighteen months later.

This is a general explanation for contractors, not legal advice. TCPA is federal, many states add stricter rules of their own, and the details of your setup matter. Talk to a lawyer before you rely on any of this.

The parts most contractors get wrong

Calling hours are not optional

Federal rules restrict telephone solicitation to between 8am and 9pm in the recipient's local time zone. Not yours. If you are in Dallas and the lead is in Phoenix, that is their clock, and several states are stricter still. Automated dialling makes this trivially easy to get wrong at scale.

Do-not-call and opt-outs must actually work

If someone replies STOP to a text or asks not to be called, that has to propagate immediately and permanently across every system you run. A stop request honoured in your texting tool but not your dialler is exactly the scenario that produces a claim.

Consent has to be provable

The practical question in a dispute is never "did they consent?" It is "can you show it?" That means keeping a record of the form submission, timestamp, IP address, the exact wording of the consent language shown, and the number provided.

Shared marketplace leads are a weaker footing

When a lead is resold, your consent is inherited rather than direct. Whether that holds up depends on the platform's disclosure and whether you were named. It is a materially weaker position than a form on your own site.

Why phone verification is worth the friction

A step that is easy to dismiss as an extra hurdle: after the form is submitted, text a code and ask the homeowner to enter it before anything else happens.

It looks like friction. It buys three things:

• Proof. The person holding that handset actively confirmed the number. That is a much stronger evidentiary position than a form field someone typed.
• No wrong numbers. Typos and deliberately fake numbers never reach your dialler — which also means you never cold-call a stranger who never asked for anything.
• Better leads. Someone who takes twenty seconds to enter a code is more serious than someone who abandons at that step.

The trade-off is real: some people will not finish. But the ones who do are verified, contactable and more likely to book — and you have a clean record of consent for every single call you place.

A defensible setup

1. Clear consent language at the form, stating that you may call and text about their enquiry.
2. Phone verification before any outbound contact.
3. Stored evidence: timestamp, IP, consent wording, verification result.
4. Calling hours enforced in the lead's time zone, automatically.
5. A single opt-out list every system checks before dialling.
6. Attempt limits, so "persistent" never becomes "harassing".
7. An audit trail of every call and text.

The reframe worth making

Most of the compliance list above is also just good operations. Verified numbers mean fewer wasted dials. Time-zone rules mean you are not annoying someone at 6am. Opt-out discipline means you stop spending on people who will never buy. Attempt limits keep your number off spam lists.

Which is the useful way to think about it: the compliant setup and the effective setup are largely the same setup. The contractors who treat TCPA as paperwork tend to run worse call operations than the ones who build it in.

Keep reading