Home
/
Resources

Final Expense Lead Vendors: Compliance Dos and Don'ts for Agencies

Insurance agency owner at a conference table reviewing printed contract pages with a pen while a colleague holds a coffee mug
  • The FCC has said sellers may be vicariously liable under federal agency principles for TCPA violations by third-party telemarketers (FCC 13-54).
  • If consent is questioned, the seller bears the burden of showing a clear and conspicuous disclosure was provided (FCC 12-21).
  • Prior express written consent must clearly authorize the seller, so check that your agency is named or identifiable (47 CFR 64.1200(f)(9)).
  • No federal rule cited requires a TrustedForm or Jornaya certificate, but without independent proof you rely on the vendor's own records.
  • Federal law and some state laws bar using or disclosing an unlawfully intercepted call, so ask counsel before relying on a vendor recording without a disclosure.

When you buy from final expense lead vendors, the vendor's consent forms, calls and recordings can become your agency's exposure, because the FCC has said sellers may be vicariously liable for third-party telemarketers and the seller bears the burden of proving consent. Get a written agreement, ask for consent records that name your agency, Do Not Call scrub dates and recording disclosure scripts, and stop buying when a vendor cannot produce them.

Why Do a Vendor's Practices Become Your Agency's Exposure?

Many agencies buy web leads, live transfers or calls from final expense lead vendors. The vendor collects the consent, places or connects the call, and often records it; the agency rarely sees how. If a consent form never named your agency, the vendor ignored the Do Not Call Registry, or a transfer was recorded without a disclosure, the question of who answers for it does not stop at the vendor. Agencies take on exposure they may not know about simply because nobody asked for proof.

This checklist covers federal rules, two example state statutes and questions to ask any insurance lead vendor. It does not rank or review any vendor or product.

What Are the Dos and Don'ts for Working With Final Expense Lead Vendors?

DoDon'tWhy It Matters
Get a written agreement with every vendor before buyingBuy on a handshake, a text thread or a price sheetSellers can be vicariously liable for third-party telemarketers under federal agency principles, and contract terms forbidding unlawful calls do not, by themselves, absolve the seller (FCC 13-54, para. 28; para. 34 n.102)
Ask for the consent record behind each lead or transferAssume a lead is "TCPA compliant" because the vendor says soIf consent is questioned, the seller bears the burden of showing a clear and conspicuous disclosure was provided (FCC 12-21, para. 33)
Confirm the consent language names or clearly identifies your agencyAccept consent that names only the vendor or "partners" you cannot match to your agencyPrior express written consent must clearly authorize the seller (47 CFR 64.1200(f)(9))
Ask how and when numbers were scrubbed against the National Do Not Call RegistryRely on the Registry consent exception without a signed written agreement that names your agency and the number on fileThe Registry consent exception requires a signed, written agreement with the seller that includes the number (47 CFR 64.1200(c)(2)(ii))
Get the vendor's recording disclosure script and where calls originateUse, share or forward a vendor recording you have reason to think was made unlawfullyFederal law bars intentionally using or disclosing a communication when you know or have reason to know it was unlawfully intercepted (18 U.S.C. 2511(1)(c)-(d)); Florida and Maryland have similar provisions
Keep your own copies of consent records and scrub datesRely on the vendor to produce records laterIf someone else keeps do-not-call requests, the caller on whose behalf calls are made is liable for failures to honor them (47 CFR 64.1200(d)(3))
Stop buying when a vendor cannot produce recordsKeep buying because volume or price is goodWhether the seller knew, or reasonably should have known, of violations and failed to take effective steps within its power to stop them is a factor the FCC listed (FCC 13-54, para. 46)

Am I Liable for My Vendor's Calls?

You can be. In its 2013 DISH Network declaratory ruling (FCC 13-54, released May 9, 2013), the FCC said a seller is generally not directly liable under the TCPA unless it initiates the call, meaning it takes the steps necessary to physically place it (paras. 24, 26). But the FCC also said the seller "may be held vicariously liable under federal common law principles of agency" for TCPA violations by third-party telemarketers (para. 28).

The ruling points to classical agency (actual authority), apparent authority and ratification as the routes to liability (paras. 28, 34). In paragraph 46, the FCC listed facts that may be relevant to apparent authority, including:

  • Giving the telemarketer access to information and systems normally within the seller's exclusive control.
  • Letting the telemarketer enter consumer information into the seller's systems.
  • Allowing use of the seller's trade name or trademark.
  • Approving or reviewing the telemarketer's scripts.
  • The seller knew, or reasonably should have known, of violations and failed to take effective steps within its power to stop them.

The FCC said the seller "is in the best position to monitor and police TCPA compliance by third-party telemarketers" (para. 37). Whether a vendor relationship creates agency is a fact question for counsel, but "the vendor did it" is not an automatic defense.

Consent is also your burden. In its 2012 order adopting the prior express written consent rule (FCC 12-21, adopted February 15, 2012), the FCC said that if any question about consent arises, "the seller will bear the burden of demonstrating that a clear and conspicuous disclosure was provided and that unambiguous consent was obtained" (para. 33 of the FCC Record version).

What Should Consent Proof From a Vendor Contain?

Under the FCC rule, telemarketing calls made with an autodialer or an artificial or prerecorded voice to wireless numbers, and prerecorded telemarketing calls to residential lines, generally require prior express written consent (47 CFR 64.1200(a)(2)-(3)). As published in the 2025 edition of the Code of Federal Regulations, prior express written consent is "an agreement, in writing, bearing the signature of the person called that clearly authorizes the seller" to deliver such calls, and it must include the phone number (64.1200(f)(9)). The agreement must include a clear and conspicuous disclosure that:

  1. By signing, the person authorizes the seller to deliver or cause to be delivered telemarketing calls using an autodialer or an artificial or prerecorded voice ((f)(9)(i)(A)).
  2. The person is not required to sign as a condition of purchasing any property, goods or services ((f)(9)(i)(B)).

An electronic or digital signature counts if it is recognized as valid under applicable federal law or state contract law ((f)(9)(ii)). Separately, calling a Registry number under the consent exception requires a signed, written agreement between the consumer and the seller that includes the number (64.1200(c)(2)(ii)).

Because the definition turns on authorizing "the seller," check that your agency is named or clearly identifiable.

What Happened to the One-to-One Consent Rule?

The FCC's 2023 rule would have limited consent to one seller at a time. On January 24, 2025, the Eleventh Circuit held in Insurance Marketing Coalition Ltd. v. FCC, No. 24-10277, that the FCC exceeded its authority, and vacated that part of the order, which also included a "logically and topically related" restriction. The court said "consumers no doubt can give 'prior express consent' under the TCPA to receive robocalls from multiple parties." That decision removed the one-to-one restriction; it did not remove the base requirement that the agreement clearly authorize the seller.

Is a Lead Without a TrustedForm or Jornaya Certificate a Risk?

Independent consent certificates are one kind of evidence. ActiveProspect describes a TrustedForm certificate as "a secure, immutable record generated when a consumer interacts with a lead generation page," including a session replay. Verisk Marketing Solutions, the Verisk business unit formed in 2022 through the integration of Infutor, Jornaya and Contact State, describes its LeadiD Create product (documented in its Jornaya implementation guides) as "a trusted independent third-party solution showing the full history of the lead before reaching the buyer." Neither company's page says its product guarantees compliance. Our companion article on Jornaya vs. TrustedForm explains how they differ.

No federal rule cited in this article requires a certificate. A certificate does not make a lead compliant, and a missing one does not make a lead illegal. Without independent proof, though, the agency relies on the vendor's own records, which are only as good as the vendor's ability to produce them. For how to organize that evidence, see our guide to a TCPA consent audit trail.

Can I Use Call Recordings a Vendor Made?

It depends on how it was made. Federal law allows a person who is not acting under color of law to record a call they are a party to, or where one party has given prior consent, unless the recording is made to commit a criminal or tortious act (18 U.S.C. 2511(2)(d)).

Federal law also makes it unlawful to intentionally disclose or use the contents of a communication "knowing or having reason to know that the information was obtained through the interception" of a communication in violation of that subsection (18 U.S.C. 2511(1)(c)-(d)). Using or passing along an unlawfully made recording can be a separate problem.

Some states require every party's consent. Two examples, read on official state sites:

  • Florida: interception is lawful when "all of the parties to the communication have given prior consent" (Fla. Stat. 934.03(2)(d)). The statute separately prohibits intentionally disclosing or using the contents of a communication when the person knows or has reason to know it was unlawfully intercepted (934.03(1)(c)-(d)).
  • Maryland: a person may intercept a communication they are part of where all parties have given prior consent (Md. Code, Cts. & Jud. Proc. 10-402(c)(3)). Willfully disclosing or using the contents, knowing or having reason to know they came from an unlawful interception, is also prohibited (10-402(a)(2)-(3)).

This article does not cover other states. Whether a vendor's recording was lawfully made depends on the states involved and the facts, such as whether a disclosure was played and when. Before relying on, sharing or forwarding a vendor recording that lacks a disclosure, ask counsel. For state-by-state background, see call recording consent for insurance agents.

What Should You Ask a Lead Vendor Before You Buy?

General guidance, not contract language; have counsel draft or review any agreement.

  1. A written agreement. Put the relationship in writing, including who places calls, who is responsible for consent and Do Not Call compliance, and what records the vendor must keep and deliver.
  2. Consent records per lead. For each lead or transfer, ask for the exact disclosure text the consumer saw, the page URL, the date and time, the phone number consented, and how your agency was named or identified as the seller.
  3. Registry and internal DNC scrubs. Ask which Registry version was used and when, and how the vendor handles do-not-call requests it receives (47 CFR 64.1200(c)(2)(i)(D), (d)(3)).
  4. Recording disclosure scripts. Ask for the exact disclosure played on recorded calls, where in the call it plays, and which states the vendor's callers and consumers are in.
  5. Indemnity and insurance. Ask whether the vendor offers indemnification and carries insurance relevant to telemarketing claims.
  6. Audit rights. Ask for the right to request records on short notice, including after the relationship ends.
  7. A stop rule. If a vendor cannot produce records for a lead, pause buying until it can.

Agency owners building a vendor program can read how CallX works with agencies.

Where Do Inbound Calls Fit?

The FCC's TCPA telemarketing rules focus on calls a caller initiates; the rule defines telemarketing as "the initiation of a telephone call or message for the purpose of encouraging the purchase" of goods or services (47 CFR 64.1200(f)(13)). A call the consumer places to you is different, but not every question goes away. Recording disclosure laws still apply to inbound calls, and any callback or follow-up you place is an outbound call that needs its own consent or exception. Confirm how your call flows are treated with counsel.

Prefer calls where the consumer dials you? CallX connects licensed final expense agents with inbound insurance calls.
Sign up as an agent →

Frequently Asked Questions

Is There Such a Thing as TCPA Compliant Leads?

There is no label that makes a lead compliant. What matters is whether the calls are lawful, which for autodialed or prerecorded telemarketing to wireless numbers generally means prior express written consent that clearly authorizes the seller and includes the required disclosures (47 CFR 64.1200(a)(2), (f)(9)), plus Do Not Call compliance.

Is a Lead Without a TrustedForm or Jornaya Certificate Illegal?

No federal rule cited here requires a certificate. Without one, though, you rely on the vendor's own consent records, and the seller bears the burden of showing a clear and conspicuous disclosure was provided (FCC 12-21, para. 33).

This article is general education, not legal advice. It summarizes federal rules, FCC orders, an Eleventh Circuit opinion and two state statutes as read in November 2026; other state laws can add requirements. Confirm your vendor contracts, consent records and recording practices with counsel.

Sources

Have Other Questions?

Talk to an expert