Can Real Estate Agents Legally Text Old Leads? (2026 Compliance Guide)

The 2026 rules on texting old real estate leads: what TCPA requires, why old leads carry more risk than fresh ones, and how to text your dormant database without triggering a lawsuit.

Real estate agents ask this question constantly: I have 2,000 old leads sitting in my CRM. Can I text them?

The honest answer in 2026: sometimes yes, often no, and the specifics matter more than most agents realize. Texting old dormant leads carries meaningfully more legal risk than texting fresh, actively engaged ones, and the rules changed dramatically in 2025-2026. This post is the honest 2026 compliance breakdown: when it’s legal, when it isn’t, what “consent” actually requires today, and what real damages look like when agents get it wrong.

Disclaimer up front: this is informational, not legal advice. TCPA and state SMS regulations vary and continue to evolve. Confirm with your broker and a qualified compliance attorney before texting any old lead list.

The short answer

You can legally text old real estate leads only if you have documented prior express written consent (PEWC) from that specific lead, for your specific business, that hasn’t been revoked. For most agents with older dormant databases, this consent either was never properly obtained, or is now legally questionable.

One piece of that landscape is widely misreported, so it is worth getting straight. The FCC’s “one-to-one consent” rule was scheduled to take effect January 27, 2025, and the FCC later postponed that date to January 26, 2026 pending judicial review. Neither date arrived. The Eleventh Circuit vacated the rule on January 24, 2025 in Insurance Marketing Coalition v. FCC, the postponed date became moot, and the FCC has since repealed the language outright. The rule never took effect and is not coming back on a schedule. The underlying TCPA consent requirement, however, has been in place since 1991 and never went anywhere.

What TCPA actually requires for marketing texts

The Telephone Consumer Protection Act governs virtually every marketing text an agent sends. The core rules:

1. Prior express written consent (PEWC) must be obtained before sending any marketing text via autodialer or automated system.

2. That consent must specifically authorize marketing communications, general “we may contact you” website language doesn’t qualify.

3. Consent is revocable, under the 2025 revocation rules active in 2026, a consumer can revoke consent through any reasonable method (text reply, phone call, email, social media message), and you must honor it within 10 business days across all channels.

4. Every marketing text must include opt-out language, typically “Reply STOP to opt out.”

5. Statutory damages: $500-$1,500 per violating message. Not per lawsuit, per message. Class action exposure is real.

Why old leads carry more risk than fresh ones

Here’s where most agents get exposed. Fresh leads that just opted in have clean, documented, recent consent. Old leads are a different story:

Consent may have been improperly obtained. Pre-2020 lead forms often used vague “you agree to be contacted” language that no longer clearly qualifies as PEWC under current standards.

Consent may have expired or been revoked. Consumers may have replied STOP, verbally withdrawn consent to another agent, or opted out through other channels you don’t have record of.

Documentation is often missing. Even if consent was valid at acquisition, most agents can’t produce the specific IP address, timestamp, and consent-language screenshot required to prove it years later.

Numbers may be reassigned. The FCC’s Reassigned Numbers Database is real. If a lead’s phone number was reassigned to someone else since they opted in, texting the new owner is a TCPA violation, even though you had valid original consent.

Shared lead-generation consent. Some leads may have been acquired under forms that shared their information with multiple businesses. The FCC rule that would have made this a per-seller requirement was vacated and repealed, so shared consent is not prohibited outright. That does not make it strong. A form the consumer read as “an agent may contact me” is thin support for a marketing text from you specifically, years later, and the burden of proving consent sits with you.

The specific scenarios and their risk levels

LOW RISK: Past clients who bought or sold with you. Real existing business relationship. Recent, documented consent (they signed contracts, gave you their phone number for transaction purposes). Texting them for check-ins, referral requests, or market updates, very low TCPA exposure.

LOWER RISK: Recent leads (< 12 months old) with documented opt-in. Consent still fresh, still likely valid. Assuming your original opt-in language was properly worded and captured, safe to text.

MODERATE RISK: Old leads (1-3 years old) with documented consent. Consent may be stale but often still valid depending on your state and the original form. Some agents send a “consent refresh” opt-in text before restarting outreach. Others cite continued relationship.

HIGH RISK: Old leads (3+ years old) with unclear consent documentation. Where most agents’ dormant databases actually sit. Consent may or may not still be valid. Numbers may be reassigned. Documentation may be lost. Class-action lawyers specifically target these campaigns.

VERY HIGH RISK: Purchased leads, scraped lists, DNC-registered numbers. Almost always noncompliant. This includes many “lead reactivation” campaigns run on lists agents bought years ago. Class-action exposure is enormous.

For a text to be truly compliant under 2026 rules, the original consent should ideally include:

  • The consumer’s affirmative action (checkbox they clicked, signature they provided), not a pre-checked box
  • Clear disclosure that they’re consenting to marketing texts, not just “communications”
  • Identification of your specific business by name
  • Notice that consent isn’t required to make a purchase or receive services
  • Timestamp and IP address proving when consent was given
  • Screenshot or archived version of the exact consent language shown at the time

If your old lead consent doesn’t include most of these, it’s on shaky legal ground. Some agents use tools like TrustedForm to automate consent documentation going forward, but that doesn’t retroactively fix old leads.

State laws add another layer

Federal TCPA is the floor, not the ceiling. Several states have “mini-TCPA” laws with even stricter requirements:

Florida (FTSA), Requires prior express written consent for autodialed texts. Actively enforced. Statutory damages available.

Washington, Restricts telephone solicitations, including texts, with specific consent and disclosure requirements.

Oklahoma, Adopted state-level TCPA equivalents.

Texas (SB 140), Restricts unsolicited commercial texts.

California, Restricts telephone solicitations and applies additional privacy rules under CCPA to lead data.

New York, New Jersey, Colorado, Illinois, All have varying restrictions worth checking with local counsel.

If you operate across state lines, the strictest applicable state law generally governs.

What “safe reactivation” of old leads actually looks like

For agents who genuinely have old leads and want to work them compliantly, here’s the safer framework:

1. Segment by consent quality. Separate leads by original acquisition method. Past clients (existing relationship) go in one bucket. Documented, recent opt-ins go in another. Old, poorly-documented leads go in a third.

2. Voice calls before texts on the risky bucket. For old leads with unclear consent, a manual voice call to a publicly-listed number carries lower text-based TCPA risk than autodialed cold texts. If the voice call establishes a genuine conversation, subsequent texts have implied consent.

3. Scrub against DNC and reassigned number databases. Before any reactivation campaign, scrub the list against the National Do Not Call Registry and check the Reassigned Numbers Database. This is a real compliance step, not optional.

4. Consider a consent-refresh outreach. Some agents send an initial “we’d like to keep in touch, reply YES to continue receiving updates” opt-in text before broader marketing. This is technically also a marketing text and carries its own TCPA considerations, but it’s the safer path when consent documentation is weak.

5. Include opt-out on every message. Not optional. Every marketing text needs “Reply STOP to opt out” at minimum.

6. Document everything going forward. Even if you can’t fix old consent gaps, ensuring new consent is properly captured (IP address, timestamp, screenshot of language) protects your future compliance.

7. Honor revocations across all channels within 10 business days. Under the 2025 revocation rules, a consumer replying STOP to one of your texts applies across your other calls and texts to that person, not just the campaign they replied to. It does not automatically govern your email, which sits under CAN-SPAM and its own opt-out mechanics. Honoring it everywhere anyway is the right call, but treat that as good practice rather than something the TCPA rule did for you.

What automation tools can and can’t do

Automated reactivation tools like Klosed handle the mechanics of compliant SMS reactivation, every message includes opt-out language, STOP handling is automatic, time-of-day restrictions are enforced, and the platform is A2P 10DLC registered for carrier compliance.

But automation tools cannot fix consent gaps on your original lead list. If you upload a database of 2,000 leads where 400 have unclear consent history, no software solves that legal question. The agent (with their broker and attorney) has to make a judgment call about which leads are safe to reactivate.

Klosed is built to run compliant reactivation on databases where consent is genuinely documented (past clients, opted-in leads, existing agent relationships). It’s not designed to help agents cold-text purchased lists or noncompliant leads. That’s a different (much riskier) use case that no responsible tool should facilitate.

The honest bottom line

Most agents have a mix in their dormant database, some legally safe to text, some ambiguous, some outright risky. The compliant path is:

  • Confidently text: past clients, recent documented opt-ins, existing agent relationships
  • Handle carefully: older leads with unclear consent (segment out, consider voice-first or consent-refresh)
  • Don’t text: DNC-listed numbers, purchased lists, leads with no consent documentation, reassigned numbers

The temptation for many agents is to just text everyone and hope for the best. The math: at $500-$1,500 per violating message, one class-action suit from a plaintiffs’ firm targeting your reactivation campaign can cost far more than the pipeline you were trying to generate.

Real reactivation, done right, is a compliance-forward activity, not a compliance workaround.

Logan Bates, Founder, Klosed. This article is for informational purposes only and does not constitute legal advice. TCPA compliance requirements vary by state and continue to evolve. Consult a qualified compliance attorney before running any reactivation campaign on old lead lists.