Can AI Legally Call and Text Your Car Buyers? A 2026 TCPA Guide for Dealers

The phone still rings. In 2026, software is what answers it.

Walk a dealership in 2026 and the most consequential new hire is one nobody interviewed. Stores across the country are handing inbound calls, missed-call callbacks, and lead follow-up to AI voice and text agents - and the money behind that shift is not a rounding error. Gartner projects worldwide spending on AI agent software will reach $206.5 billion in 2026, up roughly 139% from $86.4 billion in 2025, on its way to $376.3 billion in 2027. Voice is one of the fastest-maturing slices: when Amazon's Ring evaluated more than 40 vendors for its inbound phone traffic, it handed the calls to an AI platform.

For a dealer, the appeal is obvious. An agent that answers every call and texts back every lead in seconds plugs the leaks that quietly cost a store deals - the same leaks behind the true cost of missed calls. But there is a 1991 law sitting between that automation and a clean conversion, and in early 2026 a federal appeals court moved it. The Telephone Consumer Protection Act - the TCPA - governs how, when, and with whose permission a business may call or text a consumer. Automate outreach without accounting for it, and the same speed that books appointments can manufacture liability at up to $1,500 per call or text.

Myth: A February 2026 court ruling means dealers no longer need written consent to let AI dial and text their leads.

Data: The Fifth Circuit's decision in Bradford v. Sovereign Pest Control binds only that circuit - Texas, Louisiana, and Mississippi - and even there a caller must still prove clear, documented "prior express consent." Everywhere else, the FCC's written-consent framework still governs, and statutory damages remain $500 to $1,500 per violation (Holland & Knight, March 2026).

Why a three-decade-old statute became an AI problem

The TCPA predates the smartphone, the modern BDC, and certainly the AI voice agent. It was written for an era of fax machines and robocalls. But its language is sweeping, and that is exactly why it now lands on automation: the statute's strictest consent rules attach to automated dialing and texting systems and to artificial or pre-recorded voice calls. An AI agent that places or returns calls at scale, or fires off templated text follow-ups, looks a great deal like the technology the law was built to police.

The exposure is not theoretical. CompliancePoint, a marketing-compliance firm, reports that TCPA lawsuits have risen roughly tenfold over the past decade and that the average TCPA settlement now exceeds $6 million. Automotive is a frequent target - a fact most GMs can confirm with a quick search of "car dealership TCPA." The reason is structural: the law lets consumers and plaintiff firms sue over even minor lapses, and a dealership in a sale week sends a lot of texts.

What the TCPA actually regulates: telemarketing vs. informational

The most useful distinction for a dealer is not the channel - call or text - but the purpose of the message. The TCPA's tough consent rules apply to telemarketing. Genuinely informational contact is treated far more leniently.

The trap is the dual-purpose message. A service reminder that also pitches a trade-in is no longer informational - it is telemarketing, and it inherits the stricter rules. For an AI agent, that means the line between a safe message and a liability is a content decision the system has to get right every single time (CompliancePoint).

What changed in 2026 - and what did not

On February 25, 2026, the U.S. Court of Appeals for the Fifth Circuit decided Bradford v. Sovereign Pest Control of TX, Inc. The court held that the TCPA requires only "prior express consent" - which may be given orally or in writing - and rejected the FCC's long-standing 2012 rule requiring prior express written consent for automated and pre-recorded telemarketing calls to cellphones. The decision leaned on the Supreme Court's 2024 Loper Bright ruling, which told courts to interpret statutes themselves rather than defer to an agency's reading (Holland & Knight).

It would be easy to treat that as a green light. It is not. As Holland & Knight notes, the ruling binds only the Fifth Circuit; across the rest of the country the FCC's written-consent framework still applies. Even within the Fifth Circuit, a business must still prove the consumer gave clear, unequivocal consent, and oral consent has to be documented and independently verifiable to survive a challenge. For a multi-rooftop group, or any dealer doing interstate outreach, the safe operating posture has not actually changed.

A second moving piece is the FCC's "global revocation" rule, which would require a business to treat any opt-out as an organization-wide revocation of consent. After industry pushback, the FCC pushed its effective date to January 31, 2027 - so it is coming, just not yet (Holland & Knight).

The exposure math a dealer should run

The penalties are assessed per message, which is what makes them dangerous at automation scale. Three unconsented texts to one prospect is $4,500 in statutory exposure before a single lawyer is involved. Now multiply by a lead list. The compliance windows that keep a dealer on the right side of the line are specific, and worth posting on the BDC wall:

(Source: CompliancePoint.) An established business relationship can permit certain follow-up without separate consent, but it expires - and once a consumer asks to stop, the window to honor that request is short. These are exactly the rules a human BDC forgets at 6 p.m. on the last day of the month, and exactly the rules software can be built to enforce without exception.

Designing AI outreach that books deals without buying lawsuits

The honest framing is that automation is neither compliant nor non-compliant on its own - configuration decides which. A system that can text 10,000 people an hour can violate the TCPA 10,000 times an hour, or it can enforce consent more consistently than any human team ever could. A few principles separate the two:

• Capture consent at the source. The lead form, chat widget, and phone script should collect clear, conspicuous express written consent, and the system should log the exact language, timestamp, and channel. The Bradford court rewarded a documented, verifiable record - so keep one.
• Route by purpose, not by convenience. The agent should distinguish informational contact (reminders, recalls, service status) from marketing, and gate anything promotional on consent. Resist the urge to bolt a sales line onto a service text.
• Bake in suppression. National DNC scrubbing and internal do-not-contact suppression belong inside the dialing logic, not in a spreadsheet someone updates monthly.
• Honor revocation instantly. "Stop," "cancel," and "unsubscribe" should halt outreach immediately and - reading where the FCC is headed - across the whole organization, not just one campaign.
• Keep the logs. Every interaction an AI agent handles is recorded by default. That record is a liability if it shows violations and an asset if it proves consent. The difference is whether anyone designed for it.

None of this is an argument for leaving the phones ringing unanswered. It is an argument for treating consent, suppression, and revocation as features of the system from day one, rather than patches applied after the first demand letter.

The bottom line

The spending curve has already answered whether AI will handle dealership calls and texts - it will, soon, at most stores. The open question is whether dealers deploy it with the TCPA in mind. The legal ground is genuinely in motion: a major circuit just loosened the consent standard within its borders, a broad revocation rule is a year out, and state statutes add their own layer on top. In that environment, the durable strategy is boring and effective - documented consent, purpose-based routing, disciplined suppression, and instant opt-out - built into the automation rather than bolted on later.

This article is general information for dealership operators, not legal advice. Consult qualified counsel about your store's specific calling and texting practices.

If you are weighing how to let AI answer and follow up on every call without turning speed into exposure, that is the problem Carbuki was built to solve: AI voice agents for dealerships designed to capture consent and intent on every interaction, keep informational and marketing contact in their lanes, and log it all.

Sources

• Holland & Knight, "TCPA Reset: Fifth Circuit Rejects 'Prior Express Written Consent' Rule," March 2, 2026 - hklaw.com
• U.S. Court of Appeals for the Fifth Circuit, Bradford v. Sovereign Pest Control of TX, Inc., decided February 25, 2026 - ca5.uscourts.gov
• CompliancePoint, "TCPA Compliance Considerations for the Automotive Industry," 2025 - compliancepoint.com
• Gartner, "Gartner Says Autonomous Business and AI Layoffs May Create Budget Room, but Do Not Deliver Returns," May 5, 2026 - gartner.com
• TechCrunch, "AI voice startup Vapi hits $500M valuation after winning Amazon Ring over 40 rivals," May 12, 2026 - techcrunch.com