Here's a conversation I've had more than once with a business owner who did the "right" thing and got a demand letter anyway: "We scrubbed against the National Do Not Call registry before we sent. How did this number even get through?"
The answer is almost always the same. They scrubbed one list and assumed it was the list. It wasn't. There are at least three distinct databases in play when you send cold or semi-cold SMS, they don't overlap the way people assume, and passing one tells you nothing about the other two.
Full disclosure: I work for ReadySMS, and yes, we sell litigator scrubbing as a standalone product. But the confusion I'm about to walk through costs people money whether they ever buy anything from us. So let's get the definitions right first, then talk about the order you run them in.
The three lists, and why they don't overlap
People say "the DNC" like it's a single master file of everyone you can't contact. It isn't. Here's what's actually sitting behind that phrase.
1. The National Do Not Call Registry. Federal, maintained by the FTC. Consumers add their own numbers voluntarily to opt out of telemarketing calls. It's large, it's public-ish (accessible to registered marketers), and it's the one everyone thinks of. Critically: it governs telemarketing. It does not perfectly map to SMS marketing rules, and it says nothing about who is inclined to sue you.
2. Your internal / company-specific DNC. This is the list of people who told you specifically to stop — replied STOP, unsubscribed, called and asked to be removed, filed a complaint against your brand. Federal rules require you to maintain this and honor it independently of the national registry. A number can be nowhere on the National DNC and still be on your internal one because they told you, personally, to knock it off.
3. Known-litigator and DNC-complainer databases. These are commercial lists of numbers tied to people who have a documented history of filing TCPA complaints and lawsuits — professional plaintiffs, serial complainers, plaintiff-side attorneys' own cell numbers. They are compiled from court records and complaint filings. A litigator number is frequently not on the National DNC at all. That's the trap. Some of them deliberately keep their numbers off the registry so marketers text them and hand over a cause of action.
The overlap between these three is partial and unreliable. I've written more on the litigator-vs-DNC gap specifically in A Number Can Pass DNC and Still Sue You — this post is the wider version of that argument.
Why "we scrubbed the DNC" isn't a defense
Run the logic. You pull the National DNC and suppress every match. Feels thorough. But:
- The person who replied STOP to your last campaign isn't on the National DNC — they're on your internal list, which you didn't check because it lives in a different system.
- The professional plaintiff whose entire hobby is collecting TCPA settlements deliberately isn't on the National DNC — they're on a litigator database you never queried.
So you send. The STOP-replier gets a demand letter for continued contact after opt-out. The plaintiff gets exactly the text they were fishing for. Both are TCPA exposure, and TCPA statutory damages run roughly $500 per text, up to $1,500 for willful violations. Send a 4-segment message to one litigator and you're looking at $2,000–$6,000 of exposure from a single contact — for a message that cost you under a dime to deliver.
"But we scrubbed the DNC" is true and irrelevant. It's like saying you checked the weather before a flight got cancelled for mechanical reasons. Right instinct, wrong list.
The scrub order that actually catches all three
Order matters, because each pass removes a different failure mode and you want the cheapest, most brand-specific checks doing work before you pay for anything external. Here's the sequence I'd run on any outbound list, cold or warm.
- Consent gate first. Before scrubbing, confirm the contact opted in for the message type you're sending. This isn't a list lookup — it's your own records. Marketing consent and transactional consent are different, and mixing them is its own violation. If there's no defensible opt-in, no amount of scrubbing saves you. (This is exactly the trap in Trigger Links Aren't Consent — a click is not a yes.)
- Internal DNC / suppression. Remove anyone who has ever opted out of your brand — STOP replies, unsubscribes, direct requests. With ReadySMS this one is automatic: inbound STOP/UNSUBSCRIBE is honored and the opt-out propagates across campaigns, so a contact who quit one blast can't be caught in the next. But if your suppression list lives partly in a spreadsheet or an old system, reconcile it before you send.
- National DNC scrub. For any list where telemarketing rules apply, suppress registry matches. This is the pass most people only do — necessary, not sufficient.
- Litigator / TCPA-plaintiff scrub. Screen against known-litigator and DNC-complainer databases and auto-suppress the matches. This is the one that catches the numbers deliberately engineered to sue you, and it's the one most workflows skip entirely because they think the DNC pass covered it.
- Quiet-hours enforcement at send. Not a list, but part of the same risk stack — a perfectly consented, fully scrubbed number texted at 11pm local is still TCPA exposure. ReadySMS holds sends outside permitted local hours based on the recipient's area.
Run in that order, the expensive external checks only touch the numbers that survived your own records, and nothing slips through because you assumed one list stood in for another.
Where the litigator scrub earns its keep
ReadySMS ships two-way STOP handling, quiet-hours enforcement, and consent attestation as part of the platform. The litigator/DNC-complainer scrub is available as a standalone product at $0.005 per contact — you can run it whether or not you send your SMS through us, which matters if your stack lives elsewhere.
Here's the math that makes it a rounding error. Say you're about to blast a 20,000-contact cold list.
| Line item | Cost |
|---|---|
| Litigator scrub, 20,000 contacts × $0.005 | $100 |
| One litigator you didn't catch, 3-segment text | $1,500 (willful) |
| Break-even | 1 caught litigator ≈ 15 full scrubs |
You need to catch one litigator across roughly fifteen 20K-list scrubs for the scrub to pay for itself. On a bought list, that's not close — purchased lists flag litigators at a dramatically higher rate than opt-in lists (I dug into that in Purchased Lists Flag 5x More Litigators Than Opt-In Lists). The $100 isn't insurance you hope never pays out. On a cold list it's near-certain to earn itself back on the first send.
Who actually needs all three passes
Not everyone. If you send only to a warm, double-opted-in list you grew yourself — order confirmations, appointment reminders, receipts to people who bought from you — your risk profile is genuinely lower. Your internal suppression plus quiet hours covers most of it, and paying to scrub a clean opt-in list every send is often over-spending.
The full three-list stack matters most when:
- You bought, rented, or inherited the list. Any list you didn't grow personally. Source drives risk — see the source-based scrub schedule.
- You're in a high-exposure vertical — lending, debt, insurance, legal, home services, anything with aggressive outbound.
- The list has aged. A 12-month-old list has churned significantly, and reassigned numbers introduce fresh strangers who never consented.
- You dial as well as text. Voice adds National DNC telemarketing rules squarely into scope — worth pairing with outbound dialing TCPA compliance.
If you're an agency sending on a client's behalf, there's an extra wrinkle: whose problem is a bad list, legally? That liability line trips people up constantly — here's where it actually falls.
The takeaway
"The DNC" is three lists wearing one name: the National registry, your own suppression list, and the commercial litigator/complainer databases. They overlap partially and unpredictably, and clearing one clears nothing about the others. Run them in order — consent, internal suppression, National DNC, litigator scrub, quiet hours at send — and you close the specific gap that turns a clean-feeling campaign into a demand letter.
None of this makes you lawsuit-proof; compliance is ultimately the sender's responsibility, and I'd distrust anyone who told you otherwise. It just moves the odds sharply in your favor for about a half-cent a contact.
If you want to see what the standalone scrub costs against your actual list size, the pricing page has the per-contact number, and there's a full scrub-before-you-blast workflow here if you'd rather start with the process than the product.