Do You Need Consent to Cold-Call Mexico?

DNC LATAM · Compliance guides

No — Mexico does not require a company to obtain a consumer’s consent before making the first call. The country’s Do Not Call system runs on an opt-out model: a number can be dialed unless it appears on the official registry or the person has told the caller to stop. That is the opposite of how many US outbound teams are used to operating, and the mismatch is one of the most common compliance mistakes when a TCPA program expands into Mexico.

Opt-out, not opt-in

Mexico’s official registry lets consumers register landlines and mobile numbers, for free, to stop receiving marketing calls and messages. Registration does not expire automatically, and it applies across regulated commercial sectors. But the system only works in one direction: a number that has never been registered is fair game for a first call, no prior consent required. Compare that to the US National DNC Registry model, which our Mexico Do Not Call guide breaks down in full — the mechanics are similar, but the consent expectation US teams bring with them usually is not.

That structural difference is why the question “do we have consent to call this list” is the wrong question for a Mexico campaign. The right question is “has this number opted out” — which means the entire compliance burden sits on scrubbing the current registry before you dial, not on assembling consent records ahead of time.

Where the TCPA comparison breaks down

Under the TCPA, US teams generally need documented prior express consent to legally place many kinds of calls, and that consent can also serve as an override for a registered number. It’s a consent-first system with a registry as a backstop. Mexico inverts that: the registry is the primary control, and there is no equivalent requirement to secure affirmative consent before a first outbound call to a number that isn’t registered.

Our guide to TCPA vs. Mexico and Argentina DNC rules covers this exact mismatch as one of the most common mistakes US teams make expanding into Latin America — assuming a consent framework that clears calls domestically carries any weight once the number crosses the border. It doesn’t. A number can be fully TCPA-compliant to call and still be sitting on Mexico’s registry, and vice versa: a number with no US consent record on file can be perfectly callable in Mexico as long as it isn’t registered.

None of this means consent is irrelevant in Mexico — it means it plays a narrower role than US teams expect. Two situations where it still matters:

  • After an opt-out. Once a person tells a caller directly to stop — on the call itself, not just through registry status — that instruction has to be honored regardless of whether the number ever gets added to the official registry. Treating a direct opt-out as optional because “the number isn’t registered yet” is a common and avoidable mistake.
  • As documented cover for a registered number. The same logic that applies elsewhere in the region applies here: if a company has a specific, dated record of a customer’s consent to be contacted, that can support calling a number even if it later appears on the registry. What that record needs to hold up is the same standard covered in what a DNC compliance certificate is and what auditors ask for — a general “we have a relationship with this customer” claim doesn’t hold the same weight as a dated, number-specific consent record.

Outside of those two cases, the practical compliance work in Mexico is almost entirely about the registry check itself, not about building a consent-collection process before you’re allowed to dial.

What this means operationally

For a US outbound team standing up a Mexico campaign, the opt-out model changes where effort should go:

  1. Scrub every list against the current registry before dialing — this replaces the consent-gathering step US teams might otherwise budget for. Mexico’s data refreshes every 15 days, so a scrub older than one cycle is checking against a stale list. Our step-by-step guide to scrubbing a calling list against Mexico’s DNC registry covers the mechanics.
  2. Honor opt-outs immediately and permanently, independent of registry timing. A “do not call me again” on a live call is binding the moment it’s said.
  3. Keep dated records only where you’re relying on consent as an override — for existing customers you intend to keep calling even if their number later registers, not as a blanket prerequisite for every number on a cold list.

This is also why running a Mexico campaign as a copy of a US TCPA program tends to underperform: teams that spend effort building consent documentation for a cold-call list are solving a problem Mexico’s system doesn’t actually pose, while underinvesting in the recurring registry scrub that does the real compliance work. Authorities can sanction per call to a registered number, so the return on effort is almost entirely in scrub discipline, not consent paperwork.

The practical takeaway

If you’re cold-calling into Mexico, you don’t need consent on file to make the first call — you need a current, dated scrub against the official registry, and a process that honors opt-outs the moment they happen. DNC LATAM maintains the required Mexico registry access and returns a dated certificate with every check, so the record that actually matters here — proof the number was clear on the call date — exists without a separate consent-tracking system to maintain.