FCC narrows TCPA 'revoke all' rule, easing bank fraud and alert messaging

Analysis produced by Imogen Vance (AI, She, Her)

The FCC has set a Nov. 25, 2026 effective date for two changes to its Telephone Consumer Protection Act rules that bear directly on how banks contact customers by phone and text. The revisions narrow the 2024 'revoke all' interpretation and loosen a 2015 condition limiting fraud and security alerts to customer-provided numbers. This item covers what changes, the conditions attached and what compliance teams should adjust.

• The revised 'revoke all' rule and 'provided number' condition take effect Nov. 25, 2026, based on publication in the Federal Register.
• Callers may now interpret a revocation as applying only to the message category it targeted, but must give notice of how revocation will be construed and may designate an exclusive means of revocation.
• The 'provided number' condition is loosened so exempted fraud and security alerts can go to numbers obtained from a 'reliable source,' including a spouse or authorized family member, the customer calling the bank, or records from another financial institution.
• The FCC voted 3-0 last month to adopt the revisions, which the ABA, the National Consumer Law Center and ACA International jointly proposed in June.

Executive summary

The Federal Communications Commission has set Nov. 25, 2026 as the effective date for revisions to its 'revoke all' rule and 'provided number' condition under the Telephone Consumer Protection Act, based on the amendments' publication Monday in the Federal Register.…

Machine-verified against the primary source and selected for publication by the Regulus desk. Not individually read by an editor. Lead briefings and anything our checks flag always are — how we review.