Americans receive billions of robocalls every year. Many are illegal scams that impersonate banks, government agencies, or retailers and steal money or personal data. In 2025, a bipartisan coalition of state attorneys general launched Operation Robocall Roundup through the Anti-Robocall Multistate Litigation Task Force. They sent formal attorneys general robocall warning letters to dozens of telecommunications and VoIP providers accused of routing fraudulent traffic.
This article explains what those letters mean, why regulators target gateway and intermediate providers, how traceback investigations work, and what legal consequences non-compliant companies face. Telecom compliance officers, VoIP operators, and consumer advocates will find clear, practical guidance on staying ahead of enforcement.
What Is Operation Robocall Roundup?
Operation Robocall Roundup is a coordinated enforcement push by the Anti-Robocall Multistate Litigation Task Force. Formed in 2022 by 51 bipartisan attorneys general and led by officials from North Carolina, Indiana, and Ohio, the Task Force investigates companies that route large volumes of illegal and fraudulent robocall traffic into and across the United States.
In August 2025, the Task Force issued warning letters to 37 voice service providers. These companies allegedly failed to meet basic Federal Communications Commission rules: responding to traceback requests, registering in the FCC’s Robocall Mitigation Database, or filing a required robocall mitigation plan. The letters demanded immediate action to stop illegal traffic. The Task Force also notified roughly 99 downstream providers that they were carrying traffic from noncompliant actors.
Phase 2 followed in December 2025. The Task Force directed four major providers (Inteliquent, Bandwidth, Lumen, and Peerless) to stop transmitting suspected illegal robocalls. Public data released with those letters showed thousands of traceback notices since 2019 and estimates of hundreds of millions to more than a billion imposter calls (Amazon/Apple and SSA/IRS style scams) moving through their networks over multi-year periods.
Early results from Phase 1 were measurable. Thirteen companies were removed from the FCC Robocall Mitigation Database, blocking other U.S. providers from accepting their traffic. Nineteen stopped appearing in traceback results. At least four terminated high-risk customer accounts. The message is clear: state AGs are no longer focusing only on the scammers who originate calls. They are holding the networks that carry those calls accountable.
Why Are Attorneys General Targeting Gateway Providers and VoIP Networks?
Illegal robocalls rarely start on traditional landline networks. Many originate overseas or from domestic bad actors who lease numbers and push high-volume traffic through VoIP gateways and intermediate providers. These gateway providers act as the point of entry into the U.S. telephone system. Once the traffic is on the network, it is hard to stop.
State AGs and the FCC have concluded that some providers treat compliance as optional. They accept traffic without strong know-your-customer or know-your-upstream-provider controls. They fail to respond quickly to traceback requests. They do not maintain current filings in the Robocall Mitigation Database. The result is a pipeline that delivers scam calls to consumers while the providers collect termination or transit fees.
The letters emphasize that larger providers have a heightened responsibility. When a company sits in the middle of the call path and continues to carry traffic after repeated industry notices, AGs view that as enabling illegal activity. Downstream providers that keep doing business with noncompliant upstream actors also face scrutiny. Ignoring the warning can turn a commercial relationship into evidence of willful noncompliance.
How Traceback Investigations Work
Traceback is the process of following a suspected illegal call backward through the network to its source. The Industry Traceback Group (the FCC-designated consortium) and law enforcement send formal requests to providers in the call path. Under FCC rules, voice service providers and gateway providers must respond fully within 24 hours.
A typical request identifies a specific call or campaign (for example, a high-volume SSA imposter robocall). The receiving provider must check its call detail records, identify the upstream provider that handed off the traffic, and report that information promptly. Gateway providers face especially strict timing because they are often the first U.S. point of contact for foreign-originated traffic.
Providers that ignore or slow-walk these requests create gaps that allow scammers to keep operating. Repeated failures to respond appear in the data that fuels AG warning letters and FCC database removals. Strong operational practices (real-time or near-real-time access to CDRs, clear escalation procedures, and trained staff) are no longer optional. They are the difference between cooperation and becoming a target.
Core FCC Compliance Requirements Every Provider Must Meet
The FCC’s robocall mitigation framework rests on several interlocking obligations.
Robocall Mitigation Database (RMD) registration is mandatory for voice service providers, gateway providers, and intermediate providers. Filings must include a certification and a detailed robocall mitigation plan. Providers must refuse traffic from any company not listed in the database. Removal from the RMD effectively cuts a provider off from the rest of the U.S. network.
Robocall mitigation plans must describe reasonable steps to avoid originating, carrying, or processing illegal traffic. Plans typically cover know-your-customer procedures, upstream provider due diligence, analytics and monitoring tools, and a firm commitment to respond to traceback requests within 24 hours.
STIR/SHAKEN caller ID authentication helps verify that the calling number is legitimate and supports traceback. Gateway providers and intermediate providers have specific authentication duties for certain unauthenticated traffic. The framework does not block calls by itself, but it makes bad traffic easier to identify and stop.
Know-your-customer and know-your-upstream-provider obligations require providers to take reasonable steps to understand who is using their network and to avoid becoming a conduit for high-volume illegal traffic. Failure here is frequently cited in both FCC and AG actions.
These rules apply across the call path. Originating providers, intermediate carriers, and gateways all share responsibility. Treating compliance as a one-time filing exercise is a common and costly mistake.
Legal Consequences of Ignoring Attorneys General Robocall Warning Letters
Warning letters are formal pre-litigation notices. They put the recipient on the record and preserve the Task Force’s ability to seek stronger remedies. Potential outcomes include:
- Removal from the FCC Robocall Mitigation Database, which prohibits other U.S. providers from accepting the company’s traffic.
- Civil lawsuits under the Telephone Consumer Protection Act, the Telemarketing Sales Rule, the Truth in Caller ID Act, and parallel state consumer protection statutes.
- Injunctions that force immediate changes in network practices.
- Civil penalties and, in some cases, restitution to consumers.
- Heightened scrutiny of downstream partners who continue to accept the traffic.
Phase 1 results show that many companies act after receiving a letter. Those that do not face escalating pressure. Large providers in Phase 2 received detailed data packages quantifying traceback volume and estimated scam call volumes. That kind of evidence strengthens any future complaint.
Practical Steps for Telecoms and VoIP Providers
If your company receives an attorneys general robocall warning letter, treat it as a high-priority legal and operational matter.
- Engage counsel experienced in telecom enforcement and TCPA matters immediately.
- Conduct a rapid internal review of traceback response history, RMD filings, and mitigation plan implementation.
- Identify and terminate or remediate high-risk customer or upstream relationships.
- Strengthen monitoring, analytics, and know-your-customer processes so they match the representations in your RMD filing.
- Respond to the Task Force within the stated deadline with a clear, factual account of corrective actions.
- Document everything. Future enforcement will look at whether the company took the warning seriously.
Even companies that have not received a letter should audit their practices. Downstream providers that continue to accept traffic from noncompliant upstream actors risk their own letters or secondary liability arguments. Proactive compliance is cheaper than reactive defense.
What Consumers and Advocates Should Know
Consumers remain the primary victims. Scam robocalls drain bank accounts, steal identities, and erode trust in the telephone network. State AGs encourage residents to file complaints with their attorney general’s office and with the FCC. Those complaints help identify high-volume campaigns and support traceback efforts.
Consumer rights advocates can track Task Force announcements and FCC database actions. Public lists of removed providers and warning-letter recipients create transparency that helps the broader ecosystem police itself. When major carriers block traffic from noncompliant providers, the effect multiplies quickly.
Looking Ahead: Heightened Scrutiny Is the New Normal
Operation Robocall Roundup signals a lasting shift. State attorneys general are coordinating closely with the FCC and industry traceback groups. They are moving beyond originators to the intermediate and gateway layers that make large-scale illegal calling possible. STIR/SHAKEN, the Robocall Mitigation Database, and 24-hour traceback rules form the regulatory backbone. Warning letters are the enforcement tool that turns rules into consequences.
Telecom and VoIP providers that treat these requirements as core operational duties will reduce legal risk and contribute to a cleaner network. Those that treat them as paperwork will face letters, database removal, and potential litigation. The choice is straightforward. Compliance protects consumers and protects the business.
For companies already under scrutiny, prompt, substantive action remains the best path. For everyone else, now is the time to close any gaps in mitigation plans, traceback readiness, and customer due diligence.
Frequently Asked Questions
What is the Anti-Robocall Multistate Litigation Task Force?
It is a bipartisan coalition of 51 state attorneys general formed in 2022 to investigate and take legal action against companies that route significant volumes of illegal robocall traffic.
What triggered the August 2025 warning letters?
The Task Force targeted 37 providers that allegedly failed to respond to traceback requests, register in the FCC Robocall Mitigation Database, or file required mitigation plans.
What happens if a provider is removed from the Robocall Mitigation Database?
Other U.S. voice providers are generally prohibited from accepting traffic from the removed company, which can effectively halt its ability to deliver calls domestically.
How quickly must providers respond to traceback requests?
FCC rules require a full response within 24 hours to requests from the Commission, law enforcement, or the industry traceback consortium.
Can downstream providers face liability for carrying traffic from noncompliant upstream carriers?
Yes. The Task Force has notified downstream providers that they are doing business with noncompliant actors, creating risk of future scrutiny or secondary claims.
What laws do the warning letters typically cite?
Common bases include the Telephone Consumer Protection Act, the Telemarketing Sales Rule, the Truth in Caller ID Act, and state consumer protection statutes.
Should a company that receives a letter respond even if it believes the allegations are incorrect?
Yes. A timely, factual response that addresses the specific concerns and describes corrective steps is the prudent course. Silence or delay increases enforcement risk.
You May Also Like: Judge Halts Ethiopia TPS: What the Federal Court Order Means for You
