TL;DR
- Robert Hossfeld put his phone number on Allstate’s internal do-not-call list on July 10, 2020. Five months later, a company he’d never heard of started calling him to sell Allstate insurance.
- That company, Atlantic Telemarketing Center, placed twelve calls to Hossfeld between November 2020 and February 2021. Atlantic was hired by a company called Transfer Kings, which was hired by two Allstate insurance agents, and Transfer Kings never told the agents Atlantic existed.
- A federal district judge ruled Allstate was liable for the calls and found the violation willful, triggering treble damages under the Telephone Consumer Protection Act.
- On June 24, 2026, the Seventh Circuit Court of Appeals reversed that ruling completely: no evidence showed Allstate authorized Atlantic, so no liability could legally reach Allstate at all.
- Hossfeld also tried to represent everyone else on Allstate’s do-not-call list who got similar calls. The court rejected that too: 33 identified victims wasn’t enough people to count as a class.
Keep reading to see the exact sentence the court used to sever Allstate from the calls, and the specific worry the judges raised, about companies facing too much liability, that never once got raised about consumers facing too little protection.
The Non-Financial Ledger
Hossfeld asked Allstate to stop calling him in July 2020. He got twelve more calls anyway, over the following four months, from a company he had never contracted with, never heard of, and had no legitimate way to identify.
To trace who was calling him, Hossfeld posed as two people who didn’t exist, “Michael Johnson” and “Michael Bradley,” feigning interest in insurance quotes online just to follow the trail back to its source. The tool that was supposed to protect him, a do-not-call request, gave him nothing to work with on its own. Investigating his own harassment meant becoming someone else first.
Six years after he first asked to be left alone, an appeals court ruled that the company whose name was on every sales pitch bore no legal responsibility at all. The chain of agents, subcontractors, and lead-sellers that was supposed to be traceable back to Allstate turned out to be the exact thing that made no one traceable.
Legal Receipts
The Seventh Circuit never disputed that Atlantic called Hossfeld twelve times after he opted out. It disputed whether the word “Allstate” on the sales pitch meant anything legally binding.
“[A]cts outside of an agent’s authority do not generate liability for the principal.” United States v. Dish Network L.L.C., quoted in Hossfeld v. Allstate Insurance Co., 7th Cir. 2026
- This is the exact legal principle the court used to sever Allstate from Atlantic’s calls: because no one could prove Allstate authorized the calls at every link in the chain, the calls became, legally, no one’s responsibility but Atlantic’s.
- The court applied this rule to reverse the district court, which had already found Allstate liable and ordered treble damages for a willful TCPA violation.
- Nowhere in the ruling does the court weigh whether that legal outcome protects consumers as effectively as it protects corporate defendants.
Regulatory Gray Zones
The TCPA requires companies to maintain do-not-call lists, but it borrows agency law’s rules for deciding who’s responsible when the call comes from someone else. That handoff is the gap Allstate’s structure walked through.
- Federal rule 47 C.F.R. ยง 64.1200(d) requires any entity placing telemarketing calls to maintain a do-not-call list, but TCPA liability only reaches as far as provable “actual authority” travels through a chain of agents, one link at a time.
- Allstate’s contracts told its agents to ensure “external providers” complied with the law. The district court read that language as authorizing an unlimited chain of subcontractors; the appeals court disagreed, but only after years of litigation.
- Allstate’s agents were permitted to hire what the record calls “Non-Contracted Telemarketers”: companies with no direct relationship to Allstate at all, a category that exists specifically to expand Allstate’s telemarketing reach without expanding Allstate’s contractual oversight of who’s doing the calling.
- Transfer Kings hired Atlantic without telling the Allstate agents who’d hired Transfer Kings. Under the court’s ruling, that concealment didn’t create liability for anyone above Transfer Kings; it only proved Transfer Kings itself lacked the authority to make the hire.
- The leads list Atlantic bought from a separate company, KP Leads, falsely represented that every number on it belonged to someone who had consented to be called. Hossfeld’s number was on that list anyway, attached to two names that weren’t his.
Legal Minimalism: The Letter but Not the Spirit
Allstate did everything the TCPA’s paperwork requires. Hossfeld’s number sat on the internal do-not-call list for five months before the calls started. That compliance didn’t stop a single one of them.
- The do-not-call rule exists so one request stops a company’s calls. Hossfeld made that request in July 2020 and was still fielding calls marketing Allstate products in February 2021.
- Allstate’s written do-not-call policy forbade calls to anyone who’d opted out, but that policy bound Allstate’s direct agents and their contracted providers. It never reached the Non-Contracted Telemarketers, or the further subcontractors those companies hired without disclosure.
- The court itself found Allstate’s authorization paperwork insufficient to establish that Transfer Kings could hire anyone on Allstate’s behalf, meaning the compliance structure Allstate built was too narrow to actually govern the calls being placed in its name.
- Once Allstate learned Transfer Kings and Atlantic existed, it investigated and cut ties with both within months. Nothing in the record shows Allstate applied that same scrutiny before letting its agents use outside telemarketers in the first place.
The Contractor Shield
Every company standing between Allstate and Hossfeld’s phone existed to place calls Allstate’s sales network wanted made. Every one of them also broke the chain of legal responsibility that was supposed to trace those calls back to Allstate.
- Fleming and Gilmond, the two named Allstate agents in this case, hired Transfer Kings as a Non-Contracted Telemarketer to generate customer leads.
- Transfer Kings didn’t place the calls itself. It subcontracted the work to Atlantic Telemarketing Center without telling Fleming or Gilmond that Atlantic existed.
- Atlantic bought its calling list from KP Leads, which falsely represented that every number on it belonged to someone who had consented to be called.
- The court ruled that liability for a subagent’s conduct only travels upward if the party above it specifically authorized that appointment. Because no one authorized Atlantic by name, its twelve calls to Hossfeld stayed legally Atlantic’s problem alone.
- Allstate’s brand was on every call. Allstate’s legal exposure ended two contractual layers before the phone ever rang.
This Is the System Working as Intended
This ruling didn’t just decide Hossfeld’s case. It set the rule for every company running telemarketing through layered subcontractors going forward.
- The Seventh Circuit worried openly about the opposite problem: extending liability up the chain too far, asking what would stop it from reaching “unlimited layers of subagents.” No matching concern appears anywhere in the ruling about unlimited layers of unaccountable callers reaching consumers.
- Hossfeld’s proposed class, everyone else on Allstate’s do-not-call list who received similar calls, was rejected for lack of numerosity. Thirty-three identified victims fell under the roughly forty-member benchmark the court generally treats as sufficient.
- The court also raised the bar for future plaintiffs seeking treble damages, ruling that a “willful” TCPA violation requires proof of knowing or reckless conduct, not just the volitional act of placing the call.
- Six years passed between Hossfeld’s do-not-call request and a final ruling. The end result of all six years was a determination that no company in the chain owed him anything.
- Every incentive in this ruling points toward more subcontracting layers, not fewer. Each additional layer is one more place the chain of “authorization” can break, and one more reason liability never reaches the company whose name was actually being sold.
What a Legitimate Fix Looks Like
This case exposes a structural problem: TCPA liability depends on provable authorization at every link in a subcontracting chain, so the more links a company allows into its telemarketing operation, the less accountable it becomes for what happens on the other end of the phone.
Regulatory Track
- The FCC should require any company benefiting from calls made in its name to maintain a public, auditable registry of every entity in the calling chain, not just its direct contractors.
- Regulators should require companies that permit “Non-Contracted Telemarketer” arrangements to verify consent documentation at the point a lead list is purchased, not after a consumer complaint surfaces the problem.
- General industry standard, not a case-specific finding: chain-of-custody audit requirements already used for financial-services vendor oversight could be adapted to consumer contact lists.
Legislative Track
- Congress should close the subagency loophole this ruling confirms exists: TCPA liability should attach to the company whose product is being marketed once a call is proven to have been made on that company’s behalf, regardless of how many subcontracting layers separate them.
- The general 40-member numerosity benchmark should be reconsidered for TCPA claims specifically, where individual violations are small and a defendant’s own opaque subcontracting can make it genuinely difficult for a plaintiff to identify the true size of the affected class.
- Functional description, not a citation to an existing bill: no such reform appears in the source record reviewed for this article.
Corporate Governance Track
- Companies that authorize agents to hire outside telemarketers should require disclosure of every subcontractor before any calls are placed, not after a lawsuit forces the discovery.
- The kind of internal compliance review Allstate ran only after Hossfeld sued should run before a telemarketing relationship is approved, not after a violation is alleged.
- Contract language authorizing “external providers” should name a maximum number of permitted subcontracting layers, closing the exact ambiguity this case turned on.
What Now?
This ruling protects the layered subcontracting model industry-wide, not just Allstate. Here’s where to direct pressure, and how to protect yourself in the meantime.
- FCC: the agency responsible for TCPA rulemaking and enforcement, including the do-not-call list requirements this case turned on.
- FTC: co-enforces the national Do Not Call Registry and can pursue related consumer protection actions against telemarketers and lead-list sellers.
- Document every call: the date, the number, and what was said. It’s the same paper trail Hossfeld had to build himself, under fake names, just to get anywhere in court.
- File complaints directly with the FCC’s consumer complaint portal for any call after a do-not-call request. This ruling makes clear that individual companies won’t be forced to self-police the subcontractors placing calls in their name.
- Support consumer-protection legal aid groups that take individual TCPA claims. This ruling makes class actions harder to win when violations are spread thin across many small telemarketing operations.
The source document for this investigation is attached below.



