March 30, 2026 · ConvoQC Team
Insurance Pay-Per-Call Compliance Guide
Your highest-paying vertical is also your most regulated one. Insurance pay per call compliance isn't just about TCPA and DNC — it layers CMS marketing rules, state licensing requirements, and enrollment window restrictions on top of the standard regulatory stack. One publisher running Medicare traffic outside of AEP with the wrong language on a landing page can generate liability that makes a TCPA fine look minor.
If you're brokering insurance calls — especially Medicare — here's what you need to watch for and how to build QC practices that match the regulatory reality.
Why Insurance Compliance Is Different From Other Verticals
In most pay-per-call verticals, compliance means TCPA consent, DNC scrubbing, and calling hours. Those apply to insurance too. But insurance adds an entire second layer of regulation that other verticals don't face.
Federal oversight from CMS. Medicare Advantage and Medicare Supplement plans are regulated by the Centers for Medicare & Medicaid Services. CMS publishes detailed marketing guidelines — the Medicare Communications and Marketing Guidelines (MCMG) — that govern what can and can't be said when marketing Medicare products to consumers. These rules apply to anyone in the marketing chain, including lead generators and call centers.
State insurance departments. Every state has its own insurance regulatory body with its own rules about who can sell insurance, what they can say, and how leads can be generated. A publisher generating calls in Florida faces different rules than one generating calls in California.
Enrollment windows. Medicare plans can only be sold during specific periods. Generating leads outside of these windows — or using language that implies a consumer can enroll when they can't — creates compliance exposure that goes beyond the call itself.
Financial penalties with teeth. CMS can sanction Medicare Advantage plans directly — suspending enrollment, imposing civil monetary penalties, or terminating contracts. When a plan gets sanctioned because of marketing violations in its lead generation chain, the consequences flow downhill fast. The plan drops the agency, the agency drops the broker, and you lose the buyer relationship along with every dollar you invested in building it.
This is why generic TCPA compliance advice falls short for insurance. You need to understand the insurance-specific rules your traffic is subject to.
Medicare Enrollment Windows and What They Mean for Your Traffic
Medicare enrollment is not open year-round. The calls you're routing need to align with the enrollment periods when consumers can actually take action. Generating and paying for leads outside of these windows wastes money and creates compliance risk.
Annual Enrollment Period (AEP): October 15 through December 7. This is the primary enrollment window for Medicare Advantage and Medicare Part D. Consumers can switch plans, enroll in new plans, or drop coverage. This is when the majority of Medicare pay-per-call volume flows — and when fraud attempts spike hardest.
Open Enrollment Period (OEP): January 1 through March 31. During OEP, consumers already enrolled in a Medicare Advantage plan can switch to a different MA plan or return to Original Medicare. The scope is narrower than AEP, and the messaging your publishers use needs to reflect that. A publisher running AEP-style "compare all your options" language during OEP may be overstating what the consumer can actually do.
Special Enrollment Periods (SEPs). Consumers can enroll or make changes outside of AEP and OEP if they qualify for a Special Enrollment Period — typically triggered by life events like moving, losing employer coverage, or qualifying for Medicaid. SEP-based traffic is valid year-round, but the caller needs to have a qualifying event. Publishers generating "Medicare" calls in July with no SEP qualifier are producing leads that can't convert and may violate marketing rules.
Medicare Supplement (Medigap). Medigap has its own enrollment rules. The Medigap open enrollment period is the six-month window starting when a consumer is both 65 or older and enrolled in Medicare Part B. Outside of this window, insurers can use medical underwriting to deny coverage. Traffic that implies guaranteed-issue Medigap enrollment outside of this window is misleading.
The compliance risk for brokers: if your publishers are generating Medicare calls with landing pages, ads, or outbound scripts that don't align with the current enrollment period, you're routing traffic built on a misleading premise. Even if the calls themselves sound fine, the upstream marketing may not be.
CMS Marketing Guidelines: What Your Publishers Can't Say
CMS publishes the MCMG annually, and it restricts Medicare marketing in ways that directly affect lead generation. These aren't suggestions — plans that contract with CMS are required to ensure their marketing partners comply, and that requirement flows through to anyone generating leads on their behalf.
No unsolicited contact. A publisher cannot cold-call consumers to market Medicare Advantage plans without prior consent specific to that type of contact. This goes beyond TCPA — CMS has its own consent requirements for Medicare marketing contacts.
No misleading plan comparisons. Marketing materials and call scripts cannot make unsubstantiated claims about plan benefits, misrepresent coverage, or create a false sense of urgency. "You're about to lose your benefits" — when the consumer isn't — is a CMS violation.
No health screening as marketing. Using health risk assessments, screenings, or similar activities as a pretense for marketing Medicare plans is prohibited. A publisher that generates calls by offering a "free health assessment" and then routes the consumer to a Medicare sales call is operating in violation territory.
Scope of appointment requirements. Before discussing specific plan details, a licensed agent needs a documented scope of appointment from the consumer. This doesn't directly affect the call routing, but it affects what can happen on the call your buyer receives — and buyers who know the rules will reject leads where the scope of appointment process was skipped or corrupted.
No cross-selling without permission. If a consumer calls about Medicare Part D, the agent can't pivot to selling them a Medicare Advantage plan without specific permission. Publishers who generate leads with broad "Medicare help" messaging may be setting up calls where the buyer has to navigate these restrictions carefully.
For brokers, the practical impact is this: you need to know what your publishers are saying to generate the calls, not just what happens on the call itself. A perfectly clean call can still be the product of non-compliant marketing upstream.
State-Level Insurance Compliance: The Patchwork Problem
Insurance regulation is state-by-state in the United States. There is no single federal insurance license. This creates compliance complexity that doesn't exist in most other pay-per-call verticals.
Licensing requirements. Every state requires insurance agents and agencies to be licensed in that state before selling insurance to its residents. If your publisher is generating calls from California consumers but your buyer's agents aren't licensed in California, those calls can't legally convert — and the act of attempting to sell creates a licensing violation.
Lead generator registration. Some states require lead generators themselves to register or obtain specific licenses. The regulatory landscape here is evolving, but the trend is toward more oversight of the lead generation layer, not less.
State-specific marketing rules. Beyond CMS federal rules, individual states may impose additional restrictions on insurance marketing. Some states have stricter rules about telemarketing to seniors. Others have specific disclosure requirements for insurance advertising.
Replacement regulations. When a consumer is being moved from one insurance policy to another, many states require specific disclosures and documentation. If your traffic is generating replacement business and the proper replacement procedures aren't followed, both the buyer and the lead generation chain face exposure.
The practical takeaway for brokers: you need to know which states your traffic is coming from and whether your buyers are licensed and compliant in those states. A national campaign generating calls from all 50 states requires buyers with licensing in all 50 states — or a routing strategy that matches callers to appropriately licensed agents.
Coached Calls in Insurance: What They Look Like
Coached calls exist in every pay-per-call vertical, but insurance coaching has distinctive patterns because the qualification criteria are specific and verifiable.
Medicare eligibility coaching. Callers are told to say they're 65 or older, or that they're on disability and qualify for Medicare. The publisher needs the caller to be Medicare-eligible for the lead to qualify. If the caller is actually 45 with employer coverage, the coached information falls apart the moment the buyer attempts to verify eligibility.
Condition-based coaching. In health insurance verticals, callers are coached to claim specific health conditions that make them more valuable as leads — chronic conditions that qualify for certain plan types or supplemental coverage. The caller doesn't have the condition but has been told what to say.
SEP qualification coaching. Outside of AEP and OEP, callers need a Special Enrollment Period qualifier to enroll in Medicare Advantage. Publishers coaching callers to claim they recently moved or lost employer coverage — when they didn't — are manufacturing SEP eligibility to generate leads year-round.
Income and subsidy coaching. For ACA marketplace plans, callers may be coached to state household income figures that would qualify them for premium subsidies. The specific income number the caller provides determines the lead's value, so coaching targets that number.
These patterns are detectable at the call level. A caller who claims a qualifying condition but can't answer basic follow-up questions about it — when was the diagnosis, who's the treating physician, what medications are they on — is showing the hallmarks of coaching. The qualifying information was provided to them, but the supporting context wasn't part of the script.
At the publisher level, insurance coaching produces the same statistical fingerprints as coaching in other verticals: unusually high qualification rates, suspiciously consistent caller responses, and downstream conversion rates that don't match the apparent lead quality. The difference is that insurance coaching is more likely to involve specific factual claims (age, conditions, coverage status) that can be verified and disproven.
What Insurance Buyers Expect From Traffic Quality
Insurance buyers operate in a regulated environment where bad leads don't just waste money — they create compliance exposure for the buyer's own licenses and carrier relationships. This makes insurance buyers more demanding about traffic quality than buyers in less regulated verticals.
Verified eligibility. Buyers expect that a Medicare lead is actually Medicare-eligible. An ACA lead should be in the right income bracket. A final expense lead should match the demographic profile. When leads consistently fail basic eligibility checks, the buyer doesn't just lose money on agent time — they start questioning whether they can trust the compliance posture of their traffic sources.
Clean marketing provenance. Sophisticated insurance buyers will ask how leads were generated. They want to know the publisher's marketing methods because CMS and state regulators can hold the buyer accountable for violations in their lead generation chain. A buyer who can't demonstrate that their lead sources used compliant marketing practices is exposed.
Compliant call handling. Insurance calls have specific disclosure requirements. Depending on the product and state, the call may need to include specific language about the nature of the call, the recording, or the products being discussed. Leads that don't flow into a compliant call handling process create liability for the buyer.
Documentation trail. Insurance carriers audit their distribution partners. Buyers need to be able to document the quality and compliance of their lead sources. QC records — transcripts, flag analysis, disposition data — aren't optional for insurance buyers. They're part of the compliance infrastructure.
When you can't demonstrate traffic quality to your insurance buyers with data, you're asking them to trust you. In a vertical where their licenses are on the line, trust without evidence doesn't last.
Building Insurance-Specific QC Into Your Operation
Standard call quality control catches fraud and general compliance issues. Insurance traffic requires you to look for additional, vertical-specific problems.
Monitor for enrollment window alignment. During AEP and OEP, volume spikes are expected. Outside of these windows, Medicare traffic should be SEP-qualified. If a publisher's Medicare call volume doesn't drop significantly after December 7, investigate what they're telling consumers to generate those calls.
Flag eligibility mismatches. When call transcripts reveal that a caller doesn't match the basic eligibility criteria for the product — wrong age for Medicare, wrong state for the buyer's licensing, income that doesn't align with subsidy claims — that's a compliance flag, not just a quality flag.
Track coaching patterns specific to insurance. The coached call indicators in insurance are more testable than in other verticals. Claims about age, conditions, coverage status, and qualifying events can be probed with follow-up questions. A pattern of callers who provide qualifying information but can't support it with context is a coached call pattern.
Audit publisher marketing materials. The calls your QC process reviews are the end product of a marketing funnel. If the funnel itself violates CMS rules or state insurance advertising requirements, compliant-sounding calls don't insulate you from the upstream violation. Periodically review the landing pages, ads, and scripts your publishers use to generate traffic.
Document everything. Insurance compliance isn't just about catching problems — it's about proving you looked. A complete QC record of every call, with transcripts and analysis, demonstrates active oversight. When a carrier or regulator asks how you monitor traffic quality, "we review every call" is a materially different answer than "we spot-check."
The Compliance Case for Full-Coverage QC
In insurance pay-per-call, the cost of undetected violations compounds faster than in other verticals because the penalties stack. A single bad publisher running non-compliant Medicare traffic can trigger TCPA liability ($500-$1,500 per violation), CMS sanctions on the downstream plan, state insurance department action, and carrier contract termination for your buyer — all from the same set of calls.
Sampling a fraction of calls doesn't provide the coverage that insurance compliance demands. When every call is transcribed and analyzed for red flags — coached call indicators, compliance mismatches, eligibility inconsistencies — you catch problems in hours instead of weeks. Tools like ConvoQC process every call through AI transcription and analysis at $0.015 per minute of audio, flagging coached calls, compliance issues, and TCPA/DNC indicators found in the transcript. For insurance brokers, that per-call visibility is the difference between a compliance program and a compliance claim.
The insurance pay-per-call market rewards brokers who can prove traffic quality, not just promise it. Build QC into your operation before a carrier audit or a CMS inquiry forces you to.