Is It Legal to Call a Purchased Car Finance Lead?

Yes — calling a purchased car finance lead is legal in Australia, provided consent exists at the point of contact. That consent doesn't have to be a signed document handed to you by the lead provider. Under the Do Not Call Register Act 2006 and the Spam Act 2003, consent can be "inferred" from the fact that the person made an enquiry about the exact product you're calling about, and made it recently. A genuine online enquiry through a finance lead form is generally the thing that creates that consent in the first place — which is why the quality of the enquiry itself, not just the phone script you use afterwards, is what keeps you on the right side of the law.

This isn't a grey area brokers should guess their way through, because the two pieces of legislation that govern it are specific about what does and doesn't count. Below is what they actually say, and what that means for a broker buying leads rather than generating them in-house.

What does the Do Not Call Register actually stop you doing?

The Do Not Call Register (DNCR) is a list of Australian phone numbers whose owners have opted out of receiving unsolicited telemarketing calls. The Do Not Call Register Act 2006 makes it an offence to make a telemarketing call to a number on that register unless the call falls under an exemption — and consent is the exemption that matters here.

The Act allows consent to be either express (the person explicitly agreed to be contacted) or inferred from the circumstances. What it rules out is inferring consent just because a number is published somewhere, such as in a business directory or on a website. Consent has to come from something the person actually did in relation to the specific call being made — which is precisely what a finance enquiry is.

What counts as consent to call a finance lead?

Consent counts when there's a clear, current connection between what the person asked about and what you're calling them about. Express consent is a person actively opting in — ticking a box, answering "yes" to being contacted by a broker, or otherwise saying so in plain terms. Inferred consent is drawn from the situation itself: someone who submits a detailed form asking to be connected with a car finance broker has, through that act, indicated they expect a broker to call.

The test regulators apply to inferred consent is whether there's a genuine, relevant relationship between the enquiry and the contact — not whether a form was technically filled in somewhere. A person who enquires about car finance and is called about car finance sits squarely inside that test. A person who enquires about one product and is called about an unrelated one does not, regardless of how the number was obtained.

This is also why the form a lead comes from matters more than most brokers assume. A vague, low-intent form that barely establishes what the person is asking for gives you a weaker basis for inferred consent than a detailed one that makes the request explicit. How car finance leads are qualified before they reach you covers what a properly built intake form actually asks and why that detail exists — consent is one more reason it matters, alongside contact quality.

Does the Spam Act cover SMS and email follow-up too?

Yes. The Spam Act 2003 applies the same consent principle to commercial electronic messages — SMS, email and other electronic contact — rather than phone calls. If you're following up a finance lead by text as well as by phone, which is standard practice, the message needs to sit under the same express-or-inferred consent test as the call does.

The practical effect for a broker running a multi-channel follow-up sequence is that consent isn't something you clear once for the phone and then forget about for every other channel. A person who enquired about car finance and expects a call about it also reasonably expects a follow-up text or email about the same enquiry — but not to be added to an unrelated marketing list on the strength of that one form.

Does an enquiry submitted through a lead provider count as consent?

Yes, provided the enquiry was genuinely made by the person the lead identifies, and it was made in relation to the same thing you're calling about. The legislation doesn't distinguish between a person who enquires directly with your brokerage and one who enquires through a lead provider's website — what matters is the enquiry itself, not who was standing between the person and you when they made it.

This is why lead quality and legal compliance aren't really two separate issues for a broker buying leads — they're the same issue looked at from two angles. A lead generated from a real, intent-driven enquiry gives you both a better prospect and a sound basis for inferred consent. A lead generated from incentivised clicks, scraped data, or a form that never made the nature of the enquiry clear gives you neither. 9 questions to ask before choosing a car finance lead provider is worth running through before you commit to a source, and how the provider captures and records that enquiry belongs on that list.

How fresh does that consent need to be?

Fresher is safer, and the connection between the enquiry and your call weakens the longer the gap between them. Regulatory guidance is consistent on the underlying principle even where it doesn't set a single universal number: inferred consent depends on there being a current, ongoing relevance between what was asked and what's being called about, and that relevance fades with time.

For car finance leads specifically, this lines up neatly with what already makes commercial sense. A prospect who enquired about finance wants to hear from a broker quickly, before they've moved on to another lender or lost the urgency that made them fill in the form. Speed to lead matters for conversion — the same promptness also keeps your basis for inferred consent as strong as it can be. Calling a lead within minutes or hours of the enquiry is defensible on both counts; calling a lead that's sat unworked for weeks is weaker on both.

What should you check with a lead provider before you start calling?

Ask the provider directly how the enquiry was captured, what the prospect was told about being contacted, and whether the phone number was verified as genuinely belonging to them. A provider who can answer specifically — what the form asked, what disclosure the prospect saw, how the number was checked — is showing you a lead with a real basis for inferred consent behind it. A provider who only offers a general assurance that leads are "compliant" is asking you to take that on faith, in exactly the same way vague assurances about lead quality should be treated with suspicion.

It's also worth keeping your own basic records once a lead reaches you: when it was received, when you first called, and what the enquiry said the person was asking for. If the substance of a call is ever questioned, being able to show that your first contact matched the timing and subject of a genuine, recent enquiry is a straightforward answer.

What happens if you call someone without valid consent?

Calling a number without a valid consent basis exposes you to the same enforcement regime any business faces under the Do Not Call Register Act and Spam Act — both of which are enforced by the Australian Communications and Media Authority (ACMA) and carry the ability to issue formal warnings, infringement notices and, for serious or repeated breaches, court-imposed penalties. The exposure sits with whoever makes the call, not with the lead provider the number came from, which is exactly why the quality and legitimacy of the enquiry behind a lead is something a broker has a direct interest in, not just an administrative detail to take on trust.

None of this is a reason to be cautious about buying leads — it's a reason to be specific about which leads you buy. A lead built from a genuine, detailed, recently-submitted enquiry gives you a sound basis to call, a prospect worth calling, and a record you can point to if anyone ever asks. This is general information about how the framework operates, not legal advice for your specific circumstances — if you want a definitive read on a particular situation, that's a conversation for your own compliance adviser.