Warned Repeatedly, a VoIP Company Kept Carrying Illegal Robocalls Anyway

XCast Labs provides Voice over Internet Protocol, or VoIP, telephone service that allows calls to be transmitted over the internet rather than traditional phone lines — infrastructure that legitimate businesses rely on daily, but that the Federal Trade Commission alleges the company also allowed illegal robocallers to exploit at scale, including campaigns impersonating officials from the Social Security Administration.DOCUMENTED

XCast Labs agreed to a settlement with the FTC and Department of Justice that includes a $10 million civil penalty and a ban on supporting certain telemarketing practices, resolving allegations that the company facilitated hundreds of millions of illegal robocalls despite repeated warnings.DOCUMENTED

What the complaint alleges

According to the FTC, XCast Labs was warned starting in January 2020 that illegal robocallers were using its network, and the company nonetheless continued transmitting illegal robocall traffic, including organized campaigns designed to generate telemarketing leads by impersonating officials from the Social Security Administration.DOCUMENTED Samuel Levine, Director of the FTC's Bureau of Consumer Protection, said “XCast was warned several times that illegal robocallers were using its services and did nothing.”DOCUMENTED

Why VoIP infrastructure is a chokepoint regulators target

VoIP providers occupy a specific structural position in the robocall ecosystem: rather than pursuing every individual scam operation placing illegal calls, which can number in the thousands and frequently reconstitute under new names after being shut down, regulators have increasingly targeted the infrastructure providers whose networks carry that call traffic in bulk.REVIEWED A single VoIP provider's network can carry traffic for dozens or hundreds of individual robocall campaigns simultaneously, making the provider a far more efficient enforcement chokepoint than pursuing each downstream scam operation independently — provided the provider can be shown to have known, or had reason to know, that illegal traffic was flowing through its systems.

How the warning letters established knowledge

The FTC's practice of sending direct warning letters to VoIP providers before pursuing a formal enforcement action serves a specific evidentiary function: it establishes that the provider had actual notice of illegal activity on its network, closing off any argument that the company was merely an unwitting conduit unaware of how its infrastructure was being used.REVIEWED XCast Labs's alleged continuation of the illegal traffic after receiving that direct warning is what elevated the case from a theoretical knowledge question to a documented instance of a company continuing prohibited conduct after being explicitly told to stop.

Terms of the settlement

Under the settlement, XCast Labs agreed not to violate the Telemarketing Sales Rule going forward, to implement a client-screening process, and to end its relationships with firms that are not complying with telemarketing-related laws.DOCUMENTED The order includes a $10 million civil penalty that was suspended based on the company's inability to pay the full amount, though that suspended penalty becomes immediately due in full if XCast Labs is later found to have misrepresented its financial condition.DOCUMENTED

Regulators say the company continued carrying illegal robocall traffic — including calls impersonating Social Security officials — even after being warned directly that its network was being exploited.

Why the case matters

For telecommunications infrastructure providers of any kind, the XCast Labs case establishes that a warning letter from the FTC creates a documented record of knowledge that can support a subsequent enforcement action if the underlying conduct continues unaddressed. The case reflects a broader enforcement strategy targeting the infrastructure layer of the robocall ecosystem, on the theory that a small number of providers carrying bulk call traffic offer more leverage over the overall volume of illegal robocalls than pursuing individual scam operations one at a time ever could.

Why per-call profit margins make deterrence difficult

VoIP infrastructure providers typically earn a small fee per call or per minute of transmitted traffic, meaning the marginal cost of turning away a suspicious client can exceed the marginal revenue that client's traffic generates for the provider in isolation. That economic incentive is part of why regulators have leaned on civil penalties and mandatory screening requirements, rather than relying on providers to voluntarily police their own networks, since a provider acting purely on short-term revenue incentives has limited built-in motivation to reject traffic that has not yet drawn direct legal consequences.

What screening obligations require going forward

The settlement's requirement that XCast Labs implement a client-screening process means the company must now evaluate prospective and existing telemarketing clients for signs of illegal calling practices before, and while, carrying their traffic, rather than waiting for a regulatory warning letter to prompt that review. That shift from reactive to proactive screening reflects a broader compliance expectation regulators have increasingly imposed across the VoIP industry following this and similar settlements. Consumers who continue to receive suspicious robocalls can report the calling number to the FTC, which uses that complaint data to help identify which VoIP providers may be carrying illegal traffic in violation of settlements like this one. Reporting suspicious calls remains one of the few tools an individual consumer has to help regulators trace illegal traffic back to the infrastructure provider actually carrying it. Every complaint adds to a data set regulators actively use when deciding which providers to warn, and eventually which to sue. Filing even a single complaint takes only a few minutes and contributes directly to the pattern-recognition work that led to this settlement in the first place. Persistent complaint volume is often what ultimately convinces regulators that a given infrastructure provider deserves the same scrutiny XCast Labs eventually received.

Have documents relevant to this story? Reach us through our tips channel.