Skip to content
Infinite Bookings
← Blog
Vendor diligence

Buying from an aggregator: the compliance questions

Quick answer

Ask who actually generated the traffic, what the disclosure named, how many parties the merchant consented to, and whether the record can be produced with its timestamp and page URL. An aggregator sits between you and the consent event, so the further the chain runs the weaker the consent gets — and you are the one placing the call, whoever collected the record.

Alex MakowskiFounder, Infinite BookingsUpdated 2026-08-302 min read

Aggregated leads are not automatically a compliance problem, but they are always a chain, and every link is a place where the record you would need to defend a call can go missing.

Ask down the chain

QuestionWhat a weak answer sounds like
Who ran the ad and hosted the form?"A network partner"
Can I see the page the merchant saw?"I can describe it"
Exactly what did the disclosure name?"Our partners"
How many buyers is this consented to?Silence, or a range
Can you produce the record with timestamp, IP and URL?"It is in our system"
Do you scrub, and with whom?A yes without a provider name

A merchant who filled in a form under one brand and agreed to hear from "funding partners" has consented to a category rather than a company. When your name appears on the caller ID, the consent has to stretch to cover a party the merchant could not have identified — which is exactly the argument that gets made against it.

If you buy aggregated anyway

  • Get the disclosure text and a screenshot in writing before the first order, not after a complaint.
  • Require that consent records be producible within a stated number of days, in the agreement.
  • Scrub on your own side regardless of what the vendor says they do.
  • Keep source tags on every record so that if one channel produces a problem you can identify the rest of it.

That last one matters more than it sounds. A complaint arriving on an untagged record tells you that something in your buying is wrong and gives you no way to find out what.

Questions brokers ask

They are a chain, and every link is a place the consent record can go missing. They are not automatically a problem, but the diligence has to run past your immediate vendor to whoever actually generated the traffic.

The page the merchant saw, the exact disclosure text, the number of parties consented to, and the record itself with its timestamp, IP and page URL. Anything less is an assertion of consent rather than evidence of it.

Because a lead sold to one buyer can name that buyer in the disclosure and a lead sold to five cannot. The vagueness in aggregated consent language is structural, not sloppy.

Yes. You place the call, so the exposure is yours, and "our vendor handles it" is not a position that survives a complaint. The scrub costs cents.

Because a complaint arriving on an untagged record tells you something in your buying went wrong and gives you no way to find the rest of it. Tag every lead with where it came from.

Get started.

We will tell you straight up if we cannot help you. No commission deals, no free trials, no chasing you for three weeks.

15 minute call

Rather not book?

Text my number instead