Best Medicare call publishers: how to vet them fast

So you're about to sign a new publisher for Medicare calls and you've got maybe a week before AEP hits full stride. I get it. October 15 rolls around every year and suddenly everyone's scrambling to lock in supply before the good publishers get booked up by bigger buyers. I've been on the receiving end of that scramble more times than I'd like to admit. Rushing the vetting process is exactly how you end up with a compliance headache in November.

This isn't a long courtship. You can vet a Medicare call publisher in a few hours if you know what to check and in what order. Here's how I do it.

Why fast vetting matters more in Medicare than most verticals

Medicare call buying runs on a compressed calendar. AEP is October 15 to December 7. Then MA OEP picks up January 1 through March 31. Roughly five and a half months a year where call volume spikes hard and publishers are juggling multiple buyers at once. Wait until you've got a problem to figure out who you're dealing with, and you've already lost money, and possibly exposed yourself to a compliance violation.

Here's the thing about Medicare specifically: CMS enforcement isn't theoretical. TCPA violations carry fines of roughly $500 to $1,500 per unsolicited call under federal law. Per call. Not per campaign, not per publisher relationship. If a publisher hands you 200 bad calls from a sketchy traffic source, that's not a rounding error. That's real exposure that can run into six figures fast.

Quick take: vet before you buy, not after the first complaint shows up.

Step 1: check the basics before you even get on a call with them

Start with the boring stuff. It's boring because it works.

1. Search the publisher's business name plus "complaints" and see what surfaces.
2. Check the Better Business Bureau for their profile, complaint history, and how long they've held their rating.
3. Run them through LegitScript if they're touting any kind of health-related certification.
4. Pull their website and actually read the disclaimers on landing pages, not just skim them.
5. Ask directly how long they've operated in the Medicare vertical specifically, not just insurance broadly.

None of this takes more than 30 minutes. You'd be surprised how many buyers skip the LegitScript check or the disclaimer read entirely because they're fixated on price per call. Price matters, sure. But a $12 call from a publisher with a pile of unresolved BBB complaints isn't cheap. It's a liability wearing a low price tag.

One thing I always do now: check whether the same phone number or business address shows up under a different company name somewhere else. I've caught two publishers doing this in the last three years, both times because a previous entity had a trail of complaints they were trying to leave behind. Takes five minutes with a basic search. Worth every one of them.

Quick take: 30 minutes of searching saves you months of cleanup.

Step 2: get specific about consent and recording retention

This is the part most buyers gloss over. It's also the part that actually protects you.

Ask the publisher directly: what consent language do you use, and can you show it to me in writing? A reputable publisher should have documented consent language ready to hand over without hesitation. If they hesitate, or say "our compliance team handles that" without producing anything concrete, that's a signal.

Then ask about call recording retention. Most carriers and compliance auditors expect a 12- to 24-month retention window on recorded calls. If a publisher can't tell you their retention policy off the top of their head, they probably don't have one that would hold up under an audit. You want a publisher who treats this like a real operational requirement, not paperwork they'll get to eventually.

I've asked this question to publishers who clearly weren't ready for it. The good ones answer in one sentence. The bad ones start talking around it.

There's a second layer here too: ask what happens when a consumer disputes consent. Does the publisher have a process for pulling the recording within 24 to 48 hours, or does it take a week of emails to get an answer? During AEP, a slow response on a disputed call can turn into a real problem if a carrier is asking you to prove the lead was compliant. I've had publishers take nine days to produce a recording. By then the carrier had already suspended the agent tied to that call.

Step 3: verify traffic sources, not just the website

Here's the thing nobody tells you when you're new to buying calls: a polished website and a clean licensing page don't tell you where the actual traffic is coming from. This is the single most commonly missed step in vetting, and honestly the one that causes the most downstream trouble.

Ask the publisher point blank: is this paid search, native ads, SEO, or social? Each has a different risk profile. Paid search tends to be cleaner because the consumer is actively searching. Native and social traffic, especially anything using language like "free benefits" tied to Medicare or ACA plans, can flag misleading creative that CMS and carriers have specifically cracked down on in recent years.

I once worked with a publisher who swore up and down their traffic was all organic search. Turned out a chunk of it was coming from Facebook ads promising "free Medicare benefits you didn't know you qualified for." That kind of creative draws regulatory attention fast. And it's the buyer, not just the publisher, who ends up dealing with the fallout when a carrier flags the calls.

If a publisher won't show you actual ad creative or landing page screenshots from live campaigns, don't just take their word for it. Ask again. Still won't show you? Walk.

A related check: ask what percentage of their volume comes from their own owned-and-operated sites versus a network of sub-affiliates. Sub-affiliate traffic isn't automatically bad, but it means the publisher has less direct control over the creative and consent flow. If more than half their volume comes from sub-affiliates they can't name, treat that as a yellow flag, not a dealbreaker, but something to price into your risk tolerance.

Step 4: understand where you land on price and why it varies so much

Quality Medicare call leads typically run $15 to $60 or more per call, depending on exclusivity, whether they're AI-qualified before you get them, and time-of-day targeting. Aggregated or shared leads run cheaper, often $5 to $20, but you're sharing that consumer's attention with other buyers, which usually means lower conversion.

So when a publisher quotes you $10 a call during peak AEP weeks, ask yourself why it's so far below the going rate. Sometimes it's a genuinely efficient operation. More often it means shared leads, shaky consent, or traffic sources that haven't been fully vetted. Price is a signal, not just a cost.

To put rough numbers on it: if you're paying $35 a call and closing at a 12% to 18% rate, which is fairly typical for exclusive, AI-qualified Medicare calls, your cost per acquisition lands somewhere between $195 and $290. Drop to a $12 shared call with a 4% close rate, common when three or four buyers are working the same lead, and you're looking at $300 or more per acquisition anyway, just with worse compliance exposure baked in. The cheap call isn't actually cheap once you run the math past the invoice.

If you're building a buying strategy across platforms, a tool like Ringba X can help you track call quality and source data in real time, so you're not just trusting a publisher's word on where calls originate.

A quick note on U65 and ACA overlap

If you're working with a publisher who also handles U65 or ACA-adjacent traffic, know that consent and licensing requirements differ from Medicare. The ACA Open Enrollment Period typically runs November 1 to January 15 in most states, which overlaps directly with Medicare AEP. That overlap strains lead quality fast if a publisher isn't segmenting traffic and compliance documentation by vertical. Ask any publisher working across both to show you separate documentation for each. One blanket compliance packet covering everything? Worth a second look.

Whether you're looking to buy calls for Medicare specifically or want to expand into buying health insurance calls across U65 and ACA, the vetting principles hold. Just don't assume one publisher's Medicare compliance automatically covers their other verticals.

FAQ

How long should vetting a new publisher actually take? A thorough first pass takes 2 to 4 hours: background checks, BBB and LegitScript review, and a direct conversation about consent and traffic sources. Don't compress it below that just because AEP is approaching.

What's a reasonable price per call during AEP? Expect $15 to $60+ for exclusive, qualified Medicare calls. Anything well under $15 during peak season deserves extra scrutiny on traffic source and consent documentation.

Do I need to re-vet a publisher every year? Yes. Ownership, traffic sources, and compliance practices change. A publisher who was clean last AEP can shift their ad strategy or subcontract traffic without telling you.

What's the biggest red flag in a first conversation with a publisher? Vagueness about traffic source. If they can't tell you plainly whether calls come from paid search, native, SEO, or social, slow down right there.

Should I ask for sample call recordings before signing? Absolutely. A publisher confident in their consent process will provide sample recordings without pushback. Hesitation here usually means their retention practices aren't as solid as they claim.