Your AI Texts Leads as 'Sarah.' The FTC Now Treats That as a Fineable Lie

Open your CRM and read the first text your AI sent to your most recent Cars.com lead. If it’s signed “Sarah” — or “Mike,” or “your assigned specialist” — and no human named Sarah was watching that thread, you just read a federal violation back to yourself. That single message now carries a starting penalty of $51,744 under the FTC’s CARS Rule, and as of 2025 the Commission is actively issuing civil investigative demands over exactly this pattern.

Most dealers think CARS Rule compliance is a website problem their web team already solved. It isn’t. It’s a conversation problem, and almost every store running automated lead response is failing it without knowing — because the violation lives in the SMS thread, not on the site.

The 30-Second Test That Tells You If You’re Exposed

Forget the legalese for a moment. There’s a single question that predicts whether your store is in the FTC’s strike zone:

Would the lead be surprised to learn the person texting them isn’t real?

If the answer is yes — if a buyer who later walks in and asks for “Sarah” would be confused when no Sarah exists — you have an undisclosed-AI problem. The FTC’s 2025 guidance under the CARS Rule treats a fabricated human persona in a sales communication as a deceptive act, full stop. It doesn’t matter that the AI was helpful, fast, or accurate. The deception is the unannounced impersonation itself.

That’s the shift dealers keep missing. The old mental model was “as long as we don’t lie about the price, we’re fine.” The new reality is that pretending a human is in the loop is itself the lie the FTC is now prosecuting.

What Actually Happened: The Rule Came Back With Teeth

The Combating Auto Retail Scams (CARS) Rule was finalized in January 2024 and almost immediately stayed after the Texas Automobile Dealers Association challenged it in the Fifth Circuit. The stay was vacated in late 2024, and in Q1 2025 the FTC issued updated guidance that did one thing dealers underestimated: it extended the “clear and conspicuous” disclosure standard — long applied to online ads — to real-time digital sales conversations.

That means your AI texting tool, your VDP chat widget, and any automated follow-up sequence are now governed by the same disclosure standard as a TV ad’s fine print. Except a text message has no fine print. The disclosure has to live in the body of the message itself.

The practical penalty math is what makes this urgent. At $51,744 per infraction and a store pushing 200 leads a month through a non-disclosed AI flow, exposure compounds into the millions on paper within a single quarter. Enforcement is live — this is not a “get ahead of it” situation.

The Three Moments That Trigger a Mandatory Disclosure

Not every automated message needs a banner. The FTC’s guidance pins the obligation to three specific triggers — and an AI Closer hits all three on a normal lead:

1. The first substantive reply to an inbound lead. If the first response to a Cars.com or CarGurus form is AI-generated, the disclosure must be in that message — not the second, not the third.
2. Any message that names a price, payment, or trade value. These are “material representations.” AI-generated numbers get heightened scrutiny, and a stale figure isn’t just bad UX — it’s a violation.
3. Any message that invites an appointment or store visit. The FTC treats appointment-setting as a direct step in the sales transaction, which activates full CARS Rule protections.

If your BDC is unsure whether its current stack even qualifies as “AI-assisted” under these triggers, What a Broken Dealership BDC Looks Like (And How to Fix It) walks through the operational and compliance signals side by side.

The Contrarian Truth: Your Website Disclaimer Makes Things Worse, Not Better

Here’s the advice every vendor and half the compliance consultants will give you: “Add an AI disclosure to your website footer and privacy policy.” That advice is not just useless — it can actively deepen your exposure, and it’s worth understanding why.

A website disclaimer creates a paper trail proving you knew. When the FTC reviews a store that has a polished “we use AI to assist communications” line buried in its privacy policy — but whose actual SMS threads sign off as “Sarah” with no in-message disclosure — that’s no longer a store that didn’t understand the rule. It’s a store that documented its awareness and then failed to carry the disclosure into the channel where it legally mattered. Intent matters in enforcement. A site disclaimer with non-compliant texts reads as willful, not negligent.

The disclosure the FTC counts is the one inside the communication the consumer actually receives. A text is a standalone communication. When a lead submits on AutoTrader and your AI fires a text four minutes later, the website copy does not travel with it. None of it transfers. If your tool can’t inject compliant language into the body of every qualifying outbound message, the most polished website disclaimer in your market won’t save you — it’ll just establish that you knew better.

So the move isn’t “add a disclaimer.” The move is to verify, message by message, that the disclosure rides inside the thread. Everything else is theater.

What “Clear and Conspicuous” Means in a Text Message

The FTC defines clear and conspicuous as a disclosure a reasonable consumer would notice and understand given the format. For SMS, that translates to hard rules:

• The disclosure appears before any sales content — not appended to the end.
• It’s plain language. “You’re chatting with an automated assistant” qualifies. “Powered by AI technology” does not — it’s ambiguous about whether a human is also reading.
• It can’t be a link to a disclosure page. The consumer should never have to tap to learn they’re talking to a machine.

For chat widgets on VDP pages, the disclosure has to be visible on the widget itself before the consumer types a word. A disclosure that only appears after they hand over contact info is already a violation. And this applies whether you run Conversica, a homegrown VinSolutions sequence, or anything else — the FTC offers no platform carve-out. The dealer is the responsible party.

Audit Your Lead Flow in 30 Minutes

Pull your CRM — VinSolutions, DealerCenter, Reynolds, CDK — and trace the message path for your last 20 inbound leads. For each:

• Was the first message AI-generated? Does it disclose that, in the body, before any sales content?
• Does any message in the thread quote a price, payment, or trade value? Is there a disclosure on that specific message?
• Is the sender name a real, identifiable human actively supervising the thread?

If you can’t answer yes to every question for every lead in the sample, you have a gap. Document it and loop in dealer counsel before the next batch arrives. For broader context on how compliance pressure is reshaping BDC staffing and tooling, What the 2026 NADA Midyear Data Says About AI in the BDC covers the shift.

What Compliant Disclosure Actually Looks Like

Format	Compliant	Non-Compliant
SMS first reply	”Hi [Name], this is an automated message from [Dealer]. A team member will follow up shortly. The [Year] [Model] you asked about is priced at $XX,XXX."	"Hey! It’s Sarah from [Dealer] — great news on that vehicle!”
Chat widget header	”You’re chatting with our automated assistant. A human agent can join at any time."	"Chat with us!”
Follow-up email	”This message was sent automatically. Reply anytime and a sales advisor will respond.”	[No disclosure; signed with a rep name]

Dealerships running Synthevo today — including Vanguard Auto Group in Sterling, VA, which coordinates leads across 50-plus rooftops — template their disclosure language directly into the opening block of every AI-generated message. Vanguard’s team reported appointment show rates held steady after the change.

”But Disclosing AI Will Spook Buyers” — The Data Says the Opposite

This is the objection that keeps stores non-compliant: the fear that admitting a text is automated will tank appointment rates. It doesn’t. Leads told upfront they’re talking to an automated system — with a human to follow — show up at a higher rate than leads who discover mid-thread that “Sarah” was never real. The trust gap from an exposed fake persona does far more conversion damage than an honest disclosure ever could.

Speed compounds the effect. An AI Closer that answers a Cars.com lead in under 60 seconds while your BDC rep is on another call is genuinely valuable, and buyers feel the difference. How to Respond to Cars.com Leads in Under 60 Seconds covers building that response window without sacrificing disclosure. The stores treating compliance as a conversion tax are the same ones that’ll catch the next CID. The stores treating it as a trust signal are closing more appointments today — and building the audit trail they’ll need tomorrow.

---

If you want to see exactly how Synthevo bakes CARS Rule disclosures into every AI-generated lead conversation, request access to our live demo and we’ll walk a real lead thread through with your compliance team.