Fair Debt Collection Practices Act (FDCPA)
The Fair Debt Collection Practices Act (FDCPA, 1977) — codified at 15 U.S.C. §§ 1692–1692p — prohibits abusive, deceptive, and unfair debt collection practices by third-party debt collectors (companies that collect debts owed to someone else). Notably, the FDCPA does not apply to original creditors collecting their own debts — only to the debt collection industry that buys or is hired to collect unpaid accounts. The prohibited practices are extensive: no calls before 8 a.m. or after 9 p.m.; no contacting consumers at work if told it's inconvenient; no harassment (including profanity, repeated calls to annoy, publication of shame lists); no false representations (lying about the debt amount, claiming to be an attorney or government agent, threatening arrest for civil debts); and no unfair practices (adding unauthorized fees, depositing post-dated checks early). Within 5 days of first contact, debt collectors must send a validation notice with the amount owed, the creditor's name, and the consumer's right to dispute the debt within 30 days (disputing triggers verification requirements). Consumers can send a cease communication letter — in writing — and debt collectors must stop contacting them (except to confirm they're stopping or to notify of legal action). Violations carry statutory damages up to $1,000 per lawsuit, actual damages, and attorney's fees. The CFPB's Debt Collection Rule (Regulation F, 2021) — the first comprehensive regulatory update in decades — established rules for contact via email and text messages and capped phone call attempts at 7 per week per debt.
Current Law (2026)
| Parameter | Value |
|---|---|
| Governing law | Fair Debt Collection Practices Act (FDCPA) |
| Enforcing agencies | CFPB (rulemaking), FTC (enforcement), state attorneys general |
| Applies to | Third-party debt collectors, not original creditors |
| Calling hours | 8 AM - 9 PM local time (presumptively convenient) |
| Debt validation | Written notice within 5 days of initial contact |
| Dispute window | 30 days to dispute debt after receiving validation notice |
| Statutory damages | Up to $1,000 per lawsuit (individual); up to $500,000 or 1% of net worth (class) |
| Statute of limitations | 1 year from date of violation |
Legal Authority
- 15 U.S.C. § 1692 — Purpose (eliminate abusive debt collection that causes bankruptcy, job loss, marital instability, privacy invasion)
- 15 U.S.C. § 1692a — Definitions (debt collector, consumer, debt, communication)
- 15 U.S.C. § 1692b — Location information (rules for contacting third parties to find a debtor)
- 15 U.S.C. § 1692c — Communication restrictions (when, where, and how collectors may contact consumers)
- 15 U.S.C. § 1692d — Harassment or abuse (threats of violence, obscene language, repeated calling)
- 15 U.S.C. § 1692e — False or misleading representations (16 specific prohibited misrepresentations)
- 15 U.S.C. § 1692f — Unfair practices (collecting unauthorized amounts, threatening property seizure)
- 15 U.S.C. § 1692g — Debt validation (written notice requirements, dispute rights, verification obligation)
- 15 U.S.C. § 1692h — Multiple debts (payments cannot be applied to disputed debts)
- 15 U.S.C. § 1692i — Legal actions (venue rules — must sue where consumer lives or where contract was signed)
- 15 U.S.C. § 1692k — Civil liability (actual damages + statutory damages + attorney's fees)
- 15 U.S.C. § 1692n — Relation to state laws (state laws providing greater protection are not preempted)
Implementing Regulations
The CFPB regulations implementing the FDCPA live at 12 CFR Part 1006 — Regulation F, effective November 30, 2021. Key provisions:
- § 1006.6 — Communications: debt collectors may not contact consumers before 8 a.m. or after 9 p.m. local time; may not contact at a place the collector knows is inconvenient; may not contact at work if the employer prohibits it. If a consumer is represented by an attorney, the collector must communicate with the attorney. Electronic communications (email, text) may be used but consumers can opt out permanently. "Limited-content messages" — voicemails that include only the collector's name, a callback number, and a statement that the caller is a debt collector — are not "communications" subject to the broader restrictions.
- § 1006.10 — Location information: when contacting third parties to locate the consumer, debt collectors may not identify themselves as a debt collector or reveal the debt's existence; they may only state their name and confirm they are seeking the consumer's contact information.
- § 1006.14 — Telephone call frequency: a presumption of harassment arises if the collector calls more than 7 times within 7 consecutive days for a single debt, or calls within 7 days after having a telephone conversation with the consumer about the debt. The 7-call limit resets every 7-day rolling window and applies separately to each debt. Calls answered by a live person consume the limit; calls going to voicemail where a limited-content message is left count against the limit; unanswered calls that ring through with no message left also count.
- § 1006.18 — False representations: prohibits misrepresenting the character, amount, or legal status of a debt; falsely claiming to be an attorney or government representative; threatening to take action (including legal action) the collector does not intend to take; and misrepresenting that failure to pay will result in arrest.
- § 1006.22 — Unfair practices: prohibits collecting any amount not expressly authorized by the debt agreement or permitted by law; threatening non-judicial property seizure without a present right; depositing post-dated checks before the date on the check.
- § 1006.26 — Time-barred debts: collectors may not bring or threaten to bring a legal action on a debt the collector knows or should know is time-barred. Collectors also may not file or threaten to file a proof of claim in bankruptcy on a time-barred debt. There is no affirmative obligation under Regulation F to disclose that a debt is time-barred before collecting it (but several states require such disclosure).
- § 1006.30 — Prohibited practices before first contact: collectors may not report a debt to a consumer reporting agency before first speaking to the consumer or first sending a written validation notice and waiting a reasonable time for delivery — this is the anti-"debt parking" rule preventing collectors from silently placing debts on credit reports before the consumer knows about collection.
- § 1006.34 — Validation notice: within 5 days of the initial communication (or provided at first contact if done orally), the collector must send a notice containing: the debt amount as of a specific "itemization date"; the creditor's name; the original creditor's name (if different); and the consumer's options — dispute the debt, request creditor information, or cease communication. The CFPB provides a model form (Model Form B-1) that, if used accurately, creates a safe harbor.
- § 1006.38 — Disputes: consumers have 30 days from receipt of the validation notice to dispute the debt or request original creditor information. Upon receiving a timely dispute, the collector must cease collection until it mails verification of the debt to the consumer. Subsequent frivolous or repetitive disputes may be handled with shorter response windows.
- § 1006.42 — Electronic disclosures: required disclosures may be delivered electronically if the consumer consents under the E-SIGN Act, 15 U.S.C. § 7001(c). The validation notice must be sent in a retainable form — a format the consumer can print or save.
- § 1006.100 — Record retention: collectors must retain records evidencing compliance for 3 years from the date of the last collection activity on the account. Telephone call recordings must be retained for 3 years from the date of the call. Records must be sufficient to demonstrate compliance with the call frequency cap and all communication restrictions.
- § 1006.104 — Relation to state laws: Regulation F does not preempt state debt collection laws that provide greater consumer protection. State licensing requirements, additional disclosure obligations, and stricter frequency limits remain in effect.
Regulation F is the first comprehensive FDCPA rulemaking since the statute's enactment in 1977 — it resolved 40+ years of uncertainty about digital-age communication channels and established the first bright-line telephone frequency cap in federal law.
How It Works
The FDCPA is the primary federal law governing how debt collectors treat consumers. It establishes the ground rules for collection communications, prohibits specific abusive tactics, and gives consumers tools to verify debts and stop unwanted contact.
The FDCPA applies to third-party debt collectors — companies collecting debts owed to someone else — including debt buyers who purchase delinquent accounts, attorneys who regularly collect debts, and servicers who acquired accounts already in default. It generally does not apply to original creditors collecting their own debts. Communication rules are strict: collectors may not contact you before 8 AM or after 9 PM, at your workplace if your employer disapproves, through any channel after you've told them to stop, or directly if you have an attorney and the collector knows it. When contacting third parties to locate you, collectors cannot reveal they're collecting a debt. The prohibited conduct categories are harassment (threats of violence, obscene language, repeated calls to annoy), false representations (claiming to be an attorney when they're not, threatening legal action they don't intend to take, misrepresenting the amount owed, implying nonpayment is a crime), and unfair practices (collecting unauthorized fees, depositing post-dated checks early, threatening to seize property they have no right to take).
Within 5 days of first contacting you, the collector must send a written notice identifying the creditor, the amount owed, and a statement of your rights. You have 30 days to dispute the debt in writing; if you do, the collector must stop collection activity until they verify the debt and send you documentation — forcing them to prove they have the right to collect and that the amount is correct. You can also send a cease communication letter telling the collector to stop contacting you entirely; after receiving it, they may only reach out to confirm they're stopping or to notify you of a specific legal action. A cease letter doesn't eliminate the debt, but it stops the calls. Violations of the FDCPA give you a private right of action for actual damages, statutory damages up to $1,000, and attorney's fees — making it economically viable for consumer protection attorneys to enforce on contingency.
How It Affects You
If you've just been contacted by a debt collector for the first time: The most important clock starts now. Under 15 U.S.C. § 1692g, the collector must send you a written validation notice within 5 days of first contact — or include it in the first letter — identifying the creditor and the amount owed and stating your right to dispute. You have 30 days from receiving that notice to dispute the debt in writing. If you dispute within 30 days, the collector must stop all collection activity until they mail you verification of the debt. Don't just call to dispute — the 30-day window and dispute rights apply to written disputes. Write a brief letter: "I dispute this debt and request verification." Send it by certified mail with return receipt (USPS.com offers tracking). Keep the receipt. If the collector can't verify, they must stop. Document every communication — caller ID, date, time, what was said — from the start. This record is your evidence if you need to file a complaint or sue.
If a collector is calling too often, threatening you, or lying about what they can do: Federal law is specific about what's illegal. Regulation F (12 CFR § 1006.14) caps calls at 7 per week per debt — if a collector has called more than 7 times in a week about the same debt, that is a presumptive FDCPA violation. Threatening arrest for civil debt is illegal (15 U.S.C. § 1692e) — no collector can have you arrested for not paying a credit card or medical bill. Calling before 8 a.m. or after 9 p.m. local time is a violation. Calling your workplace after you've told them your employer doesn't allow it is a violation. Each violation entitles you to up to $1,000 in statutory damages plus actual damages and attorney's fees — and FDCPA lawsuits are often taken by consumer attorneys on contingency because the statute requires the debt collector to pay attorney's fees if you win. File a complaint with the CFPB at consumerfinance.gov/complaint and your state attorney general — especially if the CFPB is slow to act, many states have their own debt collection laws with additional remedies. Keep a written log with dates and times of every call.
If you don't recognize the debt, have already paid it, or suspect identity theft: Send a written dispute within the 30-day window after receiving the validation notice. The collector must stop all collection and obtain verification from the original creditor. If this is a case of identity theft or a case of mistaken identity — a debt that belongs to someone with a similar name or Social Security number — dispute it immediately and include a statement that you believe the debt is the result of identity theft. Under the Fair Credit Reporting Act (15 U.S.C. § 1681s-2), you can also dispute the collection account directly with the credit bureaus; a successful identity theft dispute can result in permanent block and removal of the collection account from your credit report. File an identity theft report at IdentityTheft.gov (FTC), which generates an official report you can use with collectors and credit bureaus. If the debt is time-barred under your state's statute of limitations (often 3–6 years depending on the state and debt type), the collector may still ask you to pay voluntarily but cannot sue — and a partial payment or acknowledgment in some states can restart the clock, so get legal advice before making any payment on an old debt.
If you want the calls to stop or if you're being sued: To stop contact entirely, send a cease communication letter by certified mail (15 U.S.C. § 1692c(c)): "I am requesting that you cease all further communication with me regarding this debt." After receiving it, the collector may only contact you once more — to confirm they're stopping or to notify you of a specific legal action like a lawsuit. This doesn't eliminate the debt, but it ends the phone calls. If a collector sues you despite a cease communication letter (other than to actually file suit), that's an additional FDCPA violation. If a lawsuit is filed, it must be in the county where you live or where you signed the original contract — a suit filed in the wrong venue is itself an FDCPA violation (15 U.S.C. § 1692i). Never ignore a debt collection lawsuit: a default judgment can lead to wage garnishment. See Wage Garnishment Limits for federal caps on how much can be taken from your paycheck. Free or low-cost legal help for FDCPA cases is available through NCLC's Access to Justice resources at nclc.org and your state's legal aid organizations at lawhelp.org.
State Variations
The FDCPA explicitly allows states to provide greater consumer protection. Many states have their own debt collection laws that expand on federal protections:
- Licensing: Most states require debt collectors to be licensed or registered
- Original creditors: Some states (e.g., California, New York, Texas) apply collection rules to original creditors, not just third parties
- Additional protections: Some states restrict wage garnishment more strictly, require additional disclosures, or impose longer cooling-off periods
- State enforcement: State attorneys general can enforce both federal and state collection laws
Pending Legislation (119th Congress)
- HJRes125 — CFPB Debt Collection CRA — Would disapprove CFPB's withdrawal of Regulation F's debt-collection and pay-to-pay fees provisions, preserving consumer protections against fees and abusive collection practices
- S 3793 — Predatory Lending Elimination Act. Would extend Military Lending Act interest caps and fee limits to most consumer credit. Status: Introduced.
- HR 6430 — Junk Fee Prevention Act. Would ban hidden fees and force upfront total pricing to protect consumers. Status: Introduced.
- S 2148 (Sen. Merkley, D-OR) — End Junk Fees for Renters Act. Would ban many renter junk fees, cap late charges, require clear lease disclosures. Status: Introduced.
Recent Developments
The CFPB's Regulation F (effective November 2021) modernized the FDCPA for the digital age — establishing rules for email, text, and social media communications by debt collectors. It set a presumptive limit of 7 calls per account per week, clarified validation notice requirements, and limited leaving voicemails that could be overheard by third parties. Medical debt collection has received heightened scrutiny, with the CFPB, credit bureaus, and states implementing policies to shield small medical debts from credit reports.
- CFPB medical debt rule withdrawn (2025): The Biden CFPB had finalized a rule removing medical debt from credit reports — affecting an estimated 15 million Americans with medical debt on their credit files. The rule was scheduled to take effect in March 2025. The Trump CFPB withdrew the rule before implementation, citing industry opposition and concerns about data accuracy. The three major credit bureaus (Experian, Equifax, TransUnion) had already voluntarily removed medical debt under $500 from reports in 2023; the rule would have extended this to all medical debt.
- CFPB FDCPA enforcement paused: The Trump CFPB under Acting Director Russ Vought deprioritized consumer debt collection enforcement, reducing active investigations and FDCPA enforcement actions. CFPB supervisory activities at non-bank debt collectors slowed significantly. State attorneys general — particularly in California, New York, and Illinois — stepped up their own FDCPA-equivalent state law enforcement to fill the gap, using state consumer protection statutes that often provide stronger protections than federal law.
- AI debt collection and FDCPA compliance: Debt collectors are increasingly deploying AI-generated voice calls and chatbots to contact debtors. FDCPA's restrictions on collector communications (time of day, frequency, harassment) apply to AI-generated contacts. The CFPB issued a blog post (not formal guidance) warning that automated systems must comply with FDCPA's mini-Miranda warning requirements and validation notice rules. Law firms specializing in FDCPA litigation have filed class actions alleging AI contact systems violate the 7-call-per-week limit by making contacts that were not counted against limits.
- Student loan debt collection resumes (2025): Federal student loan debt collection — paused during the pandemic moratorium through 2023 and then paused again during IDR litigation — resumed in 2025 under the Trump administration. The restart of collections on approximately 5 million defaulted student loans (wage garnishment, tax refund offsets, Social Security offset) was the largest debt collection activation in history. FDCPA does not apply to the federal government as a collector, but state laws and due process requirements govern the federal collection process. Borrowers must be notified before garnishment begins.