The FDCPA Explained: What Debt Collectors Can and Cannot Do

What Is the FDCPA?

The Fair Debt Collection Practices Act (FDCPA) is a federal consumer protection law passed in 1977 and enforced by the Federal Trade Commission and the Consumer Financial Protection Bureau. It was created in response to widespread abusive, deceptive, and unfair debt collection practices. The law sets strict rules for how third-party debt collectors must behave when collecting personal debts like credit cards, medical bills, student loans, and auto loans.

It is worth noting that the FDCPA applies to third-party debt collectors—collection agencies, debt buyers, and attorneys who regularly collect debts. Original creditors collecting their own debts are not covered by the FDCPA, though many states have passed their own laws with similar protections that do cover original creditors.

Who Is Covered by the FDCPA?

The FDCPA covers collectors of personal, family, and household debts. Business debts are not covered. Covered collectors include:

• Third-party collection agencies hired by original creditors
• Debt buyers who purchase defaulted debt portfolios
• Attorneys who regularly collect debts on behalf of clients
• Companies that service debts in default

FDCPA Rules: What Debt Collectors Cannot Do

Prohibited Communication Practices

• Call before 8 a.m. or after 9 p.m. in your local time zone
• Call you at work if they have been told—verbally or in writing—that your employer prohibits such calls
• Contact you after you have sent a written cease and desist letter requesting they stop (they may contact you once to confirm they are ceasing contact or to notify you of a specific action they plan to take)
• Communicate with third parties (your family, friends, neighbors, coworkers) about your debt—except to locate you, and only once per person
• Use a postcard to contact you (visible to anyone who handles the mail)

Prohibited Harassment and Abuse

• Use or threaten to use violence or other criminal means to harm you, your property, or your reputation
• Use obscene or profane language
• Repeatedly call with the intent to annoy, abuse, or harass
• Publish your name on a “deadbeats list”
• Advertise the sale of your debt to coerce payment

Prohibited False or Deceptive Representations

• Misrepresent the amount you owe
• Falsely claim to be an attorney or government representative
• Threaten to arrest or imprison you for a civil debt (debt is not a criminal matter in the United States)
• Threaten to take legal action they cannot take or do not intend to take
• Use a false company name or misrepresent who they are
• Fail to disclose that they are a debt collector attempting to collect a debt

Required Disclosures Under the FDCPA

Debt collectors have specific things they must tell you. In their first communication (or within five days of it), they must provide written notice including:

• The amount of the debt
• The name of the creditor to whom the debt is owed
• Your right to dispute the debt within 30 days
• A statement that if you dispute the debt in writing within 30 days, they will provide verification
• A statement that they will provide the original creditor's name upon written request

Every collection communication must also include the “mini-Miranda” disclosure: “This is an attempt to collect a debt, and any information obtained will be used for that purpose.”

Your Right to Request Debt Validation

Within 30 days of receiving the initial written notice, you have the right to dispute the debt in writing. Once you do, the collector must stop all collection activity until they provide written verification of the debt. This is one of the most powerful tools available to debtors.

Send your validation request via certified mail with return receipt so you have proof of both sending and receipt. Keep a copy of everything.

Your Right to Stop Contact

You can send a written “cease and desist” letter telling the collector to stop contacting you. Once received, the collector may only contact you to confirm they are ceasing contact or to notify you of a specific action (like filing a lawsuit). After that, all contact must stop.

Be aware: ceasing contact does not eliminate the debt or prevent a lawsuit. If the debt is valid and within the statute of limitations, the collector may still sue you. However, if the debt is time-barred or otherwise uncollectable, a cease and desist ends the harassment effectively.

How to Enforce Your FDCPA Rights

If a collector violates the FDCPA, you have several remedies:

• File a complaint: Submit complaints to the CFPB at consumerfinance.gov/complaint and to the FTC at reportfraud.ftc.gov. Also file with your state attorney general's office.
• Sue in court: You can file suit in federal or state court within one year of the violation. You may recover actual damages, up to $1,000 in statutory damages per lawsuit (not per violation), and attorney fees if you win.
• Class action: If a collector violated the FDCPA against many people using the same practice, a class action may recover up to $500,000 or 1% of the collector's net worth.

Consumer rights attorneys often take FDCPA cases on contingency because the fee-shifting provision means the collector pays attorney fees when you win. This makes it cost-free to pursue meritorious cases.

2021 FDCPA Updates: Regulation F

In 2021, the CFPB implemented Regulation F, which modernized FDCPA rules for digital communications. Key updates include:

• Collectors may contact you via email and text message under certain conditions
• Collectors must provide an easy opt-out mechanism for electronic communications
• There is a presumption that calling more than seven times in a seven-day period, or calling within seven days of a conversation, constitutes harassment

These updates reflect how debt collection has evolved since 1977 while preserving core consumer protections.