Federal law gives you powerful protections against abusive and deceptive debt collection — including the right to stop all contact, demand proof of the debt, and sue collectors who break the rules.
The Fair Debt Collection Practices Act (FDCPA) is a federal law enacted in 1977 that regulates how third-party debt collectors may contact and communicate with consumers. It is enforced by the Consumer Financial Protection Bureau (CFPB) and the Federal Trade Commission (FTC), and it gives you a private right of action — meaning you can sue a collector who violates it without needing the government to act first.
Important scope note: The FDCPA applies to third-party debt collectors — agencies and attorneys hired to collect a debt on behalf of the original creditor. Original creditors (like the bank that issued your credit card) collecting their own debts are generally not covered, though many state laws fill this gap.
The FDCPA covers debts incurred primarily for personal, family, or household purposes — including credit cards, medical bills, mortgages, auto loans, and student loans. It does not cover business debts.
Every consumer dealing with a third-party debt collector has these fundamental protections under federal law.
Within 30 days of a collector's first contact, you can demand written proof that the debt is valid, the amount is correct, and that they have the right to collect it. Collection activity must pause until they respond.
Send a written cease-and-desist letter and the collector must stop all contact — except for one final notice. This right has no time limit; you can invoke it at any point.
You can dispute the debt in writing within 30 days of first contact. The collector must stop collection and obtain verification before continuing. Disputing does not make the debt go away, but it forces them to prove it.
Upon written request, the collector must provide the name and address of the original creditor. Debts are often sold multiple times, and you have the right to know the full chain of ownership.
If a collector violates the FDCPA, you can sue in federal or state court within one year of the violation. Damages include up to $1,000 per lawsuit in statutory damages, actual damages (emotional distress, lost wages), and mandatory attorney fees if you win.
Exercising your Right #1 is the single most powerful first move. Our free generator creates a legally precise validation demand letter in under 2 minutes.
Generate My Free Letter →Collectors have legitimate tools available to them. Understanding what is allowed helps you distinguish legal activity from actual violations.
Common illegal tactic to watch for: Collectors who claim they will have you arrested for not paying a debt are violating federal law. Failure to pay a civil debt is not a crime, and no legitimate collector can have you jailed for it. This threat alone is worth $1,000 in damages.
In 2021, the CFPB implemented Regulation F, the first major update to FDCPA rules since the law was passed. Key changes include:
Debt validation is your most powerful first move — it stops collection in its tracks and forces the collector to produce evidence. Here is the process:
The 30-day validation window starts from the date of the collector's first written notice (or oral contact). Missing this window does not eliminate the right entirely, but the collector is no longer required to pause collection activity while they respond.
Use our free debt validation letter generator to create a properly formatted letter. Your request should include: your name and address, the account or reference number from the collector's notice, and a clear statement that you are requesting verification of the debt.
USPS certified mail with return receipt creates a paper trail proving exactly when the collector received your letter. This is critical evidence if you later need to sue for violations. Keep all receipts and the green return card.
The collector must provide: the debt amount, the name of the creditor, and proof they have authority to collect it. If they cannot verify the debt or continue collection without verifying, that is a federal violation.
For a deeper dive on this topic, see our complete guide: How to Write a Debt Validation Letter That Actually Works.
If you want all contact to stop — for example, because the debt is past the statute of limitations, you are disputing it, or the calls are harassing — you can invoke your right to cease communication at any time.
Strategic note: A cease-and-desist does not make the debt go away. The collector can still sue you. Consider whether stopping contact is in your best interest before sending one, especially if you want to negotiate a settlement.
If a collector is already crossing the line into harassment territory — repeated calls, threats, or abuse — you have more options beyond the FDCPA. Our guide on how to stop debt collector harassment covers documentation strategies, complaint filing, and when to involve an attorney.
Filing a complaint is free, easy, and can trigger government action against collectors who violate the law. You can complain to:
The CFPB is the primary federal regulator for debt collectors. File online at consumerfinance.gov/complaint. The CFPB forwards complaints directly to companies and publishes them in its public database. Collectors must respond within 15 days.
Report at reportfraud.ftc.gov. The FTC uses complaint data to identify patterns and bring enforcement actions, but does not handle individual disputes.
Many states have their own debt collection laws that are even stronger than the FDCPA. Your state AG can investigate and prosecute violations under state law. Search "[your state] attorney general debt collection complaint" to find the right form.
If the collector is licensed in your state (many are required to be), the state licensing authority can investigate and revoke their license.
The FDCPA gives you the right to bring a private lawsuit — no government action required. This is one of the most consumer-friendly features of the law.
For claims up to your state's small claims limit (typically $5,000–$10,000), you can sue in small claims court without an attorney. Bring documentation of every violation — call logs, voicemails, letters — and the FDCPA statute showing what the collector did wrong.
For larger claims or class actions, file in federal court. Most FDCPA attorneys work on contingency, meaning they only get paid if you win. Given the mandatory attorney fee provision, many attorneys will take strong FDCPA cases for free.
Statute of limitations: You must file your FDCPA lawsuit within one year from the date of the violation. Do not wait. If you believe your rights have been violated, consult an attorney or file your own claim promptly.
It is important to distinguish between two different statutes of limitations that often come up together:
The single most effective first step when dealing with a debt collector is a properly written debt validation letter. It stops collection activity, forces the collector to prove the debt, and documents your rights in writing.
Generate My Free Validation Letter →Related guides: See our complete articles on how to write a debt validation letter and how to stop debt collector harassment for step-by-step tactics.
This article is for informational purposes only and does not constitute legal advice. Laws vary by state and individual circumstances differ. Consult a licensed attorney in your jurisdiction for advice specific to your situation.