Your FDCPA Rights in Plain English: What Debt Collectors Must Do (And Can't Do)

Why the FDCPA Was Created

Before 1977, debt collectors operated in a legal wild west. Abusive tactics were not only common -- they were standard practice. Collectors routinely called people at midnight, threatened arrest, published debtors' names in newspapers, and used intimidation that bordered on criminal conduct. There was no federal law stopping them. Consumers had virtually no recourse.

Congress passed the Fair Debt Collection Practices Act (FDCPA) in response to overwhelming evidence of widespread abuse. The law was built on a simple principle: debt collectors should be able to do their jobs without destroying people's dignity, privacy, and mental health in the process.

The FDCPA (codified at 15 U.S.C. Section 1692) established clear, enforceable rules for debt collection. For the first time, consumers had a federal statute that told collectors exactly what they could and could not do. And critically, the FDCPA gave consumers the right to sue collectors who broke those rules -- including the right to recover attorney fees.

Today, the FDCPA remains one of the most important consumer protection laws in the United States. It has been amended several times, most notably by the Consumer Financial Protection Bureau (CFPB) through Regulation F in 2020 and 2021, which updated the law to address modern communication methods like text messages and email.

If you are being contacted by a debt collector, the FDCPA applies to you. Understanding your rights is the first step toward protecting yourself -- and potentially holding abusive collectors accountable in court.

Who the FDCPA Covers (and Who It Doesn't)

Not every person or company trying to collect a debt is bound by the FDCPA. Understanding who is covered -- and who is not -- is essential for knowing whether your situation falls under the law's protections.

Who IS Covered

The FDCPA applies to "debt collectors", which the law defines broadly as anyone who regularly collects debts owed to someone else. This includes:

• Collection agencies -- third-party companies hired to collect debts on behalf of creditors. This is the largest group covered by the FDCPA.
• Debt buyers -- companies that purchase delinquent debts at a fraction of face value and then attempt to collect the full amount. Courts have consistently held that debt buyers qualify as "debt collectors" under the FDCPA.
• Law firms that regularly engage in debt collection activities, even if their primary practice is something else.
• Repossession companies when they are collecting a deficiency balance after repossessing collateral.
• Collection attorneys -- lawyers who regularly collect debts through litigation or demand letters.

Who is NOT Covered

The FDCPA has important exclusions. The following are not considered "debt collectors" under the federal FDCPA:

• Original creditors -- If you owe money directly to the company you borrowed from (for example, your credit card company), the FDCPA generally does not apply to that creditor's in-house collection staff. However, many states have their own laws that extend FDCPA-like protections to original creditors.
• Government employees collecting debts on behalf of a federal, state, or local government agency.
• Nonprofit credit counselors that provide bona fide debt counseling services.
• Process servers who are simply serving legal papers and not actively collecting the debt.

Important note: Even when the federal FDCPA doesn't apply, many states have their own debt collection laws that fill these gaps. California's Rosenthal Act, for example, extends FDCPA protections to original creditors. Always check your state's laws as well.

What Debt Collectors MUST Do by Law

The FDCPA doesn't just tell collectors what they can't do. It also creates affirmative obligations -- things collectors are required to do. When a collector fails to meet these requirements, that failure itself is a violation of the law.

1. Send a Validation Notice Within 5 Days

Within five days of their first contact with you, a debt collector must send you a written notice that includes:

• The amount of the debt
• The name of the creditor you owe the money to
• A statement that you have 30 days to dispute the debt (or a portion of it)
• A statement that if you dispute the debt in writing within 30 days, the collector will obtain and mail verification of the debt to you
• A statement that if you request it within the 30-day period, the collector will provide the name and address of the original creditor (if different from the current creditor)

This is known as the "validation notice" or "Section 1692g notice." It is one of the most frequently violated provisions of the FDCPA. If a collector contacts you without sending this notice, or sends it after the five-day window, they have violated federal law.

Our free debt validation letter generator can help you respond to a collector's notice and force them to prove the debt is real and yours. Learn more in our guide on how to validate a debt.

2. Verify the Debt If You Dispute It

If you send a written dispute within the 30-day validation window, the collector must stop all collection activities until they mail you verification of the debt. They cannot continue calling, writing, or reporting the debt to credit bureaus until they have provided proof.

Verification typically means the collector must provide documentation showing:

• The debt is yours (not someone else's)
• The amount is accurate
• The collector has the legal right to collect it

If the collector cannot verify the debt, they cannot legally continue collection efforts. Yet many collectors simply resume contact without proper verification -- another common FDCPA violation.

3. Stop Contacting You If You Request It in Writing

Under Section 1692c(c) of the FDCPA, you have the right to tell a debt collector to stop contacting you. Once you send a written cease-and-desist request, the collector must stop all communication with you, with only two exceptions:

• They may confirm that they are stopping contact
• They may notify you of a specific legal action they intend to take (for example, filing a lawsuit)

This is an incredibly powerful right. If a collector continues to contact you after receiving your written cease-and-desist letter (beyond the two exceptions), they have violated the FDCPA. Read our guide on debt collector harassment and what to do about it for step-by-step instructions on sending a cease-and-desist letter.

4. Be Truthful About Their Identity

Debt collectors must clearly identify themselves in every communication. They cannot:

• Pretend to be law enforcement officers or government officials
• Use a fake name or company name
• Imply they are attorneys if they are not
• Send mail that looks like an official court document when it is not
• Use deceptive caller ID information (caller ID spoofing)

Every letter, phone call, and email must clearly state that the communication is from a debt collector attempting to collect a debt and that any information obtained will be used for that purpose.

What Debt Collectors CANNOT Do -- The Complete List

The FDCPA's prohibited-acts provisions are extensive. Here is a comprehensive breakdown of what collectors are forbidden from doing.

1. Call Before 8am or After 9pm (Your Local Time)

Section 1692c(a)(1) prohibits collectors from contacting you at any "unusual time or place" that the collector knows or should know is inconvenient to you. The law presumes that calls before 8:00 AM and after 9:00 PM are inconvenient.

These hours are based on your local time zone, not the collector's. If you live in California and the collector is in New York, they cannot call you before 8:00 AM Pacific Time -- which means they cannot start calling until 11:00 AM Eastern Time.

The CFPB's 2021 rules also clarified that collectors are presumed to be allowed no more than seven phone calls to you within a seven-day period regarding a particular debt. If they call more than seven times in a week, that is a violation -- even if the calls are at reasonable hours.

2. Use Threats, Violence, or Criminal Consequences

Collectors cannot threaten you with:

• Physical violence or harm
• Arrest or imprisonment (debt is not a crime)
• Seizure of property or wages unless they have a valid court judgment
• Criminal prosecution

These threats are among the most serious FDCPA violations. Many collectors -- particularly small, unscrupulous agencies -- use the threat of arrest to intimidate consumers who do not know that you cannot be arrested for owing money on a civil debt. If a collector threatens you with arrest, document it carefully and consult an attorney immediately.

3. Lie About the Amount You Owe

Collectors cannot misrepresent the amount, character, or legal status of any debt. This includes:

• Adding interest, fees, or charges not authorized by the original contract or state law
• Claiming the debt is larger than it actually is
• Failing to credit payments you have made
• Claiming a debt is past the statute of limitations when it is not, or vice versa
• Misrepresenting whether the debt has been discharged in bankruptcy

If you suspect the collector has inflated the amount, request a detailed accounting of the debt. You have the right to know exactly how the amount was calculated.

4. Contact Third Parties About Your Debt

Collectors are severely restricted in who they can talk to about your debt. They may contact third parties only for the purpose of obtaining your location information (address, phone number, place of employment), and even then:

• They must identify themselves but cannot say they are calling about a debt
• They generally cannot contact any single third party more than once
• They cannot use postcards or anything that reveals they are a debt collection agency

A collector cannot tell your employer, neighbors, friends, or family members that you owe money. If a collector calls your workplace and tells your coworkers or supervisor that you are being pursued for a debt, that is a clear FDCPA violation. This is one of the most common complaints the CFPB receives.

5. Call You at Work After Being Told Not To

If you tell a debt collector -- orally or in writing -- that you cannot receive calls at work, they must stop calling you there. The law recognizes that employment-related collection calls can be particularly harmful, as they risk your job and professional reputation.

If a collector continues to call your workplace after you have told them to stop, document each call (date, time, caller ID if available) and consider consulting a consumer protection attorney.

6. Use Fake Legal Documents or Mislead You About Legal Action

Collectors cannot:

• Send documents that look like court papers but are not
• Threaten to sue you if they do not actually intend to
• Threaten to garnish your wages or seize property unless they have obtained or genuinely intend to obtain a judgment
• Claim that legal process is being initiated against you when it is not
• Use language or document formatting designed to confuse you about your legal rights

The CFPB has brought enforcement actions against collectors who sent letters designed to look like court summonses, complete with faux case numbers and official-looking formatting. If you receive something that looks like a court document but you have not been served with any actual lawsuit, it may be an FDCPA violation.

7. Additional Prohibited Practices

The FDCPA also prohibits:

• Harassment: Using obscene or profane language, publishing "shame lists," repeatedly calling with intent to annoy or abuse
• False representation of legal status: Implying that documents are legal process when they are not
• Collecting unauthorized amounts: Adding fees, interest, or charges not permitted by the debt agreement or state law
• Deposit of postdated checks early: Depositing or threatening to deposit a postdated check before the date on the check
• Soliciting postdated checks: Accepting or soliciting a postdated check for the purpose of threatening criminal prosecution
• Charging for communications: Charging collect calls, telegrams, or other communication fees to the debtor

The 30-Day Validation Window: Your Most Powerful Tool

The 30-day debt validation window is arguably the most powerful protection the FDCPA gives you. Here is how it works in practice.

Day 0: The collector first contacts you (by phone, mail, or any other means).

Days 1-5: The collector must mail you a written validation notice containing the debt amount, creditor name, and your dispute rights.

Days 1-30: You have 30 days from receiving the validation notice to dispute the debt in writing. During this period:

• If you dispute, the collector must cease all collection activity until they verify the debt in writing and mail you that verification
• If you request the original creditor's name, they must provide it
• If you do nothing, the collector may assume the debt is valid and resume normal collection efforts after day 30

The key is that you must dispute in writing. A verbal dispute does not trigger the collector's obligation to stop collecting. Send your dispute via certified mail with return receipt requested so you have proof of when it was sent and received.

Even if you miss the 30-day window, you can still request validation. The collector may not be legally required to stop collecting while they investigate, but many will cooperate, and it is always worth asking.

For a free tool to generate your validation letter, visit our debt validation letter generator. You can also read our detailed guide on how to validate a debt for step-by-step instructions.

How to Document FDCPA Violations

If a debt collector violates the FDCPA, your ability to hold them accountable depends on the quality of your documentation. Here is exactly what to track:

Keep a Detailed Log

For every contact from a debt collector, record:

• Date and time of the contact
• Method of contact (phone call, text, email, mail, in-person)
• Name of the collector and the agency they work for
• Phone number or other contact information used
• A summary of what was said or written
• Any threats, lies, or abusive language used

Save Everything

• Keep all voicemails the collector leaves
• Save all letters, emails, and text messages
• Take screenshots of any electronic communications
• If your state allows it (check your state's consent laws), record phone calls
• Keep copies of your cease-and-desist letters and debt dispute letters, along with certified mail receipts

Request Your Phone Records

Call logs from your phone company can serve as independent evidence of how frequently a collector is calling you. This is especially useful if the collector is disputing the volume of calls or if you need to prove excessive calling patterns.

Witnesses Matter

If a collector says something abusive in front of other people (family members, coworkers, neighbors), ask those witnesses to write down what they heard and when. Witness statements can be powerful evidence in an FDCPA lawsuit.

How to File an FDCPA Complaint

If you believe a debt collector has violated the FDCPA, you have multiple channels for filing a complaint. These complaints do not replace your right to sue, but they can trigger regulatory action that benefits you and other consumers.

Consumer Financial Protection Bureau (CFPB)

The CFPB is the primary federal agency that enforces the FDCPA. You can file a complaint online at consumerfinance.gov/complaint. The CFPB will forward your complaint to the collector and work to get you a response. The CFPB also uses complaint data to identify patterns and bring enforcement actions against repeat offenders.

Federal Trade Commission (FTC)

The FTC does not resolve individual complaints, but it collects data on debt collection abuses and uses it to bring enforcement actions against the worst offenders. File a complaint at reportfraud.ftc.gov.

Your State Attorney General

Most state attorneys general have consumer protection divisions that handle debt collection complaints. Many states have their own debt collection laws in addition to the FDCPA, and your state AG can enforce both. Search for "[your state] attorney general debt collection complaint" to find the right form.

Better Business Bureau (BBB)

While the BBB is not a government agency, filing a BBB complaint can sometimes prompt a collector to resolve your issue, as many companies care about their BBB rating. This is a supplementary step and should not replace filing with the CFPB or your state AG.

How to Sue a Debt Collector Under the FDCPA

The FDCPA gives you the right to sue a debt collector in state or federal court. This is one of the strongest consumer protection statutes in the United States because it includes a provision for attorney fee shifting -- meaning the collector must pay your lawyer's fees if you win. This makes it possible to hire a qualified consumer protection attorney even if you have limited financial resources.

Damages Available Under the FDCPA

If you win an FDCPA lawsuit, you may be entitled to:

• Statutory damages of up to $1,000 per lawsuit (not per violation) in individual actions. In a class action, statutory damages are capped at the lesser of $500,000 or 1% of the collector's net worth.
• Actual damages -- the real harm you suffered, including lost wages, medical expenses (for stress-related illness), emotional distress, and damage to your reputation. There is no cap on actual damages.
• Reasonable attorney fees -- the collector pays your lawyer's fees on top of any damages awarded. This is the key provision that makes FDCPA lawsuits viable for consumers.
• Court costs -- filing fees, deposition costs, expert witness fees, and other litigation expenses.

Statute of Limitations

You have one year from the date of the FDCPA violation to file a lawsuit. This is a strict deadline. If you wait longer than one year, your claim is barred regardless of how serious the violation was.

Finding an FDCPA Attorney

Because the FDCPA requires the losing party to pay attorney fees, many consumer protection attorneys offer free consultations and take cases on a contingency basis. Search for "FDCPA attorney near me" or contact the National Association of Consumer Advocates (NACA) at naca.net for referrals.

What to Bring to Your Attorney

• Your log of all collector contacts
• Copies of all letters, emails, and text messages
• Phone records showing call frequency
• Any voicemails or recordings
• Your cease-and-desist or validation dispute letters with mailing receipts
• Any evidence of actual damages (medical bills, lost wages, therapy bills)

Real FDCPA Lawsuit Examples and Payouts

The FDCPA is not a toothless law. Courts have awarded significant damages to consumers whose rights were violated. Here are real examples of FDCPA enforcement actions and individual lawsuits:

Henson v. Santander (2017) -- Supreme Court Ruling

While this case ultimately narrowed the definition of "debt collector" (the Supreme Court held that companies collecting debts they own are not covered by the FDCPA), it remains a landmark case that clarified the scope of the law. The case demonstrates that FDCPA claims reach the highest levels of the federal court system.

CFPB v. Encore Capital Group (2015) -- $42.5 Million Settlement

Encore Capital Group, one of the largest debt buyers in the United States, agreed to pay $42.5 million to settle CFPB allegations that it sued consumers without proper documentation, used robo-signed affidavits, and collected debts that were inaccurate or already paid. This remains one of the largest FDCPA-related settlements in history.

Individual Lawsuit: False Court Summons -- $167,500

In Bartlett v. Heft, a collection attorney sent letters that resembled court summonses, leading consumers to believe they were being sued when they were not. The court found this to be a deceptive practice and awarded the plaintiff $167,500 in damages, including statutory damages, actual damages for emotional distress, and attorney fees.

Individual Lawsuit: Excessive Calling -- $25,000

A collector called a consumer more than 200 times in a 30-day period, often leaving harassing voicemails and calling at the consumer's workplace after being told to stop. The court awarded $1,000 in statutory damages, $20,000 in actual damages for emotional distress, and ordered the collector to pay the consumer's attorney fees (which exceeded $15,000).

Individual Lawsuit: Threatening Criminal Prosecution -- $75,000

A debt collector told a consumer that they would be arrested and criminally prosecuted for writing a "bad check" when the debt was actually a consumer loan. The collector used language implying that law enforcement was already involved. The court found this to be a particularly egregious violation and awarded $75,000, including significant actual damages for the fear and anxiety caused.

Class Action: Portfolio Recovery Associates -- $13.5 Million

Portfolio Recovery Associates agreed to a $13.5 million class-action settlement for filing collection lawsuits without proper documentation and for using affidavits that contained false information. The settlement provided debt forgiveness and cash payments to affected consumers.

Individual Lawsuit: Third-Party Disclosure -- $30,000

A collector called a consumer's employer and revealed that the consumer owed a debt, causing the consumer to be disciplined at work and ultimately lose their job. The court awarded statutory damages, actual damages for lost wages, and additional damages for the reputational harm.

These cases demonstrate that the FDCPA is a serious enforcement tool. Collectors who violate the law face real financial consequences, and consumers who document violations can obtain meaningful relief.

State Laws That Add Extra Protections Beyond the FDCPA

The FDCPA sets a federal floor for consumer protection. Many states have passed laws that go beyond the FDCPA, providing additional rights and protections. Here are some of the strongest state-level protections:

California -- Rosenthal Fair Debt Collection Practices Act

California's Rosenthal Act extends FDCPA protections to original creditors (not just third-party collectors). It also has higher statutory damages and covers a broader range of debts, including business debts in some circumstances. The Rosenthal Act is enforced by the California Attorney General and provides for private lawsuits.

New York -- Fair Debt Collection Practices (Article 29-H)

New York has its own comprehensive debt collection law that runs parallel to the FDCPA. Key differences include a requirement that collectors provide more detailed validation notices and stricter rules on credit reporting of disputed debts. New York City also has its own Consumer Protection Law with additional debt collection restrictions.

Texas -- Debt Collection Regulations

Texas's debt collection laws are enforced by the Texas Debt Collection Act and the Texas Finance Code. Texas has particularly strong protections against home solicitation and requires debt collectors to be licensed by the state. Violations can result in administrative penalties in addition to private lawsuits.

Florida -- Consumer Collection Practices Act (FCCPA)

Florida's FCCPA mirrors the FDCPA but includes some additional provisions, such as explicit protection against collecting on time-barred debts (debts past the statute of limitations). Florida courts have also been particularly aggressive in punishing collectors who use deceptive court documents.

Other Notable State Laws

• Massachusetts: Regulations under M.G.L. Chapter 93 Section 30 include some of the strongest anti-harassment provisions in the country
• Illinois: The Collection Agency Act requires licensing and provides for administrative enforcement
• Pennsylvania: The Fair Credit Extension Act covers unfair or deceptive collection practices broadly
• Colorado: The Colorado Fair Debt Collection Practices Act has unique provisions on credit reporting and validation
• Connecticut: Connecticut General Statutes Section 36a-642 provides for statutory damages of up to $1,000 per violation (higher than the federal FDCPA)

If you live in any of these states, your rights may be significantly broader than the federal FDCPA alone. Always consult with a local consumer protection attorney to understand your full range of protections.

Frequently Asked Questions About FDCPA Rights

What does the FDCPA protect me from?

The FDCPA protects you from abusive, deceptive, and unfair debt collection practices. It limits when and how collectors can contact you, requires them to validate debts in writing, prohibits threats and harassment, and gives you the right to sue collectors who violate these rules. The law applies to third-party debt collectors, debt buyers, and collection attorneys.

Can I sue a debt collector for violating my rights?

Yes. Under the FDCPA, you can sue a debt collector in state or federal court. If you win, you may recover up to $1,000 in statutory damages, plus any actual damages you suffered (such as emotional distress, lost wages, or medical expenses). The collector must also pay your reasonable attorney fees and court costs. You have one year from the date of the violation to file your lawsuit.

Does the FDCPA apply to the original creditor?

Generally, no. The federal FDCPA applies only to third-party debt collectors, not the original creditor you owe money to. However, many states have laws that extend similar protections to original creditors. California's Rosenthal Act is the most well-known example. Check your state's laws for specifics.

Can a debt collector contact my employer?

A debt collector may contact your employer only to verify your employment or to obtain your contact information. They cannot tell your employer that you owe a debt, cannot discuss the debt with anyone at your workplace, and must stop calling your workplace if you ask them to (orally or in writing). If a collector reveals your debt to your employer, that is an FDCPA violation.

How do I make a debt collector stop calling me?

Send a written cease-and-desist letter to the collector via certified mail with return receipt requested. Once the collector receives your letter, they must stop all contact with you (except to confirm they are stopping or to notify you of specific legal action). Keep a copy of your letter and the mailing receipt as proof.

What is a debt validation letter?

A debt validation letter is a written request you send to a collector asking them to prove that the debt is real, that the amount is accurate, and that they have the legal right to collect it. You have 30 days from receiving the collector's initial notice to send this letter. During the validation period, the collector must stop all collection activity. Use our free debt validation letter generator to create yours in minutes.

Can a debt collector sue me?

Yes, a debt collector can sue you to collect a debt. However, they cannot threaten to sue you unless they genuinely intend to do so. If they do file a lawsuit, you have the right to respond and defend yourself. Never ignore a lawsuit -- failing to respond can result in a default judgment against you, which allows the collector to garnish wages or levy bank accounts.

How many times can a debt collector call me?

Under the CFPB's 2021 Regulation F, collectors are presumed to violate the FDCPA if they call you more than seven times within a seven-day period about the same debt. They also cannot call you within seven days of a previous conversation about that debt. Additionally, calls must be made between 8:00 AM and 9:00 PM in your local time zone.