Debt Collectors: What the FDCPA Lets Them Do — and the Lines They Can't Cross

A debt collector's business model runs on a simple asymmetry: they know exactly what the law allows, and most people they call know nothing. Close that gap and the entire dynamic changes — not because you've found a trick, but because collection is a heavily regulated industry, and the regulations were written specifically to protect the person answering the phone.

The rulebook is the Fair Debt Collection Practices Act (FDCPA), a federal law from 1977, updated for the modern era by the CFPB's Regulation F in 2021. Here's what it actually says: what collectors may do, what they must give you, and the bright lines that — when crossed — turn you into the one with a legal claim.

First, who the rules cover

The FDCPA governs third-party debt collectors — agencies collecting debts owed to someone else, debt buyers who purchased old accounts, and collection law firms. It covers personal debts: credit cards, medical bills, auto loans, utilities. It generally does not cover the original creditor collecting its own debt (though other laws and many state statutes do), and it doesn't cover business debts. The CFPB's debt collection hub is the authoritative plain-English source for all of it.

What they must give you: the validation notice

Within five days of first contacting you — or in that first communication itself — a collector must provide a validation notice. Per the CFPB, it must state that it's from a debt collector and include the creditor's name, the account, an itemization of the current amount (showing interest, fees, payments, and credits — not just a bare total), instructions for disputing, and the end date of your 30-day dispute window.

That window is your most valuable tool. If you dispute the debt in writing within those 30 days, the collector must pause collection until it adequately responds with verification. Given how often debts are sold and resold with degraded records — wrong balances, wrong people, debts already paid — requesting validation isn't gamesmanship; it's quality control the law builds in on purpose. Do it in writing, keep a copy, send it certified.

What they're allowed to do

Fair is fair: a collector operating lawfully may call you (within limits below), send letters, emails, and texts, report the debt to credit bureaus, negotiate payment plans and settlements, and — if the debt is valid and within the statute of limitations — sue. None of that is harassment; it's the permitted machinery of collection. The law's design isn't "debtors win"; it's "collection happens without abuse."

The lines they can't cross

1. No harassment or abuse Repeated calls intended to annoy, obscene language, threats of violence, publishing your name as a "deadbeat" — all flatly prohibited. Regulation F made the phone-call line concrete: a collector is presumed in violation if it calls you about a debt more than seven times within seven days, or within seven days after speaking with you about that debt.
2. No lies A collector can't misrepresent the amount, pretend to be a lawyer or government agency, threaten arrest (there are no debtor's prisons), or threaten legal action it doesn't intend or can't take. False urgency is the industry's oldest tool, and it's illegal.
3. Time, place, and audience limits Calls are restricted to reasonable hours — the FDCPA's baseline is 8 a.m. to 9 p.m. your local time — and collectors must stop calling your workplace if you tell them your employer prohibits it. They can't discuss your debt with your family (beyond locating you), your coworkers, or your social feed: under Regulation F, social-media contact must be private, self-identified, and include an opt-out.
4. You can turn off the contact entirely Send a written cease-communication request and the collector must stop contacting you, except to confirm it's stopping or to notify you of a specific action like a lawsuit. Use this deliberately: silence doesn't erase a valid debt, and a collector holding a real claim may respond to a full cease letter by escalating to court. Opting out of *channels* (no calls at work, no texts) is often the smarter scalpel.

The credit-report side of the story

Collection accounts usually surface in a second place: your credit file. Two rights run in parallel with everything above. First, accuracy disputes go through the federal Fair Credit Reporting Act — you can dispute a collection entry with the credit bureaus directly, and both the bureau and the company reporting the debt ("the furnisher," in the jargon) must investigate. Second, timing: a collection account generally ages off your report after a set number of years regardless of whether it's paid — a clock that is separate from the statute of limitations on suing you, which trips up nearly everyone. Paying or not paying, disputing or not disputing, each moves these two clocks differently, which is one more reason to get the validation itemization in hand before making any moves. The CFPB's debt collection hub covers both tracks.

Old debt: the statute-of-limitations trap

Every state sets a statute of limitations — a deadline, typically three to six years but varying by state and debt type — after which a collector can no longer successfully sue. The debt doesn't vanish; it becomes time-barred. Two things make this the most dangerous corner of collection law. First, collectors can still ask you to pay time-barred debt. Second, in a number of states, a partial payment — or even a written acknowledgment — can restart the clock entirely, converting an unsued-able debt back into a lawsuit-ready one. Before paying anything on an old debt, check your state's rule; the CFPB's debt collection answers cover how to find it. This is a genuine "know before you speak" zone.

And if a collector does sue: answer. A collection lawsuit you ignore becomes a default judgment, which hands the collector the serious tools — wage garnishment (capped by federal law at the lesser of 25% of disposable earnings or the amount above 30 times the federal minimum wage, per the Department of Labor) and bank levies. Collection plaintiffs win the overwhelming majority of their cases by default, not on the merits. Showing up — the same modest act that wins small claims cases — frequently changes the outcome, because suddenly the collector must prove a chain of ownership and an accurate balance.

When they cross the line

The FDCPA has teeth you can personally pull. A collector who violates it can be sued in federal or state court within one year — statutory damages up to $1,000 plus actual damages and attorney's fees, which is why consumer attorneys take these cases on contingency (finding one is covered in our guide to getting a lawyer affordably). Practical playbook when conduct smells illegal:

• Document everything: dates, times, numbers, what was said; save voicemails and letters. Some states allow recording calls — check yours first.
• Complain to the CFPB at consumerfinance.gov/complaint — companies must respond, and complaints build the enforcement record. Your state attorney general takes them too.
• Consider the lawsuit if the violations are clear and documented. The fee-shifting provision means credible cases find counsel.

Debt stress is corrosive precisely because it feels lawless — endless calls, escalating threats, no visible rules. The reality is the opposite: this is one of the most rule-bound corners of American consumer law, with a paper trail requirement, a dispute mechanism, call caps, and a private right to sue, all running in your favor. If the debt followed a job loss, pair this with how unemployment benefits actually work — steadying the income side shrinks the collection side faster than any phone script.