Debt Collectors: What the FDCPA Lets Them Do — and the Lines They Can't Cross

A debt collector's business model runs on a simple asymmetry: they know exactly what the law allows, and most people they call know nothing. Close that gap and the entire dynamic changes — not because you've found a trick, but because collection is a heavily regulated industry, and the regulations were written specifically to protect the person answering the phone.

The rulebook is the Fair Debt Collection Practices Act (FDCPA), a federal law from 1977, updated for the modern era by the CFPB's Regulation F in 2021. Here's what it actually says: what collectors may do, what they must give you, and the bright lines that — when crossed — turn you into the one with a legal claim.

First, who the rules cover

The FDCPA governs third-party debt collectors — agencies collecting debts owed to someone else, debt buyers who purchased old accounts, and collection law firms. It covers personal debts: credit cards, medical bills, auto loans, utilities. It generally does not cover the original creditor collecting its own debt (though other laws and many state statutes do), and it doesn't cover business debts. The CFPB's debt collection hub is the authoritative plain-English source for all of it.

What they must give you: the validation notice

Within five days of first contacting you — or in that first communication itself — a collector must provide a validation notice. Per the CFPB, it must state that it's from a debt collector and include the creditor's name, the account, an itemization of the current amount (showing interest, fees, payments, and credits — not just a bare total), instructions for disputing, and the end date of your 30-day dispute window.

What they're allowed to do

Fair is fair: a collector operating lawfully may call you (within limits below), send letters, emails, and texts, report the debt to credit bureaus, negotiate payment plans and settlements, and — if the debt is valid and within the statute of limitations — sue. None of that is harassment; it's the permitted machinery of collection. The law's design isn't "debtors win"; it's "collection happens without abuse."

The lines they can't cross

1. No harassment or abuse Repeated calls intended to annoy, obscene language, threats of violence, publishing your name as a "deadbeat" — all flatly prohibited. Regulation F made the phone-call line concrete: a collector is presumed in violation if it calls you about a debt more than seven times within seven days, or within seven days after speaking with you about that debt.
2. No lies A collector can't misrepresent the amount, pretend to be a lawyer or government agency, threaten arrest (there are no debtor's prisons), or threaten legal action it doesn't intend or can't take. False urgency is the industry's oldest tool, and it's illegal.
3. Time, place, and audience limits Calls are restricted to reasonable hours — the FDCPA's baseline is 8 a.m. to 9 p.m. your local time — and collectors must stop calling your workplace if you tell them your employer prohibits it. They can't discuss your debt with your family (beyond locating you), your coworkers, or your social feed: under Regulation F, social-media contact must be private, self-identified, and include an opt-out.
4. You can turn off the contact entirely Send a written cease-communication request and the collector must stop contacting you, except to confirm it's stopping or to notify you of a specific action like a lawsuit. Use this deliberately: silence doesn't erase a valid debt, and a collector holding a real claim may respond to a full cease letter by escalating to court. Opting out of *channels* (no calls at work, no texts) is often the smarter scalpel.

The credit-report side of the story

Old debt: the statute-of-limitations trap

And if a collector does sue: answer. A collection lawsuit you ignore becomes a default judgment, which hands the collector the serious tools — wage garnishment (capped by federal law at the lesser of 25% of disposable earnings or the amount above 30 times the federal minimum wage, per the Department of Labor) and bank levies. Collection plaintiffs win the overwhelming majority of their cases by default, not on the merits. Showing up — the same modest act that wins small claims cases — frequently changes the outcome, because suddenly the collector must prove a chain of ownership and an accurate balance.

When they cross the line

The FDCPA has teeth you can personally pull. A collector who violates it can be sued in federal or state court within one year — statutory damages up to $1,000 plus actual damages and attorney's fees, which is why consumer attorneys take these cases on contingency (finding one is covered in our guide to getting a lawyer affordably). Practical playbook when conduct smells illegal:

• Document everything: dates, times, numbers, what was said; save voicemails and letters. Some states allow recording calls — check yours first.
• Complain to the CFPB at consumerfinance.gov/complaint — companies must respond, and complaints build the enforcement record. Your state attorney general takes them too.
• Consider the lawsuit if the violations are clear and documented. The fee-shifting provision means credible cases find counsel.

Debt stress is corrosive precisely because it feels lawless — endless calls, escalating threats, no visible rules. The reality is the opposite: this is one of the most rule-bound corners of American consumer law, with a paper trail requirement, a dispute mechanism, call caps, and a private right to sue, all running in your favor. If the debt followed a job loss, pair this with how unemployment benefits actually work — steadying the income side shrinks the collection side faster than any phone script.