What Debt Collectors Can and Cannot Do: Your Rights Under the FDCPA

A collection call is designed to feel like a legal process. Sometimes it is. Often it is a private company with a database, a dialer, and a script, operating under a federal statute that hands you several tools most people never use — starting with a 30-day window that closes whether or not you knew it existed.

Here is how the rules actually work, and where the deadlines fall.

First, who is calling

The Fair Debt Collection Practices Act — the FDCPA — applies to debt collectors: third parties collecting a debt owed to someone else, which includes the companies that buy old defaulted debt in bulk. It generally does not apply to the original creditor collecting its own account, which is covered instead by other law, including the Fair Credit Reporting Act and state consumer protection statutes. Several states go further than the federal floor and apply their own collection rules to original creditors.

This matters for one practical reason: the first question when a collector calls is not “do I owe this” but “who is this, and what are they allowed to do.” Ask for the name of the company, the name of the original creditor, and the account. Then ask them to send everything in writing, which the law requires them to do anyway.

If you are outside the United States, none of the above applies: EU countries regulate debt collection and credit servicing under their own national consumer rules, and the specific rights and remedies differ by country.

The 30-day window

Within five days of first contacting you, a collector must send a written validation notice stating the amount, the creditor’s name, and your right to dispute the debt.

You then have 30 days to dispute it in writing. This is the single most useful provision in the statute, and here is why: if you dispute within that window, the collector must stop collection activity until it obtains verification of the debt — commonly documentation tying the amount to the original account.

Send the dispute by certified mail, return receipt requested, and keep the receipt. State that you are disputing the debt under 15 U.S.C. § 1692g and ask for the name of the original creditor, the amount as of the original charge-off, and evidence that this company has the right to collect it.

What happens if you miss the 30 days? You do not lose the right to dispute — you lose the automatic pause. The debt is not presumed valid forever; it is presumed valid for collection purposes unless you force the question.

Two things make this worth doing even when you suspect you do owe the money. Debts get sold in batches with incomplete records, and collectors routinely add fees and interest the original agreement never authorized. Verification is how you find out which numbers are real.

Cease contact — and what it does not do

Under 15 U.S.C. § 1692c(c), you can send a written cease-and-desist letter directing the collector to stop contacting you. Once received, the collector may only send one final communication acknowledging the request, and may notify you of a specific legal action it intends to take.

That last part is the caveat. Stopping the calls stops the calls. It does not stop the debt, does not stop a lawsuit filed within the limitations period, does not stop credit reporting, and does not stop the collector from selling the account to someone else — who can then start calling. Cease-and-desist is a tool for ending harassment, not a solution to the debt. If you are being sued or facing garnishment, contact a consumer attorney; that is a different situation with different answers.

What they may not do

The statute is specific about conduct, and violations are the basis of a claim:

• No calls before 8 a.m. or after 9 p.m. in your local time, and none on days your state restricts.
• No contact at work once you tell them, orally or in writing, that your employer prohibits it.
• No third-party disclosure. They may not tell your family, neighbors, or coworkers about the debt — with narrow exceptions for locating you or with your permission. Even the envelope is regulated.
• No harassment or abuse — no threats of violence, no obscene language, no calling repeatedly to annoy.
• No false statements — misrepresenting the amount, claiming to be an attorney or a government agency, threatening arrest or criminal prosecution for a debt, or threatening action they do not intend to take. Impersonating a government agency is also a federal crime, and it is the same move used in the America.gov and “release your payment” scams — the checklist for those is at Is That Really America.gov?.
• No deceptive collection — including depositing a post-dated check early.

What they may do

Knowing the limits is half the picture; a collector who stays inside them is not breaking the law:

• Call between 8 a.m. and 9 p.m. local time — and where your state restricts the days on which collection calls may be made, those limits apply on top of the federal ones.
• Contact your employer once, and only to verify that you work there.
• Report the debt to credit bureaus, subject to the Fair Credit Reporting Act and any state restrictions.
• Sue you, if the debt is within the statute of limitations.
• Contact your attorney, once you have one — and only your attorney.

If a collector sues you, do not ignore it. A court judgment entered because you did not answer is enforceable for years. Two things are worth checking with a lawyer: whether the period to sue had already expired, and whether this company can actually prove it owns the debt.

Time-barred debt, and the trap in a small payment

Every kind of debt has a statute of limitations — a window during which a creditor can sue. The lengths vary by state and by the type of debt, generally falling somewhere between three and ten years. After it closes, the debt is time-barred.

Under Regulation F (12 C.F.R. § 1006.26), a collector cannot sue or threaten to sue on a time-barred debt, and claiming ignorance of the deadline is not a defense. Collectors may still contact you about such a debt to ask for voluntary payment — but the moment a lawsuit is threatened, they have crossed the line.

The trap is what happens if you pay. In many states, a partial payment or a written acknowledgment can restart the limitations clock, reviving the creditor’s ability to sue years after the deadline had passed. That is why letters about very old debts are sometimes written to invite exactly a small good-faith payment. Before paying anything on a debt you think may be time-barred, get advice.

Note also that a time-barred debt can still be reported while the reporting window is open, and that the reporting period is a separate clock from the limitations period.

If the rules were broken

You can sue a collector that violates the FDCPA, and the statute makes it worth a lawyer’s time:

• Actual damages — real losses, including documented emotional distress.
• Statutory damages of up to $1,000 per lawsuit, whether or not you can prove actual harm — per case, not per violation.
• Attorney’s fees and costs paid by the collector if you win, which is why many consumer attorneys take these cases on contingency.
• Class actions where the same practice hit many people, with statutory damages capped at the lesser of $500,000 or 1% of the collector’s net worth.

The deadline is a one year from the violation — and under Rotkiske v. Klemm (2019), the clock runs from when the violation happened, not from when you discovered it. This is the most common reason valid claims die. If you think your rights were violated, document it now: date, time, number, what was said, and keep voicemails and letters.

Complaints go to the CFPB (consumerfinance.gov/complaint), the FTC (reportfraud.ftc.gov), and your state attorney general, which enforces its own consumer protection statute and is a separate channel from the federal agencies. A complaint does not win you damages, but it creates a record, and repeat offenders are identified from patterns.

The short version

• Establish who is calling: a third-party collector is bound by the FDCPA, the original creditor usually is not (though state law may change that).
• Dispute in writing within 30 days to force verification and pause collection.
• Cease-and-desist stops the calls, not the debt.
• Check the statute of limitations before paying anything on an old debt.
• If you are sued, answer. If your rights were violated, document and act within a year.

The rules govern how a debt is collected, not whether you owe it. For debts that came out of a loan between people you know, the papering question starts earlier — see Lending Money to a Friend, and for what happens when you have to go to court yourself, see Small Claims Court.