FDCPA Compliance Guide: Debt Collection Rules in the United States
Everything you need to know about the Fair Debt Collection Practices Act — what's allowed, what's prohibited, and how to collect debts legally in the US.
What Is the FDCPA?
The Fair Debt Collection Practices Act (FDCPA) is a federal law enacted in 1977 (15 U.S.C. §§ 1692–1692p) that regulates how third-party debt collectors can interact with consumers. Its primary goal is to eliminate abusive, deceptive, and unfair debt collection practices.
The FDCPA is enforced by the Consumer Financial Protection Bureau (CFPB) and the Federal Trade Commission (FTC). Violations can lead to lawsuits, statutory damages, and regulatory action.
Key fact: The FDCPA applies to consumer debts — personal, family, or household obligations. It does not cover business-to-business (B2B) debts. However, many states have separate laws that apply to commercial debt collection as well.
Who Does the FDCPA Apply To?
Understanding who falls under the FDCPA is critical for compliance:
- Third-party debt collectors — Companies or individuals who regularly collect debts owed to other creditors. This includes collection agencies, debt buyers, and attorneys who collect debts as part of their practice.
- Original creditors — Businesses collecting their own debts are generally not covered by the FDCPA. However, if a creditor uses a name other than its own to collect, they may be treated as a debt collector.
- Creditors using automation tools — If you use software (like AIDebtCollection.Net) to send reminders for your own invoices, you're typically acting as the original creditor, not a third-party collector. You're still subject to state-level regulations, but the federal FDCPA usually doesn't apply directly.
Important: Even if you're an original creditor exempt from the FDCPA, many states — including New York, California, Texas, and Florida — have their own debt collection statutes that may impose similar or stricter requirements. Always check your state's laws.
What Debt Collectors Cannot Do (Prohibited Practices)
The FDCPA explicitly bans three categories of conduct:
1. Harassment or Abuse (§ 1692d)
- Using threats of violence or harm
- Using obscene or profane language
- Calling repeatedly with intent to annoy or harass
- Publishing lists of consumers who refuse to pay (except to credit bureaus)
- Calling without identifying themselves
2. False or Misleading Representations (§ 1692e)
- Falsely claiming to be an attorney or government representative
- Misrepresenting the amount owed
- Threatening legal action they cannot or do not intend to take
- Implying the debt will be reported to credit bureaus when it won't be
- Using fake company names or badges
3. Unfair Practices (§ 1692f)
- Collecting any amount not authorized by the debt agreement or law
- Depositing post-dated checks before their date
- Using deceptive means to collect (e.g., disguising collection letters as official documents)
- Adding unauthorized fees, interest, or charges
Communication Rules Under the FDCPA
The FDCPA sets strict limits on when, where, and how debt collectors can contact consumers:
| Rule | Requirement |
|---|---|
| Calling hours | Only between 8:00 AM and 9:00 PM in the consumer's local time zone |
| Workplace calls | Prohibited if the collector knows the employer disapproves |
| Third-party contact | Cannot discuss the debt with family, friends, or coworkers (except spouse, parent of minor, or guardian) |
| Attorney representation | Must contact the consumer's attorney if the collector knows one has been retained |
| Cease communication | Must stop contact if the consumer sends a written request to cease |
| Call frequency (Reg F) | No more than 7 call attempts per debt per 7-day period; no calls within 7 days of a live conversation |
Regulation F: The CFPB's 2021 Update
In November 2021, the CFPB issued Regulation F (12 CFR Part 1006), which modernized FDCPA enforcement for the digital age. Key changes include:
- Electronic communications: Collectors may use email, text messages, and social media DMs — but must include a clear opt-out mechanism in every message.
- Call frequency cap: Limited to 7 call attempts per debt per week. After a live phone conversation, no further calls for 7 days.
- Validation notice: A model validation notice is now required within 5 days of first contact, disclosing the debt amount, creditor name, and consumer's rights.
- Limited-content messages: Voicemails can be left as "limited-content messages" (business name, call-back number, no debt details) to protect consumer privacy.
For SaaS users: If you're using AIDebtCollection.Net to send automated email and SMS reminders for your own invoices, you're typically acting as an original creditor. Regulation F's strictest rules target third-party collectors, but following its communication guidelines is still a best practice to avoid state-level issues.
The Debt Validation Process
One of the FDCPA's most important consumer protections is the right to debt validation. Here's how it works:
- Initial contact: Within 5 days of the first communication, the collector must send a written validation notice containing the debt amount, the creditor's name, and a statement that the consumer has 30 days to dispute.
- Consumer disputes: If the consumer disputes in writing within 30 days, the collector must cease collection until they provide verification of the debt.
- Verification: The collector must send proof — such as the original signed agreement, account statements, or a judgment — before resuming collection efforts.
Failure to properly validate a debt is one of the most common FDCPA violations and a frequent basis for consumer lawsuits.
Penalties for FDCPA Violations
Consumers can sue debt collectors who violate the FDCPA in federal or state court within one year of the violation. Available remedies include:
- Actual damages — Compensation for any financial harm caused (lost wages, bank fees, etc.)
- Statutory damages — Up to $1,000 per lawsuit for individual actions, even without proof of actual harm
- Class action damages — Up to $500,000 or 1% of the collector's net worth, whichever is less
- Attorney's fees and court costs — The losing collector typically pays the consumer's legal fees
Beyond private lawsuits, the CFPB and FTC can pursue enforcement actions resulting in fines, consent orders, and injunctions against repeat offenders.
State Debt Collection Laws: Key Differences
The FDCPA sets a federal floor, but many states go further. Here are notable examples:
| State | Key provisions |
|---|---|
| California | Rosenthal Fair Debt Collection Practices Act applies to original creditors, not just third-party collectors. Requires state licensing. |
| New York | NYC has additional rules prohibiting communication via social media. State requires licensing and bonding for collectors. |
| Texas | Texas Debt Collection Act covers both creditors and collectors. Prohibits threats of criminal prosecution for civil debts. |
| Florida | Florida Consumer Collection Practices Act applies to both creditors and collectors. Stricter penalties including treble damages. |
| Illinois | Collection Agency Act requires licensing and bonding. Stricter rules on communication and fee disclosures. |
Statute of Limitations by State
Each state sets its own statute of limitations — the time window during which a creditor can file a lawsuit to collect a debt. After this period expires, the debt becomes "time-barred," and a collector cannot threaten legal action.
| State | Written contracts | Oral agreements | Open accounts |
|---|---|---|---|
| California | 4 years | 2 years | 4 years |
| New York | 6 years | 6 years | 6 years |
| Texas | 4 years | 4 years | 4 years |
| Florida | 5 years | 4 years | 4 years |
| Illinois | 10 years | 5 years | 5 years |
| Ohio | 8 years | 6 years | 6 years |
| Pennsylvania | 4 years | 4 years | 4 years |
Warning: Threatening or filing a lawsuit on a time-barred debt is a FDCPA violation. In some states, even acknowledging the debt or making a partial payment can restart the statute of limitations clock. Always verify the statute status before pursuing legal remedies.
FDCPA Compliance Checklist for Businesses
Whether you're a creditor using automation software or working with a collection agency, here's how to stay compliant:
- Send a validation notice within 5 days of the first contact — include debt amount, creditor name, and the 30-day dispute right.
- Respect communication limits — no calls before 8 AM or after 9 PM in the debtor's time zone.
- Cap your call attempts — follow Regulation F's 7 calls per 7 days per debt limit.
- Include opt-out options in every email and text message.
- Never misrepresent the amount owed, your identity, or the consequences of non-payment.
- Honor cease-and-desist requests — stop contact immediately upon written request.
- Check state-specific laws — especially in California, New York, Texas, and Florida.
- Document everything — maintain records of all communications, payment agreements, and disputes.
- Verify the statute of limitations before threatening legal action on older debts.
- Train your team — ensure anyone involved in collections understands FDCPA requirements.
How AIDebtCollection.Net Helps You Stay Compliant
AIDebtCollection.Net is designed with compliance in mind. Here's how it helps you collect debts in the United States without running afoul of the FDCPA:
- Automated scheduling — Reminders are sent within compliant time windows, respecting time zone differences across the US.
- Frequency controls — Built-in limits prevent excessive contact that could constitute harassment.
- Unsubscribe handling — Every automated email and SMS includes an opt-out option, as required by Regulation F.
- Complete audit trail — Every communication is logged with timestamps, providing the documentation you need if a dispute arises.
- Professional tone — AI-generated voice calls and written reminders use firm but respectful language — never threatening or deceptive.
Frequently Asked Questions
Can I collect debts across state lines?
Yes, but you must comply with the FDCPA and the debtor's state laws. If you're in Texas collecting from a California consumer, California's Rosenthal Act applies in addition to the federal FDCPA.
Do I need a license to collect debts in the US?
It depends. Most states require third-party collection agencies to be licensed and bonded. Original creditors collecting their own debts typically don't need a license, but requirements vary by state.
Can I charge interest on overdue invoices?
Yes, if the interest rate was disclosed and agreed upon in the original contract. You cannot add unauthorized fees or charges — this would violate the FDCPA's prohibition on unfair practices.
What should I do if a debtor disputes the debt?
Stop all collection activity immediately and provide written verification of the debt. Only resume collection after you've sent adequate proof (original agreement, account statements, or similar documentation).
Collect debts in the US — the compliant way
AIDebtCollection.Net automates reminders while respecting FDCPA and state regulations. No harassment, no risk.
Try for free