FDCPA Rights: What Debt Collectors Are Legally Forbidden to Do

Getting a call from a debt collector is stressful enough without wondering whether what they just said or did was even legal. A lot of it isn’t. Congress passed the Fair Debt Collection Practices Act (FDCPA) in 1977 specifically because collection tactics had gotten abusive enough to warrant a federal law, and the Consumer Financial Protection Bureau (CFPB) has since layered on more specific rules through what’s called Regulation F.

None of this requires you to prove the debt is fake. It applies even if you owe every penny — it just governs how a collector is allowed to go about getting it.

The Law: FDCPA & Regulation F

The FDCPA is codified at 15 U.S.C. § 1692 et seq. It’s enforced by the CFPB and the Federal Trade Commission (FTC), and it’s also privately enforceable — meaning you personally can sue a collector who violates it, without needing a government agency to act first.

In 2021, the CFPB finalized Regulation F (12 CFR Part 1006), the first major rule updating exactly how the FDCPA applies to phone calls, emails, and text messages. It added bright-line numeric limits — like the call-frequency rule below — that make some violations much easier to prove than the FDCPA’s original, more general language.

Who the Law Covers

This matters more than most people realize: the FDCPA generally applies to third-party debt collectors — collection agencies, debt buyers, and law firms that collect debts for others — not to the original creditor collecting its own debt under its own name.

• Covered: Collection agencies, debt buyers who purchased your account, and attorneys whose primary business is debt collection.
• Usually not covered by the FDCPA: Your original bank, credit card issuer, hospital, or landlord collecting a debt you owe directly to them — though many states have their own laws (often modeled closely on the FDCPA) that extend similar protections to original creditors. Check your state consumer protection statute if the caller is who you originally borrowed from.

10 Things Collectors Can’t Legally Do

If a collector has done any of the following, they’ve broken federal law:

1. Call before 8am or after 9pm your local time, unless you’ve specifically agreed to it.
2. Call you at work after you’ve told them (verbally or in writing) that your employer prohibits personal calls, or after you’ve simply asked them to stop.
3. Use obscene, profane, or abusive language, or threaten violence or harm to you, your property, or your reputation.
4. Threaten arrest or jail time for an unpaid debt. Civil debt is not a crime in the United States — you cannot be jailed for failing to pay a credit card, medical, or personal loan bill.
5. Misrepresent the amount you owe, falsely claim to be an attorney or a government agency, or claim you’ll be sued when they have no actual intention (or legal ability) to do so.
6. Threaten to garnish wages or seize property without a court judgment already in hand. Garnishment requires winning a lawsuit first — it isn’t something a collector can simply decide to do.
7. Discuss your debt with third parties — family, friends, coworkers, or your employer — beyond simply asking for your contact information. Publishing a list of people who allegedly owe debts (a “shame list”) is explicitly illegal.
8. Contact you after you've sent a written cease-communication request, except to confirm they'll stop or to notify you of a specific action like a lawsuit.
9. Add unauthorized fees or interest not permitted by your original agreement or state law.
10. Fail to send required debt validation information within 5 days of first contacting you, or continue collection efforts after you've disputed the debt in writing without first providing verification.

The 7-in-7 Calling Rule

Regulation F introduced a specific, numeric call-frequency limit that took effect in November 2021 — often called the “7-in-7” rule:

Voicemails, texts, and emails aren’t automatically counted the same way calls are, but Regulation F still bans using any of them in a way that’s harassing — the numeric caps just give phone calls a bright, easy-to-track line.

Your Right to Debt Validation

Within 5 days of first contacting you about a debt, a collector must send a written notice (a “validation notice”) stating the amount owed, the name of the original creditor, and your right to dispute the debt. If you send a written dispute within 30 days of receiving that notice, the collector must stop collection activity until it provides verification of the debt — proof it’s real, accurate, and that you're the one who owes it.

This is one of the most underused protections in the law. Sending a simple written validation request often stops collection calls immediately, especially against debt buyers who purchased old, poorly-documented accounts and sometimes can’t produce adequate verification at all.

What to Do If You’ve Been Violated

1. Document everything immediately. Date, time, phone number, what was said (as close to verbatim as you can manage), and any witnesses. If it's a voicemail, save it.
2. Send a written cease-communication or validation request by certified mail with return receipt, so you have proof it was received.
3. File a complaint with the CFPB at consumerfinance.gov/complaint — it's free, and the collector is required to respond to the agency.
4. Consult a consumer-rights attorney about whether to sue. Many take FDCPA cases without an upfront fee because the statute makes the collector pay your legal costs if you win.

What You Can Recover

If you sue and win, the FDCPA lets you recover several things at once — you don’t have to choose only one:

• Actual damages — real financial harm (lost wages from taking time off to deal with the calls, bank fees, etc.) plus documented emotional distress.
• Statutory damages up to $1,000 — awarded at the court’s discretion even if you can’t prove a specific dollar loss.
• Attorney’s fees and court costs — the FDCPA is a “fee-shifting” statute, meaning a losing collector pays your reasonable legal fees, not just any damages awarded.

You have one year from the date of the violation to file suit, under 15 U.S.C. § 1692k(d). This deadline has been enforced strictly, so don’t wait if you're seriously considering it.

Where to Report a Violation

Filing with the CFPB or FTC doesn’t put money in your pocket by itself — it’s a regulatory complaint, not a lawsuit. If you want damages, a private suit (or a demand letter as a first step — see our free demand letter template) is the path that actually compensates you.

Frequently Asked Questions