Your phone rings from an unknown number. You answer. A stern voice tells you that you owe $3,400 on a credit card you closed six years ago, and if you do not pay immediately, they will garnish your wages and report you to the credit bureaus. They want your bank account number right now.
Stop. Do not give them anything.
That call may be from a legitimate debt collector, or it may be a scam. Either way, the person on the other end just violated several provisions of the Fair Debt Collection Practices Act (FDCPA), the federal law that governs how third-party debt collectors can interact with consumers. They threatened action they probably cannot take, failed to provide required disclosures, and used high-pressure tactics specifically prohibited by law.
Millions of Americans deal with debt collectors every year. Some of those debts are legitimate. Some are wrong — the amount is inflated, the debt has already been paid, or it belongs to someone else entirely. And some are so old that the collector has no legal right to sue over them. Knowing where you stand — and what collectors can and cannot do — is the difference between being a target and being in control.
Key Takeaways
- The FDCPA applies to third-party debt collectors, not to original creditors collecting their own debts (though many states have separate laws covering original creditors)
- You have the right to demand written verification of any debt within 30 days of first contact — and the collector must stop collection efforts until they provide it
- Debt collectors cannot call before 8 a.m. or after 9 p.m., threaten arrest, use abusive language, or contact your employer about the debt (with narrow exceptions)
- Every type of debt has a statute of limitations — once it expires, the collector can still ask you to pay but cannot sue you
- Paying even a small amount on time-barred debt can restart the statute of limitations in some states, giving the collector the right to sue again
What the FDCPA Actually Covers
The FDCPA (15 U.S.C. Sections 1692-1692p) regulates third-party debt collectors — companies that buy or are assigned debts from original creditors. If you owe money on a Citibank credit card and Citibank’s own collections department calls you, the FDCPA technically does not apply. But if Citibank sells your debt to Midland Credit Management or assigns it to a collection agency, that agency is bound by the FDCPA.
The practical difference is shrinking. The Consumer Financial Protection Bureau (CFPB) has issued rules expanding some FDCPA-like requirements to first-party collectors, and many states — including California (Rosenthal Fair Debt Collection Practices Act), Texas, New York, and others — have their own debt collection statutes that cover original creditors too. But for federal purposes, the FDCPA’s strongest protections kick in once a third-party collector is involved.
The FDCPA covers personal, family, and household debts: credit cards, medical bills, auto loans, student loans (private and federal), mortgages, personal loans, and utility bills. It does not cover business debts.
What Debt Collectors Cannot Do
The list is long, specific, and frequently violated. Collectors break these rules all the time, betting that consumers do not know their rights or will not fight back.
Harassment and Abuse
Collectors cannot:
- Call you repeatedly with the intent to annoy, abuse, or harass
- Use profane or obscene language
- Threaten violence or harm
- Publish your name on a “shame list” of people who do not pay debts (publicly available lists — credit reporting is different)
- Call you at work if you tell them your employer does not allow personal calls
Under the CFPB’s 2021 rules, collectors are limited in how frequently they can attempt contact. The rule creates a presumption that more than seven phone calls within seven consecutive days, or calling within seven days of having a phone conversation with you, is harassment. Fewer calls can still be harassment depending on the circumstances.
False and Misleading Representations
Collectors cannot:
- Claim to be attorneys when they are not
- Threaten to sue when they have no intention of doing so (or no legal basis)
- Misrepresent the amount owed
- Falsely claim that you committed a crime by not paying
- Threaten to arrest you (unpaid consumer debt is not a criminal matter — debtors’ prison was abolished in the United States in the 1830s, though some states allow arrest for contempt of court if you ignore a court order related to a debt judgment)
- Imply they work for a credit bureau or government agency
- Tell third parties (neighbors, coworkers, family members other than your spouse) about your debt
That last point is important. A collector can contact a third party to locate you (called “skip tracing”), but they cannot reveal the debt. They can ask for your address, phone number, or workplace — once. They cannot call back and cannot mention the debt.
Unfair Practices
Collectors cannot:
- Collect fees, interest, or charges not authorized by the original agreement or by law
- Deposit a post-dated check early
- Contact you by postcard (visible to mail carriers and anyone in your household)
- Threaten to seize property unless they actually have the legal right to do so
Your Right to Debt Validation
This is the single most powerful tool consumers have under the FDCPA, and most people do not use it.
Within five days of first contacting you, a debt collector must send a written notice (the “validation notice”) containing:
- The amount of the debt
- The name of the creditor
- A statement that you have 30 days to dispute the debt
- A statement that if you dispute, the collector will provide verification
- A statement that the collector will provide the original creditor’s name if different from the current creditor
If you send a written dispute within those 30 days, the collector must stop all collection activity until they provide verification. Not a phone call saying “trust us, you owe it.” Written verification — documentation showing the debt is real, the amount is accurate, and they have the legal right to collect it.
How to Write a Validation Letter
Keep it simple and send it via certified mail with return receipt requested. You do not need to explain why you are disputing, and you should not. A validation letter should say:
“I am writing in response to your communication dated [date]. I dispute this debt in its entirety and request that you provide verification of the debt, including the original creditor’s name and the amount owed. Please cease all collection activity until you have provided the requested verification as required under 15 U.S.C. Section 1692g.”
That is it. Do not acknowledge the debt. Do not offer to pay. Do not explain your financial situation. Just demand proof.
Many debts — especially those that have been sold multiple times — lack complete documentation. The original credit card agreement, the account statements, the chain of assignment from creditor to collector — if any of this is missing, the collector may not be able to verify the debt, and they cannot legally continue collection activity.
The Statute of Limitations on Debt
Every debt has an expiration date for lawsuits. The statute of limitations determines how long a creditor or collector can sue you to collect. Once it expires, the debt becomes “time-barred.” The collector can still call you and ask you to pay (annoying, but legal), but they cannot file a lawsuit.
Statutes of limitations vary by state and by type of debt:
- Written contracts — 3 to 10 years (6 years in most states)
- Oral agreements — 2 to 6 years
- Open-ended accounts (credit cards) — 3 to 6 years in most states
- Promissory notes — 3 to 15 years
Some specific examples: California has a 4-year statute of limitations on credit card debt. New York has 6 years. Mississippi has 3. Texas has 4. Ohio has 6 for written contracts but 15 for promissory notes.
When the Clock Starts — And When It Resets
The statute of limitations clock typically starts running on the date of your last payment or the date the account first became delinquent. Here is the dangerous part: in many states, making even a partial payment — or in some states, merely acknowledging the debt in writing — can restart the clock from zero. A collector who convinces you to pay $25 on a five-year-old, nearly time-barred debt may have just given themselves a fresh four to six years to sue you for the full balance.
This is why debt collectors push hard for any payment at all on old debts. A $25 payment is not about the $25. It is about resurrecting the right to sue for thousands.
Before making any payment on old debt, determine whether the statute of limitations has expired or is close to expiring. If it has expired, you may be better off not paying at all — at least from a legal exposure standpoint.
Negotiating a Settlement
If the debt is legitimate, the amount is correct, and the statute of limitations has not expired, you may want to negotiate a settlement. Collectors, especially those who purchased debt for pennies on the dollar, are often willing to accept significantly less than the full balance.
Some practical guidance:
Start low. Debt buyers typically purchase debt portfolios for 4 to 10 cents on the dollar. A $5,000 debt might have cost the collector $250 to $500. Any amount above that is profit. Opening with an offer of 20-30% of the balance is not unreasonable for older debts. The collector may counter, and you can negotiate upward.
Get the agreement in writing before you pay. This is non-negotiable. The agreement should state the settled amount, that the payment constitutes settlement in full, and how the account will be reported to credit bureaus (request “paid in full” or “account settled” — not “paid for less than owed” if possible, though not all collectors will agree). Do not make a payment based on a verbal promise. Verbal promises from collectors are notoriously unreliable.
Pay by cashier’s check or money order. Do not give a debt collector your bank account number or debit card information. A cashier’s check or money order provides proof of payment without exposing your bank account to potential unauthorized withdrawals.
Consider the tax implications. If more than $600 of debt is forgiven, the collector is required to report the forgiven amount to the IRS as income on Form 1099-C. You may owe taxes on the “forgiven” portion of the debt. There are exceptions — if you were insolvent (total debts exceeded total assets) at the time of forgiveness, you may be able to exclude the cancellation of debt income using IRS Form 982. Consult a tax professional before settling large debts.
Sending a Cease and Desist Letter
Under the FDCPA, you have the right to demand that a debt collector stop contacting you entirely. Once they receive your written cease and desist letter, they can only contact you to confirm they will stop contacting you, or to notify you that they are taking a specific legal action (like filing a lawsuit).
A cease and desist letter does not make the debt go away. The collector can still sue you, report the debt to credit bureaus, or sell the debt to another collector (who can then contact you again until you send them their own cease and desist). But it stops the phone calls and letters from that specific collector.
When a cease and desist makes sense:
- The debt is time-barred and you have no intention of paying
- The collector cannot verify the debt after you sent a validation letter
- The harassment is severe and affecting your mental health or daily life
When it might not be the best move:
- The debt is valid and within the statute of limitations — a cease and desist may push the collector to file a lawsuit sooner rather than continue trying to negotiate
- You want to work out a payment plan or settlement — cutting off communication makes negotiation impossible
How Debt Collection Affects Your Credit Report
Debt collection accounts can appear on your credit report and significantly damage your credit score. Under the Fair Credit Reporting Act (FCRA), here is what you need to know:
The 7-year rule. Most negative information, including collection accounts, falls off your credit report 7 years after the date of the original delinquency — not 7 years from when the collector acquired the debt. If you defaulted on a credit card in January 2020, the collection account should be removed by approximately January 2027, regardless of how many times the debt has been sold to different collectors.
Medical debt has special rules. As of 2023, the three major credit bureaus (Equifax, Experian, TransUnion) no longer report paid medical collection debt. Unpaid medical debt under $500 is also excluded from credit reports. This was a major change that helped millions of consumers.
Paid collections may still appear. Paying or settling a collection does not automatically remove it from your credit report. The status changes from “unpaid” to “paid” or “settled,” which is better but still negative. Some collectors will agree to delete the account entirely as part of a settlement negotiation (called “pay for delete”), though the credit bureaus officially discourage this practice. It is worth asking.
Dispute inaccuracies. If a collection account on your credit report contains errors — wrong amount, wrong dates, wrong identity — dispute it with the credit bureaus in writing. The bureau has 30 days to investigate (45 days if you provide additional information during the investigation). If the collector cannot verify the information, the bureau must remove it.
If a security deposit dispute with a former landlord has been sent to collections, the same rules apply. Demand validation, check the statute of limitations, and dispute inaccuracies on your credit report.
What to Do If a Collector Sues You
If you are served with a lawsuit over a debt, do not ignore it. This is the single worst mistake people make. If you do not respond, the collector gets a default judgment — an automatic win — and can then garnish your wages, levy your bank accounts, or place liens on your property.
Respond within the deadline. You typically have 20 to 30 days to file an answer with the court (the exact timeframe depends on your state and the type of court). Your answer should address each allegation in the complaint — admit, deny, or state that you lack sufficient information.
Raise defenses. Common defenses include: the statute of limitations has expired, the collector cannot prove they own the debt, the amount is wrong, the debt belongs to someone else, or you already paid it. If the statute of limitations is your defense, you must raise it — courts do not apply it automatically.
Show up. If the case goes to a hearing, appear. Many debt collection lawsuits are won by default because the consumer does not show up. Collectors count on this. Even if you owe the debt, appearing in court gives you the opportunity to challenge the amount, negotiate a payment plan, or raise defenses you might not have known you had.
For debts within your state’s small claims limit, the collector may file there. Understanding how small claims court works can help you prepare a defense — the same principles of evidence preparation and hearing procedure apply whether you are the plaintiff or the defendant.
Consider legal aid. If you cannot afford an attorney, contact your local legal aid organization. Many have programs specifically for consumers facing debt collection lawsuits. The National Association of Consumer Advocates (NACA) maintains a directory of consumer rights attorneys, and many take cases on contingency.
Filing a Complaint Against a Debt Collector
If a collector violates the FDCPA, you have options beyond just telling them to stop:
File a complaint with the CFPB. The Consumer Financial Protection Bureau accepts complaints online at consumerfinance.gov. They forward your complaint to the collector, who must respond within 15 days. The CFPB tracks complaints and uses them to identify patterns of abuse.
File a complaint with your state attorney general. Most state AG offices have a consumer protection division that handles debt collection complaints. Some states actively prosecute collection agencies that engage in widespread violations.
File a complaint with the FTC. The Federal Trade Commission accepts debt collection complaints and uses them for enforcement actions against the worst offenders.
Sue the collector. Under the FDCPA, you can file a private lawsuit against a collector who violates the law. You can recover actual damages (financial harm caused by the violation), statutory damages up to $1,000 per case, and attorney fees and court costs. For class actions, statutory damages can reach $500,000 or 1% of the collector’s net worth, whichever is less.
The statute of limitations for FDCPA claims is one year from the date of the violation. Document everything — save voicemails, screenshot call logs, keep letters, and note dates and times of every contact. This documentation becomes your evidence if you decide to sue.
Frequently Asked Questions
Can a debt collector contact my family or friends about my debt?
Only in very limited circumstances. A collector can contact third parties once — and only once — to get your contact information (phone number, address, workplace). They cannot reveal that they are collecting a debt, cannot contact the same third party again, and cannot discuss your financial situation with anyone other than you, your spouse, your attorney, or a co-signer on the debt. If a collector is telling your relatives or coworkers about your debt, that is a clear FDCPA violation.
What should I do if I do not recognize the debt?
Send a validation letter within 30 days of first contact. Do not confirm or deny anything verbally. Identity theft, clerical errors, and debts belonging to people with similar names are more common than you might think. The collector must provide documentation proving the debt is yours and that the amount is correct. If they cannot, they must stop collecting. Separately, check your credit reports at AnnualCreditReport.com for any accounts you do not recognize — this can help identify whether the debt is a result of identity theft.
Is there a way to stop all debt collection calls immediately?
Yes — send a written cease and desist letter via certified mail. Once received, the collector can only contact you to confirm they will stop calling or to notify you of specific legal action. Keep in mind that this does not eliminate the debt, and the collector may respond by escalating to a lawsuit rather than continuing to call. If you are receiving calls from multiple collectors, you need to send a separate letter to each one.
Can debt collectors take money directly from my bank account?
Not without a court judgment. A collector must first sue you, win the case (or get a default judgment because you did not respond), and then obtain a court order authorizing a bank levy. There are exceptions: if you previously authorized automatic payments from your bank account, the collector may have the right to debit it under that authorization. This is why you should never give a debt collector your bank account information during a phone call. Federal benefits like Social Security, VA benefits, and SSI are generally protected from garnishment, even after a judgment.
Should I pay a debt that is past the statute of limitations?
From a purely legal standpoint, you are under no obligation to pay a time-barred debt, and paying it (or making a partial payment) can restart the statute of limitations in some states, giving the collector the right to sue again. From a moral standpoint, some people feel an obligation to pay legitimate debts regardless of the legal technicalities. From a credit reporting standpoint, paying an old debt does not help your credit score if the collection account has already fallen off your report (after 7 years). If the debt is still on your report and you want to settle, negotiate a “pay for delete” agreement. Weigh all three perspectives — legal, personal, and financial — before deciding.
