Collection Agency: What They Can and Can't Do Under FDCPA (2026)

You pick up the phone and hear: "This is a call from a collection agency regarding an outstanding balance." Your stomach drops. Whether this is your first encounter with a debt collector or you've been through it before, understanding your legal rights under the Fair Debt Collection Practices Act (FDCPA) is the single most important thing you can do.

Collection agencies are not all-powerful. Federal law places strict limits on what they can do — and the penalties for crossing those lines can mean money in your pocket. This guide covers everything: how the debt collection industry works, what collectors are and aren't allowed to do, and a step-by-step playbook for protecting yourself.

What Is a Collection Agency?

A collection agency is a company hired to recover unpaid debts on behalf of a creditor — or one that has purchased your debt outright and now owns it. There are two primary models:

• Third-party collectors: Agencies hired by original creditors (credit card companies, hospitals, auto lenders) to collect on their behalf, typically earning a commission of 25–50% of what they recover.
• Debt buyers: Companies that purchase portfolios of charged-off debt for pennies on the dollar — often 1–7 cents per dollar of face value — and then attempt to collect the full amount for profit.

The debt-buying industry is enormous. According to the Consumer Financial Protection Bureau (CFPB), debt buyers purchase billions of dollars in delinquent accounts annually. Your $3,500 credit card balance may have been sold and resold multiple times, each time for less money, until it lands with an aggressive collector who paid $70 for your account and wants the full amount back.

Regardless of whether a collector is working for the original creditor or bought the debt themselves, they must comply with the FDCPA if they are a "debt collector" as defined by law. This covers most third-party agencies and debt buyers. (Note: original creditors collecting their own debt are not covered by the FDCPA, though many state laws fill this gap.)

The FDCPA: What Collection Agencies Can and Can't Do

The Fair Debt Collection Practices Act (15 U.S.C. § 1692) was enacted in 1977 and is enforced by the Federal Trade Commission (FTC) and the CFPB. It applies to personal, family, and household debts — credit cards, medical bills, mortgages, auto loans, student loans, and more.

The Mini-Miranda Warning

Every time a debt collector contacts you — in the initial communication or within five days of it — they are required by law to provide what's known as the "Mini-Miranda" disclosure. This is separate from your actual Miranda rights (those apply to criminal arrests); it is named after the landmark case that established consumer rights.

In addition, within five days of first contact, the collector must send you a written validation notice stating: the amount of the debt, the name of the original creditor, and a statement that you have 30 days to dispute the debt. If a collector fails to provide the Mini-Miranda warning or the written notice, that is itself an FDCPA violation.

Your Validation Rights: The 30-Day Window

One of your most powerful rights under the FDCPA is the right to debt validation. Within 30 days of receiving the first written notice from a collector, you can demand that they prove the debt is legitimate before you pay a single dollar.

1. Receive initial contact. The clock starts ticking when you get the first written notice from the collector (or within five days of a phone call, when they must follow up in writing).
2. Send a written validation request within 30 days. Your letter must be written (email may work under 2021 CFPB rules, but certified mail is safest). State clearly that you dispute the debt and request validation.
3. All collection activity must stop. Once the collector receives your request, they must stop contacting you and cease all collection efforts until they provide verification.
4. Review what they send back. Proper validation should include: the original signed agreement, account statements showing the full payment history, proof they have the legal right to collect (chain of title if the debt was sold), and verification that the amount is accurate.
5. If they can't validate, they must stop. A collector who cannot produce documentation proving the debt is valid must cease collection. Many debt buyers — who purchased sparse account data — cannot meet this standard.

Your Right to Make Them Stop: The Cease and Desist Letter

Beyond the 30-day validation window, you have the right at any time to send a written cease communication request (commonly called a cease and desist letter). Once received, the collector may contact you only to:

• Acknowledge your request and confirm they are ceasing contact
• Inform you of a specific intended action they plan to take (such as filing a lawsuit)

After that, all phone calls, letters, texts, and emails must stop. This is absolute — it is not negotiable and the collector has no legal basis to refuse it.

Always send cease and desist letters via certified mail with return receipt requested. Keep the green card as proof of delivery. The date of receipt is when the collector's obligation to stop contact legally begins.

Statute of Limitations and Time-Barred Debt

Every state has a statute of limitations that governs how long a creditor or collector has to sue you for an unpaid debt. Once this period expires, the debt is time-barred — meaning a court will dismiss a lawsuit to collect it.

Statutes of limitations vary widely by state and by debt type, typically ranging from 3 to 10 years. Common ranges:

• Written contracts (credit cards, personal loans): 3–6 years in most states
• Oral contracts: 2–5 years in most states
• Promissory notes: 3–6 years in most states
• Open accounts: 3–6 years in most states

Note that the statute of limitations is different from the credit reporting period. Negative items — including collections — generally fall off your credit report after 7 years from the date of first delinquency, regardless of whether the debt is paid or the statute of limitations.

How to Deal With Collectors: Do's and Don'ts

Knowing your rights is only half the battle. Knowing how to act is the other. Here is a practical guide for navigating collector interactions.

What to Do If a Collector Violates the FDCPA

If a collection agency has violated the FDCPA, you have real legal remedies — and it costs you nothing to pursue them through an attorney who works on contingency.

1. Document everything. Write down dates, times, the collector's name, exactly what was said, and save any voicemails or written communications.
2. File a complaint with the CFPB. Visit consumerfinance.gov/complaint. The CFPB forwards complaints to companies and tracks patterns of abuse.
3. File a complaint with the FTC. Go to reportfraud.ftc.gov. While the FTC doesn't resolve individual complaints, reporting feeds their enforcement actions.
4. File a complaint with your state attorney general. Many states have their own debt collection laws with additional protections beyond the FDCPA.
5. Contact a consumer rights attorney. Under the FDCPA, if you win, the collector pays your attorney fees. You can receive up to $1,000 in statutory damages per lawsuit, plus actual damages. Many attorneys take these cases for free.

The Debt Collection Dispute Process: Summary

To recap the full framework for handling an aggressive collection agency:

1. Do not make any payment or verbal acknowledgment without first understanding the debt.
2. Request written validation within 30 days of first contact — this freezes collection activity.
3. Review the validation documents carefully. Look for errors in the amount, the creditor chain, or the account history.
4. If the debt is time-barred, consult an attorney before any action. Do not pay or acknowledge.
5. If the debt is valid and you want the calls to stop while you decide, send a cease and desist letter via certified mail.
6. If you decide to settle, negotiate in writing and get the agreement signed before paying.
7. Document every FDCPA violation and consider filing complaints or consulting an attorney.

Frequently Asked Questions