Your federal and state rights against debt collectors — and exactly how to enforce them.
The Fair Debt Collection Practices Act (FDCPA), enacted in 1977 and updated in 2021, is the primary federal law governing debt collection. It prohibits abusive, deceptive, and unfair practices by debt collectors collecting personal, family, or household debts.
The Consumer Financial Protection Bureau (CFPB) and the Federal Trade Commission (FTC) both enforce the FDCPA. State attorneys general can also enforce it in their states.
Personal, family, and household debts: credit cards, medical bills, mortgages, auto loans, student loans, utility bills. Business debts are NOT covered.
The CFPB updated FDCPA rules in 2021: collectors can now contact you via email and text (with opt-out rights); social media contact is limited to private messages only.
Collectors can be sued for up to $1,000 per lawsuit (plus actual damages + attorney fees). Class actions can reach $500,000 or 1% of the collector's net worth.
| Entity | Covered by FDCPA? | Notes |
|---|---|---|
| Third-party collection agencies | ✅ Yes | Anyone collecting debts for another party |
| Debt buyers (portfolio purchasers) | ✅ Yes | Companies that buy and collect old debts |
| Attorneys who regularly collect debts | ✅ Yes | Including law firms collecting on behalf of clients |
| Original creditors (banks, credit cards) | ❌ No (federally) | Many state laws fill this gap |
| Original creditors collecting their own debt | ❌ No (federally) | Chase collecting its own Chase debt = not covered |
| Creditors using a different name | ✅ Yes | If they use an alias suggesting a third party |
| Government debt collectors | Partial | Certain exceptions; state laws may apply |
California (Rosenthal Act), New York, Massachusetts, and many other states have their own debt collection laws that DO apply to original creditors — closing the federal gap. If your state has a strong consumer protection law, you may have rights against your credit card company or bank, not just third-party collectors.
Cannot call before 8am or after 9pm (your local time). Cannot call repeatedly to harass you. Cannot use abusive or threatening language.
Cannot threaten arrest or criminal prosecution for civil debt. Cannot threaten lawsuits they don't intend to file. Cannot claim to be attorneys if they're not.
Cannot lie about the amount owed. Cannot misrepresent the nature of the debt. Cannot claim to be government officials or law enforcement.
If you send a written cease-and-desist letter, they must stop contacting you (except to notify you of specific legal actions).
Cannot contact your employer to discuss your debt. Can only contact your employer once to verify employment/location.
Cannot publish lists of debtors. Cannot post debt information on social media publicly. Cannot send postcards that reveal debt info.
Cannot collect fees, interest, or charges not authorized by the original agreement or law. Cannot deposit post-dated checks early. Cannot repossess items without legal authority.
Cannot discuss your debt with friends, family, or coworkers. Can only contact third parties once to locate you (get your address).
Must send validation notice within 5 days of first contact. If you dispute within 30 days, must stop collection until verification is provided.
By phone, mail, email (with opt-out), or text (with opt-out) between 8am–9pm your local time.
Accurately report your debt to Equifax, Experian, and TransUnion. This is entirely legal.
File a lawsuit and obtain a judgment — but only within the statute of limitations on the debt.
After winning a lawsuit, can garnish wages (up to 25% of disposable income, per federal law).
If you have a lawyer, they'll contact your attorney directly. Provide your attorney's name and contact information.
Offer settlement for less than you owe. This is legal and often advantageous for both parties.
| State | Key Law | Stronger Than FDCPA? | Notable Provisions |
|---|---|---|---|
| California | Rosenthal Fair Debt Collection Practices Act | ✅ Yes | Covers original creditors; broader harassment definition; $1,000 minimum damages |
| New York | NYC + NY State consumer protection laws | ✅ Yes | NYC bans most collection calls; requires written communication |
| Texas | Texas Debt Collection Act (TDCA) | ✅ Yes | Covers original creditors; broad harassment protections; $100–$500 per violation |
| Florida | Florida Consumer Collection Practices Act | ✅ Yes | Covers original creditors; attorney fees mandatory for consumer wins |
| Massachusetts | MA Consumer Protection Act (93A) | ✅ Yes | Up to 3x actual damages; covers original creditors |
| Illinois | Collection Agency Act | Partial | Licensing requirements; additional consumer remedies |
| Colorado | Colorado Fair Debt Collection Practices Act | ✅ Yes | Covers original creditors collecting residential debts |
| Michigan | Regulation of Collection Practices Act | Partial | Adds some protections for in-state collection practices |
Start keeping a detailed log immediately:
Some states are "one-party consent" states — you can record calls without telling the other party. Others require "two-party consent." Check your state law before recording. In one-party states (most of them), your recordings are powerful FDCPA evidence.
Depending on the situation:
| Agency | Website | Phone | What They Do |
|---|---|---|---|
| CFPB | consumerfinance.gov/complaint | 1-855-411-2372 | Investigates; can fine collectors; creates paper trail |
| FTC | reportfraud.ftc.gov | 1-877-382-4357 | Enforces FDCPA; builds cases for legal action |
| State Attorney General | naag.org (find your state) | Varies | State-level enforcement; may file on your behalf |
| Better Business Bureau | bbb.org | — | No enforcement; creates public record; sometimes prompts response |
The FDCPA gives you the right to sue in federal or state court within 1 year of the violation. What you can recover:
| Damages Type | Amount | Notes |
|---|---|---|
| Statutory damages | Up to $1,000 per lawsuit | Even if no actual harm; this is your baseline |
| Actual damages | Whatever you can prove | Lost wages, medical costs, emotional distress |
| Attorney's fees | Full amount if you win | This is what makes it work: lawyers take cases on contingency |
| Class action statutory | Up to $500,000 or 1% of net worth | For systematic violations affecting many consumers |
FDCPA lawsuits must be filed within 1 year of the violation. Document violations as they happen, and consult an attorney quickly if you believe your rights were violated. The statute of limitations is not forgiving.
Use our free generator to create a proper demand letter that references your FDCPA rights — and makes collectors take notice.
Free Demand Letter Generator →