The Complete Guide to the Fair Debt Collection Practices Act (FDCPA)

The Fair Debt Collection Practices Act is the federal law that draws a sharp line around what a debt collector can and cannot do. Calling at 2am. Telling your neighbors about the debt. Threatening jail. Claiming to be an attorney when they aren’t. Calling after you’ve told them in writing to stop. Each of these is illegal under federal law, and each carries statutory damages of up to $1,000 per violation plus your attorney’s fees. The FDCPA exists because Congress recognized, in 1977, that abusive debt collection was a national problem. The law it produced is one of the most consumer-friendly pieces of legislation on the books, and most people never invoke it because they don’t know they can.

Jump to a section:
– The 60-second answer
– What the FDCPA is
– Section-by-section walkthrough
– Your specific rights under the FDCPA
– How the FDCPA interacts with credit reporting
– Most common FDCPA violations
– How to enforce the FDCPA yourself
– Sample cease-and-desist letter
– State-law overlays
– Glossary
– FAQ

The 60-Second Answer

The Fair Debt Collection Practices Act (FDCPA), codified at 15 U.S.C. §1692 et seq., regulates third-party debt collectors, agencies and debt buyers who collect on behalf of, or after purchase from, the original creditor. It prohibits harassment, false statements, third-party disclosure of the debt, contact at inconvenient times, and continued contact after a written cease-and-desist. It also gives consumers the right to demand validation of a debt under §809, a request that requires the collector to produce specific documentation before continuing collection efforts. Violations carry statutory damages up to $1,000 plus actual damages plus attorney’s fees. The FDCPA is one of the most consumer-enforceable federal statutes on the books. Most consumers never invoke it.

What the FDCPA Is

The FDCPA was passed in 1977 as Title VIII of the Consumer Credit Protection Act. Its stated purpose is “to eliminate abusive debt collection practices by debt collectors, to insure that those debt collectors who refrain from using abusive debt collection practices are not competitively disadvantaged, and to promote consistent State action to protect consumers against debt collection abuses”.

The FDCPA covers three things:

What debt collectors can and cannot do. Specific prohibited practices (harassment, false statements, unfair collection methods) and specific required practices (initial disclosure, validation upon request, response to cease-and-desist).
What rights consumers have. Specifically: the right to validation, the right to cease communication, the right to be free from harassment, and the right to sue for violations.
Who is covered. The FDCPA applies to third-party debt collectors, agencies collecting for someone else, debt buyers collecting on debts they purchased, and (in limited circumstances) attorneys regularly engaged in debt collection. Original creditors collecting their own debts are generally not covered by the FDCPA, though they may be covered by state laws or by the Consumer Financial Protection Bureau’s UDAAP authority.

The Consumer Financial Protection Bureau (CFPB) is the primary federal enforcer. The Federal Trade Commission also has enforcement authority. State attorneys general bring FDCPA-related cases. And critically, consumers have a private right of action, you can sue, individually, when an FDCPA violation occurs.

Section-by-Section Walkthrough

The FDCPA is structured into numbered sections (often referenced by their original numbering, §803 through §818, rather than the U.S. Code section numbers). The sections that matter most in practice are the following.

§803, Definitions (15 U.S.C. §1692a)

The opening section defines who is a “debt collector,” what counts as a “consumer,” what a “debt” is for FDCPA purposes, and other foundational terms. The definitions matter because they determine who is bound by the law. A creditor’s in-house collections department typically isn’t a “debt collector” under §803. A purchased-debt buyer collecting on accounts it bought after default typically is.

§805, Communication in Connection With Debt Collection (15 U.S.C. §1692c)

§805 limits when and how a debt collector may communicate with a consumer.

§805(a)(1), Inconvenient times. A debt collector may not contact a consumer at a time or place known or which should be known to be inconvenient. Default convenient hours are 8am to 9pm local time at the consumer’s location.
§805(a)(2), Represented consumer. If a consumer is represented by an attorney with respect to the debt, the collector must communicate with the attorney, not the consumer.
§805(a)(3), At the consumer’s workplace. A collector may not contact a consumer at their workplace if the collector knows or should know the employer prohibits such contact.
§805(b), Third-party disclosure. A collector may not communicate with anyone other than the consumer, their attorney, or specifically authorized parties, with very narrow exceptions for locating the consumer. Telling a neighbor, a family member, or an employer about the debt is a violation.
§805(c), Cease communication. If the consumer notifies the collector in writing that the consumer refuses to pay or wishes communication to cease, the collector must stop, with extremely narrow exceptions.

§806, Harassment or Abuse (15 U.S.C. §1692d)

§806 prohibits any conduct the natural consequence of which is to harass, oppress, or abuse any person. Specific prohibited conduct includes:

Threats of violence
Use of obscene or profane language
Publication of lists of consumers who allegedly refuse to pay (with limited exceptions)
Causing a phone to ring or engaging anyone in conversation repeatedly with the intent to annoy or harass
Placing telephone calls without meaningful disclosure of the caller’s identity

§807, False or Misleading Representations (15 U.S.C. §1692e)

§807 is one of the most-litigated FDCPA sections. It prohibits false, deceptive, or misleading representations in connection with debt collection. Among many specifically enumerated prohibitions:

Falsely representing the character, amount, or legal status of the debt
Representing or implying that the collector is affiliated with the U.S. government or any state
Representing or implying that nonpayment of the debt will result in arrest or imprisonment, unless lawful and actually intended
Threatening to take action that cannot legally be taken or that is not actually intended to be taken
Falsely representing or implying that documents are legal process when they are not
Using any name other than the true name of the collector’s business

§808, Unfair Practices (15 U.S.C. §1692f)

§808 prohibits unfair or unconscionable means of collecting a debt, including:

Collecting any amount (interest, fees, charges) not expressly authorized by the underlying contract or by law
Causing charges to be made to any person for communications with the consumer (e.g., collect calls)
Depositing a postdated check before the date on the check
Communicating with the consumer by postcard
Using language or symbols on envelope visible from outside that indicate the communication is from a debt collector

§809, Validation of Debts (15 U.S.C. §1692g)

This is the single most powerful section of the FDCPA for individual consumers. §809 requires that within five days of the initial communication with a consumer in connection with collection of a debt, the collector must send written notice containing:

The amount of the debt
The name of the creditor to whom the debt is owed
A statement that unless the consumer disputes the debt within 30 days, the collector will assume the debt is valid
A statement that if the consumer disputes the debt in writing within 30 days, the collector must obtain verification and mail it to the consumer
A statement that, upon request within 30 days, the collector will provide the name and address of the original creditor if different from the current creditor

Critically, under §809(b), if the consumer disputes the debt in writing within the 30-day window, the collector must cease collection efforts until verification is provided.

The debt validation letter, covered in detail in the Debt Validation pillar, is the consumer’s mechanism for invoking these §809 rights.

§813, Civil Liability (15 U.S.C. §1692k)

§813 is the enforcement section. Consumers have a private right of action for any FDCPA violation, with:

Actual damages
Statutory damages up to $1,000 per case (not per violation)
Reasonable attorney’s fees and costs

For class actions, additional statutory damages up to the lesser of $500,000 or 1% of the collector’s net worth are available.

The cap of $1,000 in statutory damages per case is sometimes misunderstood, it does not mean the FDCPA is a small-stakes statute. Attorney’s fees are recoverable, which means FDCPA cases are economically viable for plaintiff’s counsel. The CFPB has also brought enforcement actions against major debt collectors with multi-million-dollar penalties.

Your Specific Rights Under the FDCPA

The FDCPA gives consumers the following enforceable rights:

1. The right to validation of the debt. Under §809, you have 30 days from the collector’s first communication to dispute the debt in writing. If you do, the collector must cease collection until verification is provided. (This is the heart of the debt validation process.)

2. The right to be free from harassment. Under §806, the collector cannot harass, threaten violence, use obscene language, or call repeatedly to annoy you. Document each call. Each violation is independently actionable.

3. The right to control communication. Under §805(c), you can send a written notice telling the collector to cease communication. With narrow exceptions, they must stop.

4. The right to be free from third-party disclosure. Under §805(b), the collector cannot tell your family, friends, neighbors, or coworkers about the debt. With narrow location-information exceptions, third-party disclosure is per-violation actionable.

5. The right to communication at convenient times. Under §805(a)(1), the collector cannot call before 8am or after 9pm in your local time without your prior consent.

6. The right to be free from workplace contact. Under §805(a)(3), if you’ve informed the collector your employer prohibits such contact, they must stop.

7. The right to sue. Under §813, you can sue any debt collector for any FDCPA violation. Statutory damages, actual damages, and attorney’s fees are available.

How the FDCPA Interacts With Credit Reporting

The FDCPA and the FCRA work in parallel, and the most powerful credit-repair work happens when both are invoked together.

A typical scenario: a collection account appears on your credit report. The account is owned by a third-party debt buyer who purchased the debt from the original creditor. You have two distinct legal levers available:

FCRA §611 dispute, filed with the credit reporting agencies (Equifax, Experian, TransUnion). Challenges the accuracy of the reported item. CRAs must investigate within 30 days.
FDCPA §809 validation request, sent directly to the debt collector. Demands proof of the debt. Collector must cease collection until validation is provided.

If the collector cannot provide proper validation under FDCPA §809, several follow-on consequences emerge:

Continued reporting of a debt the collector cannot validate is a separate FDCPA §807 violation (false representation of the legal status of the debt).
The lack of validation creates a documentation gap that supports FCRA §611 disputes against the bureaus.
If the collector continues collection efforts after a validation request, that’s a §809(b) violation.

This is why the Credituity process generally invokes both statutes in parallel for collection-account items. The FCRA gets the item disputed on the reports. The FDCPA forces the collector to either produce the underlying documentation or stand down. Items where the collector cannot do either are the items that delete first.

Full mechanism in the Debt Validation pillar.

Most Common FDCPA Violations

These are the violations Credituity sees most frequently in client files.

1. Third-Party Disclosure

Under §805(b), a debt collector cannot tell anyone other than the consumer (or their attorney) about the debt. This includes leaving voicemails on shared phones, telling family members “I’m calling about a financial matter,” or contacting employers without permission. Voicemails that disclose the existence of a debt to anyone who might check the voicemail are §805(b) violations.

The CFPB and FTC have brought enforcement actions against debt collectors for systematic third-party disclosure practices.

2. False Statements About Authority

Under §807, a collector cannot misrepresent who they are or what they can do. Common violations:

Claiming to be an attorney when they’re not
Claiming to be affiliated with the government when they’re not
Threatening to sue when they have no intention of suing
Threatening arrest, imprisonment, or wage garnishment that isn’t actually available

Each statement is independently actionable. The “least sophisticated consumer” standard applied by most courts means that even technically truthful statements can be FDCPA violations if they would mislead an unsophisticated consumer.

3. Calls Outside Legal Hours

Under §805(a)(1), calls before 8am or after 9pm local time are FDCPA violations. Each call is a separate violation. Document the date, time, and source of every call, this is one of the easiest violations to prove.

4. Continued Contact After Cease-and-Desist

Under §805(c), once you send a written notice telling the collector to cease communication, they must stop, with extremely narrow exceptions (acknowledging receipt, notifying of further action). Continued contact after a cease-and-desist is among the most-litigated FDCPA violations and often results in statutory damages awards.

5. Failure to Validate

Under §809, the collector must respond to a written validation request within the 30-day window with specific documentation. A collector who continues collection without proper validation, or who provides a response that doesn’t actually validate the debt (e.g., a bare statement without underlying documentation), commits a §809 violation. Documentation-gap disputes are central to the Credituity dispute strategy.

6. False Representation of the Amount

Under §807(2)(A), a collector cannot misrepresent the amount of the debt. Adding fees, interest, or charges not authorized by the underlying contract or by law is a §807 violation. Many collection files show amount creep, the original debt was $1,200 but the collector is now demanding $2,800 with no contractual basis for the added amount.

You can do this yourself.

Most of the FDCPA enforcement work is paper. You send a validation letter under §809. You document harassment calls and send a cease-and-desist under §805(c). You file a CFPB complaint. You consult an FDCPA attorney if litigation becomes appropriate. Each step is something an individual consumer can do.

What stops most people is not the law, it’s the time, the operational follow-through, and the willingness to engage with a collector who is professionally trained to make consumers feel like the law isn’t on their side. (It is.)

When Credituity clients call us, the FDCPA work is rolled into the broader dispute process, validation letters to every third-party collector on the file, FCRA disputes in parallel to the bureaus, escalation through partner law firms when collectors continue to violate.

Book a free 15-minute call with Eli →

No card. No pressure. If you don’t need credit repair, we’ll tell you.

How to Enforce the FDCPA Yourself

Operational sequence for self-managed FDCPA enforcement.

Step 1: Document everything. Every phone call: date, time, caller ID, what was said. Every letter or voicemail: keep originals. Every text message: screenshot. Documentation is the foundation of every FDCPA case.

Step 2: Identify the debt collector. Is this a third-party collector or the original creditor? The FDCPA applies primarily to third-party collectors. If you’re dealing with the original creditor, your remedies are mostly under state law or under CFPB UDAAP authority, different process.

Step 3: Send a validation letter under §809 if within the 30-day window. If you’ve received initial communication from a collector within the last 30 days, send a written validation letter (template below in the Debt Validation pillar). The collector must cease collection until they validate the debt with specific documentation.

Step 4: Send a cease-and-desist letter under §805(c) when appropriate. When you don’t want further communication, send a written notice. The collector must stop, with narrow exceptions. Note: a §805(c) cease-and-desist does not eliminate the underlying debt, it stops the collector from contacting you. The debt may still be collected through legal action.

Step 5: File a CFPB complaint. consumerfinance.gov/complaint. CFPB complaints generate a response from the collector within 15 days and are tracked publicly. Pattern violators face increased CFPB scrutiny.

Step 6: Consult an FDCPA attorney for actionable violations. Attorney’s fees are recoverable under §813(a)(3). Many FDCPA attorneys take cases on contingency. If you have documented violations, consultation costs you nothing.

Step 7: Sue in federal or state court within one year. §813(d) imposes a one-year statute of limitations from the date of the violation. Document carefully and don’t wait.

Sample FDCPA Cease-and-Desist Letter Template

[EDUCATIONAL TEMPLATE, not legal advice. Have an attorney review before sending if the matter involves litigation, threatened lawsuits, or active wage garnishment.]

[Your Name]
[Your Current Address]
[City, State, ZIP]
[Date]

[Debt Collector Name]
[Debt Collector Address]

VIA CERTIFIED MAIL, RETURN RECEIPT REQUESTED
Tracking #: [Number]

RE: Notice to Cease Communication under FDCPA §805(c)
 Account Reference: [Account number if known]
 Original Creditor: [Original creditor name if known]

To Whom It May Concern:

This letter constitutes formal notice under the Fair Debt
Collection Practices Act, 15 U.S.C. §1692c(c), that I
demand you cease all further communication with me
regarding the above-referenced account or any other account
on which you are attempting to collect.

I am exercising my right under §805(c) of the FDCPA. From
the date of your receipt of this letter, you may only
contact me to:

 (1) Advise me that further collection efforts are being
 terminated;
 (2) Notify me that you may invoke specified remedies
 ordinarily invoked by such debt collector;
 (3) Notify me that the debt collector intends to invoke
 a specified remedy.

Any other communication will constitute a violation of
FDCPA §805(c), which is independently actionable under
§813 and subjects your firm to statutory damages, actual
damages, and attorney's fees.

ADDITIONAL NOTICE, VALIDATION REQUEST [if applicable]:
I dispute the validity of this debt under FDCPA §809(b).
You are required to cease collection efforts until you
provide me with verification of the debt as required by
§809. Verification means, at minimum:
 - The original signed agreement creating the debt
 - An itemized accounting of the amount claimed
 - Documentation establishing your right to collect
 - Identification of the original creditor

NOTICE TO THIRD PARTIES:
Any communication with my employer, family members,
neighbors, or other third parties regarding this debt will
constitute a violation of §805(b) and will be documented
for legal action.

I am keeping a record of all communications regarding this
debt. This letter is being sent by certified mail with
return receipt requested.

Sincerely,

[Your Signature]
[Your Printed Name]

Sent by: Certified Mail, Return Receipt Requested
Tracking #: [Number]

Banner reminder: This is an educational template. Mechanism-specific drafting for your situation, particularly if there’s pending litigation or imminent legal action, should be reviewed by an FDCPA attorney before sending.

State-Law Overlays

Several states have layered consumer protections on top of the FDCPA, and in some cases, extended the law to cover original creditors that federal FDCPA doesn’t reach.

California, Rosenthal Fair Debt Collection Practices Act. Extends FDCPA-like obligations to original creditors. Critical: most FDCPA litigation involving California consumers includes a parallel Rosenthal Act claim.
Texas, Texas Debt Collection Act. State-specific debt collection regulations with additional remedies.
New York, General Business Law Article 29-H. State-specific debt collection regulations.
Florida, Consumer Collection Practices Act. State law applicable to debt collection in Florida.
Massachusetts, Consumer Protection Act (Chapter 93A). Provides additional remedies including treble damages in some circumstances.

When you’re a consumer in one of these states, cite the state law in addition to the federal FDCPA. State-law overlays often provide remedies federal law does not, including in some cases enhanced damages and longer statutes of limitations.

When You Should Hire Help

Self-managed is usually fine if:
– You’re sending a validation letter or cease-and-desist on a single account
– You have time to document calls and follow up
– You’re not yet facing litigation or wage garnishment
– The collector is responding professionally to your written notices

Hiring help usually makes sense if:
– A collector is calling repeatedly despite a cease-and-desist
– You’re being sued by a debt collector
– A collector has lied to you about authority or threatened illegal action
– You have multiple collectors across multiple accounts and want coordinated enforcement
– You want to combine FDCPA enforcement with FCRA dispute work (Credituity’s primary process)

That’s the work Credituity does. We run the FDCPA validation and cease-and-desist process in parallel with the FCRA dispute process, on every collector on the file, and refer to partner law firms when violations are actionable.

Book a free 15-minute call →

No card. No pressure. If you don’t need credit repair, I’ll tell you., Eli Weldon
Founder, Credituity

Glossary

Debt Collector, Under FDCPA §803, any person who regularly collects debts owed or asserted to be owed to another. Third-party collection agencies, debt buyers, and (in limited circumstances) collection attorneys. Original creditors collecting their own debts are generally not covered.

Consumer, Under §803, any natural person obligated or allegedly obligated to pay a debt.

Debt, Under §803, any obligation arising out of a transaction primarily for personal, family, or household purposes. Business debts are not covered.

Initial Communication, The first communication from a debt collector to a consumer in connection with the collection of a debt. Triggers the §809 validation notice requirement.

Validation, Under §809, the collector’s response to a consumer’s written dispute. Must include verification of the debt, generally interpreted to require documentation of the underlying obligation, not just a printout from the collector’s database.

Cease-and-Desist, A consumer’s written notice under §805(c) demanding that the collector stop all communication. Collector must comply with narrow exceptions.

Third-Party Disclosure, Under §805(b), prohibited communication with anyone other than the consumer, their attorney, or specifically authorized parties about the debt.

Least-Sophisticated Consumer Standard, The standard applied by most federal circuits in FDCPA cases: a statement is judged by how it would be understood by the least sophisticated consumer, not by an attorney or financial professional. Makes many technically-truthful statements actionable.

Statutory Damages, Damages awarded by statute regardless of actual harm. Under FDCPA §813(a)(2), up to $1,000 per case for individual consumers.

FAQ

What is the Fair Debt Collection Practices Act?

The FDCPA, at 15 U.S.C. §1692 et seq., is the federal law that regulates third-party debt collectors. It prohibits harassment, false statements, third-party disclosure, contact at inconvenient times, and continued contact after cease-and-desist, and gives consumers a private right of action for violations.

Who is covered by the FDCPA?

Third-party debt collectors, agencies, debt buyers, and attorneys regularly engaged in debt collection. Original creditors collecting their own debts are generally not covered by federal FDCPA, though state laws (notably California’s Rosenthal Act) may extend similar protections to original creditors.

Can I sue a debt collector for violating the FDCPA?

Yes. Under §813, consumers have a private right of action with actual damages, statutory damages up to $1,000 per case, and attorney’s fees. The one-year statute of limitations runs from the date of the violation.

What is a debt validation letter?

A debt validation letter is a written notice sent under FDCPA §809 demanding that a debt collector provide verification of the debt. If sent within 30 days of the collector’s initial communication, the collector must cease collection until verification is provided. Full coverage in the Debt Validation pillar.

What is FDCPA §809?

§809 is the validation section. It requires the collector to send specific disclosure information within 5 days of initial communication, and it gives the consumer a 30-day window to dispute the debt in writing. If disputed, the collector must cease collection until verification is provided.

Can a debt collector call me at work?

Only if your employer does not prohibit such calls, and only if the collector does not know or have reason to know your employer prohibits them. If you tell the collector (preferably in writing) that you cannot receive calls at work, continued calls are §805(a)(3) violations.

Can a debt collector call my family or neighbors?

No, with very narrow exceptions for locating the consumer. Under §805(b), a collector cannot communicate with third parties about the debt itself. Calling your sister or your neighbor to tell them you owe money is per-violation actionable.

How do I send a cease-and-desist letter?

In writing, by certified mail with return receipt requested, addressed to the debt collector at the address from which they have been contacting you. The letter should invoke FDCPA §805(c) and demand all further communication cease. Template above in the Sample Cease-and-Desist section.

What are the legal hours for debt collector calls?

Under FDCPA §805(a)(1), default convenient hours are 8am to 9pm local time at the consumer’s location. Calls outside these hours are presumptively violations.

Can a debt collector threaten to sue me?

A collector can threaten lawful action they intend to take and have legal grounds to take. A collector cannot threaten action they have no intention of taking or no legal authority to take. False threats of lawsuit, arrest, or wage garnishment are §807 violations.

What’s the difference between the FCRA and the FDCPA?

The FCRA regulates the credit reporting system, bureaus, furnishers, users of consumer reports. The FDCPA regulates third-party debt collectors. They work in parallel for collection-account items: the FCRA gets the item disputed on the report; the FDCPA forces the collector to validate the debt. Many credit-repair files invoke both. Full FCRA coverage in the FCRA pillar.

Can the FDCPA help me if I owe the debt?

Yes. The FDCPA regulates the collector’s conduct regardless of whether the debt is owed. A collector can still violate the FDCPA, through harassment, false statements, third-party disclosure, or other prohibited practices, even when the underlying debt is legitimate. You can owe a debt and still have an FDCPA case.

What is the “least sophisticated consumer” standard?

The standard applied by most federal circuits when evaluating whether a debt collector’s statement is misleading under §807. The statement is judged by how it would be understood by the least sophisticated consumer, not by an attorney or financial professional. This makes many technically-truthful statements actionable.

Does the FDCPA cover business debts?

No. The FDCPA applies only to debts incurred primarily for personal, family, or household purposes. Business debts are not covered.

How long do I have to sue under the FDCPA?

One year from the date of the violation, under §813(d). Don’t wait, document violations as they occur and consult an attorney within the limitations period.

Companion guides covering the rest of the legal framework:

Ready to Stop the Calls and Clean Up the Reports?

If your story sounds anything like the ones I’ve helped before, collectors calling at all hours, disputes the bureaus keep “verifying,” accounts you don’t recognize being collected on, let’s talk. The FDCPA is built to put you in control. Most consumers just don’t know how to operate it. That’s the work we do.