What Collections Can and Can't Do: The FDCPA in Plain English

The first call from a debt collector lands differently than almost any other phone call. Part of that is design: urgency is the industry's main tool. But collectors operate inside one of the more specific consumer laws on the books — the Fair Debt Collection Practices Act (FDCPA), passed in 1977 and sharpened by a 2021 federal rule — and most of its protections only work if you know they exist, because nobody on that phone call is required to volunteer them in the moment you need them.

What follows is the rulebook, sorted the useful way: what collectors must do, what they can do, and what they can't — plus the two written moves that change the entire dynamic.

What a collector MUST do

Identify itself honestly. A collector can't pretend to be a law firm it isn't, a government agency, or a credit bureau. Every call must disclose it's from a debt collector.

Send the validation notice. Either in the first communication or within five days after it, you must receive the validation information: the collector's name, the amount as of a stated date, an itemization of interest and fees, the creditor's name, and — critically — a statement of your right to dispute within 30 days. The CFPB lists exactly what the notice must contain. If you dispute in writing within that 30-day window, collection must pause until the collector mails you verification.

Contact you before reporting you. Since the CFPB's debt collection rule (Regulation F, in force since late 2021), a collector can't quietly place a debt on your credit reports without first speaking with you or sending notice — a practice called "passive collection" or debt parking. How a collection entry then behaves inside your file is part of the credit report anatomy.

What a collector CAN do

Legality has a wide lane, and it helps to know how wide. A collector can call you (between 8 a.m. and 9 p.m. your local time), text and email you (with required opt-out instructions), contact you at work until you say your employer prohibits it, contact third parties like neighbors or relatives — but only to locate you, without mentioning any debt — and negotiate settlements for less than the balance. A collector or the current owner of the debt can also sue you, within your state's statute of limitations, and if it wins a judgment, pursue wage garnishment or a bank levy under your state's rules. Garnishment without a lawsuit and judgment isn't a thing for ordinary consumer debt — only certain government debts (federal student loans, taxes, child support) skip the courtroom.

What a collector CAN'T do

• Harass you. No profanity, no threats of violence, no ringing your phone repeatedly to annoy you. Regulation F draws a bright numeric line: calling more than seven times within seven days about one debt, or within seven days after actually speaking with you about it, is presumed illegal, as the CFPB's summary of what collectors can say and do explains.
• Lie. No inflating the amount, no claiming to be attorneys when they're not, no fake court papers, no threatening actions they can't or don't intend to take.
• Threaten arrest. You cannot be jailed for consumer debt in the United States. "We're sending the sheriff" is a scam line, not a collection technique — and it's one of the clearest tells separating real collectors from fraudsters.
• Publicly shame you. No postcards about your debt, no telling your boss or your mother what you owe, no publishing deadbeat lists. Social media messages must be private, not public posts.
• Collect fees the contract or state law doesn't allow. The amount can't grow by invention.

The two written moves that change everything

Move 1 — the dispute. Inside the 30-day validation window, a written dispute freezes collection until the collector verifies the debt. This matters because a meaningful share of collection files are wrong: wrong person, wrong amount, already paid, or a "zombie" debt discharged in bankruptcy. Verification forces the file open.

Move 2 — the stop-contact letter. At any point, you can tell a collector in writing to cease contact. After that, per the CFPB's guide to stopping collector contact, it may reach you only to confirm it's stopping or to tell you a specific action (like a lawsuit) is being taken. The letter doesn't erase the debt — it can still be sold, reported within legal limits, or litigated — but it ends the phone campaign.

Worked example: the $1,340 that grew a $460 rider

Dana's old gym membership, $1,340 at charge-off, surfaces two years later with a collector claiming $1,800. The validation notice's required itemization shows the gap: $310 in "collection interest" and $150 in fees. Dana's contract allowed neither, and her state caps post-charge-off interest. She disputes in writing on day 12 — inside the window — so collection pauses. The collector's verification can't substantiate the add-ons, and the balance drops back to $1,340. Nothing dramatic happened: a letter forced arithmetic into daylight. (Whether that $1,340 belongs on her credit reports, and for how long, follows the seven-year clock from the original delinquency — a collector can't restart it by buying the debt.)

Old debt: the quietest trap in the system

Every state sets a statute of limitations on debt lawsuits — commonly three to six years, sometimes longer. Once it passes, the debt is "time-barred": collectible by asking, but not by suing, and Regulation F forbids suing or threatening suit on it. The trap: in many states, a small "good-faith payment" — or even a written acknowledgment — can restart the clock, turning an unsueable debt back into a sueable one. This is why the phrase "can you just pay $5 today to show good faith?" deserves cold scrutiny, and why the full text of the statute, hosted by the FTC, is worth knowing exists: the Fair Debt Collection Practices Act.

Real collector or scammer? The four-question test

Fake debt collection is a thriving fraud category precisely because real collection is stressful and unfamiliar. Four questions separate them reliably. Will you mail me the validation notice? — real collectors must and do; scammers stall, because paper creates evidence. What's your company's name and mailing address? — then verify independently against your state's collector licensing database, not a number the caller gives you. Why does the "debt" not appear on any of my credit reports? — most real collection accounts eventually do. And the tell that ends the conversation by itself: any demand for payment by gift card, wire transfer, or payment app. No legitimate collector is paid in Target cards. Threats of same-day arrest, "officers are en route," and refusal to send anything in writing complete the profile.

If a lawsuit actually arrives

A real collection lawsuit comes as served court papers — a summons and complaint with a case number you can verify with the court clerk, never as a phone call or email. The single most consequential fact about these cases: the overwhelming majority end in default judgments, meaning the person never responded and automatically lost — at which point garnishment and levies become available to a collector who might otherwise have struggled to prove its case. Responding by the deadline (often 20–30 days, stated on the summons) forces the collector to produce documentation of a debt that may have been resold three times, and courts routinely see these cases fold when asked for paperwork. Many states' court websites publish fill-in-the-blank answer forms, and legal aid organizations handle collection defense — the response is a form, not a law degree.

The bottom line

Collections runs on asymmetry: the caller does this all day, and you don't. The FDCPA's whole design is to let paper neutralize pressure — a required notice on their side, two powerful letters on yours, numeric limits on the phone calls in between, and a courtroom door that closes permanently on old debt unless you accidentally reopen it. The rules above are federal minimums; several states layer on stricter ones, including versions that cover original creditors too.