In this lesson
- Opening
- 1. Who's calling — collector, debt buyer, or the original creditor
- 2. The FDCPA: you have rights, and you have an off switch
- 3. What a collector can't do — the rules that protect you
- 4. Validate, don't pay — the first move
- 5. Document Walkthrough — the validation notice, field by field
- 6. The dispute letter you send — what to demand
- 7. Document Walkthrough — real verification vs a bare printout
- 8. Regulation F — the modern rulebook
- 9. The 7-in-7 call cap
- 10. Email, text, and the limited-content message
- 11. Time-barred debt and the revival trap — two clocks
- 12. The off switch — the cease-communication letter
- 13. Resolving it — settlement, pay-for-delete, and the tax angle
- 14. Medical debt in collections — the gentler rules
- 15. Document Walkthrough — an abusive collection letter, annotated
- 16. Predator Watch — abusive tactics and fake-collector scams
- 17. If this already happened to you
- 18. The recourse stack — where to turn in 2026
- 19. Most common questions
- 20. Check yourself — the collection-response planner
- Glossary — the terms this lesson introduced
Responding to Debt Collection
The calls won't stop and you're not even sure you owe it. This is the FDCPA and the off switch: who a collector can (and can't) be and what they can't do to you, the validation letter that pauses collection until they prove the debt is real, Regulation F's modern rules (the 7-in-7 call cap, the limited-content message, the time-barred ban), the written cease-communication letter, how not to accidentally revive an old debt, and how to settle without a trap — with an honest read of what actually protects you in 2026.
What you'll learn
- Tell who is actually calling — a third-party collector, a debt buyer, or the original creditor — and know why that decides your rights, because the Fair Debt Collection Practices Act (FDCPA) governs collectors and debt buyers but generally not a creditor collecting its own debt in its own name.
- Name what a collector cannot do: contact you before 8 a.m. or after 9 p.m., at work once told to stop, or through third parties; harass you; lie about the amount or legal status of the debt; or threaten arrest for a debt you can't be jailed over — and know that for most private debt they must sue and win before garnishing anything.
- Make the first move the right move — validate, don't pay: read the validation notice the collector must send, dispute the debt in writing within 30 days, and force it to cease collection until it mails real verification — distinguishing a proper itemized verification from the bare printout many debt buyers send.
- Use Regulation F's 2021 rules: the 7-in-7 telephone-call cap, the email/text opt-out and the limited-content voicemail, and the ban on suing (or even threatening to sue) on a time-barred debt.
- Turn off the contact with a written cease-communication letter — understanding exactly what it does and doesn't do — and avoid the revival trap, where a single payment or written promise on an old debt can restart the statute of limitations, while keeping that clock separate from the seven-year credit-reporting clock.
- Resolve a charged-off debt on your terms: run the settlement math, treat pay-for-delete as the risky, non-guaranteed tactic it is, get every term in writing, and understand the 1099-C tax angle (recap) and the gentler rules for medical debt (recap, forward to L39).
- Report abuse without shame and climb the recourse stack — the collector, your state Attorney General and regulator, the CFPB (with its honest 2026 caveat), the FTC, and a consumer attorney who can win you statutory damages plus fees — knowing your rights hold in law even where federal enforcement has been cut.
Opening
The lesson header for Loans Lesson 38, Responding to Debt Collection, listing what you will be able to do by the end — know your rights under the Fair Debt Collection Practices Act and who a collector can and can't be; validate first and send the letter that pauses collection until the collector proves the debt is real, yours, and in time; use Regulation F's modern rules including the seven-calls-in-seven-days cap, the limited-content message, and the written cease-communication off switch; and resolve it without a trap by settling wisely, not reviving an old time-barred debt, and reporting abuse — followed by the two teaching personas the lesson follows, Gloria Simmons and Darnell Reed.
The phone rings again. It's the fourth time today, and it's not even noon. A voice says you owe $3,900, that this is your "final notice," that if you don't pay by 5 p.m. an officer will come to your job. Your stomach drops. You're not even sure you owe it — the amount doesn't match anything you remember, and the last time you heard about this account was years ago. And under all of it is the quiet, corrosive thought this lesson exists to answer: can they actually do this, and is there anything I can do back?
Let's answer the fear directly, at the very top, because it's the whole point of what follows: yes, you have rights, and yes, there is an off switch. A federal law — the Fair Debt Collection Practices Act, the FDCPA — was written specifically for this moment. It says a collector can't threaten you with arrest, can't lie about what you owe, can't call you at all hours or at your job after you've told them to stop, and — the single most important thing in this lesson — can't make you pay a cent until they prove, in writing, that the debt is real, that it's yours, and that the amount is right. The first move when a collector contacts you is never to pay. It's to validate. Make them prove it.
This lesson is about the response to collection — the stage after a debt has gone unpaid and been handed or sold to a collector, but before any lawsuit. (If you've actually been sued or had your wages garnished, that's a different, later stage — Lesson 35 — and this lesson will point you there. Recognizing predatory lenders on the way in is Lesson 37, the one just before this. Here, the debt already exists and the calls have already started; the question is what you do now.) We'll build the answer in the order you'd actually use it: figure out who is calling and whether the FDCPA even covers them; learn what they're forbidden to do; send the validation letter and read what comes back; use Regulation F's modern rules to cap the calls; flip the off switch; avoid the trap that accidentally revives an old debt; and, if you do owe it, resolve it on your terms without stepping into a new hole.
Two people carry the lesson. Gloria Simmons — 59, a retail supervisor in Birmingham, Alabama, earning about $40,000 a year — is dealing with the aftermath of a hard stretch: roughly $32,000 in medical debt after surgery, some of it now in collections, and a $4,800 credit-card balance that was charged off and sold to a debt buyer that's now calling. Her arc is the calm, correct sequence: validate the debt, dispute it, don't accidentally restart the clock, and settle only if and when it makes sense. Darnell Reed — rebuilding a 580 credit score, working a warehouse job in Memphis — carries the other half: a genuinely abusive collector on his subprime debts, the kind that threatens and harasses and breaks the law, and how he documents the violations and turns them into leverage.
One honest note about 2026 that runs under the whole lesson, and it's reassuring rather than the opposite: the law here has not changed. The FDCPA and Regulation F are fully in force, and so are the state laws that back them. What has changed is federal enforcement — the Consumer Financial Protection Bureau has been sharply cut back, which we'll be honest about wherever it comes up. But your rights don't depend on the CFPB choosing to enforce them. A validation demand, a cease letter, and — if a collector breaks the law — a lawsuit for statutory damages are things you can do yourself, and they work regardless of which agency is watching. The goal by the end is concrete: when that call comes, your first move isn't panic. It's the playbook. Let's start with the most useful question you can ask about the voice on the phone — who is it, really? That's §1.
1. Who's calling — collector, debt buyer, or the original creditor
Before you learn a single right, learn this: your rights depend on who is contacting you, because the FDCPA — the federal law that does most of the protecting in this lesson — does not cover everyone who might call about a debt. It covers debt collectors. So the first question, always, is whether the voice on the phone is one. Three kinds of entity can contact you about a debt, and they don't all fall under the same rules:
A two-column map answering who is calling and whether the Fair Debt Collection Practices Act covers them. The left column, covered by the FDCPA, lists three kinds of third parties: a third-party collection agency, meaning a company hired to collect the debt for a fee; a collection law firm that regularly collects debts; and a debt buyer that bought your charged-off account for pennies, such as Gloria's Crestline. The right column, generally not covered, is the original creditor collecting its own debt in its own name, though state law may still apply. The pivot: a personal debt, in default, chased by someone other than your original lender equals a covered debt collector. Gloria's $4,800 card was charged off and sold, so the debt buyer is squarely covered and the full toolkit applies.
The map's whole point is the line down the middle. On the covered side sit the entities the FDCPA was written to control. A third-party collection agency — a company the original creditor hires to chase the debt for a fee — is the classic debt collector. A collection law firm that regularly collects debts is one too. And a debt buyer — a company that purchases charged-off debts for pennies on the dollar and then collects on its own account — is generally covered as well, which matters enormously for Gloria, because her $4,800 card was sold to exactly this kind of buyer. The law defines a "debt collector" (in 15 U.S.C. § 1692a(6)) two independent ways: a business whose principal purpose is collecting debts, or anyone who regularly collects debts owed to another. Either one alone is enough. A 2017 Supreme Court case, Henson v. Santander, held that a debt buyer collecting a debt it now owns isn't automatically covered under the second prong (it's collecting for itself, not "another") — but the Court expressly left the first prong alone, and lower courts have since held that a company whose principal purpose is buying and collecting defaulted debt is a debt collector under that prong even if it hires others to do the calling. In plain terms: the debt buyer chasing Gloria is a covered debt collector, and the full FDCPA applies to it.
On the other side of the line sits the crucial exception: the original creditor collecting its own debt, in its own name. When your credit-card bank's own in-house department calls about a balance you owe that bank, the FDCPA generally does not apply, because the bank isn't a third party collecting someone else's debt — it's the creditor collecting its own. This isn't a loophole so much as a boundary of the statute, and it has a practical consequence worth stating plainly: the validation notice, the cease-communication right, the 7-in-7 call cap, and the time-barred ban you're about to learn are FDCPA and Regulation F protections, so against a true first-party creditor they may not apply as a matter of federal law. You're not defenseless there — your state almost certainly has its own debt-collection law (California's Rosenthal Act, for example, extends most FDCPA-style rules to original creditors), and the federal ban on unfair, deceptive, or abusive practices still reaches large companies — but the specific tools in this lesson are aimed at collectors and debt buyers. So the practical tell is simple: if a company other than your original lender is contacting you, or your debt has been charged off and sold, you're almost certainly dealing with a covered debt collector, and everything that follows applies.
One more distinction sharpens the picture, because it explains why the same company can be covered on one account and not another: the status of the debt when the company got it. The FDCPA hinges partly on default. A company that takes over a debt that was already in default (a collector or a debt buyer) is treated as a collector; a company that started servicing the loan while it was current (a mortgage servicer that took over a loan in good standing, say) is treated more like a creditor. Gloria's $4,800 card was long past due — charged off — before the debt buyer ever bought it, which is exactly why that buyer is squarely a debt collector under the Act. Two other things the law fixes here, worth naming because they define the whole field: the FDCPA protects a "consumer," meaning a natural person who owes or is said to owe the debt (not a business), and it applies only to a "debt" incurred for personal, family, or household purposes — your card, your medical bill, your car loan — not to a business debt. So the boundary is: a personal debt, in default, being collected by someone other than your original creditor. That's the collector this lesson arms you against. With the who settled, the next turn is the what — the specific things the law forbids that collector from doing. That's §2 and §3.
2. The FDCPA: you have rights, and you have an off switch
Step back for one paragraph and see the shape of the whole protection, because it's genuinely reassuring and it organizes everything ahead. Congress passed the Fair Debt Collection Practices Act in 1977 (it lives at 15 U.S.C. § 1692 and following) for a simple reason it stated out loud: abusive debt collection was widespread, and it caused real harm — bankruptcies, marital breakdown, job loss, invasions of privacy. So the law does four things, and it's worth holding them as a set, because the rest of this lesson is just each one in detail.
- It limits how, when, and where a collector can contact you — no calls before 8 a.m. or after 9 p.m., no calls at work once you've said stop, no telling your neighbors your business (§3).
- It bans abusive and dishonest tactics — no harassment, no threats of arrest you can't be arrested over, no lying about what you owe (§3).
- It gives you the right to make them prove the debt — the validation notice and your 30-day dispute right, which pauses collection until they verify (§4–§7).
- It gives you an off switch and a remedy — the right to tell them in writing to stop contacting you (§12), and the right to sue for statutory damages if they break the law (§16, §19).
Notice what that list does to the balance of power. Before you knew any of it, the collector held every card: it knew the rules and you didn't, so a bluff ("we'll have you arrested") or a lie ("you owe $3,900") worked because you had no way to test it. Every item above is a way to test the collector — to make it operate on the record, in writing, within limits it can be sued for breaking. In 2021 a federal rulebook called Regulation F (§8–§11) modernized all of this for phones, emails, and texts, adding hard, countable limits like the 7-in-7 call cap. And here's the part that matters most in 2026: these are your rights whether or not any agency is enforcing them, because most of them are things you exercise yourself — a letter you send, a demand you make, a lawsuit you (or an attorney working on contingency) can file. The collector's biggest advantage was always that you didn't know the rules. This lesson removes that advantage. The first and most powerful rule is the one about what they simply cannot do — that's §3.
3. What a collector can't do — the rules that protect you
The FDCPA draws hard lines around a collector's behavior, and knowing them turns a frightening call into a checklist you can run in real time. The prohibitions fall into four buckets — when and how they contact you, harassment, lies, and unfair tactics — and each maps to a section of the statute. Here they are, the way to hold them:
A reference card titled “What a collector can't do,” summarizing the conduct the Fair Debt Collection Practices Act bans across four sections: contact limits under section 1692c (no calls before 8 a.m. or after 9 p.m. local time, no calls at work once forbidden, no discussing your debt with third parties, and going through your attorney once you are represented); harassment under 1692d (no repeated calls to annoy, no threats of violence, no obscene language, no published debtor lists); lies and false statements under 1692e (no threatening arrest since you cannot be jailed for a consumer debt, no impersonating an attorney or government agency, no misrepresenting the amount owed, and no threatening to sue on a time-barred debt); and unfair practices under 1692f (no unauthorized fees or interest and no threatening to take property they have no right to) — closing with the reassuring floor that, for ordinary private debt, a collector cannot garnish your wages or bank account without first suing you and winning, with narrow exceptions for federal student loans, IRS taxes, and child support.
Start with contact — when, where, and through whom (15 U.S.C. § 1692c). A collector may not call you at a time or place it knows is inconvenient, and the law sets a default window: no contact before 8:00 a.m. or after 9:00 p.m. your local time. (Note the exact edges, because collectors count on your not knowing them: 8:30 p.m. is allowed; 9:15 p.m. is not. A call at 6:40 a.m. or 9:50 p.m. is a violation on its face.) It may not contact you at work once it knows — or has reason to know — that your employer prohibits such calls, so telling a collector "don't call me at the warehouse, they don't allow it" makes further work calls illegal. Once you're represented by an attorney for the debt, the collector must go through the lawyer, not you. And it may not talk about your debt to third parties — your neighbors, your family, your boss. It can contact other people only to find your location (your address or phone), and even then it can't reveal that you owe a debt or that it's a collector. When Darnell's collector announces to his supervisor that he owes money, that's not just rude — it's a § 1692c(b) violation.
Second, harassment and abuse (§ 1692d). A collector may not engage in conduct whose natural consequence is to harass, oppress, or abuse — and the statute lists examples: threats of violence, obscene or profane language, publishing a "deadbeat" list of people who owe, and — the modern one — calling repeatedly or continuously with intent to annoy. That last item is exactly what Regulation F's 7-in-7 cap (§9) puts a countable number on. The point of this bucket is that the manner of collection is regulated, not just the content: a collector can't wear you down by ringing your phone twenty times a day even if every word it says is technically true.
Third — and this is the bucket that does the most damage when people don't know it — false or misleading representations (§ 1692e). A collector may not lie, and the law is specific about the lies collectors reach for. It may not falsely threaten arrest or imprisonment. This is the big one, so let's kill the fear directly: you cannot be arrested or jailed for failing to pay a consumer debt. There is no debtors' prison in the United States for owing a credit-card balance, a medical bill, or a car loan. A collector who says "an officer will serve you" or "you'll be charged with fraud" to scare you into paying is committing a federal violation, full stop. A collector also may not falsely imply it's an attorney or a government agency, may not misrepresent the amount you owe (inflating a $2,000 debt to $3,900 with bogus fees is a § 1692e violation), and may not misrepresent the legal status of the debt — for instance, threatening to sue on a debt too old to sue on (§11). The theme is truth: the collector must be honest about who it is, how much you owe, and what it can actually do.
Fourth, unfair practices (§ 1692f) — a catch-all against tactics that aren't quite lies but are still abusive: tacking on fees or interest the original agreement and state law don't authorize, depositing a post-dated check early, or threatening to take property it has no right to take. And that leads to the single most important thing to understand about a collector's real power over an ordinary unsecured debt, because it's the fact that defuses most of the fear: for a private consumer debt, a collector generally cannot take your wages or your bank account unless it first sues you and wins a court judgment. Garnishment is not something a collector can just do by calling; it's the end of a legal process (Lesson 35) that starts with a lawsuit you'd be served with and could answer. So "we'll garnish your paycheck tomorrow" from a collector that hasn't sued you is, again, a misrepresentation. There are real exceptions worth knowing so you're not blindsided the other way: a few debts can be collected administratively without suing you first — federal student loans, federal taxes, and child support can garnish wages, and can even take up to 15% of a Social Security or disability check, without a court judgment. But for the ordinary card, medical, or private debt this lesson is about, no lawsuit means no seizure. That asymmetry — they can call, but they can't take without suing — is the ground under everything that follows. Knowing what a collector can't do is the shield; the sword is the move in §4 — making them prove the debt exists at all.
4. Validate, don't pay — the first move
Here is the instinct to unlearn: when a collector calls about a debt, the natural urge is either to pay it to make the calls stop, or to argue about it on the phone. Both are mistakes. The right first move — every time, before a dollar changes hands — is to validate: to make the collector prove, in writing, that the debt is real, that it's yours, that the amount is right, and that this particular collector has the right to collect it. This isn't a stalling tactic; it's a formal right the FDCPA hands you (in 15 U.S.C. § 1692g), and it exists precisely because a shocking amount of what collectors chase is wrong — wrong amount, wrong person, already paid, already settled, or bought as a bare line in a spreadsheet with no proof behind it.
Why is "don't pay first" so important, when paying feels responsible? Three reasons, each of which the rest of this lesson develops. First, you might not owe it — collections are riddled with errors and mistaken-identity, and debt buyers routinely try to collect debts they can't actually document. Second, paying can waive your leverage: once you pay or even acknowledge the debt, your clean shot at disputing it is weaker. Third — and this is the trap that catches careful people — on an old debt, a payment or even a promise to pay can restart the statute of limitations (§11), turning a debt too old to sue on back into one a court can enforce. So the disciplined sequence is always the same: validate, confirm, then decide. Paying an unvalidated debt is signing a check to a stranger who says you owe them money. You'd never do that in any other context; a collector's call shouldn't be the exception.
The mechanics are built into the law and they're generous to you. Within five days of first contacting you (or right in that first contact), a collector must send you a validation notice — a written statement of the debt. From when you receive it, you have 30 days to dispute the debt in writing. And here's the lever that makes the whole thing bite: if you dispute in writing within that window, the collector must stop collecting — no more calls, no more letters, nothing — until it mails you verification of the debt. It can't keep pressuring you while it goes looking for proof; the collection freezes until the proof arrives. For a debt buyer holding a spreadsheet and no documents, that freeze can be permanent, because it may not be able to produce real verification at all. The next section walks the actual document Gloria receives — the validation notice — field by field, because reading it correctly is what makes all of this usable. That's §5.
5. Document Walkthrough — the validation notice, field by field
Where and what, plus mode. A few days after the first call, Gloria gets an envelope from Crestline Asset Recovery, the debt buyer that now owns her $4,800 charged-off Summit Bank card. Inside is the validation notice — the document the FDCPA and Regulation F require, and since November 30, 2021, it follows a modern format the CFPB spells out in a model form (Model Form B-1, under 12 CFR § 1006.34). Collectors who use the model form get a legal safe harbor, so most of what you'll receive looks like this. It arrives by mail (the required disclosures can also be delivered electronically if you've agreed to that). Here is the whole thing:
A sample Regulation F validation notice sent to Gloria Simmons by the debt buyer Crestline Asset Recovery about a $4,800 charged-off Summit Bank credit-card account. Modeled on the CFPB's one-page Model Form B-1, it shows the itemization date of January 15, 2026 with the amount broken out from that reference date — $4,120 owed then, plus $520 interest, plus $360 fees, minus $200 in payments and credits, equalling the current $4,800 — the original creditor Summit Bank and the current creditor Crestline, and a plain-language rights section highlighting that Gloria has until August 14, 2026 to dispute the debt in writing, which forces the collector to stop collecting until it mails verification. A tear-off form at the bottom lets her check boxes to dispute the debt, say it is not hers, or request the original creditor's name and address.
Read top to bottom, the notice tells one honest story, and the modern version is far more useful to you than the old one because it forces the collector to show its math. Take it field by field, in reading order.
The masthead and the "you're dealing with a collector" line. It names Crestline Asset Recovery, its address, and the notice date, and somewhere on it (the law requires this) is a statement that Crestline is a debt collector trying to collect a debt. What this does is confirm, in writing, that you're on the covered side of the §1 line — this is a debt collector, so the full FDCPA applies. Why it matters: it's the first thing that tells Gloria her validation and dispute rights are live here, and the collector saying so itself is the "mini-Miranda" the law requires. A legitimate collector identifies itself as one; a caller who won't is a red flag (§18).
The account information — original creditor, current creditor, reference number. It lists Summit Bank Visa as the original creditor and Crestline as the current creditor that now owns the debt, with a reference number. What this does is answer the two "whose" questions: whose debt was it, and who owns it now. Why it matters: the gap between those two names is the whole reason Gloria gets to demand proof of the chain of ownership (§7) — a debt buyer has to be able to show it actually bought this specific account, and naming Summit Bank as the original creditor is the thread she'll pull on. If the original creditor's name means nothing to her, that itself is a reason to dispute.
The itemization — the amount, built from a reference date. This is the part the 2021 rules added, and it's the most useful. Instead of just asserting a number, the notice states an itemization date — Jan 15, 2026 here — and the amount owed on that date ($4,120.00), then shows what's been added and subtracted since: interest ($520.00), fees ($360.00), and payments and credits (−$200.00), arriving at the total now owed, $4,800.00. The itemization date is one of five specific reference points the rule allows (the last statement date, the charge-off date, the last payment date, the transaction date, or a judgment date). What this does is make the $4,800 checkable rather than a bare claim: Gloria can see the balance is built from a starting figure plus interest and fees, not just typed in. Why it matters: every one of those add-ons is something she can challenge. Are the $360 in fees ones the original agreement and Alabama law actually allow (§ 1692f)? Is the $520 in interest legitimate? The itemization turns "you owe $4,800" into a set of specific claims she can test — and if the collector can't back up the interest and fees, the real number may be lower.
Your rights — the 30-day window and the cease-until-verified effect (the highlighted section). This is the off switch, printed on the page. It tells Gloria she can contact Crestline by a specific date — August 14, 2026 — to dispute the debt or to request the name and address of the original creditor, and that if she disputes in writing by that date, Crestline must stop collection until it mails verification. What this does is hand her the single most powerful move in the lesson, with a deadline attached. Why it matters, and where people go wrong: the 30-day clock runs from when she receives the notice, and the dispute must be in writing to trigger the freeze — a phone call saying "I don't think this is mine" does not stop collection; a mailed letter does. The date on the page (August 14) is her real deadline, and hitting it in writing is what converts her rights from theory into a collection freeze. Miss the 30 days and she can still dispute later, but she loses the automatic cease-until-verified effect. So the practical rule the highlight teaches: the moment this notice arrives, calendar that date and mail the dispute before it.
The tear-off dispute form. At the bottom is a detachable form with check-boxes: "This is not my debt," "The amount is wrong," "Other," "I want you to send me the name and address of the original creditor," and a line to enclose a payment. What this does is make disputing almost frictionless — Gloria can check a box, mail it certified, and she's exercised her right. Why it matters: the tear-off is deliberately easy because the law wants disputes to be usable, but notice what it can't do for her — a check in a box is a dispute, but to demand real verification (the itemized statement, the proof of ownership) she'll want to say so specifically, which is why §6 walks the fuller letter she sends. The form is the minimum; the letter is the maximum. One caution the form quietly teaches: the "I enclosed this amount" line is a payment prompt sitting right next to the dispute boxes — and on an old debt (§11), enclosing even a small payment can do real harm. Dispute; don't pay.
Read whole, the validation notice is not the collector's weapon — it's the collector handing Gloria the rulebook. It states the debt, shows the math, names both creditors, and prints her deadline and her freeze-collection right on the same page. Everything she needs to take control of the situation is in this one document; the only question is whether she uses it. The next turn is exactly how — the letter she sends back. That's §6.
6. The dispute letter you send — what to demand
The validation notice gives Gloria the right; the dispute letter is how she exercises it. Within the 30-day window, she mails Crestline a written dispute — and the difference between a good one and a throwaway is what it demands. A bare "I dispute this" is enough to trigger the freeze, but a well-built letter asks for the specific proof a debt buyer often can't produce, which is where the real leverage lives. Four things to demand, and the interactive planner at the end of this lesson (§20) will assemble the exact letter for her, pre-filled:
- The amount and an itemization — a copy of the last billing statement from the original creditor showing how the $4,800 was built from real charges, interest, and fees, not a number typed into a collector's system.
- The original creditor's name and address — which the FDCPA specifically entitles her to on written request, tying the debt back to Summit Bank.
- Proof it's her debt and Crestline owns it — account records with her name and account number, ideally the signed cardholder agreement, plus the chain of assignment showing Summit Bank sold this specific account to Crestline (often through one or more intermediaries).
- That collection cease until verification is mailed — stating she is disputing under 15 U.S.C. § 1692g and that all collection must stop until Crestline mails the verification, and asking that it not call her.
How she sends it is part of the move, not a detail. She mails it certified, with a return receipt, and keeps a copy. Why that matters: the certified receipt is proof of what she sent and when, which is exactly the evidence she'd need if Crestline ignored the dispute and kept collecting (itself a violation) — the paper trail is the whole point. She sends it in writing, not by phone, because only a written dispute triggers the § 1692g(b) freeze; a phone dispute doesn't. And she sends it before August 14, because inside the 30 days the dispute is automatic and self-executing — the collector must stop until it verifies. (The CFPB publishes free sample debt-collection letters at consumerfinance.gov that she can adapt; she doesn't have to draft it from scratch.) What comes back — the collector's response — is where the debt-buyer's weakness usually shows, and reading that response correctly is the other half of the centerpiece. That's §7.
7. Document Walkthrough — real verification vs a bare printout
Gloria mailed her dispute inside the window, so Crestline has to make a choice: produce verification, or drop the account. What it sends back — and whether that's actually enough — is where a debt buyer's paperwork gap becomes her leverage. Here's the contrast the whole validation strategy turns on:
A sample showing the difference between a proper debt-verification response and a bare printout after Gloria Simmons disputed her $4,800 debt-buyer account. A proper verification includes an itemized final billing statement from the original creditor Summit Bank, account records tying the debt to Gloria such as her name, address, and account number, and the chain of assignment proving Crestline actually owns the debt — Summit Bank sold it to a broker, which sold it to Crestline. By contrast, a bare printout — a single computer-generated line reading "Balance $4,800, debtor G. Simmons" with no documents — is what many debt buyers send. Courts are split on exactly how much detail counts as verification, but many require an itemized accounting rather than a bare line, and demanding real records often exposes the debt-buyer paperwork gap — a debt the collector can't document is one Gloria can keep disputing.
A proper verification — the top, highlighted panel — is what Gloria should demand and what actually settles the matter. It has three parts. First, an itemized statement from Summit Bank, the original creditor: the real last billing statement showing the $4,800 built from actual charges, interest, and fees, not a number regenerated by the collector. What this does is let her check the debt against reality; why it matters is that it's the difference between an assertion and evidence. Second, account records tying the debt to her — her name, address, and account number, and ideally the signed application or terms. What this does is prove it's her account and not a mixed-up file; why it matters is that mistaken-identity and mixed files are common, and this is what rules them out. Third, the chain of assignment — the paper trail (Summit Bank sold it to a broker, which sold it to Crestline) proving Crestline actually owns what it's collecting. What this does is establish Crestline's right to collect at all; why it matters is that a debt buyer that can't show it owns the account has no business collecting it.
The bare printout — the bottom panel — is what debt buyers frequently send instead: a single computer-generated line ("Balance $4,800, debtor G. Simmons, status open") with no statements, no signed agreement, and no chain of title. Here's the honest legal picture, because it's often overstated: courts are split on exactly how much detail counts as "verification." Some have accepted a fairly bare written confirmation of the amount the creditor claims; others (a stricter and, for consumers, better line of cases) require an itemized accounting showing how and when the debt was incurred, so the consumer can actually dispute it. So a bare printout isn't automatically fatal to the collector in every court — but it's weak, and it exposes the thing that matters most in practice: debt buyers often bought the account as a row in a spreadsheet with little or no underlying paperwork. When Gloria demands the itemized statement and the chain of title, a collector that doesn't have them may simply be unable to produce them — and a debt it can't document is one she can keep disputing, dispute to the credit bureaus, and refuse to pay. The verification demand doesn't magically erase a valid debt; what it does is separate the debts that are real and provable from the ones a buyer is chasing on faith.
So the field-by-field lesson of the response is this: don't accept the printout as "verification" just because it arrived on letterhead. Compare it against the three-part proper verification above, and if the itemization, the account records, or the chain of ownership is missing, say so in writing and keep disputing. For Gloria's card — a genuine debt she likely does owe — a proper verification may well come back, and then she's in the resolving stage (§13) with full information. But she got there the right way: she made them prove it first, which means whatever she does next, she's doing with the facts in hand instead of paying a stranger on a phone call. Now that the validation cycle is complete, we turn to the modern rulebook that governs the calls themselves while all this is happening — Regulation F. That's §8.
8. Regulation F — the modern rulebook
The FDCPA was written in 1977, for a world of landlines and letters. For decades it said collectors couldn't harass you "repeatedly" — but never put a number on it, so "how many calls is too many?" was left to arguments in court. In 2021 that changed. The CFPB issued Regulation F (it lives at 12 CFR part 1006 and took effect November 30, 2021), which implements the FDCPA and drags it into the era of cell phones, email, and text. Reg F doesn't replace your FDCPA rights — it sharpens them into countable, modern rules. Here's the shape of what it added:
A summary card of Regulation F, the Consumer Financial Protection Bureau's modern debt-collection rulebook at 12 CFR part 1006, effective November 30, 2021, which implements but does not replace the Fair Debt Collection Practices Act. It lays out four rules that turned vague protections into countable ones: first, the seven-in-seven call cap, under which more than seven countable phone calls in seven days about one debt is a presumed violation; second, the email and text rules and the limited-content message, requiring every electronic message to include a simple opt-out such as reply STOP and allowing a limited-content voicemail that reveals no debt; third, the modern validation notice, which uses an itemization date and the CFPB model form so the amount is checkable; and fourth, the time-barred ban, under which a collector must not sue, or even threaten to sue, on a debt past the statute of limitations. The takeaway is that Regulation F lets a complaint move from “they harassed me” to “they placed twelve calls in six days, which the rule presumes is a violation.”
Four pieces matter for you, and the next three sections take the big ones apart. First, a hard call-frequency cap — the famous "7-in-7" (§9) — that finally puts a number on "too many calls." Second, real rules for email and text, including a required, simple opt-out in every electronic message, plus the "limited-content message" a collector can leave without illegally revealing your debt (§10). Third, the modern validation notice you already met in §5 — the itemization date and the model form are Reg F's work. Fourth, an explicit ban on suing or even threatening to sue on a time-barred debt (§11). The through-line is that Reg F made the FDCPA's vague protections concrete and enforceable: instead of "they harassed me," you can now say "they placed twelve calls in six days about one debt, which Regulation F presumes is a violation." That precision is a gift to you, because precise rules are ones you can point to. Let's start with the one people ask about most — how often they're actually allowed to call. That's §9.
9. The 7-in-7 call cap
Regulation F answered the oldest question in debt collection — how many calls is too many? — with a countable rule (in 12 CFR § 1006.14(b)) that's worth memorizing, because it turns Darnell's flood of calls from something he has to endure into a documented violation he can act on. Here's exactly how it works:
An explainer of the seven-calls-in-seven-days cap under Regulation F, 12 CFR section 1006.14(b). There are two ways a collector runs into a presumed violation: Trigger A, placing more than 7 calls within any 7-day period about one debt; and Trigger B, placing any call within 7 days after a phone conversation about that debt. A danger-tinted call log shows Darnell's collector placing 12 calls in 6 days — Monday 6:40 a.m., 12:10 p.m., and 8:55 p.m.; Tuesday 7:30 a.m. and 1:00 p.m.; Wednesday 9:15 p.m.; Thursday 8:20 a.m. and 6:05 p.m.; Friday 7:10 a.m. and 2:30 p.m.; and Saturday 8:40 a.m. and 9:50 p.m. — so 12 is greater than 7, a presumed violation, and several calls fall before 8 a.m. or after 9 p.m. The nuances: these are rebuttable presumptions, not absolute bans; the cap is counted per debt, so three debts allow up to seven calls each; a voicemail counts as a call while an unconnected call does not; and the cap applies to phone calls only, not to texts or emails.
The rule has two independent triggers, and breaking either one is presumed to be illegal harassment. The first: a collector is presumed to violate the law if it places more than seven calls within any seven-consecutive-day period about a particular debt. The second, separate one: it's presumed to violate the law if it calls you within seven days after having actually spoken with you by phone about that debt. So after a real phone conversation, the collector has to wait a week before calling again — even if it's made only one call. Darnell's collector placed twelve calls in six days about a single debt; twelve is more than seven, so that's a presumed violation of the first trigger, and if any of those calls landed within a week of a conversation, it broke the second too. He doesn't have to prove he was harassed in some subjective sense — the count does the work.
Now the nuances, because they're where people misstate the rule and where it can cut both ways. These are rebuttable presumptions, not absolute bans — a collector staying under both limits is presumed to be complying, and one that exceeds them is presumed to be violating, but each can be overcome by evidence (for instance, if you consented to more calls). The cap is per particular debt — so a collector legitimately working three separate debts you owe could place up to seven calls on each without breaking the presumption, which is why "they can only call seven times a week" is an oversimplification; it's seven times per debt. (Federal student loans serviced under a single account number count as one debt for this.) What counts as a "call": a call that reaches your voicemail counts toward the seven; a call that gets a busy signal or an out-of-service tone doesn't connect and doesn't count. And crucially, the 7-in-7 cap applies only to telephone calls — not to texts, emails, in-person contact, or social media, which are governed by the separate rules in §10. The practical upshot for Darnell is concrete: keep a dated log of every call (time and date), because that log is the evidence. Twelve calls in six days, several before 8 a.m. or after 9 p.m., is a stack of documented violations — and §16 explains what each one is worth. The other frontier Reg F modernized is the inbox and the text thread, which have their own rules and one genuinely clever provision. That's §10.
10. Email, text, and the limited-content message
Collectors don't just call anymore — they email and text, and Regulation F wrote rules for that too. Two things are worth understanding: the opt-out you're owed in every electronic message, and a genuinely clever provision called the limited-content message that explains those cryptic "please call us" voicemails you may have gotten.
An explainer of the limited-content message under 12 CFR section 1006.2(j) — a voicemail a debt collector can leave that reveals nothing about a debt. It shows a sample transcript, “This message is for Gloria. Please call Jordan back at (205) 555-0100,” then contrasts what such a message may contain — your name as a greeting, a request to call back, the name of a person to ask for, a call-back phone number, and a business name that does not indicate debt collection — against what it may not contain — anything about a debt, an amount owed, a company name that reveals it's a collector, or the required ‘this is a debt collector’ language. It closes by explaining that because the message reveals nothing about a debt it isn't legally a ‘communication,’ so it can't illegally disclose your debt to whoever hears the voicemail, and that the two things people get wrong are that it has no opt-out and that the required name is the collector's contact person, not necessarily you.
The opt-out first, because it's a right you can use immediately. Every email or text a collector sends you must include a clear and simple way to opt out of that channel — and it has to be genuinely easy: replying "STOP" to a text, or clicking a labeled opt-out link in an email. The collector can't make you call in or mail a form to stop the texts, and it can't charge you a fee to opt out. So if a collector is texting you, "STOP" is a one-word off switch for that channel (distinct from the full written cease-communication letter in §12, which stops all contact). One more timing detail Reg F fixes: the same 8 a.m.-to-9 p.m. window applies to emails and texts, and it's measured at the moment the collector sends the message, not when you happen to read it — so a text sent at 8 a.m. your time is fine even if your phone buzzes it to you at 2 a.m.
Now the limited-content message, which is subtler and worth understanding because it protects your privacy in a way that isn't obvious. The old problem: a collector leaving a voicemail was in a bind. If it said "This is a debt collector calling about your overdue account," and someone else heard the voicemail, the collector had just revealed your debt to a third party — an FDCPA violation. So collectors either left vague, confusing messages or none at all. Regulation F created a safe category (in 12 CFR § 1006.2(j)): a limited-content message a collector can leave that, by design, reveals nothing about a debt — so it's not legally a "communication" at all, which means it can't violate the third-party-disclosure rule and doesn't have to include the "this is a debt collector" language. What it may contain is tightly limited: your name (as a greeting), a request that you call back, the name of a person to ask for, a phone number, and little else — and notably, the business name it gives can't be one that indicates it's a debt collector. What it may not contain is anything about a debt, a company name that gives away that it's collections, or an amount. So when you get a voicemail that just says "This message is for Gloria; please call Jordan back at this number" with no company you recognize and no mention of money — that's a limited-content message, a collector deliberately staying inside the safe harbor. It's not sinister; it's the rule working. (Two things people get wrong: a limited-content message does not contain an opt-out, and the "name" the rule requires is the collector's contact person, not necessarily you.) With the modern contact rules covered, we reach the one move a collector is flatly forbidden to make on an old debt — and the trap that sits right next to it. That's §11.
11. Time-barred debt and the revival trap — two clocks
Some of the debts collectors chase are old — years old — and age changes everything about what a collector can legally do, and about the one mistake that can undo your protection in a single phone call. To see it clearly you have to hold two separate clocks in your head at once, because conflating them is the classic, costly error:
A diagram of the two separate clocks that run on the same defaulted debt after a March 2024 default. Clock one, the statute of limitations, is the deadline for a collector to sue you — roughly three to six years under state law, about three years in Alabama, so it runs from the March 2024 default to about March 2027, after which the debt is time-barred; as of July 2026 it is still within the window, so Gloria's card is still suable. Clock two, the Fair Credit Reporting Act credit-reporting clock, governs how long the default stays on your credit report — about seven years plus 180 days from the original date of first delinquency, running from March 2024 to about September 2031, when it falls off, and it cannot be reset by paying or reselling because re-aging is illegal. The diagram then warns of the revival trap: on an old debt, a partial payment or a written promise to pay can restart clock one in many states, reviving a debt too old to sue on, so a fifty-dollar good-faith payment pitch can revive the whole balance; check your state's statute of limitations and revival rules before you pay a cent, and remember that paying never shortens clock two.
Clock one is the statute of limitations — the state-law deadline on how long a collector has to sue you. It varies by state and by the type of debt, but it's commonly in the range of three to six years, running from your last activity or default on the account. Once it runs out, the debt is "time-barred": the collector can no longer win a lawsuit to force you to pay. And Regulation F makes this a hard line — under 12 CFR § 1006.26, a collector must not sue, or even threaten to sue, on a time-barred debt. That's a strict rule: the collector violates it whether or not it knew the debt was too old (the CFPB deliberately dropped a proposed "knew or should have known" softener from the final rule). What this clock does not do is erase the debt — time-barred means unsuable, not gone. A collector can still call or write asking you to pay a time-barred debt; it just can't take you to court over it, and can't threaten to. (One thing Regulation F considered but did not adopt: a mandatory federal disclosure telling you a debt is time-barred. That was proposed in 2020 but never finalized, so there's no guaranteed federal warning label — though some states, like California and New York, require their own. Don't count on the collector to tell you a debt is too old; that's your homework.)
Clock two is the FCRA credit-reporting clock — how long the debt can stay on your credit report. Under the Fair Credit Reporting Act, most negative marks fall off after about seven years, measured from the date of first delinquency (the original missed payment that was never cured). This clock is independent of the first: it starts from the same original default but runs a different length and does a different thing. For Gloria's $4,800 card, the date of first delinquency was March 2024, so it drops off her credit report around September 2031 (seven years plus 180 days) — and critically, that date cannot be reset. A collector that re-reports the debt with a newer "delinquency date" to keep it on your report longer is committing illegal re-aging; the seven-year clock runs from the original default no matter how many times the debt is sold or when you pay it.
Now the trap, which is where the two clocks collide and where careful people get hurt. In many states, making a partial payment on an old debt — or even signing a written promise to pay it — can restart the statute-of-limitations clock, reviving a debt that was too old to sue on and making it enforceable in court all over again. So a collector calling about a decade-old debt who says "just make a good-faith payment of $50 to show you're trying" may be setting exactly this trap: that $50 could revive the whole balance. This is why the §4 rule — never pay or promise to pay before you validate and check the age — is not caution for its own sake; it's protection against reviving a debt you'd otherwise never have to worry about. The precise mechanics vary by state (some revive only on a written acknowledgment, others on any partial payment), so the safe, portable rule is: on any old debt, check your state's statute of limitations and its revival rules before you pay a cent or promise anything. And keep the clocks straight — paying an old debt does not shorten the seven-year credit-reporting clock (that runs from the original default regardless), and letting the reporting clock lapse does not mean you can't be sued if the debt was revived. Gloria's charged-off card, by the way, is not yet time-barred — in Alabama it's still within the window to be sued, which is exactly why validating and resolving it deliberately (rather than ignoring it) matters, and why the next stage if she doesn't is Lesson 35. Sometimes, though, the goal isn't to resolve the debt at all — it's simply to make the calls stop. That's the off switch in §12.
12. The off switch — the cease-communication letter
Sometimes what you need most is silence — the calls to stop so you can think, breathe, and deal with the debt on your own terms. The FDCPA gives you that switch directly: under 15 U.S.C. § 1692c(c), you can send a collector a written notice telling it to cease communication with you, and once it receives that letter, it must stop contacting you. This is powerful, and it's underused because people don't know it exists. But it comes with a precise scope, and using it well means understanding exactly what it does and — just as important — what it doesn't.
A sample cease-communication letter that Darnell Reed sends by certified mail to the debt collector Apex Recovery Group about the debt referenced #AP-2231. Citing the Fair Debt Collection Practices Act, 15 U.S.C. section 1692c(c), the letter demands in writing that Apex stop all communication about the debt, after which the collector may only contact him to confirm it is stopping or to say a specific remedy such as a lawsuit may be pursued. The specimen explains that a cease letter does make the calls stop but does not erase the debt, stop a lawsuit, or stop credit reporting, and it warns that silencing the collector also closes the negotiation channel and can nudge the collector toward suing — so disputing in writing, which freezes collection anyway, is often the better first move.
What the cease letter does: once the collector receives your written notice to stop (it must be in writing — a phone request doesn't count), it may contact you only in three narrow situations. It can send one communication acknowledging it will stop. It can tell you that it or the creditor may pursue a specific remedy it ordinarily uses. And it can notify you that it is actually invoking a specific remedy — for instance, that it's filing a lawsuit. Outside those, the calls and letters have to end. So a cease letter genuinely turns off the harassment; for Darnell, buried under twelve calls in six days, mailing this letter (certified, keeping a copy) is a real, immediate off switch.
What the cease letter does not do — and this is the part you must weigh before sending it: it does not erase the debt, it does not stop a lawsuit, and it does not stop the debt from being reported to the credit bureaus. You still owe what you owe; the debt is just quieter. And here's the tactical subtlety, because a cease letter isn't always the right move: silencing the collector also closes off the channel you'd use to negotiate a settlement or dispute the debt, and — since the letter can't stop a lawsuit — it can actually nudge a collector toward its remaining legal option, which is to sue you. So a cease letter is best thought of as a tactical choice, not a cure. It's the right move when the calls are abusive and you have no interest in talking to that collector (or you're routing everything through validation and writing). It's the wrong move if you want to resolve or settle the debt, where you need the line of communication open. The cleanest use is often to pair it with the validation dispute (§4–§7): dispute in writing, which freezes collection anyway, and tell the collector not to call — you get the quiet without giving up your leverage. And if the collector ignores a valid cease letter and keeps calling, that's another FDCPA violation, stacked onto whatever else it's done (§16). Speaking of which — for a debt you do owe and have validated, the question becomes how to actually resolve it without stepping into a new hole. That's §13.
13. Resolving it — settlement, pay-for-delete, and the tax angle
Suppose the debt is real, it's yours, the collector verified it, and it's still within the statute of limitations — Gloria's $4,800 card is exactly this. Now the goal shifts from disputing to resolving, and here you have genuine leverage, because of a fact most people never learn: a debt buyer paid pennies on the dollar for your account. Charged-off credit-card debt commonly sells for something like four to eight cents per dollar, so Crestline may have paid roughly $300–$400 for Gloria's $4,800 account. That changes the negotiation completely — anything Gloria pays above a few hundred dollars is profit for Crestline, which is why debt buyers routinely accept far less than the full balance. Here's the range:
A settlement-leverage chart for Gloria Simmons's $4,800 charged-off credit-card account, which a debt buyer purchased for roughly $336 — about seven cents on the dollar — so anything it collects above that cost is profit. Four rungs, each with a horizontal bar sized to what Gloria pays out of $4,800: paying in full costs her $4,800, nets the buyer plus $4,464, and forgives nothing; settling at 50 percent costs $2,400, nets the buyer plus $2,064, and forgives $2,400; settling at 40 percent costs $1,920, nets the buyer plus $1,584, and forgives $2,880; settling at 30 percent costs $1,440, nets the buyer plus $1,104, and forgives $3,360. A note advises that debt buyers commonly accept 30 to 50 percent and to get it in writing before paying — that it settles the account in full and how it is reported. A tax-angle line recaps that forgiving $600 or more can trigger a 1099-C, so a 40 percent settlement forgiving $2,880 would be about $346 of tax at Gloria's 12 percent rate, but her roughly $25,000 insolvency lets Form 982 exclude it, for $0 of tax.
The ladder shows the trade-off in dollars. Paying the full $4,800 uses none of Gloria's leverage — it hands Crestline roughly $4,500 in profit on a debt it bought for a few hundred. A lump-sum settlement is where the leverage lives: debt buyers commonly accept 30–50% of the balance to close an account, so Gloria might settle at 50% ($2,400), 40% ($1,920), or, aggressively, 30% ($1,440) — and at 30%, Crestline still roughly quadruples what it paid, so it's a deal that can work for both sides. The mechanics matter as much as the number: confirm the debt is validated first, offer a specific lump sum (or a short series of payments), and — this is non-negotiable — get the agreement in writing before you send a single dollar. The written agreement should state that the payment settles the account in full, how the account will be reported, and that no remaining balance will be sold or pursued. Paying on a verbal promise is how people pay and then get chased for the "remaining" balance anyway.
Two things people ask about deserve honest answers. First, pay-for-delete — asking the collector to delete the account from your credit report in exchange for payment. It sounds ideal, and you can ask, but treat it as a long shot, not a plan: the CFPB doesn't endorse it, and it conflicts with the credit bureaus' furnishing agreements and the collector's duty to report accurately, so many collectors simply refuse. If a collector does agree, get it in writing before you pay — a verbal pay-for-delete promise is worth nothing. And here's the reassuring part that lowers the stakes on deletion: under the newer credit-scoring models (FICO 9 and 10, and VantageScore 3.0 and 4.0), a paid or settled collection is ignored entirely, so paying it off helps your score under those models even without deletion. The catch is that the still-dominant older model, FICO 8, does count a paid collection (over $100), which is why deletion still has some value — but it's far less make-or-break than it used to be. Second, how it's reported: settling for less than the full balance is still a negative mark, reported as "settled" or "paid for less than the full balance," and it stays on your report for the seven years from the original default (§11) — paying does not reset that clock. "Paid in full" reads slightly better than "settled," but neither deletes the mark. Settling saves money now; it isn't a credit eraser.
Finally, the tax angle, which surprises people and which we'll only recap because Lesson 31 covers it in full. When a collector forgives $600 or more of a debt — which is exactly what a settlement does — it can issue a Form 1099-C, and the forgiven amount is generally treated as taxable income. If Gloria settles her $4,800 at 40% ($1,920), the forgiven $2,880 could show up as income; at her roughly $40,000 income (a 12% marginal rate), that would be about $346 in tax. But here's the crucial recap: the insolvency exclusion (IRS Form 982) erases that tax to the extent your debts exceeded your assets when the debt was canceled — and Gloria, as Lesson 31 worked out, was insolvent by about $25,000, so her forgiven $2,880 is fully excluded and she owes $0 in tax on it. The lesson: a 1099-C is a form to address, not automatically a bill to pay, and for someone deep enough in debt to be settling in the first place, the insolvency exclusion very often wipes out the tax. So Gloria's clean path is: validate, confirm, settle in writing at 30–50%, expect a 1099-C, and clear it with Form 982. One category of debt in collections plays by gentler rules, though, and it's a big part of Gloria's picture — medical debt. That's §14.
14. Medical debt in collections — the gentler rules
A large share of Gloria's trouble — about $32,000 of it — is medical debt, some now in collections, and medical debt plays by notably gentler rules than a credit-card balance. This is a recap and a signpost: Lesson 39 is devoted to medical debt, so here we cover just what a collector on a medical bill can and can't leverage, and why your first moves are different. Here's the landscape:
A recap card on why medical debt in collections follows gentler rules — the deep dive is Lesson 39. First, attack the bill itself before treating it like other debt: request an itemized bill because medical billing errors are common; apply for charity care, since nonprofit hospitals must offer financial assistance under IRC section 501(r), which can slash or erase the bill even after it's in collections; and check the No Surprises Act of 2022, under which surprise out-of-network or emergency-room bills may be capped at in-network rates. On your credit report, voluntary bureau policies still in effect in 2026 mean paid medical collections are removed, an unpaid one faces a 365-day one-year delay before it appears, and medical collections under 500 dollars are never reported. A reality check warns that the CFPB rule that would have removed most medical debt from credit reports was vacated on July 11, 2025 and is not in effect — only the voluntary bureau policies remain, some state protections are contested, and the FDCPA rights in this lesson still fully apply: validate, dispute, cease.
Start with the moves that come before you ever treat a medical bill like other debt. First, request an itemized bill — medical billing errors are common, and a surprising share of "debt" dissolves under itemization (a duplicate charge, a service not rendered, a coding error). Second, apply for charity care: nonprofit hospitals are required by federal law (Internal Revenue Code § 501(r)) to have a written financial-assistance policy, and if Gloria qualifies by income, it can slash the bill dramatically or erase it entirely — and it can apply even after the bill went to collections. Third, if the bill came from a surprise out-of-network situation — an ER visit, or an out-of-network doctor at an in-network hospital — the No Surprises Act (effective 2022) may cap what she owes at in-network rates. These are the medical-specific escape hatches that don't exist for a credit-card debt, and they're why the first response to a medical collection is to attack the bill itself, not to negotiate the collector.
Then the credit-reporting side, where medical debt is treated more gently than other debt — with an important 2026 caveat about what's actually in force. The three nationwide credit bureaus (Equifax, Experian, TransUnion) adopted voluntary policies, still in effect in 2026, that: remove paid medical collections entirely; wait a full year (365 days) before any unpaid medical collection appears on your report at all; and never report medical collections under $500. So Gloria typically has a year before a medical collection can touch her credit, small ones never appear, and paying one removes it — a genuinely softer regime. The caveat, stated honestly because guidance here has whipsawed: the CFPB finalized a rule in early 2025 that would have gone much further and removed most medical debt from credit reports entirely — but a federal court in Texas vacated that rule on July 11, 2025, so it is not in effect in 2026. Don't rely on "medical debt is off credit reports now" — that rule is dead; only the voluntary bureau policies above remain. (There's also an unsettled fight over whether some states' own medical-debt reporting bans survive, so state protections are contested.) The bottom line for a collector on Gloria's medical debt: the FDCPA rights in this whole lesson still apply — validate it, dispute it, cease-letter it — but before any of that, work the bill itself with an itemized statement and a charity-care application, because medical debt is the most forgivable debt there is, and Lesson 39 goes deep on it. Now, the sharper edge of collection — the abusive collector, walked in full. That's §15.
15. Document Walkthrough — an abusive collection letter, annotated
Everything so far assumes a collector operating roughly within the rules. Darnell isn't so lucky — the outfit chasing his subprime debts, "Apex Recovery Group," is the abusive kind, and its letter and calls are a near-checklist of FDCPA and Regulation F violations. Walking it line by line does two things: it teaches you to recognize violations on sight, and it reframes the abuse from something to endure into evidence with a dollar value. Here's the letter, annotated:
A sample abusive collection letter to Darnell Reed, annotated for its violations of the Fair Debt Collection Practices Act and Regulation F. The letter threatens to have him arrested for check fraud, which is an illegal false threat because you cannot be jailed for a consumer debt; states his balance is $3,900 when it was actually $2,000, misrepresenting the amount; says they already told his warehouse supervisor about the debt, an illegal third-party disclosure; threatens that an officer will serve him at work unless he pays by prepaid gift card, a false threat and a scam tell; and says they will keep calling at 6 a.m. and 10 p.m., outside the legal 8 a.m. to 9 p.m. window and intended to harass. A call log shows 12 calls in 6 days, breaking Regulation F's cap of 7 calls in 7 days. The teaching point is that every violation is evidence for statutory damages, not something to endure.
Take the flagged lines in order, because each is a specific, nameable violation — not just "mean," but illegal. "Pay $3,900 today or we will have you arrested for check fraud." What this does is weaponize fear of jail; why it's illegal is that you cannot be arrested for a consumer debt, so threatening arrest is a false and misleading representation under § 1692e — the single most common serious violation. "Your balance with fees is now $3,900" — when Darnell's actual balance was $2,000. What this does is inflate the debt with bogus fees; why it's illegal is that misrepresenting the amount of the debt is a § 1692e violation, and tacking on unauthorized fees is a § 1692f unfair practice besides. "We have already told your supervisor about this debt." What this does is humiliate and pressure through exposure; why it's illegal is that revealing the debt to a third party — his employer — violates § 1692c(b); a collector may contact others only to find his location, never to disclose the debt.
"An officer will serve you at work by 5 p.m. unless you pay by prepaid gift card now." What this does is combine a false threat of imminent action with a demand for untraceable payment; why it's a double red flag is that the false threat violates § 1692e, and the gift-card demand is the signature of an outright scam — no legitimate collector takes payment by gift card (§18). "We will keep calling you at 6 a.m. and 10 p.m. until this is resolved." What this does is announce contact outside the legal window; why it's illegal is that calls before 8 a.m. or after 9 p.m. violate § 1692c(a)(1), and doing it deliberately to wear him down is § 1692d harassment. And then the call log itself: twelve calls in six days about one debt. What this does is document a pattern; why it matters is that twelve is more than seven, so Regulation F presumes a violation of the 7-in-7 cap (§9) — and several of those calls land before 8 a.m. or after 9 p.m., each its own violation. Darnell's dated log is the evidence.
Read whole, Apex's letter and calls aren't a run of bad luck Darnell has to absorb — they're a stack of federal violations, and that's the reframe the whole walkthrough exists to deliver. Each flagged line is something he can report, and — as §16 explains — the FDCPA lets him sue for statutory damages of up to $1,000 plus his attorney's fees, often at no upfront cost to him. The abuse is the collector's liability, not Darnell's burden. The document that felt like a threat is actually a confession. What to do with that — how the remedies and the reporting channels work — is the wrap-up: the Predator Watch, the reassurance for anyone it's already happened to, and the recourse stack. That's §16 onward.
16. Predator Watch — abusive tactics and fake-collector scams
This lesson has shown what a lawful collector can and can't do. The Predator Watch names the two ways the line gets crossed — the abusive-but-real collector who breaks the FDCPA, and the outright scammer collecting a debt that doesn't exist — because your response differs, and one rule defeats both. Here's what to watch for:
A predator-watch warning card showing the two ways a debt-collection call crosses the line — a real but abusive collector, a genuine agency or debt buyer breaking the Fair Debt Collection Practices Act with threats of arrest, an inflated balance, calls at all hours, disclosing your debt to family or your boss, or a fifty-dollar good-faith-payment push to revive an old debt; and a fake or phantom collector chasing a debt you don't owe who demands a gift card, wire, crypto, or payment app, refuses to send written validation, and threatens you'll be served or arrested today — followed by one rule that defeats both: validate before you pay a cent, because a real collector must send written validation within 5 days, an abusive one can be forced onto the record and sued, and a scammer refuses or vanishes, and no legitimate debt is ever collected by gift card — and a blame-free guide to where and how to report it.
The first predator is the abusive real collector — a genuine collection agency or debt buyer that breaks the rules to pressure you, exactly like Apex in §15. The tells are the violations themselves: threats of arrest or jail, an inflated balance, calls at all hours or twelve in a week, disclosure of your debt to your family or boss, and — on an old debt — a push to make a "good-faith payment" (the revival trap, §11) or a threat to sue on a debt too old to sue on. These are illegal, they're documentable, and each one is worth money to you in an FDCPA suit (§19). The response is to document everything (a dated call log, kept letters, screenshots of texts) and report it.
The second predator is the fake or "phantom" debt collector — a scammer collecting a debt you don't actually owe, or that doesn't exist at all. The 2026 tells are sharp: a demand for payment by gift card, wire transfer, cryptocurrency, or a payment app (no real collector collects this way); a refusal or inability to send you written validation; threats that you'll be "served" or "arrested today"; pressure to pay immediately before you can think; and a debt you simply don't recognize. And here is the one rule that defeats both predators at once, the rule this entire lesson is built on: validate before you pay a cent. Demand the written validation notice. A real, lawful collector will send it — it's required within five days (§5). An abusive-but-real collector can at least be forced onto the record and sued for its violations. And a scammer will refuse, stall, or vanish, because it has no debt and no documentation. "Make them prove it in writing" is the single question that separates a legitimate debt you might owe from an abusive collector you can fight from a phantom you owe nothing to — and no legitimate debt on earth is collected by gift card.
WHERE: report an abusive or scam collector to the FTC at ReportFraud.ftc.gov (1-877-382-4357); to the CFPB at consumerfinance.gov/complaint (1-855-411-2372); and to your state Attorney General and state financial/collection-agency regulator (find your AG at naag.org/find-my-ag), which in 2026 is often the most responsive channel. For an FDCPA violation you can also consult a consumer attorney directly (§19). WHAT TO HAVE READY: the collector's name and contact info, your dated call log, any letters/texts/voicemails, the validation notice (or the fact that none came), and any amount you paid. WHY IT'S WORTH IT: complaints build the record regulators use to act, and an FDCPA suit can put statutory damages plus your attorney's fees on the collector. Being targeted — especially while you're already down — is not a character failing; these operations pick people at their most frightened. Reporting is a civic act, not a confession.
The blame-free framing here is deliberate and it carries into the next section, because collection tactics are engineered to make careful people feel foolish and alone. If the warning came too late — if you already paid something you weren't sure you owed, or endured months of abusive calls before you knew any of this — the next section is written directly for you. That's §17.
17. If this already happened to you
A calm, reassuring information card for a borrower who has already been through debt collection — someone who was frightened by a collector's threat, paid something they weren't sure they owed, or went quiet: it reframes the experience as an ordinary human story rather than a personal failure, then lists the concrete moves still available — sending a written validation demand and disputing with the bureaus after paying an unsure debt, checking the state statute of limitations and revival rules after paying on a very old debt, treating dated records as evidence and consulting a consumer attorney within one year after harassment, sending a cease-communication letter to stop ongoing calls, and using settlement, hardship, or bankruptcy's automatic stay for a debt that is really owed — and closes with the free help lines, the NFCC at 1-800-388-2227 and 211 for local aid.
If you're reading this having already been through some of it — you paid a collector something before you were sure you owed it, you got worn down by relentless calls and just wanted them to stop, you gave a "good-faith" payment on an old debt, you were threatened and believed it, or you went silent because it was all too much — the first thing to hear is the gentlest: this is an ordinary human story, not a personal failure. Debt in collections is where some of the hardest years of people's lives land — a job loss, a medical crisis, a divorce — and collectors are trained, scripted, and relentless in ways designed to overwhelm exactly the reasonable, conscientious person who wants to do the right thing. Millions of people are somewhere in this story right now. Being frightened by a threat that turned out to be a bluff isn't naivety; it's what the bluff was engineered to produce.
So set the self-blame down, because it's the single thing most likely to keep you stuck. "I should have known they couldn't arrest me," "I shouldn't have paid without checking," "I should have opened the letters sooner" — that instinct aims at the wrong target. The rules in this lesson are ones most people are never taught; not knowing them is the norm the collection industry relies on, not a flaw in you. And the reassuring truth is that almost nothing here is a point of no return — most of what happened can still be worked, no matter how far down the road you already are.
Here is what you can still do, by situation, each one concrete. If you paid something you're not sure you owed: you can still send a written validation demand for the rest, and dispute the account with the credit bureaus; a single past payment doesn't forfeit that. If you made a payment on a very old debt and worry you revived it: check your state's statute of limitations and revival rules (§11) — and know that even a revived debt still can't be collected by illegal means, and if you're sued, answering the lawsuit is itself a strong defense (Lesson 35). If you were harassed or lied to: your dated records are evidence — you can report the violations and consult a consumer attorney about an FDCPA suit for statutory damages plus fees (§19), and it's not too late as long as you act within a year of the violation. If the calls are still coming: the cease-communication letter (§12) still works, today. And if a debt is genuinely yours and you can't pay it, remember the exits this course maps — hardship and settlement (Lesson 40), and, if it's truly unpayable, bankruptcy's automatic stay stops all collection at once (Lesson 34). Free, real help is a phone call away: a nonprofit counselor at the NFCC (1-800-388-2227), and 211 for local emergency aid.
And when you're steadier, report what happened — for the next person. Filing with the FTC, the CFPB, or your state Attorney General builds the record regulators use to shut abusive collectors down. Your hardest stretch, reported, becomes someone else's protection. One frightening call, one payment made under pressure, one silent month is a setback, not a verdict — the credit mark fades on a fixed schedule, an abusive collector can be sued, and there is a path forward from every single thing in this lesson. It starts, as it always does, with knowing which door to knock on. Which doors, and what each is good for in 2026, is the last piece of self-protection. That's §18.
18. The recourse stack — where to turn in 2026
The last two sections kept pointing at places to turn; this one puts them in order — the recourse stack for someone dealing with a collector — with an honest read of which rungs actually have force behind them in 2026, because, as elsewhere in this course, the most dependable channel is no longer always the federal agency you'd expect.
A numbered recourse ladder for someone facing an abusive or persistent debt collector, read from the bottom rung up: start with the collector itself by sending the written validation dispute and cease letter yourself (free and self-executing), then a consumer or FDCPA attorney who can win statutory damages up to $1,000 plus actual damages and your attorney's fees on contingency if you act within a year, then your state attorney general and collection regulator who license the agencies and are often the most responsive channel in 2026, then the CFPB at consumerfinance.gov/complaint or 855-411-2372 (with a caution that it has been sharply cut back and its reach is unreliable, so file to build the record but don't rely on it alone), then the FTC at ReportFraud.ftc.gov or 877-382-4357 for scam and phantom collectors, then NFCC nonprofit counseling at 1-800-388-2227 and 211 for local aid — closing with the reminder that your rights hold in law regardless of who is enforcing them, so lean on what you can do yourself and on your state.
Start at the bottom, because the first two rungs are things you do yourself and they resolve most situations. Rung one is the collector directly — the written validation dispute (§4–§7) and, where you want it, the cease-communication letter (§12). These are free, self-executing, and the most likely to actually change what's happening: a disputed debt freezes, an abusive collector put on notice often backs off. Rung two, uniquely powerful here and worth pulling out of the stack, is a consumer attorney. The FDCPA is one of the few consumer laws that pays your lawyer: if a collector violated it, you can recover statutory damages of up to $1,000 plus actual damages plus your attorney's fees and costs — and because the law shifts those fees onto the losing collector, consumer attorneys frequently take FDCPA cases on contingency, at no upfront cost to you. So for a genuinely abusive collector like Darnell's, a call to a consumer-rights attorney isn't a last resort; it's often the sharpest, cheapest tool available. (One deadline to respect: you generally have just one year from the violation to sue, so act promptly, and keep your dated records.)
Above those sit the government channels, and here the honest 2026 caveat this course always states plainly. Your state Attorney General and state collection-agency regulator have real authority over abusive collectors and are, in many states, the most responsive venue right now — collection agencies are licensed at the state level, and states have been active where the federal watchdog has pulled back. The Consumer Financial Protection Bureau (consumerfinance.gov/complaint, 1-855-411-2372) takes complaints about collectors and is where a lot of enforcement historically lived — but it has been sharply cut back: its funding was reduced by law in mid-2025, deep staffing cuts have been sought and are tied up in litigation, and its reach is unreliable at the moment. It is still worth filing a complaint, because complaints build the record later enforcement is built on — but it should not be treated as your sole or fastest remedy. The FTC (ReportFraud.ftc.gov, 1-877-382-4357) is the right channel for scam and phantom-debt collectors, feeding the fraud database regulators mine for cases.
So the full ladder, bottom to top: the collector itself (validation dispute, cease letter) → a consumer/FDCPA attorney (statutory damages + fees, often on contingency) → your state Attorney General and collection regulator → the CFPB (with the honest caveat) → the FTC (for scams) → and underneath it all, the NFCC (1-800-388-2227) for free nonprofit counseling and 211 for local emergency aid. The through-line matches Lessons 10, 32, and 40: your rights are written into law regardless of who's enforcing them, so the most reliable recourse is the combination of what you can do yourself (validate, cease, sue) and the channels closest to you — your state, and an attorney the law pays. In a year when the federal floor has shifted, the levers that hold are the ones in your own hand. With recourse mapped, we turn to the questions people actually ask. That's §19.
19. Most common questions
"A collector called about a debt I don't recognize — what do I do first?" Validate, don't pay (§4). Ask for it in writing and, within 30 days of the validation notice, mail a written dispute demanding the itemized amount, the original creditor's name, and proof you owe it and that this collector owns it. That written dispute forces the collector to stop collecting until it mails verification — and if it can't produce real records, the debt may go away. Never pay or promise to pay a debt you haven't confirmed is yours.
"Can a debt collector really have me arrested?" No. You cannot be arrested or jailed for failing to pay a consumer debt (§3) — there's no debtors' prison for a credit card, a medical bill, or a car loan. A collector who threatens arrest is committing a federal violation you can report and sue over. (The rare exception isn't the debt itself: if a court orders you to appear about a debt and you ignore the order, that's contempt of the court's order — so if you're ever sued, don't ignore it. That's Lesson 35.)
"How often is a collector allowed to call me?" Regulation F presumes it's illegal harassment to call more than seven times in seven days about one debt, or to call within seven days after actually speaking with you by phone about it (§9). It's per debt, and a voicemail counts as a call. Keep a dated log — twelve calls in six days is a documented, presumed violation worth money in an FDCPA claim.
"Can I just make them stop calling?" Yes — send a written cease-communication letter (§12). Once they receive it, they must stop, except to tell you they're stopping or that they're taking a specific step like a lawsuit. But know what it doesn't do: it doesn't erase the debt, stop a suit, or remove it from your credit report — and it closes your negotiation channel. If you want to resolve the debt, dispute in writing (which freezes collection anyway) instead of going fully silent.
"A collector said I can make a small 'good-faith' payment on an old debt — should I?" Be very careful (§11). On an old, possibly time-barred debt, a partial payment or a written promise to pay can restart the statute of limitations in many states, reviving a debt that was too old to sue on. Check your state's statute of limitations and revival rules before you pay anything. If it's time-barred, the collector can't legally sue you — and can't threaten to.
"The debt is mine and I want to settle — how low can I go?" Often 30–50% of the balance for a lump sum (§13), because a debt buyer paid only pennies on the dollar for it. Validate first, offer a specific lump sum, and get the terms in writing before you pay — that it settles the account in full and how it'll be reported. Expect that forgiving $600+ can generate a 1099-C tax form, but the insolvency exclusion (Lesson 31) often erases the tax entirely.
"Will settling or paying delete the collection from my credit report?" Usually not by itself. A settled account is reported as "settled" and stays about seven years from the original default; paying doesn't reset that clock. "Pay-for-delete" (paying in exchange for removal) is a long shot most collectors refuse — get it in writing if they agree (§13). The reassuring part: newer scoring models (FICO 9/10, VantageScore 3.0/4.0) ignore paid collections entirely, so paying helps your score under them even without deletion.
"Is the original creditor's own collection department bound by these rules?" Often not federally (§1). The FDCPA generally covers third-party collectors and debt buyers, not a creditor collecting its own debt in its own name — so the validation notice, cease right, and 7-in-7 cap are aimed at collectors. But your state law may extend similar protections to original creditors, and the debt buyer or agency chasing a charged-off account is squarely covered. If your debt was sold or is being chased by anyone but your original lender, the full toolkit applies.
"How do I tell a real collector from a scam?" Make them validate (§16). A demand for a gift card, wire, crypto, or payment app; a refusal to send written validation; a "you'll be arrested/served today" threat; or a debt you don't recognize are the tells of a phantom-debt scam. A real collector must send a written validation notice within five days; a scammer won't. No legitimate debt is ever collected by gift card.
"A collector broke these rules — is it worth doing anything?" Yes (§18–§19). The FDCPA lets you sue for up to $1,000 in statutory damages plus actual damages plus your attorney's fees — and because the law makes the collector pay the fees, consumer attorneys often take these cases on contingency. Keep your dated log and letters, act within a year of the violation, and consider a free consultation with a consumer-rights attorney. The abuse is the collector's liability, not something you have to absorb.
That closes the questions. Step back and see what the whole lesson gave Gloria, Darnell, and you. The call that opened this lesson — the threat, the inflated number, the fear that they could do anything they wanted — has an answer now, and it's a sequence, not a panic. Find out who's really calling and whether the law even covers them. Know what they can't do — no arrest, no lies, no calls at your job or at midnight, no seizing anything without suing you first. Validate before you pay a cent, and read what comes back. Cap the calls with the 7-in-7 rule and the cease letter. Don't revive an old debt, and keep the two clocks straight. Settle on your terms if you owe it, and clear the tax with the insolvency exclusion. And if a collector breaks the law, turn its abuse into your leverage — statutory damages, at its expense. The collector's only real advantage was ever that you didn't know the rules. Now you do. The final piece is a tool to run your own situation. That's §20.
20. Check yourself — the collection-response planner
The whole point of this lesson is to replace the panic of a collection call with a plan, and the tool below does exactly that. Pick your situation — you don't recognize the debt, the calls won't stop, it's an old debt that might be time-barred, or you owe it and want to resolve it — and it gives you the right FDCPA move, what's actually at risk, the 30-day validation timeline, and the specific letter to send, pre-filled with Gloria's case (her $4,800 card, now held by the debt buyer Crestline). It's a planner and a letter builder in one; nothing is sent or saved.
An interactive collection-response planner and letter builder. You pick your situation with a debt collector — you don't recognize the debt, the calls won't stop, it's an old possibly time-barred debt, or you owe it and want to resolve it — and it shows the right move under the Fair Debt Collection Practices Act, what's at risk, and the 30-day validation timeline, then assembles the correct letter (a validation request, a cease-communication letter, or a written settlement offer) pre-filled with Gloria Simmons's case: her $4,800 charged-off card sold to the debt buyer Crestline Asset Recovery. For example, if you don't recognize the debt, the move is to validate rather than pay — a written dispute within 30 days forces the collector to stop collecting until it mails verification. Nothing is sent or saved; the letters are templates.
Notice what the tool makes visible. The same word — "debt" — routes to completely different moves depending on the situation: an unfamiliar debt pushes you to validate before anything else; relentless calls point you to documenting and the cease letter; an old debt flashes the revival warning and "check your state's clock first"; a debt you owe routes you to validate-then-settle-in-writing. And each situation assembles a different letter — a validation demand, a cease-communication letter, or a written settlement offer — because the right letter is the one that fits the move. Run your own situation and the abstractions of this lesson become a concrete next step you can take today.
Step back, finally, to the phone ringing at the top of this lesson. The fear in that moment was that the collector held all the power — that it could do anything, and you could do nothing. Everything since has been the answer, and the answer is that the power was always more balanced than it felt: the law was written for you, most of the tools are ones you wield yourself, and the collector's biggest weapon was simply that you didn't know that. You do now. When the phone rings, the first move isn't to pay and it isn't to panic — it's to make them prove it, in writing, on the record. The last section gathers the terms this lesson introduced. That's the glossary.
Glossary — the terms this lesson introduced
The 1977 federal law (15 U.S.C. § 1692 et seq.) governing third-party debt collectors and debt buyers. It limits when/how/whom they can contact, bans harassment and false statements, gives you the right to validate and dispute a debt, and lets you sue for violations. It generally does NOT cover an original creditor collecting its own debt in its own name.
A debt collector (covered by the FDCPA) is a business whose principal purpose is collecting debts, or that regularly collects debts owed to another — including third-party agencies and debt buyers of charged-off accounts. An original creditor collecting its own debt in its own name is generally NOT an FDCPA 'debt collector' (state law may still apply).
A company that purchases charged-off debts for pennies on the dollar and collects on its own account. Generally a covered debt collector under the FDCPA's 'principal purpose' prong. Because it often buys accounts as bare spreadsheet lines, a written verification demand can expose that it lacks the documents to prove the debt.
The written statement of a debt a collector must send within 5 days of first contact (or in that first contact), governed by 15 U.S.C. § 1692g and Regulation F § 1006.34. The modern version includes the itemization date, an itemized amount, both creditors' names, a statement of your 30-day dispute right, and a tear-off dispute form.
A reference date on the validation notice from which the current amount is built up (interest, fees) and down (payments, credits). It must be one of five dates: the last statement date, charge-off date, last payment date, transaction date, or judgment date. It makes the balance checkable instead of a bare assertion.
Your written demand (within 30 days of the validation notice) that the collector prove the debt — the itemized amount, the original creditor, proof it's yours, and the chain of ownership. A written dispute forces the collector to CEASE collection until it mails verification (15 U.S.C. § 1692g(b)). Must be in writing; a phone dispute doesn't trigger the freeze.
What the collector must mail in response to a written dispute. There's no single federal definition — courts split between accepting a bare written confirmation of the amount and requiring an itemized accounting of how/when the debt was incurred. A debt buyer that can't produce account records and a chain of title often can't truly verify.
The CFPB rule (12 CFR part 1006, effective November 30, 2021) implementing the FDCPA for the modern era. It added the 7-in-7 call cap, email/text and limited-content-message rules, the model validation notice with the itemization date, and the explicit ban on suing or threatening to sue on time-barred debt.
Regulation F's telephone-frequency rule (12 CFR § 1006.14(b)): a collector is PRESUMED to violate the law by placing more than 7 calls in 7 days about a particular debt, or by calling within 7 days after a phone conversation about that debt. Rebuttable presumptions; per debt; a voicemail counts; applies only to phone calls, not texts/emails.
A voicemail a collector can leave (12 CFR § 1006.2(j)) that reveals nothing about a debt — so it's NOT a 'communication' and doesn't disclose the debt to third parties or need the 'this is a debt collector' language. It may contain only your name, a request to call back, a contact person's name, and a phone number (and a business name that doesn't indicate collections).
A written notice under 15 U.S.C. § 1692c(c) telling a collector to stop contacting you. Once received, it must stop, except to say it's stopping or that it's invoking a specific remedy (like a lawsuit). It does NOT erase the debt, stop a lawsuit, or stop credit reporting — a tactical off switch, best paired with (or replaced by) a written validation dispute.
The FDCPA's core bans: § 1692d (harassment — repeated calls, threats, obscenity), § 1692e (false/misleading — threatening arrest, faking attorney/government status, misrepresenting the amount or legal status of the debt), and § 1692f (unfair — unauthorized fees, threatening to take property they can't). Each is grounds to report and to sue.
A debt past the state statute of limitations to sue on it (commonly 3–6 years from last activity/default). Under Regulation F § 1006.26, a collector must not sue or even THREATEN to sue on it (a strict rule). But time-barred means unsuable, not gone — a collector can still ask for payment, so beware the revival trap.
Two different traps to keep straight. Reviving: on an old debt, a partial payment or written promise to pay can RESTART the statute of limitations in many states, making a time-barred debt suable again. Re-aging (illegal): a collector resetting the date of first delinquency to keep a debt on your credit report past the 7-year FCRA limit — which cannot lawfully be moved.
The statute of limitations (state law; the deadline to SUE you; ~3–6 years) and the FCRA reporting clock (~7 years from the date of first delinquency; how long it stays on your CREDIT REPORT) are independent. A debt can be too old to sue on yet still reportable, or reportable yet revived-and-suable after a payment. Never conflate them.
Asking a collector to delete the account from your credit report in exchange for payment. A risky, non-guaranteed tactic the CFPB doesn't endorse — it conflicts with accurate-furnishing duties, so many collectors refuse. Get any agreement in writing before paying. Matters less than it used to: newer scoring models (FICO 9/10, VantageScore 3–4) already ignore paid collections.
Resolving a debt for less than the full balance — commonly 30–50% for a lump sum on charged-off debt a buyer bought cheaply. Get the terms in writing (that it settles the account in full and how it's reported) before paying. Reported as 'settled/paid for less than full balance'; forgiving $600+ can trigger a 1099-C (insolvency exclusion may erase the tax — L31).
The remedy under 15 U.S.C. § 1692k: up to $1,000 in statutory 'additional' damages per lawsuit, PLUS any actual damages, PLUS your attorney's fees and costs. The fee-shifting lets consumer attorneys take cases on contingency. You generally have one year from the violation to sue.
Gentler rules for medical debt (deep dive L39): request an itemized bill and apply for nonprofit-hospital charity care (IRC § 501(r)) first; the credit bureaus voluntarily remove paid medical collections, wait a year before unpaid ones appear, and don't report those under $500. Note: the 2025 CFPB rule that would have removed most medical debt from reports was VACATED July 11, 2025.
Key takeaways
- Your rights depend on who's calling. The FDCPA covers third-party collectors and debt buyers — including whoever bought your charged-off account — but generally not an original creditor collecting its own debt in its own name (state law may still apply there). If your debt was sold or is chased by anyone but your original lender, the full toolkit in this lesson is live.
- The first move is always validate, never pay. Within 30 days of the validation notice, dispute the debt IN WRITING and demand the itemized amount, the original creditor, and proof the collector owns it — this freezes collection until they mail verification. A debt buyer holding only a bare printout often can't verify, and a debt they can't document is one you can keep disputing. Paying first can waive your leverage and, on an old debt, revive it.
- Know what they can't do — it kills most of the fear. No calls before 8 a.m. or after 9 p.m., no calls at work once told to stop, no telling third parties, no harassment, no lying about the amount, and no threatening arrest — you cannot be jailed for a consumer debt. And for ordinary private debt, a collector can't garnish your wages or bank account without first suing you and winning (the rare exceptions: federal student loans, IRS taxes, child support).
- Regulation F (2021) put numbers on the vague old rules. A collector is presumed to break the law by calling more than 7 times in 7 days about one debt, or within 7 days of a phone conversation about it — so keep a dated call log. Every email/text needs a simple opt-out ('reply STOP'), and it can't sue or even threaten to sue on a time-barred debt (a strict rule).
- Keep the two clocks separate and don't get tripped by either. The statute of limitations (state law, ~3–6 years) is the deadline to SUE you; the FCRA clock (~7 years from the original default) is how long it stays on your CREDIT REPORT. They're independent — and a partial payment or written promise on an OLD debt can restart the SOL and revive a debt too old to sue on. On any old debt, check your state's rules before you pay a cent. Paying never shortens the 7-year reporting clock (re-aging it is illegal).
- If you owe it, settle on your terms — and if they break the law, make it pay. Debt buyers paid pennies for your account and commonly settle for 30–50%; get every term in writing before paying, expect a possible 1099-C (the insolvency exclusion often erases the tax — L31), and know a settled mark still reports ~7 years. And when a collector violates the FDCPA, you can sue for up to $1,000 plus actual damages plus attorney's fees — often on contingency, at no upfront cost. Your rights hold in law even where 2026 federal enforcement has been cut; the surest levers are the ones in your own hand (validate, cease, sue) and your state AG.
Knowledge check
6 questions
A debt collector calls Gloria about a $4,800 charged-off credit-card debt she isn't sure she recognizes. What is her correct first move?