FDCPA Compliance: The Fair Debt Collection Practices Act and Regulation F

The short version

The Fair Debt Collection Practices Act restricts how debts are collected, and Regulation F, which the CFPB issued to implement and modernize it, fills in the details. The FDCPA applies primarily to third-party debt collectors, not to creditors collecting their own debts, though those creditors are still bound by UDAAP. It prohibits harassing, false, or unfair collection conduct, requires a validation notice that tells the consumer about the debt and how to dispute it, and Regulation F adds rules on communication, including a call-frequency presumption and limits on contact through email and text.

Debt collection is one of the most-complained-about activities in consumer finance, which is why it carries its own statute and a detailed implementing regulation. The FDCPA draws a sharp line based on who is collecting, and Regulation F translated its 1970s-era rules into the world of email, text, and call analytics. This guide covers who is covered, the prohibited practices, the validation notice, the communication limits, and where collection programs fall short.

Who is covered

The FDCPA applies primarily to debt collectors, meaning third parties who collect debts owed to someone else, and debt buyers who acquire defaulted debt. A creditor collecting its own debts in its own name is generally outside the FDCPA. That distinction matters, but it is not a free pass: a first-party creditor is still subject to UDAAP, so unfair or deceptive collection conduct is prohibited either way. The FDCPA simply adds a specific, prescriptive layer for third-party collectors.

The prohibited practices

The FDCPA prohibits three broad categories of conduct.

Harassment or abuse. Repeated or continuous calls intended to annoy, threats, obscene language, or publishing lists of consumers who allegedly refuse to pay.
False or misleading representations. Misstating the amount or legal status of a debt, falsely implying attorney or government affiliation, or threatening action that cannot legally be taken or is not intended.
Unfair practices. Collecting amounts not authorized, depositing post-dated checks early, or taking nonjudicial action to seize property without a present right to it.

The validation notice

A debt collector must give the consumer a validation notice with information about the debt, including the amount and the creditor, and a statement of the consumer's right to dispute the debt and to request the name of the original creditor. Regulation F prescribes the content of this notice in detail and provides a model form. If the consumer disputes the debt in writing within the period, the collector must cease collection until it verifies the debt.

The Regulation F communication limits

Regulation F modernized the communication rules. It established a call-frequency presumption: a collector is presumed to violate the law if it calls a consumer about a particular debt more than seven times within seven consecutive days, or within seven days of a conversation about the debt. It also set rules for collecting through email and text, including a reasonable opt-out method, and clarified the limited-content message a collector may leave to request a return call without disclosing the debt to third parties.

Time-barred debt

Every debt has a statute of limitations, the period during which a creditor or collector can sue to recover it. Once that period passes, the debt is time-barred. The debt does not disappear, and collecting on it is not itself prohibited, but the FDCPA limits what a collector may do. Suing or threatening to sue on a debt the collector knows or should know is time-barred is a false or misleading representation, because it implies a legal remedy that no longer exists, and Regulation F prohibits a collector from suing or threatening to sue to collect a time-barred debt. A further trap is revival: in many states a partial payment or a written acknowledgment can restart the limitations clock, so a collector that induces a small payment can expose the consumer to a revived, enforceable debt. A collection program has to know the limitations period for each debt and treat time-barred accounts differently.

Where it goes wrong

Assuming first-party collection is unregulated. A creditor collecting its own debt is outside the FDCPA but still bound by UDAAP, which a program sometimes forgets.
Validation notice defects. The notice omits required content or is not sent within the timeframe, or collection continues after a written dispute.
Exceeding the call presumption. Dialing analytics push call frequency past the seven-in-seven presumption without anyone tracking it against the rule.

FDCPA compliance turns on who is collecting and how often they make contact, with Regulation F supplying the modern detail. For the structure that manages it, see the Compliance Management System guide; for the standard that still binds first-party creditors, see the UDAAP guide.

Primary sources

Fair Debt Collection Practices Act (15 U.S.C. 1692) and Regulation F (12 CFR 1006): The statute restricting third-party debt collection conduct, and Regulation F, which implements and updates it.
CFPB Supervision and Examination Manual, Compliance Management Review: The CFPB's framework for a Compliance Management System: board and management oversight plus a compliance program of policies and procedures, training, monitoring and audit, and consumer complaint response.

Common questions

Who does the FDCPA apply to?

Primarily third-party debt collectors who collect debts owed to others, and debt buyers who acquire defaulted debt. A creditor collecting its own debts in its own name is generally outside the FDCPA, though it remains subject to UDAAP, so unfair or deceptive collection conduct is prohibited either way.

What is a validation notice?

A notice a debt collector must give the consumer with information about the debt, including the amount and the creditor, and a statement of the right to dispute it and to request the original creditor's name. Regulation F prescribes the content in detail and provides a model form. If the consumer disputes in writing within the period, the collector must cease collection until it verifies the debt.

What is the Regulation F call-frequency rule?

Regulation F established a presumption that a debt collector violates the law if it calls a consumer about a particular debt more than seven times within seven consecutive days, or within seven days of a conversation about that debt. It is often shortened to the seven-in-seven rule.

Does the FDCPA apply to a company collecting its own debts?

Generally no. The FDCPA targets third-party collectors. A first-party creditor collecting its own debt in its own name is usually outside the FDCPA, but it is still bound by UDAAP, so harassing, false, or unfair collection conduct is prohibited regardless of which law names it.

Can a debt collector collect on time-barred debt?

A debt past its statute of limitations is time-barred. Collecting on it is not itself prohibited, but suing or threatening to sue on a debt the collector knows or should know is time-barred is a false or misleading representation, and Regulation F prohibits suing or threatening to sue to collect a time-barred debt. In many states a partial payment can revive the debt by restarting the limitations clock, so a collection program must track the limitations period for each account.