Your Rights When a Debt Collector Calls

Your phone rings from an unknown number. The person on the other end says you owe $3,400 on a credit card you closed years ago. They want payment today. They mention legal action. Your heart rate spikes. This is exactly how debt collectors want you to feel, because scared people pay without asking questions. Before you do anything, you need to know your rights. Federal law gives you more protection than most people realize.

The Fair Debt Collection Practices Act (FDCPA)

The FDCPA is the federal law that governs third-party debt collectors. It was enacted in 1977 and updated by the CFPB's Regulation F in 2021. It applies to collection agencies, debt buyers, and attorneys who regularly collect debts. It does not apply to original creditors collecting their own debts (your bank calling about your own credit card), though many states have laws that extend similar protections to original creditors.

What Debt Collectors Cannot Do

The FDCPA prohibits specific practices. Here are the ones that matter most:

• Call before 8 AM or after 9 PM in your local time zone
• Call your workplace if you have told them your employer does not allow it
• Contact you after you send a written cease and desist letter (with two exceptions: they can contact you to confirm they will stop, or to notify you of a specific legal action)
• Threaten violence, criminal prosecution, or arrest for unpaid debt (debt is a civil matter, not criminal)
• Use obscene or abusive language
• Misrepresent the amount owed or add unauthorized fees
• Threaten to garnish wages or seize property unless they have a court judgment authorizing it
• Discuss your debt with third parties (neighbors, coworkers, family members other than your spouse) except to locate you, and even then they cannot reveal the debt
• Call repeatedly with intent to harass — Regulation F limits collectors to 7 call attempts per debt per 7-day period
• Contact you via social media in a way visible to others (private messages are permitted under Regulation F)

Your Right to a Validation Letter

Within 5 days of first contacting you, a debt collector must send you a written validation notice that includes:

• The name of the creditor
• The amount of the debt
• A statement that you have 30 days to dispute the debt in writing
• A statement that if you dispute the debt, the collector must provide verification

This is your most powerful tool. Within 30 days of receiving this notice, send a written debt validation request (via certified mail with return receipt). The collector must then provide verification of the debt — typically the original account agreement, statements showing the balance, and a chain of assignment if the debt was sold. Until they provide this verification, they must stop all collection activity.

Many debts, especially older ones that have been sold multiple times, cannot be fully verified. The original documentation may have been lost. If the collector cannot verify the debt, they cannot continue to collect on it and must remove it from your credit report.

Statute of Limitations by State

Every state has a statute of limitations on debt — a window during which a creditor can sue you to collect. Once the statute expires, the debt is "time-barred." The collector can still ask you to pay, but they cannot sue you (and threatening to sue on a time-barred debt is an FDCPA violation).

Statutes of limitations vary by state and type of debt:

• 3 years: Alabama, Alaska, Delaware, D.C., Maryland, Mississippi, New Hampshire, North Carolina, South Carolina
• 4 years: Arizona, Arkansas, California, Colorado, Pennsylvania, Texas, Utah, Washington
• 5 years: Florida, Georgia, Idaho, Kansas, Maine, Minnesota, Montana, Nebraska, Nevada, New Mexico, Oregon, South Dakota, Virginia
• 6 years: Connecticut, Illinois, Indiana, Iowa, Massachusetts, Michigan, Missouri, New Jersey, New York, North Dakota, Ohio, Oklahoma, Tennessee, Vermont, West Virginia, Wisconsin, Wyoming
• 8-10 years: Hawaii, Iowa (written contracts), Kentucky, Louisiana, Rhode Island

Critical warning: Making a payment on a time-barred debt can restart the statute of limitations in many states. Even acknowledging the debt in writing can restart it in some states. This is why you should never pay or promise to pay a debt without first confirming the statute of limitations has not expired.

Zombie Debt

"Zombie debt" is debt that is past the statute of limitations, already paid off, discharged in bankruptcy, or not even yours. Debt buyers purchase portfolios of old debts for 2 to 4 cents on the dollar and then attempt to collect the full amount. The records are often incomplete or inaccurate.

Common zombie debt scenarios:

• A debt you paid off years ago that was resold with incomplete records
• A debt discharged in bankruptcy that a new collector is trying to revive
• A debt belonging to someone with a similar name or Social Security number
• A debt with an inflated balance due to unauthorized fees and interest

Your defense is the validation letter. Request written verification. If the collector cannot provide original documentation proving the debt is yours, in the correct amount, and within the statute of limitations, they have no legal basis to collect.

How to Send a Cease and Desist Letter

Under the FDCPA, you can send a written letter telling a debt collector to stop contacting you. Once they receive it, they can only contact you to:

• Confirm they received the letter and will stop contacting you
• Notify you that they are taking a specific legal action (filing a lawsuit)

Important: A cease and desist letter does not make the debt go away. The collector can still sue you. It only stops the phone calls, letters, and messages. Use this if a collector is harassing you, but understand that it may accelerate a lawsuit if the collector believes the debt is valid and within the statute of limitations.

Send it via certified mail with return receipt so you have proof of delivery. Keep a copy. Include your name, address, the account number (if known), and a clear statement that you are requesting they cease all communication.

Recording Calls

Recording your calls with debt collectors creates evidence if they violate the FDCPA. However, recording laws vary by state:

• One-party consent states (most states): You can record the call without telling the collector, as long as you are a party to the call.
• Two-party/all-party consent states (California, Connecticut, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, New Hampshire, Oregon, Pennsylvania, Washington): Both parties must consent. However, if the collector's automated message says "this call may be recorded," many courts have interpreted this as the collector consenting to being recorded as well.

If you live in a two-party consent state, tell the collector at the start of the call that you are recording. If they object, they will typically hang up, which stops the harassment.

When to Pay vs. When to Fight

Consider Paying When:

• The debt is valid, verified, within the statute of limitations, and you can afford a settlement
• You need the collection removed from your credit report for a mortgage or other major application (negotiate a "pay for delete" agreement in writing before paying)
• The amount is small enough that fighting it costs more in time and stress than paying it

Consider Fighting When:

• The debt is past the statute of limitations
• The debt is not yours (identity theft, mixed files)
• The amount is wrong
• The collector cannot provide proper validation
• The collector has violated the FDCPA (you may have a counterclaim)
• The debt was discharged in bankruptcy

If You Negotiate a Settlement

Never pay over the phone or agree to anything verbally. Get the settlement terms in writing before sending money. The letter should state: the original creditor name, the account number, the settlement amount, that the payment satisfies the debt in full, and that the collector will report the account as "paid in full" or "settled" to the credit bureaus. Pay by check or money order — never give a collector direct access to your bank account.

If a Collector Violates Your Rights

You can sue a debt collector who violates the FDCPA. You can recover:

• Actual damages (financial harm you suffered)
• Statutory damages up to $1,000 per lawsuit
• Attorney's fees and court costs

Many consumer attorneys take FDCPA cases on contingency (no upfront cost to you) because the law requires the collector to pay attorney fees if they lose. File complaints with the CFPB (consumerfinance.gov), FTC (ftc.gov), and your state attorney general.

Bottom Line

A debt collector's primary tool is urgency and fear. Your primary tools are the validation letter, the statute of limitations, and the FDCPA. Never pay a debt you have not verified. Never make a payment on a time-barred debt without understanding the consequences. Never agree to anything without getting it in writing first. The law is on your side more than you think. Use it.