Debt Collector Rights: What They Can (and Cannot) Do to You

A debt collector contacts you — by phone, letter, or text — and suddenly you're wondering: what are they actually allowed to do? The answer matters, because federal law draws clear lines between legitimate collection and illegal harassment. This guide walks you through exactly what debt collectors are permitted to do, what they are forbidden from doing, and what you can do in response. Written and maintained by Andrea. Last updated: July 2025.

This is general information, not legal advice — consult a licensed attorney in your state. No outcome is guaranteed. Rules under the FDCPA are federal, but statutes of limitation and other protections vary by state and can change — verify with the CFPB, your state Attorney General, or a licensed attorney.

The Law That Governs Debt Collectors: FDCPA Basics

The Fair Debt Collection Practices Act — the FDCPA — is the main federal law that controls how third-party debt collectors behave. A "debt collector" under this law is generally a person or company that regularly collects debts owed to someone else. That includes collection agencies, debt buyers, and attorneys who collect debts as part of their regular business.

One important distinction: the FDCPA typically covers third-party collectors, not the original creditor (the bank or store where you opened the account) collecting its own debt. Some states have their own laws that extend similar protections to original creditors — check with your state Attorney General to see what applies where you live.

The Consumer Financial Protection Bureau/CFPB and the Federal Trade Commission/FTC both enforce the FDCPA at the federal level. Their websites are the best places to verify current rules and file a complaint.

What Debt Collectors Are Legally Allowed to Do

Collectors do have real, legal tools to pursue a debt. Knowing what's permitted helps you tell the difference between lawful collection and a violation.

Contact You by Multiple Methods

A debt collector may contact you by phone, mail, text message, or email. They can call your home or cell number. They can send letters to your address. Federal rules introduced in 2021 also clarified that collectors may use text and email under certain conditions — including giving you a way to opt out of those channels.

Call During Permitted Hours

Calls are restricted to between 8 a.m. and 9 p.m. in your local time zone. Outside those hours, a collector calling you may be violating the law. Verify this window with the CFPB, since rules can be updated.

Contact Certain Third Parties — Within Limits

To locate you, a collector may contact your employer, neighbors, or relatives — but only to ask for your address, phone number, or employer information. They generally cannot tell those people that you owe a debt, and they typically cannot contact the same third party more than once. Once they have your contact information, the calls to third parties must stop.

Report the Debt to Credit Bureaus

Collectors may report a valid, unresolved debt to the major credit reporting agencies — Equifax, Experian, and TransUnion. A collection account can stay on your credit report for up to seven years from the original delinquency date under federal rules (verify current timelines with the CFPB).

Attempt to Negotiate a Settlement

A collector may offer to settle for less than the full balance. They may also offer what's sometimes called a pay-for-delete arrangement — where they agree to remove the collection account from your credit report in exchange for payment. Pay-for-delete is not guaranteed by law and not all collectors will agree to it, so get any such agreement in writing before you pay.

What Debt Collectors Are Forbidden from Doing

The FDCPA outright prohibits a long list of collector behaviors. These are not gray areas — they are violations that may entitle you to take action.

Harassment and Abuse

False or Misleading Representations

Unfair Practices

Contacting You at Work if Your Employer Disapproves

If you tell a collector that your employer does not permit collection calls at work, they must stop calling you there. You can state this verbally, but putting it in writing is smarter — it creates a record.

Request Debt Validation

Debt validation is your right to demand that a collector prove the debt is real, belongs to you, and is the correct amount. When a collector first contacts you, they are required to send you a written notice — sometimes called a validation notice or verification letter — that includes the amount of the debt, the name of the creditor, and information about your right to dispute.

If you send a written dispute or validation request within the window described in that notice (verify the exact timeframe with the CFPB, as rules can change), the collector must stop collection activity until they provide verification. This does not erase the debt, but it forces the collector to substantiate the claim before continuing.

Dispute an Inaccurate or Unrecognized Debt

If the debt is not yours, the amount is wrong, or you do not recognize the account, you can dispute it in writing. Keep your dispute letter brief and factual — state that you dispute the debt, request verification, and do not volunteer personal financial details. Send it certified mail and keep copies of everything.

One caution: never include your full Social Security number or bank account numbers in a dispute letter unless absolutely required. Use only the reference or account number the collector has already given you.

Ask About Time-Barred/Zombie Debt

Every state sets a statute of limitations on how long a creditor or collector has to sue you to collect a debt. Once that window passes, the debt is often called time-barred or "zombie debt" — the collector may still contact you, but they generally cannot successfully sue you for it in court. The risk: making even a small payment, or in some states simply acknowledging the debt in writing, can restart the clock. Before you pay or respond to an old debt, check your state's statute of limitations. The CFPB website and your state Attorney General's office are the right places to verify this — do not rely on a figure a collector gives you over the phone.

File a Complaint

If a collector has violated the FDCPA, you have options. You can file a complaint with the CFPB at consumerfinance.gov/complaint, with the FTC at reportfraud.ftc.gov, and with your state Attorney General. You may also have the right to sue the collector in federal or state court within a certain time window after the violation — a consumer protection attorney can tell you whether that makes sense in your situation. Many consumer attorneys handle FDCPA cases on a contingency basis, meaning no upfront cost to you.

If You Receive a Court Summons — This Is Urgent

A lawsuit is a different situation from a collection call or letter. If a debt collector files suit and you are served with a summons, you must respond in writing by the deadline on the documents. Every state has its own deadline, and missing it means the court could enter a default judgment against you — automatically, without hearing your side.

A default judgment can lead to wage garnishment or bank account levies, depending on your state. Do not ignore a summons. Contact a lawyer, a legal aid society in your area, or your state bar's lawyer referral service right away.