What Is the FDCPA?
The Fair Debt Collection Practices Act (15 U.S.C. § 1692) is a federal law enacted in 1977 that regulates how debts can be collected. It was designed to eliminate abusive, deceptive, and unfair collection practices. Originally targeting third-party collection agencies, the law's reach has expanded significantly.
Here's the part most SMBs miss: while the FDCPA technically applies to "debt collectors" (third parties collecting debts owed to someone else), many states have enacted their own fair debt collection statutes that apply to original creditors — meaning your own business collecting its own invoices. California, Texas, New York, and at least 30 other states have laws that mirror or exceed the FDCPA for first-party collectors.
Even if you're a first-party creditor in a state without such laws, following FDCPA guidelines is smart business practice. The rules are the baseline for professional, legally defensible collection behavior. Violating them exposes you to state consumer protection claims, even if the FDCPA itself doesn't apply directly.
7 Things You Cannot Do When Collecting Debts
These prohibitions come directly from the FDCPA (Sections 1692c through 1692f) and are enforced by the FTC and CFPB. Whether or not the federal law applies to your specific situation, these represent the legal floor for debt collection conduct across the United States.
Call before 8:00 AM or after 9:00 PM
Under Section 1692c(a)(1), you cannot contact a debtor at any unusual time or place. Phone calls, texts, and even emails outside of 8 AM to 9 PM in the debtor's local time zone are prohibited. This includes automated messages and voicemails. Violation alone can trigger a lawsuit.
Contact debtors at their workplace if the employer prohibits it
If you know (or have reason to know) that the debtor's employer doesn't allow personal collection calls at work, contacting them there violates Section 1692c(a)(3). A single call to a workplace after being told to stop is enough for a valid claim.
Use threatening, harassing, or abusive language
Section 1692d prohibits any conduct intended to harass, oppress, or abuse. This includes profanity, threats of violence, repeatedly calling with intent to annoy, and publishing "shame lists" of debtors. Even implying consequences that you cannot legally carry out (like arrest) counts as a violation.
Misrepresent the amount owed or your authority
Section 1692e prohibits false, deceptive, or misleading representations. You cannot inflate the debt amount, add unauthorized fees, claim to be an attorney when you're not, or threaten legal action you don't intend to take. Overstating a balance by even a few dollars can constitute a violation.
Discuss the debt with third parties
You may not disclose the existence of a debt to anyone other than the debtor, their spouse, their parent (if they're a minor), their guardian, their attorney, or a credit reporting agency. Calling a debtor's neighbor, friend, or family member to discuss the debt is a clear violation under Section 1692c(b).
Continue contact after a written cease-and-desist
Once a debtor sends a written request to stop communication, you must cease all contact except to confirm you'll stop, or to notify them of a specific legal action (like filing a lawsuit). Ignoring a cease-and-desist letter is one of the most commonly litigated FDCPA violations.
Fail to send a validation notice within 5 days of first contact
Section 1692g requires that within 5 days of your initial communication, you must send a written notice stating: the amount of the debt, the name of the creditor, and the debtor's right to dispute the debt within 30 days. Failure to send this notice — or sending an incomplete one — is a standalone violation.
Penalties for FDCPA Violations
The penalties are structured to make even small violations expensive. Under 15 U.S.C. § 1692k, a debtor who successfully sues can recover:
- Actual damages — any real financial harm caused by the violation (emotional distress, lost wages, etc.)
- Statutory damages up to $1,000 per case — awarded regardless of actual harm
- Attorney's fees and court costs — this is the expensive part. Attorney fees in FDCPA cases routinely run $5,000–$30,000, far exceeding the statutory cap
- Class action damages up to $500,000 or 1% of the collector's net worth, whichever is less
The economics are clear: even a single violation on a $500 invoice can generate $10,000+ in legal liability once attorney fees are included. This is why consumer attorneys actively seek FDCPA cases — they're profitable to litigate.
Best Practices for Compliant Collections
Always identify yourself and the purpose of the call
Every communication — phone, email, letter — must clearly identify who you are, which company you represent, and that this is an attempt to collect a debt. The FDCPA requires this disclosure in every contact, not just the first one. Ambiguous or vague messages ("please call us about an important business matter") without the required disclosure can be challenged.
Keep records of every communication
Document the date, time, method, and content of every collection attempt. If a dispute arises, you need a complete paper trail showing you followed every rule. Courts look at the totality of your behavior — a well-documented collection effort demonstrates good faith.
Send the validation notice before anything else
The safest approach is to include the full validation notice in your very first communication. This covers the 5-day requirement and ensures compliance from the start. The notice must include: the debt amount, the creditor's name, and a statement that the debtor has 30 days to dispute the debt.
Respect time zones and schedules
If your clients are across multiple time zones, you need to track their local time. A call that's perfectly legal at 5 PM in New York is a violation at 8 PM in the debtor's time zone if they're in California and you call at 6 PM Pacific. Use automated scheduling to eliminate this risk entirely.
Include this language (or equivalent) in every first written collection contact:
This communication is from [Your Company Name] regarding invoice [#NUMBER] in the amount of [$AMOUNT], originally due on [DATE].
This is an attempt to collect a debt, and any information obtained will be used for that purpose.
You have the right to dispute this debt. If you notify us in writing within 30 days of receiving this notice, we will obtain and mail you verification of the debt. If you request it in writing within 30 days, we will provide you with the name and address of the original creditor, if different from the current creditor.
Manual vs. Automated Compliance
Most FDCPA violations aren't intentional — they're the result of human error under pressure. A tired employee calls 10 minutes too late. A frustrated founder sends a sharply worded email. A validation notice gets forgotten during a busy month. Automation eliminates every one of these failure modes.
| Factor | Manual Collection | Automated (PayPlz) |
|---|---|---|
| Timing compliance | Depends on who's calling and when | Enforced automatically — cannot send outside hours |
| Validation notice | Easily forgotten or incomplete | Included in first contact by default |
| Language consistency | Varies by employee mood and skill | Pre-approved templates every time |
| Audit trail | Spotty — relies on manual logging | Complete record of every contact, timestamped |
| Cease-and-desist handling | Risk of accidental continued contact | Automatic suppression once flagged |
| Legal exposure | High — one mistake triggers liability | Minimal — rules enforced at system level |
How PayPlz Keeps You Compliant
Compliant by default
Every message includes required disclosures and validation notices. Timing rules are enforced automatically. No manual steps to forget.
Full audit trail
Every email, every reminder, every escalation is logged with timestamps. If a dispute arises, your compliance record is already built.
Professional tone, always
Pre-written, legally reviewed templates in English, French, and Spanish. No emotional calls, no aggressive language, no human error.
Collect invoices without legal risk.
PayPlz — FDCPA-compliant collections, $49/month. No commission. No contracts.
Start collecting compliantly →Sources
- Fair Debt Collection Practices Act, 15 U.S.C. § 1692 — law.cornell.edu
- Consumer Financial Protection Bureau — Debt Collection Annual Report 2023 — consumerfinance.gov
- WebRecon LLC — FDCPA & TCPA Litigation Statistics 2023 — webrecon.com
- FTC — The Structure and Practices of the Debt Buying Industry — ftc.gov