Federal consumer law gives people dealing with debt collectors, credit-report errors and unwanted calls specific, usable rights. Debt collectors must explain a debt in writing and pause collection when it is disputed in time. Credit bureaus must reinvestigate disputed items, generally within 30 days. Automated calls to cell phones generally require the called person's prior consent.
Many people facing this process arrive after something specific has happened: a collection letter for an account they do not recognize, a loan denial traced to a report that is not theirs, a phone that will not stop ringing with recorded messages, or a notice that their personal information was exposed. Many feel embarrassed, and many are unsure whether any law reaches their situation. This guide walks through the federal process in order: which law applies, what it requires, what records matter, which official channels exist, what remedies the law provides, and how long each step generally takes.
Before You Start: What These Laws Cover and Who They Protect
Four federal statutes do most of the work in this area, and each applies across the United States.
- The Fair Debt Collection Practices Act (FDCPA), 15 U.S.C. § 1692 et seq. Its stated purpose under 15 U.S.C. § 1692(e) is "to eliminate abusive debt collection practices by debt collectors." Under 15 U.S.C. § 1692a(3), a "consumer" is any natural person obligated or allegedly obligated to pay any debt. That means a person who disputes owing the money is still protected.
- The Fair Credit Reporting Act (FCRA). It covers the accuracy, fairness and privacy of the information that credit bureaus and other reporting companies hold about individual people.
- The Telephone Consumer Protection Act (TCPA), 47 U.S.C. § 227. It restricts automated and prerecorded calls, and it protects the "called party," meaning the person who receives the call.
- The Federal Trade Commission Act, 15 U.S.C. § 45. It declares unfair or deceptive acts or practices in or affecting commerce unlawful.
Two federal agencies handle much of the public-facing work: the Consumer Financial Protection Bureau (CFPB) and the Federal Trade Commission (FTC). State law can add protections, and those protections differ from state to state. For an overview of how these statutes fit together, see this site's page on consumer rights law coverage.
Step 1 — Identify Which Law Applies to Your Situation
The first step is matching the problem to the statute that governs it, because each law covers different companies and different conduct.
Contact from a debt collector about a personal, family or household debt points to the FDCPA. Under 15 U.S.C. § 1692a(6), a "debt collector" is a person "in any business the principal purpose of which is the collection of any debts, or who regularly collects or attempts to collect, directly or indirectly, debts owed or due or asserted to be owed or due another." The CFPB explains that the FDCPA does not cover business debts. It also notes that the FDCPA "doesn't generally cover collection by the original creditor."
An error on a credit report or background check points to the FCRA. A "consumer reporting agency" is a company that gathers information about people and sells reports on them, such as a credit bureau or a tenant- or employment-screening company. A "consumer report" is the report that company produces. A "furnisher" is the business that supplies information to the agency, such as a lender or a collector.
Unwanted automated calls or texts point to the TCPA. Unfair or deceptive business conduct generally falls under the FTC Act.
These laws can overlap. If a debt collector places automated calls to a cell phone, that situation can raise questions under both the FDCPA and the TCPA. Each statute's rules still apply only to its own subject.
Step 2 — Know What the Law Requires (and Prohibits)
This step lays out each statute's core duties, so a reader can compare them with what actually happened. The deadlines attached to these duties are collected in the timeline section below.
FDCPA. Under 15 U.S.C. § 1692g(a), a debt collector must send a written validation notice within five days after its first communication with the consumer. That requirement does not apply if the first communication already contained the information or if the consumer has paid the debt. The notice includes the amount of the debt, the creditor's name and a statement of the 30-day dispute right, among other items.
Under 15 U.S.C. § 1692c(a), a collector may not communicate with a consumer, without the consumer's prior consent given directly to the collector or a court's express permission, in three situations:
- at an unusual or inconvenient time or place, with before 8 a.m. and after 9 p.m. local time presumed inconvenient;
- when the collector knows the consumer has an attorney for the debt and can readily find the attorney's name and address, unless the attorney fails to respond within a reasonable time or consents to direct contact;
- at work, if the collector knows or has reason to know the employer prohibits such communication.
The CFPB adds that the FDCPA prohibits abusive, unfair or deceptive practices, including harassment. Conduct like this may violate the FDCPA, but whether a particular situation does depends on its facts. Contact with relatives has its own limits, covered on this site's page about debt collectors calling family.
FCRA. Under 15 U.S.C. § 1681e(b), a consumer reporting agency preparing a report must follow reasonable procedures to assure maximum possible accuracy. Under 15 U.S.C. § 1681i(a), it must reinvestigate disputed information free of charge, although under 15 U.S.C. § 1681i(a)(3)(A) it may terminate a reinvestigation if it reasonably determines the dispute is frivolous or irrelevant.
TCPA. Under 47 U.S.C. § 227(b)(1)(A)(iii), it is unlawful to call a cell phone number using an automatic telephone dialing system or an artificial or prerecorded voice. The prohibition has two exceptions: calls made for emergency purposes and calls made with the called party's "prior express consent," meaning permission the person gave before the call. The statute's text also lists an exception for calls made to collect certain debts backed by the United States. That exception is not current law, because the Supreme Court held it invalid and severed it in Barr v. American Association of Political Consultants, No. 19-631 (July 6, 2020).
The FCC states that a consumer may opt out of any robocall or robotext "at any time and in any reasonable manner," even after giving consent. That withdrawal is called revocation.
FTC Act. Under 15 U.S.C. § 45(a)(1), unfair or deceptive acts or practices in or affecting commerce are unlawful. The FTC enforces that rule, subject to exceptions for certain banks, carriers and other businesses listed in 15 U.S.C. § 45(a)(2).
Records turn a confusing experience into a timeline someone can follow. The CFPB's page notes that keeping documents a debt collector sends, and writing down the dates, times and substance of conversations, "can help you if you meet with a lawyer or go to court."
The useful records differ by problem.
- Debt collection: the collector's name, address and any account number; every letter, email or text received; and dated notes of each call.
- Credit-report errors: a copy of the report showing the error; the specific item in dispute and the reason it is wrong; and supporting papers such as account statements, court records or an identity theft report.
- Unwanted calls or texts: the calling number, the date and time, whether the call used a recorded or automated voice, and whether consent was ever given or withdrawn, along with the date of any stop request. The FTC's Do Not Call page also mentions writing down the date a company was asked to stop calling.
- Identity theft: any fraud reports already made and any letters showing accounts that were opened in the person's name without permission.
Gathering these records is often the most tiring part, especially when the calls are still coming in. A complete file still makes every later step clearer.
Step 4 — Use the Official Dispute and Complaint Processes
Each statute provides written channels a consumer may use. This step explains how each channel works; the timeline section below lists the clocks that apply.
Debt validation. Under 15 U.S.C. § 1692g(b), a consumer may notify the collector in writing, within the dispute window that follows the validation notice, that the debt or any part of it is disputed. The consumer may also request the original creditor's name and address. Once that notice arrives, the collector must stop collecting the disputed amount until it mails the consumer verification of the debt or a copy of a judgment, or the original creditor's name and address. Any collection activity during the 30-day period may not overshadow, or be inconsistent with, the disclosure of the dispute right. The FTC mentions certified mail with a return receipt as one way to show that a letter was received.
Stopping contact. Under 15 U.S.C. § 1692c(c), a consumer may notify a collector in writing that the consumer refuses to pay or wants communication to stop. After that, the collector may contact the consumer only for three purposes: to say its efforts are ending, to say it or the creditor may invoke remedies it ordinarily uses, or to say it intends to invoke a specified remedy. Notice sent by mail is complete when it is received. A stop request does not cancel the debt.
Credit-report disputes. Under 15 U.S.C. § 1681i(a)(1)(A), a consumer may dispute the completeness or accuracy of an item directly with the consumer reporting agency. Under 15 U.S.C. § 1681i(a)(2)(A), the agency must then notify the furnisher of the dispute within five business days, including all relevant information the consumer provided. Disputes with a single bureau are covered on this site's page on Experian credit report disputes.
Agency complaints. The CFPB states that a consumer "can submit a complaint with the CFPB" about debt collection. The FCC and the FTC accept reports of illegal calls. The FCC says it "doesn't resolve individual complaints" but uses them to guide policy and enforcement. Filing a complaint does not guarantee any particular result.
Step 5 — Understand What the Law Makes Potentially Available
Each statute sets its own remedies, and every one depends on what a court finds about the facts.
FDCPA. Under 15 U.S.C. § 1692k(a), a debt collector that fails to comply with the statute is liable for three things. The first is any actual damage the person sustained as a result. The second, in an individual action, is additional damages the court may allow, not exceeding $1,000. The third, in a successful action, is costs and a reasonable attorney's fee. In setting the amount, a court considers factors including how frequent and persistent the noncompliance was, its nature and whether it was intentional. A collector is not liable if it shows the violation was unintentional and resulted from a bona fide error despite reasonable procedures. The FTC notes that a lawsuit must be filed within one year of the violation, and that even if a court finds a violation, "you may still owe the debt."
FCRA. Under 15 U.S.C. § 1681n(a), willful noncompliance can bring actual damages or damages of not less than $100 and not more than $1,000. It can also bring punitive damages the court may allow, plus costs and reasonable attorney's fees in a successful action. Under 15 U.S.C. § 1681o(a), negligent noncompliance can bring actual damages, plus costs and fees in a successful action.
TCPA. The TCPA sets its own remedies, with conditions of their own. They are discussed on this site's page about consumer lawsuits.
Whether any situation gives rise to any of these remedies depends entirely on its facts.
Step 6 — When the Process Gets More Complicated
A few situations add layers to the steps above.
Mixed files
A "mixed file" is a consumer reporting agency file that combines one person's information with another person's. The accuracy duty in 15 U.S.C. § 1681e(b) and the dispute process in 15 U.S.C. § 1681i(a), described above, can come into play when information in a file belongs to someone else.
Identity theft
The CFPB's FCRA summary states that "identity theft victims and active duty military personnel have additional rights" beyond those described above. When fraudulent accounts appear on a report, both the credit-report dispute process and the debt-validation process can come into play.
Adverse action
"Adverse action" includes a denial of credit, insurance or employment based on a consumer report. The CFPB's summary states that anyone taking adverse action based on a report must say so and give the name, address and phone number of the agency that provided it. Separately, 15 U.S.C. § 1681m(h)(1) requires a notice, subject to the exceptions and rules that subsection describes, when a person uses a consumer report in connection with credit on material terms that are materially less favorable than the most favorable terms available to a substantial proportion of consumers. Under 15 U.S.C. § 1681m(h)(5), that notice must, at a minimum, identify the consumer reporting agency furnishing the report and state that the consumer may obtain a copy of the report from that agency without charge.
Class actions and state law
Under 15 U.S.C. § 1692k(a)(2)(B), in an FDCPA class action, the court may allow damages for the class. For class members other than the named plaintiffs, those damages may not exceed the lesser of $500,000 or 1 percent of the debt collector's net worth. State laws may add protections, and they differ from state to state.
Typical Timeline: What to Expect After You Act
This section gathers in one place the fixed clocks the statutes set for the duties and processes described above.
- Validation notice: sent within five days after the collector's first communication, under 15 U.S.C. § 1692g(a).
- Dispute window: 30 days after the consumer receives that notice.
- After a timely written dispute: collection of the disputed amount pauses until the collector mails verification, under 15 U.S.C. § 1692g(b). The statute sets no fixed date for that verification.
- Credit-report reinvestigation: the agency must notify the furnisher within five business days and generally must finish within 30 days of receiving the dispute, under 15 U.S.C. § 1681i(a). That period can generally extend by up to 15 days if the consumer sends relevant information during the 30 days. The extension does not apply if the item is found inaccurate or incomplete, or cannot be verified, within that period.
- Do Not Call Registry: the FTC says a number usually appears on the Registry the next day, but sales calls can take up to 31 days to stop.
Actual timing varies with the complexity of the dispute and how quickly each party responds.
Requesting a Case Review About a Consumer-Law Problem
Debt collection, credit reporting and call problems rarely fit neatly into one statute, and the dates involved, such as when a notice arrived or when a dispute was received, can shape what each law covers. This page does not cover bankruptcy, debt settlement or credit repair services.
A consumer may request a consumer rights case review about a situation like this through Federal Consumer Rights.
