FDCPA compliance guide for lenders and debt collectors

Introduction

The Fair Debt Collection Practices Act (FDCPA) sets federal standards for how debt collectors can contact consumers, validate debts, and handle disputes. For lenders and collections operations teams, understanding the FDCPA is not just a compliance checkbox. Violations carry civil liability, CFPB enforcement risk, and reputational exposure that can affect your entire collections program.

This guide covers the key requirements, the most common FDCPA violations collections teams need to avoid, and how modern lending platforms help automate compliance at scale.

Key Requirements of the Fair Debt Collection Practices Act (FDCPA)

• Debt collectors have strict rules and limitations in how and when they can contact a consumer regarding their debt in order to prevent harassment, abuse, or misleading representations.
• Debt collectors are limited in when and what they can communicate with a third party regarding another person’s debt.
• If a debtor requests that a debt collector stop contacting them, the debt collector must do so.
• A debt collector must give a notice of debt, or validation notice, on initial contact or send a notice of debt within 5 days of initial contact with a consumer regarding their debt.
• A consumer can dispute a debt or request the original creditor information about a debt in writing within a 30 day time period after receiving a notice of debt.
• If a debt collector receives a dispute, they must cease collection of the disputed debt until they obtain verification of the debt or a copy of a judgment.
• If a consumer requests the name and address of the original creditor, the debt collector must cease collections on the debt until the name and address of the original creditor is mailed to the consumer.
• If a consumer has multiple debts and makes any single payment to a debt collector, the debt collector must apply the payment according to the consumer’s directions.
• The Act regulates which venues a debt collector can bring legal action against a consumer regarding a debt.
• The Act regulates factors of civil liability that debt collectors might face, such as amount of damages, court consideration, and jurisdiction.

FDCPA violations list

Even with clear rules, compliance gaps can occur. Below are some of the most common FDCPA violations collectors should actively avoid:

• Contacting Consumers Outside Permitted Hours
  Attempting to reach a consumer before 8:00 AM or after 9:00 PM (local time) without prior consent violates FDCPA timing restrictions.
• Harassment or Abusive Communication
  Repeated calls, threats, or the use of profane or abusive language are strictly prohibited and considered harassment under the Act.
• Ignoring a Cease Communication Request
  Continuing to contact a consumer after receiving a formal written request to stop all communication constitutes a direct FDCPA violation.
• Failure to Provide a Validation Notice
  Collectors must send a written notice within five days of initial contact detailing the debt amount, creditor name, and the consumer’s right to dispute. Failing to do so breaches FDCPA requirements.
• Disclosing Debt Information to Unauthorized Parties
  Sharing or discussing a consumer’s debt with anyone other than the consumer, their attorney, or authorized third parties (for location purposes only) is not permitted.
• Misrepresenting the Debt Amount or Status
  Collectors cannot inflate the amount owed, misrepresent the legal status of a debt, or claim fees or interest are owed when they are not permitted under the original agreement. This is one of the more frequently cited violations in CFPB enforcement actions.
• Threatening Legal Action the Collector Cannot or Does Not Intend to Take
  Implying a lawsuit is imminent when none is planned, or threatening arrest for nonpayment, violates FDCPA prohibitions on deceptive and threatening communications.

FDCPA and Regulation F

Regulation F, which took effect in November 2021, is the CFPB's formal rule implementing the FDCPA. It introduced new requirements around electronic communications, limits on call frequency (no more than seven calls within seven days about a specific debt), and the model validation notice format. Collections teams operating under the FDCPA need to comply with both the original statute and Regulation F.

LoanPro Solutions

LoanPro's Collections Suite is built to support FDCPA compliance at every stage of the collections workflow:

Dynamic templates help ensure validation notices, cease communication acknowledgments, and dispute responses meet FDCPA formatting and timing requirements. Automated event triggers send required notices by the right channel at the right time, reducing the risk of missing the five-day validation notice window. Agent walkthroughs and compliance guardrails enforce FDCPA rules at the point of contact, so collectors follow compliant scripts and workflows without relying on manual oversight. A complete audit trail logs every borrower interaction, giving your compliance team the documentation needed to respond to disputes, CFPB inquiries, or litigation.

For more information on guardrails and security features that help maintain regulatory compliance, see our security overview.

FAQs

What is the FDCPA and who does it apply to?

The Fair Debt Collection Practices Act is a federal law that regulates how third-party debt collectors can contact and communicate with consumers about personal, family, or household debts. It applies to collection agencies, debt buyers, and attorneys who regularly collect debts. It does not generally apply to original creditors collecting their own debts, though many states have laws that extend similar protections to first-party collection activity.

What are the most common FDCPA violations?

The most common violations include contacting consumers outside permitted hours, ignoring written cease communication requests, failing to send a timely validation notice, misrepresenting the debt amount or legal status, and threatening legal action the collector does not intend to take. Each carries civil liability exposure and can result in CFPB enforcement action.

What must a debt collector include in a validation notice?

A validation notice must include the amount of the debt, the name of the creditor to whom the debt is owed, a statement that the consumer has 30 days to dispute the debt, and notice that the collector will provide verification if the consumer disputes in writing. Regulation F introduced a model validation notice format that satisfies these requirements when used correctly.

Does the FDCPA apply to original creditors?

Generally no. The FDCPA applies to third-party debt collectors, not to original creditors collecting their own debts. However, if an original creditor uses a different name that suggests a third party is collecting, FDCPA rules may apply. Several states also have their own debt collection laws that cover original creditors.