Most people who are being contacted about a debt do not know they have legal rights that specifically limit what a creditor or collector can do. The assumption that any tactics a collector uses are fair game is incorrect. The Fair Debt Collection Practices Act (FDCPA) and the Fair Credit Reporting Act (FCRA) both place hard limits on collector behavior, and violations of these limits give consumers the right to sue for damages. Understanding what is and is not allowed changes the power dynamic in a debt collection situation significantly.

1. Call You Before 8 AM or After 9 PM

The FDCPA sets specific time restrictions on when a debt collector may call you. Calls before 8 in the morning or after 9 at night in your local time zone are prohibited regardless of what time zone the collector is calling from. If a collector calls at 7 AM your time because they are operating in a different time zone, the violation is measured by your local time, not theirs. This restriction applies to third-party debt collectors, which includes collection agencies and debt buyers. Original creditors, meaning the company you originally owed the money to, are not covered by the FDCPA and operate under different rules, though many state laws extend similar protections to original creditor calls as well.

If you receive a call outside permitted hours, note the date, the time, the name of the company, and the name of the person who called. That documentation becomes evidence in an FDCPA complaint or lawsuit. You can report violations to the Consumer Financial Protection Bureau and the Federal Trade Commission. An attorney who handles FDCPA cases typically takes these cases on contingency because successful plaintiffs are entitled to actual damages, statutory damages up to $1,000, and attorney’s fees under the law.

2. Contact You at Work After You Tell Them to Stop

The FDCPA prohibits debt collectors from contacting you at your workplace if they know or have reason to know that your employer does not permit such calls. More broadly, if you tell a collector verbally or in writing not to contact you at work, they are required to stop. Continuing to call your workplace after being told not to is a violation of federal law. The same rule applies to contacting you through any means you have specifically told them not to use, whether that is a specific phone number, a text message, or a social media platform.

The most protective step in this situation is to put the instruction in writing. A written cease-and-desist letter sent by certified mail with return receipt creates a documented record that the collector received your instruction. After receiving a written cease-and-desist, a collector is limited to contacting you for two specific purposes: to confirm they will stop collection activity or to notify you that they intend to take a specific legal action such as filing a lawsuit. Any other contact after a written cease-and-desist is an FDCPA violation. The CFPB’s sample debt collection letter templates include a cease-and-desist template you can adapt for your situation.

3. Use Deceptive, Threatening, or Abusive Language

The FDCPA explicitly prohibits collectors from using obscene or profane language, making threats they do not intend to carry out or are not legally allowed to carry out, and misrepresenting the amount owed, the legal status of the debt, or their own identity. A collector who claims to be an attorney when they are not, threatens arrest for an unpaid debt, or tells you the debt is larger than it actually is has committed an FDCPA violation in each instance.

Threats of arrest for consumer debt are among the most common deceptive tactics used by collectors and one of the clearest FDCPA violations. In the United States, you cannot be arrested for failing to pay a credit card bill, a medical debt, or most other types of consumer debt. The only debt-related situation that can result in arrest is contempt of court for failing to comply with a court order, such as ignoring a summons to appear in a judgment proceeding. A collector who says they will have you arrested if you do not pay today is making a threat they have no legal authority to carry out, which is an FDCPA violation regardless of how much you actually owe.

4. Contact Third Parties About Your Debt

A debt collector is generally prohibited from discussing your debt with anyone other than you, your spouse, and your attorney. They are allowed to contact third parties for the limited purpose of locating you if they do not have your current contact information, but even in that context they are not allowed to reveal that they are a debt collector or that the call is about a debt. Telling a family member, a neighbor, a coworker, or an employer that you owe money is an FDCPA violation. Using social media in a way that publicly discloses a debt is also prohibited under the CFPB’s updated Regulation F, which extended FDCPA protections to digital communications.

If a collector has contacted someone in your life and disclosed information about your debt to that person, document what was said, who was contacted, and when. That documentation supports an FDCPA complaint and potentially a lawsuit for actual damages including emotional distress caused by the disclosure. The National Consumer Law Center publishes detailed consumer guides on FDCPA rights that are available free online and cover third-party contact violations in depth.

5. Report Inaccurate Information to the Credit Bureaus

Under the FCRA, creditors and debt collectors who report information to the three major credit bureaus are required to report accurate and complete information. Reporting a debt as active when it has been paid, reporting a balance higher than the actual amount owed, reporting an account that has passed its seven-year reporting limit, or reporting a debt that does not belong to you are all FCRA violations. The FCRA also requires creditors to investigate disputes you raise within 30 days and to correct or remove information they cannot verify as accurate.

A creditor who receives notice of a dispute and continues to report the disputed information without investigating it, or who re-reports information it knows to be inaccurate, has committed a willful FCRA violation. Willful violations entitle the consumer to actual damages, statutory damages between $100 and $1,000 per violation, punitive damages, and attorney’s fees. Disputes are submitted directly to Equifax, Experian, and TransUnion, and copies should be sent simultaneously to the creditor reporting the information. Checking your free credit reports at AnnualCreditReport.com before and after submitting a dispute lets you verify that inaccurate information has been corrected and that no new errors have appeared. Knowing your creditor legal limits under both the FDCPA and FCRA gives you a framework for recognizing violations when they occur and taking action through the right channels rather than simply absorbing conduct that the law explicitly prohibits.