FDCPA and Regulation F Compliance for Collection Agencies

Regulation F created the first numeric federal call-frequency standard. A collector is presumed to violate the FDCPA if it places more than seven call attempts to a person about a particular debt within seven consecutive days, or places any call within seven days after having a telephone conversation with the person about that debt. The presumption runs per debt, which matters for agencies working multiple accounts for the same consumer, and it counts attempts, not completed conversations.

Operationally this is a dialer configuration and audit problem. Your phone system needs per-debt attempt counting, a conversation flag that starts the seven-day quiet period, and reporting that proves both. Several states go further: Massachusetts, for example, limits collectors to two collection calls per seven-day period per debt under its Division of Banks regulations, and state licensing exams increasingly ask for call-frequency evidence. Configure to the strictest rule that applies to the account's state, not to the federal presumption alone.

Within five days of the initial communication, the agency must provide the validation information: an itemization of the debt from a defined itemization date, the current amount, the creditor's name, and the consumer's dispute and original-creditor-request rights, with a thirty-day window to dispute. Regulation F published a model validation notice, and using it substantially as designed gives the agency a safe harbor on content.

The recurring failure points are upstream data and downstream mail handling. The itemization requires account-level data many creditors do not pass cleanly at placement, so the placement file spec is a compliance document, not just an operations one. And because the notice must actually be sent and receivable, letter-vendor oversight, returned-mail handling, and electronic-delivery consent records all sit inside the validation obligation. Disputes received in the window pause collection until verification is mailed, which your workflow system has to enforce automatically.

Regulation F defined the limited-content message: a voicemail that includes only the consumer's name, a request for a reply, the individual caller's name, and a callback number, and that therefore does not count as a communication that risks third-party disclosure. Scripts must match the definition exactly, since adding the agency name or any reference to a debt takes the message outside the safe harbor.

For email and text, Regulation F permits collection communications but requires a clear and conspicuous opt-out in every message and reasonable procedures to avoid third-party disclosure, such as confirming the address or number belongs to the consumer. Consent and opt-out records need to survive account transfers: an agency taking accounts from a prior collector inherits the opt-outs, so placement files and forwarding agreements should carry communication preferences with the account.

The FDCPA's core conduct sections remain the substance of most complaints and lawsuits: no harassment or abuse, no false or misleading representations, no unfair practices. In practice that means honest caller identification, no misstatements about amounts or legal consequences, no discussing the debt with third parties, and honoring cease and refusal-to-pay instructions.

Time-barred debt gets specific treatment under Regulation F: a collector may not sue or threaten to sue on a debt it knows or should know is beyond the statute of limitations. Several states, including California, Colorado, Maryland, and Massachusetts, go further with mandatory out-of-statute disclosures or outright collection restrictions, and states differ on whether partial payment revives the period. That makes the limitations determination an account-onboarding control. Our per-state debt collection pages cover each state's limitations framework alongside its licensing rules.

FDCPA compliance is necessary but not sufficient, because most states regulate collection conduct on top of the federal floor, and several extend their rules to first-party creditors the FDCPA does not reach.

California's Rosenthal Act applies FDCPA-style duties to original creditors and adds licensing under the DCLA. Texas's Finance Code Chapter 392 reaches first-party collection and bars revival of time-barred debt by partial payment. Florida's Consumer Collection Practices Act covers any person collecting consumer debt. Pennsylvania's Fair Credit Extension Uniformity Act imports federal standards into state law for creditors and collectors alike. Massachusetts and Colorado impose their own contact limits and disclosure language. Every one of these states also has its own licensing, registration, or bonding requirement, which is where conduct compliance and licensing meet: state applications and examinations routinely request the agency's FDCPA and Regulation F policy set. Start from the per-state debt collection law pages to see each state's practice act next to its license requirements.