Checklist · Consumer Protection

FDCPA Debt Collection Compliance: A Practical Checklist

15 U.S.C. § 1692

Type
Checklist
Jurisdiction
National
Date
2024-06-17
Topic
Consumer Protection

This checklist walks a collection operation through Fair Debt Collection Practices Act and Regulation F compliance from the ground up. It begins with the threshold question that decides everything else — whether you are a "debt collector" under 15 U.S.C. § 1692a(6) or a creditor collecting its own debt — then works through the initial communication and the Regulation F validation notice, the 30-day dispute window and the duty to cease collection pending verification, and the rules governing when, where, and how often you may call. It covers electronic communications and the mandatory opt-out, third-party contacts and location information, represented consumers and cease-communication demands, and the prohibitions on harassment, false representations, and unfair practices. It closes with time-barred debt, the venue rule and the documentation you need before you sue, and the bona fide error defense — including why *Jerman* means that defense will not save you from a mistake of law. Use it to build a compliance program, to audit an existing one, or to evaluate a claim.

FDCPA Debt Collection Compliance: A Practical Checklist

Consumer Protection > Debt Collection | Published 17 June 2024 - Updated 8 November 2025 | UpLaw - uplaw.us

The Fair Debt Collection Practices Act is a strict-liability statute read through the eyes of the least sophisticated consumer, and it lets a consumer who suffered no actual damages recover statutory damages plus your attorney's fees for their lawyer. Almost every FDCPA defendant lost the case before the first phone call — in a script, a letter template, or a data field that nobody audited.

Keywords: FDCPA, Regulation F, debt collector, validation notice, 30-day dispute period, 7-in-7 call frequency, cease communication, third-party disclosure, limited-content message, time-barred debt, venue, bona fide error, least sophisticated consumer, mini-Miranda

How to use this checklist

Our worked example is Ashbury Recovery LLC, a new third-party collection agency in Ohio. Its first client is Cedar Ridge Fitness, a regional gym chain that has placed roughly 4,000 delinquent membership accounts — and, mixed into the same file, about 200 accounts from corporate wellness contracts with employers. Ashbury's operations lead wants a compliance program that will survive a plaintiff's-side FDCPA lawyer, a state licensing exam, and a CFPB supervisory visit. Our consumer is Dana Whitfield, a lapsed member with a disputed $412 balance.

Work the phases in order. The early ones are cheap; the late ones are where the money is.

Phase 1 — Are you a "debt collector"? (and why creditors collecting their own debts usually are not)

  • [ ] Confirm the obligation is a "debt" under 15 U.S.C. § 1692a(5) — money arising from a transaction primarily for personal, family, or household purposes. Commercial and business-to-business obligations are outside the FDCPA entirely.
  • [ ] Segregate consumer accounts from business accounts in intake so the consumer rules apply to the right file.
  • [ ] Determine whether you meet either prong of § 1692a(6): (a) the principal purpose of your business is collecting debts, or (b) you regularly collect debts owed or due another.
  • [ ] Check the exclusions in § 1692a(6)(A)–(F) — officers and employees of the creditor collecting in the creditor's name; affiliated collectors; and, critically, a person collecting a debt that was not in default when it was obtained.
  • [ ] If you are a debt buyer, decide whether you are collecting on your own account — and read Henson before you conclude you are exempt.
  • [ ] If you are a law firm that regularly collects consumer debts, assume the FDCPA applies to you, including in litigation.
  • [ ] Map the state overlay: a state mini-FDCPA may cover you even if the federal Act does not.
  • [ ] Confirm licensing and bonding in every state where you will collect.

Why it matters, and the traps. The threshold question controls everything downstream. In Henson v. Santander Consumer USA Inc., 582 U.S. 79 (2017), the Supreme Court held that a company that buys defaulted debt and then collects it for itself is not collecting a debt "owed or due another," and so is not a debt collector under that prong. But Henson is narrower than debt buyers wish: the Court expressly declined to decide whether such a buyer might still be covered under the "principal purpose" prong, and most debt buyers exist for no purpose other than collecting debt. Do not build a compliance program on Henson.

Two more boundaries. Heintz v. Jenkins, 514 U.S. 291 (1995), holds that the Act applies to lawyers who regularly collect consumer debts through litigation — the complaint, the discovery, the collection letter on firm letterhead, all of it. And Obduskey v. McCarthy & Holthus LLP, 586 U.S. 466 (2019), holds that a business engaged in no more than nonjudicial foreclosure is not a debt collector under the general definition, though it remains subject to § 1692f(6).

The state layer is where the "I'm a creditor, so I'm exempt" theory dies. California's Rosenthal Fair Debt Collection Practices Act, Cal. Civ. Code §§ 1788 et seq., reaches creditors collecting their own consumer debts and incorporates much of the federal Act by reference. Other states — Texas (Tex. Fin. Code ch. 392), Massachusetts (940 C.M.R. 7.00), New York (23 NYCRR Part 1) — have their own regimes, some broader than the federal Act, and 15 U.S.C. § 1692n preserves any state law that is more protective. UpLaw's Consumer Protection Law: A Comprehensive Guide to the FDCPA, FCRA, TCPA, and State UDAP Statutes maps the federal/state interaction in detail.

Ashbury's answer: it collects debts owed to another (Cedar Ridge) that were in default when placed. It is squarely a debt collector. The 200 corporate wellness accounts are business debts and fall outside the FDCPA — but Ashbury must actually route them differently, because a single shared letter template would apply consumer disclosures to business accounts and, far worse, business scripts to consumer accounts.

Phase 2 — The initial communication and the validation notice

  • [ ] Include the mini-Miranda in the initial communication: that you are attempting to collect a debt and that any information obtained will be used for that purpose (§ 1692e(11)). In subsequent communications, disclose that the communication is from a debt collector.
  • [ ] Deliver the validation information either in the initial communication or in writing within five days after it (§ 1692g(a); 12 C.F.R. § 1006.34).
  • [ ] Use the Regulation F Model Form B-1 (Appendix B to Part 1006) — using it properly is a safe harbor.
  • [ ] Populate every required field: your name and mailing address; the consumer's name and address; the itemization date; the amount of the debt as of the itemization date; an itemization of interest, fees, payments, and credits since that date; the current amount; the name of the creditor to whom the debt is owed; the end date of the validation period; and the dispute/original-creditor prompts (§ 1006.34(c)).
  • [ ] Provide tear-off dispute prompts or an equivalent mechanism the consumer can actually use.
  • [ ] Do not put anything on the envelope other than your address (§ 1692f(8)); do not use a postcard (§ 1692f(7)).
  • [ ] Reconcile the amount against the client's system of record before the letter goes out.

Why it matters, and the traps. The validation notice is the single most litigated document in consumer collections, because it is a form — one bad template generates thousands of identical violations and a class action. Regulation F's § 1006.34 replaced years of circuit-by-circuit guesswork with a specified content list and a model form that carries a safe harbor. Deviating from the model form is legal; it is also a decision to litigate your own drafting.

The itemization date is the field that trips new agencies. It is a fixed reference point (for example, the last statement date, the charge-off date, or the date of the last payment), and the notice must show the balance as of that date plus everything added or subtracted since. If the client's placement file gives you only a lump "current balance," you cannot complete the form correctly — and you cannot invent the breakdown. Push the itemization requirement upstream into your client onboarding and placement-file specification, not into the letter shop.

Two more: naming the wrong creditor (the servicer instead of the current owner, or a brand name that is not the legal entity) is a § 1692e(2)(A) misstatement of the character of the debt; and adding interest or fees that the underlying agreement never authorized violates § 1692f(1), which permits collection only of amounts expressly authorized by the agreement creating the debt or permitted by law.

Ashbury: Cedar Ridge's export shows "$412.00 balance." Ashbury's compliance lead refuses to mail until Cedar Ridge supplies the itemization date (the date of last statement), the $150 in "membership reactivation fees," and the membership agreement language authorizing them. Two of the fees turn out to be unauthorized. That refusal is worth more than the entire rest of the program.

Phase 3 — The 30-day dispute window and the duty to cease pending verification

  • [ ] Calendar the validation period: it runs 30 days from the date the consumer receives (or is presumed to receive) the validation information (§ 1692g(a); 12 C.F.R. § 1006.34(b), defining the validation period).
  • [ ] Do nothing during that window that overshadows or is inconsistent with the consumer's right to dispute — no "pay within 10 days or else," no threatened suit, no confusing dual deadlines.
  • [ ] On a written dispute or a written request for the original creditor's name and address received within the period: cease collection of the debt (§ 1692g(b); 12 C.F.R. § 1006.38).
  • [ ] Obtain verification from the creditor and mail it to the consumer before resuming any collection activity.
  • [ ] Never treat the consumer's silence as an admission — § 1692g(c) forbids it.
  • [ ] Log the dispute, the cease date, the verification request, the verification received, and the resume date. Build the audit trail as you go.
  • [ ] Flag duplicative disputes properly rather than ignoring them (§ 1006.38(d)).

Why it matters, and the traps. "Cease collection" means stop, not slow down. It stops dunning letters, calls, credit furnishing on that account, and any lawsuit. Verification is not a full evidentiary audit — courts generally require the collector to confirm with the creditor that the amount is what the creditor claims and communicate that back — but a bare re-statement of the balance with no reference to the account will not do, and several courts have said so.

The "overshadowing" doctrine is the classic trap. A perfectly compliant validation notice followed four days later by a call demanding payment "today" can be an FDCPA violation because the least sophisticated consumer would think the 30-day right had evaporated. Collection activity during the window is not forbidden — but it must be consistent with, and must not obscure, the disclosed right to dispute.

Ashbury: Dana Whitfield mails a dispute on day 22. Ashbury's dialer campaign is already loaded. The account must be suppressed system-wide — dialer, letter series, and the furnishing feed to the credit bureaus — the moment the dispute is scanned. If your suppression flag only stops one channel, you do not have a suppression flag.

Phase 4 — Communication rules: time, place, and the workplace prohibition

  • [ ] Call only between 8:00 a.m. and 9:00 p.m. local time at the consumer's location — the statutory presumption of convenience under § 1692c(a)(1).
  • [ ] Treat any consumer-stated inconvenient time or place as binding, and record it.
  • [ ] Never call the consumer at work once you know or have reason to know the employer prohibits such calls (§ 1692c(a)(3)) — and a single statement from the consumer gives you that reason to know.
  • [ ] Use the consumer's time zone, not yours. Dialers that are configured on the agency's local clock generate violations at scale.
  • [ ] Honor a request not to be contacted through a particular medium — Regulation F prohibits communicating through a medium of communication the consumer has asked you not to use (12 C.F.R. § 1006.14(h)).
  • [ ] Confirm your dialer suppresses calls to numbers the consumer has said are inconvenient — including cell numbers used at work.

Why it matters, and the traps. These rules are boring, which is exactly why they are violated. The 8-to-9 window is measured at the consumer's location, and when your data contains a stale area code — a Cleveland number for a consumer who moved to Portland — a 7:45 p.m. Eastern call lands at 4:45 p.m. Pacific and is fine, while an 8:15 p.m. Eastern call to a Honolulu-based consumer is not. The problem is address/phone drift, not intent, and intent is irrelevant: the FDCPA is strict liability, subject only to the narrow bona fide error defense in Phase 12.

Note also the TCPA overlay: autodialed or prerecorded calls and texts to cell phones raise a separate statute with separate consent requirements and $500–$1,500 per-call statutory damages. A collection call can be FDCPA-clean and TCPA-fatal. Consumer Protection Law: A Comprehensive Guide to the FDCPA, FCRA, TCPA, and State UDAP Statutes treats the two regimes together, and Running Background Checks Under the FCRA: A Practical Checklist covers the credit-reporting side of the same consumer-data ecosystem.

Phase 5 — The Regulation F call-frequency presumption (7-in-7 and the 7-day rule)

  • [ ] Cap outbound calls at seven calls in seven consecutive days per particular debt (12 C.F.R. § 1006.14(b)(2)).
  • [ ] After you have a telephone conversation with the consumer about a debt, do not call again about that debt for seven consecutive days.
  • [ ] Configure the counter at the debt level, not the consumer level, and make sure it counts attempts, not connections.
  • [ ] Understand the exclusions in § 1006.14(b)(3): calls placed with the consumer's prior consent given directly to you within the period; calls that do not connect; and calls to specified parties such as the consumer's attorney, the creditor, a consumer reporting agency, or your own counsel.
  • [ ] Remember the presumption runs both ways: staying under the cap is a presumption of compliance, not immunity — the underlying § 1692d(5) prohibition on repeated calls intended to annoy, abuse, or harass still applies.
  • [ ] Run a weekly exception report on accounts that hit the cap.

Why it matters, and the traps. Regulation F converted a vague standard into a numeric presumption, and that is a gift — but it is a rebuttable presumption, not a safe harbor. Six calls a day for six days, or a call every morning at 8:01, can still be harassment under § 1692d even if the tally is technically under the line, because the consumer can rebut the presumption of compliance with evidence of harassing intent or effect.

The per-debt design is the compliance landmine. If Cedar Ridge places three separate delinquent memberships for the same household, a literal reading permits 21 calls in seven days to one phone. That is the letter of the rule and a plaintiff's opening paragraph. Sophisticated agencies set a household/phone-level cap below the regulatory ceiling for exactly this reason.

Ashbury: it sets the dialer to five attempts per debt per seven days, a hard seven-day cooling-off after any right-party contact, and a household cap of eight attempts per week across all accounts. It will collect slightly less and get sued considerably less.

Phase 6 — Electronic communications: email, text, and the required opt-out

  • [ ] Before emailing or texting, confirm you have a valid address or number under one of Regulation F's procedures (12 C.F.R. § 1006.6(d)).
  • [ ] Include in every electronic communication a clear and conspicuous statement describing one or more ways to opt out of further electronic communications to that address or number (§ 1006.6(e)).
  • [ ] Make the opt-out free and simple — you may not charge a fee, and you may not demand information beyond the consumer's opt-out preference and the address or number at issue.
  • [ ] Do not email a workplace email address you know or should know is provided by the consumer's employer, absent the narrow exceptions (§ 1006.6(b)(2)).
  • [ ] Honor an opt-out immediately across all systems, and log it.
  • [ ] Do not send an electronic message whose subject line, sender name, or preview text discloses the debt to anyone who might see the screen — that is a § 1692c(b) third-party disclosure problem in a new medium.
  • [ ] If you leave voicemail, use a compliant limited-content message (12 C.F.R. § 1006.2(j)) — business name that does not indicate you are in the debt collection business, a request to reply, the name of a natural person to contact, and a phone number.

Why it matters, and the traps. Regulation F opened the door to email and text and then hung a bell on it. The opt-out statement is required in each electronic communication; a single templated campaign missing it is a per-message violation across your whole population. And "reply STOP" is a fine opt-out mechanism only if your platform actually processes it.

The limited-content message is one of Regulation F's genuinely useful innovations. Before it, a voicemail was a communication, so it could not disclose the debt (§ 1692c(b)) but also could not omit the mini-Miranda (§ 1692e(11)) — an impossible pairing that produced a decade of litigation. A properly built limited-content message is, by definition, not a communication, and therefore does not trigger either rule. Build the script once, word for word, and never let a collector improvise on top of it.

One more overlay worth naming. A collection email is still a commercial email, and if your messages carry any promotional content — a settlement "offer," a payment-portal pitch — you may pick up CAN-SPAM obligations on top of Regulation F's opt-out: see CAN-SPAM Compliance for Commercial Email: A Practical Checklist. And because the addresses and phone numbers you are emailing and texting are consumer personal data, the intake, retention, and vendor-diligence discipline in Standing Up a Privacy Compliance Program: A Practical Checklist is the same discipline that keeps a stale phone number from becoming a § 1692c(b) disclosure.

Ashbury: its texting vendor's template ships without an opt-out line, on the theory that "reply STOP" is universally understood. Ashbury adds the express opt-out sentence to every message and tests, on a live handset, that a STOP reply actually suppresses the account in the system of record — not just in the vendor's console.

Phase 7 — Third-party contacts and location information

  • [ ] Do not discuss the debt with anyone other than the consumer — spouse, employer, neighbor, relative — without the consumer's direct prior consent, court permission, or as reasonably necessary to effectuate a postjudgment judicial remedy (§ 1692c(b)).
  • [ ] When contacting a third party only for location information under § 1692b: identify yourself; state you are confirming or correcting the consumer's location information; do not state that the consumer owes any debt; identify your employer only if expressly asked.
  • [ ] Contact each third party once, unless asked to call again or you reasonably believe the earlier answer was erroneous or incomplete and the person now has correct information.
  • [ ] Never use a postcard and never mark the envelope in a way that reveals the debt collection business.
  • [ ] Once you know the consumer has an attorney, direct location inquiries to the attorney.
  • [ ] Train collectors that "I just left a voicemail with his sister" is a violation, not initiative.

Why it matters, and the traps. Section 1692c(b) is the provision most likely to produce actual damages — the humiliation of a call to an employer or a mother-in-law is the fact pattern that turns a $1,000 statutory case into a jury case. Note that consent must be given directly by the consumer to you; a consent buried in the original credit application, given to the creditor, is not consent under § 1692c(b).

Section 1692b is a narrow safe passage, not a workaround. The moment the conversation drifts from "do you have a current address for Dana Whitfield?" to "Dana owes us $412," you are outside § 1692b and inside a § 1692c(b) violation.

Phase 8 — Represented consumers and cease-communication requests

  • [ ] If you know the consumer is represented by an attorney with respect to this debt, and you know or can readily ascertain that attorney's name and address, communicate only with the attorney (§ 1692c(a)(2)).
  • [ ] Exceptions are narrow: the attorney fails to respond within a reasonable period, or the attorney consents to direct communication.
  • [ ] On a written notice that the consumer refuses to pay or wants communications to stop, stop (§ 1692c(c); 12 C.F.R. § 1006.6(c)).
  • [ ] After a cease-communication notice, you may communicate only to (1) advise that collection efforts are being terminated; (2) notify the consumer that you or the creditor may invoke a specified remedy; or (3) notify the consumer that you intend to invoke a specified remedy — and you may say that only if you actually intend to do it.
  • [ ] Route every attorney letter and every cease letter to a single intake queue with a same-day suppression SLA.
  • [ ] Remember: cease-communication stops communication, not the debt. You may still sue (subject to Phase 11) and, generally, report the debt.

Why it matters, and the traps. The most expensive FDCPA cases begin with a cease letter that was scanned into an imaging system and never worked. There is no "we didn't see it" defense, and the bona fide error defense does not rescue a procedural gap you never built a procedure to prevent.

The § 1692c(c)(3) "intent to invoke a specified remedy" carve-out is a trap dressed as an exit. If you send a post-cease letter announcing your intent to sue and you have no intention or authority to sue, you have violated both § 1692c(c) and § 1692e(5) (threatening action that is not intended to be taken). Only send it when the file is litigation-approved and the client has authorized suit.

Phase 9 — Prohibited conduct: harassment, false representations, unfair practices

  • [ ] § 1692d (harassment): no threats of violence; no obscene or profane language; no publication of deadbeat lists; no repeated or continuous calls intended to annoy, abuse, or harass; no calls without meaningful disclosure of the caller's identity.
  • [ ] § 1692e (false or misleading representations): never misstate the character, amount, or legal status of the debt (e(2)(A)); never imply arrest or seizure that is not lawful and intended (e(4)); never threaten action you cannot legally take or do not intend to take (e(5)); never use a false name or a fake "legal department" or "investigator" persona (e(14)); never falsely imply attorney involvement.
  • [ ] § 1692f (unfair practices): collect only amounts expressly authorized by the agreement or permitted by law (f(1)); no postdated-check games (f(2)–(4)); no postcards (f(7)); no markings on the envelope (f(8)).
  • [ ] Audit letter templates, call scripts, and collector improvisation separately — each is a distinct failure mode.
  • [ ] Record calls, and actually listen to a sample every month.
  • [ ] Apply the least sophisticated consumer standard when reviewing anything you send: not the sharpest reader, and not the most gullible — the naïve but not bizarre reader.

Why it matters, and the traps. These three sections are drafted with a long list of specific prohibitions preceded by a general standard, and the general standard is not limited by the list. Conduct nobody thought to enumerate in 1977 — a threatening emoji, a LinkedIn message to a consumer's coworkers — can violate § 1692d or § 1692e even though no subsection names it.

Most circuits apply the least sophisticated consumer standard (the Seventh Circuit's formulation is the "unsophisticated consumer," a slightly higher floor), and most also require the misrepresentation to be material — a typo that would not affect any decision the consumer makes is usually not actionable. Do not rely on materiality; it is a defense, not a plan.

Regulation F mirrors the statute at 12 C.F.R. §§ 1006.14 (harassment), 1006.18 (false representations), and 1006.22 (unfair practices), and adds prohibitions of its own — including limits on collecting a debt the collector knows or should know resulted from identity theft, and on "debt parking" (furnishing a debt to a credit bureau before ever communicating with the consumer about it).

Phase 10 — Time-barred debt and the disclosure requirements

  • [ ] Determine the applicable statute of limitations — this is state law, it varies (commonly three to six years for written contracts and open accounts), and the governing state may not be obvious.
  • [ ] Never sue on a time-barred debt. Never threaten to sue on one. Regulation F, 12 C.F.R. § 1006.26(b), imposes this as a strict-liability prohibition — your good-faith belief that the debt was live is not a defense.
  • [ ] Understand revival: in many states, a partial payment or a written acknowledgment restarts the limitations clock. Confirm the rule in the consumer's state before you solicit a $5 "good faith" payment on an old account.
  • [ ] Check state disclosure mandates. Regulation F did not finalize a federal time-barred-debt disclosure; several states (New York, California, Massachusetts among them) and various consent orders do require one. Confirm your state list.
  • [ ] Even where no disclosure is mandated, do not send a dunning letter that implies enforceability — an implied threat of suit on a dead debt is a § 1692e problem independent of § 1006.26.
  • [ ] Build the SOL calculation into intake, not into the collector's judgment.

Why it matters, and the traps. Time-barred "zombie" debt is the highest-risk product in the industry and the reason a whole enforcement apparatus exists. Two features make it dangerous. First, the limitations analysis depends on a choice-of-law determination and on data (date of default, date of last payment) that is frequently wrong in a purchased portfolio — and § 1006.26(b) does not care why you were wrong. Second, revival means that the ordinary collection move — get a small payment, show progress — can silently resurrect a legally dead claim and expose you to a claim that you engineered the revival deceptively.

One important limit: in Midland Funding, LLC v. Johnson, 581 U.S. 224 (2017), the Supreme Court held that filing a proof of claim on an obviously time-barred debt in a Chapter 13 bankruptcy is not "false, deceptive, misleading, unfair, or unconscionable" under the FDCPA, because the Bankruptcy Code contemplates claim objections and the trustee is a sophisticated gatekeeper. That is a bankruptcy-specific carve-out, not a general license. If your consumer files, switch to the bankruptcy playbook: When a Customer Files Bankruptcy: A Creditor's Checklist and Filing a Proof of Claim in a Bankruptcy Case: A Practical Checklist. The automatic stay under 11 U.S.C. § 362 stops collection cold and is federal law everywhere.

Phase 11 — Suing on a debt: venue rules and the documentation you must have

  • [ ] Under § 1692i, bring any legal action on the debt only in the judicial district where the consumer signed the contract sued upon, or where the consumer resides at the commencement of the action.
  • [ ] For an action to enforce an interest in real property securing the obligation, sue where the property is located.
  • [ ] Verify the consumer's current address before filing — venue is judged at commencement, not at placement.
  • [ ] Assemble the proof file before you sue: the contract or account agreement; the itemized balance; the chain of assignment from the original creditor to the current owner; the last statement; and the payment history.
  • [ ] Confirm the statute of limitations one more time (Phase 10).
  • [ ] Make sure the complaint is not itself a false representation — a boilerplate affidavit signed by someone with no personal knowledge is a § 1692e problem and a professional-responsibility problem.
  • [ ] If you obtain a default judgment, confirm service was valid. A judgment procured by sewer service is the fastest route to a class action.
  • [ ] Remember that under Heintz, your litigation conduct is FDCPA-regulated conduct.

Why it matters, and the traps. Section 1692i exists because collectors once sued consumers hundreds of miles from home to manufacture defaults. The rule is mechanical and unforgiving, and "the contract has a forum-selection clause" is not an answer — § 1692i is a statutory floor a consumer cannot be made to waive in a form contract.

The larger trap is documentation. Mass-filed collection suits have collapsed across the country because the plaintiff could not produce the assignment chain or the underlying agreement. Before you file, run the file through the same discipline you would apply to any federal pleading: our Drafting a Federal Civil Complaint: A Practical Checklist sets out the pleading standard, and Federal Civil Litigation: A Roadmap and Resource Guide maps what happens next. Most collection suits are filed in state court, but the pleading discipline is identical: allege facts you can prove with documents you actually hold.

Before the complaint, there is usually a letter. A compliant collection demand still has to be a good demand — see Writing an Effective Demand Letter: A Practical Checklist and Drafting an Effective Demand Letter: The Basics. And if the account is really a breach-of-contract claim, understand what you can actually recover: Contract Damages: How Courts Make the Injured Party Whole.

Finally, check the underlying agreement for an arbitration clause. Many consumer contracts contain one, and a collector that files suit in court on a debt governed by a binding arbitration provision hands the consumer a motion to compel — and, worse, an argument that the suit itself was an action the collector could not legally take under § 1692e(5). The clause cuts the other way too: it is the industry's principal defense against FDCPA class actions. Drafting an Arbitration Clause: A Practical Checklist explains what makes such a clause enforceable, and Choosing a Dispute-Resolution Forum: Litigation, Arbitration, and Mediation Compared frames the trade-off.

Ashbury: Dana Whitfield signed her membership agreement at the Cleveland location and now lives in Columbus. Suit is proper in Cuyahoga County (where she signed) or Franklin County (where she resides) — and nowhere else.

Phase 12 — The bona fide error defense and the compliance program that supports it

  • [ ] Understand the elements of § 1692k(c): the violation was (1) not intentional, (2) resulted from a bona fide error, and (3) occurred notwithstanding the maintenance of procedures reasonably adapted to avoid any such error. You bear the burden by a preponderance.
  • [ ] Recognize that element (3) is a program requirement, not a state of mind — you must have had the procedure before the error.
  • [ ] Read Jerman: the defense does not cover a mistake about what the FDCPA requires.
  • [ ] Write the procedures down. Maintain: a policy manual; call scripts; letter templates with version control; a training curriculum with attendance records; a dispute and cease-letter intake SLA; a call-recording QA sample; a vendor/letter-shop audit; and an annual compliance review.
  • [ ] Maintain data integrity controls — the bona fide error defense most often succeeds for clerical and data errors (a transposed digit, a misrouted address) and most often fails where the "error" is a design choice.
  • [ ] Calendar the one-year limitations period in § 1692k(d) and read Rotkiske.
  • [ ] Keep the records that prove the program ran — see Issuing a Litigation Hold and Preserving ESI: A Practical Checklist for what to do the moment a claim letter arrives.

Why it matters, and the traps. Jerman v. Carlisle, McNellie, Rini, Kramer & Ulrich LPA, 559 U.S. 573 (2010), is the case that defines the ceiling of this defense. A law firm sent a validation notice stating that the debt would be assumed valid unless disputed in writing — a requirement the statute imposes for some purposes but not, on the Sixth Circuit's reading, for the general dispute right. The firm argued bona fide error. The Supreme Court held that § 1692k(c) does not shield a violation resulting from a mistaken interpretation of the legal requirements of the FDCPA. Legal errors are on you. This is why your letter templates deserve outside counsel review and your collectors deserve scripts they are not allowed to leave.

Rotkiske v. Klemm, 589 U.S. 8 (2019), holds that the one-year clock in § 1692k(d) runs from the date of the violation, not the date of discovery. (The Court did not resolve whether an equitable, fraud-based tolling doctrine might apply — the argument was forfeited.) That is a defense-side gift: an old violation is often simply gone.

Two final structural points. Damages under § 1692k are actual damages, plus additional statutory damages up to $1,000 per action (not per violation), plus costs and a reasonable attorney's fee — and in a class action, up to the lesser of $500,000 or 1% of the collector's net worth. The fee-shifting is what funds the plaintiffs' bar. And under Marx v. General Revenue Corp., 568 U.S. 371 (2013), a prevailing defendant may recover costs under Fed. R. Civ. P. 54(d)(1) even without a finding of bad faith — a modest counterweight.

Finally, Article III standing. After Spokeo, Inc. v. Robins, 578 U.S. 330 (2016), and TransUnion LLC v. Ramirez, 594 U.S. 413 (2021), a bare procedural FDCPA violation with no concrete harm may not be enough to sue in federal court. That does not make the violation lawful — it often just relocates the case to state court, where standing rules are looser. Do not mistake a jurisdictional dismissal for a win on the merits.

Common mistakes to avoid

1. Assuming Henson exempts you. Henson addressed one prong of § 1692a(6). The "principal purpose" prong, and every state mini-FDCPA, are still there.

2. Running consumer and commercial accounts through one workflow. The FDCPA covers only consumer debt — but the moment your templates are shared, your commercial workflow becomes your consumer workflow's compliance risk.

3. Letting the letter shop own the validation notice. The itemization date and the fee breakdown come from the client's data. If your placement-file spec does not demand them, your notice cannot be right.

4. Overshadowing the 30-day window. Urgency language in the first two weeks is the most common template violation in the industry.

5. Suppressing a dispute in one channel only. A dispute must stop the dialer, the letter series, and the credit-bureau feed.

6. Treating 7-in-7 as a safe harbor. It is a rebuttable presumption sitting on top of § 1692d(5), and it counts per debt, which means a literal implementation can harass a household legally-on-paper.

7. Improvising voicemails. Anything beyond the limited-content message script is a communication, and a communication overheard by a family member is a § 1692c(b) disclosure.

8. Forgetting the electronic opt-out in a bulk campaign. One missing line in one template equals one violation per message sent.

9. Threatening a lawsuit you are not authorized to file. Section 1692e(5) does not care that you meant it as leverage.

10. Soliciting a token payment on an old account. In many states, that payment revives the limitations period — and the CFPB has treated engineered revival as an unfair practice.

11. Suing where it is convenient for you. Section 1692i has two options and no third.

12. Building the compliance program after the demand letter arrives. Section 1692k(c) requires procedures maintained before the error. A program written in response to a lawsuit proves the opposite of what you need.

The consolidated FDCPA checklist

Threshold

  • [ ] Is the obligation a consumer debt (§ 1692a(5))?
  • [ ] Are you a debt collector under either prong of § 1692a(6)?
  • [ ] Which state mini-FDCPA and licensing regimes apply?

Opening the file

  • [ ] Placement file contains itemization date, itemized balance, creditor of record, contract, and default date.
  • [ ] Statute of limitations calculated at intake.
  • [ ] Mini-Miranda in the initial communication (§ 1692e(11)).
  • [ ] Validation information delivered in or within five days of the initial communication (§ 1692g(a); § 1006.34).
  • [ ] Model Form B-1 used, or deviations reviewed by counsel.

The validation period

  • [ ] 30-day window calendared; no overshadowing.
  • [ ] Written dispute or original-creditor request → cease collection system-wide.
  • [ ] Verification obtained and mailed before resuming.

Contact discipline

  • [ ] 8 a.m.–9 p.m. in the consumer's time zone.
  • [ ] No workplace calls once prohibited.
  • [ ] ≤ 7 calls / 7 days per debt; 7-day pause after any conversation; household cap set below the ceiling.
  • [ ] Opt-out statement in every electronic communication; opt-outs honored immediately.
  • [ ] Limited-content message script used verbatim for voicemail.

Third parties and representation

  • [ ] No debt disclosure to third parties (§ 1692c(b)); § 1692b location scripts only.
  • [ ] Attorney representation → all contact through counsel.
  • [ ] Written cease notice → stop, with only the three narrow § 1692c(c) exceptions.

Content

  • [ ] Scripts and templates screened against §§ 1692d, 1692e, 1692f under the least-sophisticated-consumer standard.
  • [ ] Only amounts authorized by the agreement or by law (§ 1692f(1)).
  • [ ] Envelope carries nothing but your address (§ 1692f(8)).

Litigation

  • [ ] Not time-barred (§ 1006.26(b) — strict liability).
  • [ ] Venue: where signed or where the consumer now resides (§ 1692i).
  • [ ] Contract, assignment chain, itemization, and payment history in hand before filing.

Program

  • [ ] Written policies, versioned templates, trained collectors, QA call sampling, vendor audits, annual review — all documented, all pre-dating the error (§ 1692k(c)).
  • [ ] Understand that Jerman takes mistakes of law off the table.

Primary authority

Statutes

  • Fair Debt Collection Practices Act, 15 U.S.C. §§ 1692–1692p — in particular § 1692a (definitions), § 1692b (acquisition of location information), § 1692c (communication in connection with debt collection), § 1692d (harassment or abuse), § 1692e (false or misleading representations), § 1692f (unfair practices), § 1692g (validation of debts), § 1692i (legal actions by debt collectors), § 1692j (furnishing deceptive forms), § 1692k (civil liability, including the bona fide error defense and the one-year limitations period), and § 1692n (relation to state laws).
  • Telephone Consumer Protection Act, 47 U.S.C. § 227 (autodialed and prerecorded calls and texts).
  • Fair Credit Reporting Act, 15 U.S.C. §§ 1681–1681x (furnishing and disputing collection tradelines).
  • Bankruptcy Code, 11 U.S.C. § 362 (automatic stay) — federal law, applicable nationwide.
  • Consumer Financial Protection Act, 12 U.S.C. §§ 5531, 5536 (UDAAP; CFPB enforcement authority).

Regulations

  • Regulation F, 12 C.F.R. Part 1006 — especially § 1006.2(j) (limited-content message), § 1006.6 (communications, cease-communication, electronic communications and opt-out), § 1006.10 (location information), § 1006.14 (harassment or abuse, including the § 1006.14(b) call-frequency presumption), § 1006.18 (false or misleading representations), § 1006.22 (unfair or unconscionable means), § 1006.26 (collection of time-barred debts), § 1006.34 (notice for validation of debts), § 1006.38 (disputes and requests for original-creditor information), § 1006.42 (sending required disclosures), and Appendix B (Model Form B-1).

Cases

Representative state law (confirm your own state)

  • California Rosenthal Fair Debt Collection Practices Act, Cal. Civ. Code §§ 1788 et seq. (reaches creditors collecting their own debts).
  • Texas Debt Collection Act, Tex. Fin. Code ch. 392.
  • Massachusetts Attorney General debt collection regulations, 940 C.M.R. 7.00.
  • New York Department of Financial Services debt collection rules, 23 NYCRR Part 1.

State debt collection and UDAP statutes are state law and they genuinely differ — in who is covered, what must be disclosed, and what the limitations period is. There is no national debt collection code sitting above them, and no nationwide statute of limitations on a consumer debt. Treat the FDCPA and Regulation F as the federal floor, confirm the state overlay in every state where you collect, and never let a multistate template assume that one state's answer is the country's answer.

Secondary sources

  • CFPB, Debt Collection Rule (Regulation F) and its Official Interpretations (Supplement I to Part 1006) — the commentary is where the hard questions about the limited-content message, the call-frequency counter, and the email/text procedures are actually answered.
  • CFPB, Fair Debt Collection Practices Act Annual Report to Congress — the best free read on what the Bureau is currently examining.
  • National Consumer Law Center, Fair Debt Collection (NCLC Consumer Credit and Sales Legal Practice Series) — the standard plaintiff-side treatise; read it as the defense playbook it doubles as.
  • Restatement (Second) of Contracts §§ 82–86 (promise to pay an obligation barred by the statute of limitations) — useful background on the revival problem in Phase 10.

Related UpLaw Resources

Related Guides & Articles

Related Checklists

Related Toolkits

This checklist is general legal information from UpLaw (uplaw.us), not legal advice, and does not create an attorney-client relationship. Laws vary by state and change over time; verify current requirements and consult qualified counsel before acting.