Quick answer: Under the FDCPA and Regulation F, a third-party debt collector cannot call before 8 AM or after 9 PM, cannot call more than seven times in seven days about the same debt, cannot threaten lawsuits or garnishment they will not pursue, and must send a written validation notice within five days. Send a cease-communication letter to stop contact, verify the debt and statute of limitations before paying anything, and file complaints in three places.
The first call comes from a number you do not recognize, at 8:14 on a Tuesday morning. The man on the line uses your full legal name, says he is calling from a company you have never heard of, and tells you he is collecting on a personal loan you took out two years ago with a bank you do remember. He says if you do not pay $4,212 today, your wages will be garnished tomorrow. He says it like he means it.
Almost none of that call is allowed to happen the way it just happened, and the threat at the end of it is almost certainly false. Garnishment, in nearly every state, requires a lawsuit, a judgment, and a separate court process. It does not happen "tomorrow" because somebody on the phone says it will.
This piece is a rights-first walkthrough for borrowers who are 30 to 90 days late on a personal loan and have been transferred to a third-party collector. The relevant rules are the federal Fair Debt Collection Practices Act (FDCPA) and the CFPB's Regulation F, which took full effect November 30, 2021. Most collectors follow them. A meaningful share do not, and the ones who do not bend on the rules tend to do so loudly, in the hope that you will not push back.
You can push back. Here is how.
First, breathe. Here is what a debt collector legally cannot do
Under the FDCPA and Regulation F, a third-party debt collector trying to collect on a personal loan cannot:
- Call you before 8:00 AM or after 9:00 PM in your local time zone.
- Call you more than seven times in a seven-day period about the same debt, or call you within seven days after a phone conversation about that debt.
- Call your workplace if you have told them, orally or in writing, that your employer prohibits the calls.
- Tell your family, neighbors, or coworkers about the debt. They may call third parties once for "location information" only (your address and phone number), and they may not say they are calling about a debt.
- Threaten lawsuits, arrest, or wage garnishment they cannot or do not intend to carry out.
- Use obscene language, harass you, or call repeatedly with the intent to annoy.
- Misrepresent the amount, the creditor, or their own identity.
- Continue contacting you after you send a written cease-communication letter, except to confirm they will stop or to notify you of a specific action like a lawsuit.
These are not suggestions. Violations carry statutory damages of up to $1,000 per case, plus attorney's fees, plus actual damages. That is why FDCPA cases are taken seriously by lawyers who specialize in consumer protection.
The validation notice you are owed
Within five days of a third-party collector's first contact, they have to send you a written validation notice. Under Regulation F, the notice must include:
- The amount of the debt, itemized.
- The current creditor's name (the company that owns the debt now, which may not be the original lender).
- The name and address of the debt collector.
- An itemization date, with charges, interest, fees, and payments since that date.
- A statement of your right to dispute the debt within 30 days.
- A tear-off dispute form (the model validation notice in Regulation F includes one).
If they did not send a validation notice, that is your first leverage point. You have the right to demand it, in writing, before doing anything else. Until they validate, you do not have a verified debt to discuss.
The three most powerful letters you can send
The CFPB publishes sample letters at consumerfinance.gov/consumer-tools/debt-collection. Three of them matter most for personal-loan collections.
The verification request. Sent within 30 days of the validation notice, this letter requires the collector to stop collection until they verify the debt in writing. They have to produce documentation showing you owe what they say you owe to the entity they say owns it. Many junk-debt buyers cannot, especially on older debts that have changed hands multiple times.
The cease-communication letter. This is your "stop calling me" letter. Once received, the collector can only contact you to confirm the cessation or to notify you of a specific action (such as filing a lawsuit). It does not erase the debt. It stops the contact. That is a meaningful distinction many borrowers miss.
The attorney-only letter. If you have hired a lawyer (Legal Aid counts), the collector must communicate only with the attorney. This one is essentially a flag: deal with my lawyer or do not deal at all.
Send all three by certified mail with return receipt. Keep copies. The certified mail receipt is your proof of delivery, and proof of delivery is what makes the obligations enforceable.
Verify the debt is actually yours and still legally collectible
Two issues come up over and over with personal-loan debt, and both deserve a careful look before you pay anything.
Is it actually your debt? Personal-loan debt is bought and sold on secondary markets. By the time it reaches a third-party collector, the chain of ownership may run three or four entities deep. Mistakes happen. Identity errors happen. Demand the documentation: the original loan agreement, the chain of assignments, the payment history. If they cannot produce it, the debt is not verified.
Is it inside the statute of limitations? Each state has a statute of limitations on personal-loan debt, typically 3 to 6 years from the date of last payment or default, though some states are longer for written contracts. Once the SOL passes, the debt becomes "time-barred." A collector can still ask you to pay it, but they cannot sue you to enforce it.
The trap on time-barred debt is called "zombie debt." In many states, making a partial payment, or even acknowledging the debt in writing, can restart the statute of limitations. The collector knows this. That is why a friendly voice will sometimes ask you to "just send $20 to show good faith." Do not. Verify the debt and the SOL first. If it is time-barred in your state, putting that in writing may also be a valid response.
This is the right place to talk to a Legal Aid attorney before you act. Your state Legal Aid office is free, the Legal Services Corporation directory will find yours, and an attorney who looks at the specific letter and the specific dates can save you years of unnecessary exposure. (If the collector is calling about a payday-style loan you rolled into collections, our companion piece on the payday rollover trap and the exit ramps that work covers the upstream playbook.)
Things collectors will say that are not true
Here are the lines that come up over and over in CFPB complaint records and consumer law clinics:
- "We will garnish your wages tomorrow." Wage garnishment in nearly every state requires a lawsuit, a judgment, and a separate court order. It does not happen on a phone call's notice.
- "We will have you arrested." There are no debtors' prisons in the United States for consumer debts like personal loans. Threatening arrest over a personal loan is an FDCPA violation.
- "We are calling from the IRS / a federal investigator / your bank's fraud team." Almost always false. Real federal agencies do not collect consumer debt by cold call. (If the call sounds even more suspicious than that, see our walkthrough on loan fee scams and how to spot a fake lender.)
- "You have to pay today." No, you do not. You have rights to dispute, to verify, and to communicate in writing. Time pressure is a tactic.
- "This debt cannot be discharged in bankruptcy." Most personal-loan debt is general unsecured debt, which is dischargeable in Chapter 7 or restructurable in Chapter 13. There are exceptions (recent luxury purchases, fraud), but the blanket statement is wrong.
If a collector says any of these, write down the exact quote, the date, the time, and the phone number. That is evidence in a CFPB complaint and, if it goes that far, in an FDCPA lawsuit.
First-party versus third-party: who is calling matters
The FDCPA primarily applies to third-party debt collectors: companies that buy or service debt for someone else. If your original lender is still collecting in-house through their own employees, the FDCPA does not cover that contact directly.
You are not unprotected, though. The CFPB's UDAAP authority (unfair, deceptive, or abusive acts or practices) and state UDAP laws apply to original creditors. Many states (New York, California, Massachusetts among them) have their own debt-collection statutes that go further than the FDCPA and cover first-party collectors. The practical answer is the same in either case: ask in writing for the rules they are operating under, document everything, and complain to the CFPB and your state attorney general if they cross lines.
Where to file a complaint
If a collector is violating the FDCPA or Regulation F, file in three places, not just one. Each goes to a different enforcement track.
The CFPB at consumerfinance.gov/complaint. The collector has 15 days to respond and 60 days to provide a final response. The CFPB shares the complaint with state regulators when relevant.
Your state attorney general's consumer protection office. State AGs handle UDAP cases and have the most direct authority over collectors operating in your state.
The FTC at ReportFraud.ftc.gov. The FTC tracks patterns and pursues larger enforcement actions; your individual complaint may not get a response but it feeds the data the FTC uses.
If the violations are serious or the harassment is sustained, talk to a consumer-rights attorney. The FDCPA awards attorney's fees to plaintiffs who win, which is why many consumer attorneys take these cases on contingency at no upfront cost.
What this article is not
This is information, not legal advice. Statutes of limitations, state debt-collection rules, and the specifics of your loan and your state's exemption laws can change the answers. If a collector has filed a lawsuit against you, if you have been served, or if a wage garnishment notice is in your hand, you need an attorney immediately. Free Legal Aid is available in most states for borrowers under income limits, and many bar associations run lawyer referral services with free or low-cost initial consultations.
Where Trust Point Loans fits
We are not a lender, a collector, a debt-settlement company, or a law firm. We do not earn anything by recommending you negotiate, dispute, settle, or pay. The CFPB sample letters are free. Your state Legal Aid office is free. Use those first. The leverage in collections cases overwhelmingly belongs to the side that is documented, calm, and writes things down.
Frequently asked questions
Can a debt collector call my family or my workplace?
They may contact third parties once, only to obtain "location information" (your address and phone number), and they may not reveal that they are calling about a debt. They may not call your employer if you have told them your employer prohibits the calls. Repeated calls to family or coworkers about your debt are an FDCPA violation.
Does sending a cease-communication letter erase the debt?
No. It stops contact (with limited exceptions) but does not change what you owe. The collector can still sue, and the original creditor still has a claim. Cease-communication is a tool to control the harassment, not to escape the obligation.
What is "zombie debt" and how do I avoid waking it up?
Zombie debt is debt that is past your state's statute of limitations and therefore not enforceable in court. In many states, making a partial payment or acknowledging the debt in writing can restart the SOL clock. Verify the date of last payment and the SOL in your state before you pay anything or sign anything.
How many times can a collector call me in a week?
Under Regulation F, a third-party collector cannot call more than seven times in a seven-day period about the same debt, and cannot call within seven days after a phone conversation about that debt. Calls beyond those limits are presumed to be a violation.
Can a collector really garnish my wages?
Not without a lawsuit and a judgment, in nearly every state. A collector who threatens immediate garnishment by phone is almost certainly violating the FDCPA. Federal law also caps the percentage of disposable earnings that can be garnished, and several states (Texas, North Carolina, Pennsylvania, South Carolina) prohibit wage garnishment for most consumer debts entirely.