Receiving a collections notice for a medical debt is alarming — but it does not mean you have lost control of the situation. The Fair Debt Collection Practices Act (FDCPA) gives you specific, enforceable rights that apply the moment a third-party debt collector contacts you, and knowing how to use them can stop harassment, erase reporting errors, and even reduce what you owe.
What Is the FDCPA and Does It Cover Medical Bills?
The Fair Debt Collection Practices Act is a federal law enacted in 1977 and enforced by the Federal Trade Commission (FTC) and the Consumer Financial Protection Bureau (CFPB). It governs the behavior of third-party debt collectors — meaning agencies or law firms hired to collect a debt on behalf of someone else, or companies that purchase old debt and attempt to collect it themselves.
Medical bills are explicitly covered under the FDCPA. Once your hospital or provider sells or assigns your balance to a collections agency, every communication that agency sends you must comply with the law. It is important to note, however, that the FDCPA generally does not apply to the original hospital or provider collecting their own debt — only to third-party collectors. If you are still dealing directly with the billing department of the hospital that treated you, your protections come from state consumer protection laws and hospital financial assistance policies instead.
What Rights Do You Have Under the FDCPA When a Collector Contacts You?
The FDCPA grants you a concrete set of rights from the very first contact a collector makes:
- The right to a written validation notice. Within five days of their first contact with you, a collector must send a written notice stating the amount owed, the name of the creditor, and your right to dispute the debt within 30 days.
- The right to dispute the debt. If you send a written dispute within 30 days of receiving the validation notice, the collector must stop all collection activity until they provide you with verification of the debt — such as a copy of the original bill or a judgment.
- The right to request the original creditor's name and address. If you are unsure who originally billed you, you can request this information in writing within the 30-day window.
- The right to stop contact. You may send a written "cease communication" letter at any time. After receiving it, the collector may only contact you to confirm they are stopping collection efforts or to notify you of a specific legal action they intend to take.
- The right to sue for violations. If a collector violates the FDCPA, you can sue them in federal or state court within one year of the violation and recover up to $1,000 in statutory damages, actual damages, and attorney's fees.
What Collection Practices Are Illegal Under the FDCPA?
The FDCPA prohibits a wide range of specific behaviors. Recognizing them helps you identify when a violation has occurred so you can document it and take action.
Prohibited contact behaviors include:
- Calling before 8 a.m. or after 9 p.m. in your local time zone
- Calling your workplace if you have told them your employer prohibits such calls
- Contacting you directly if you have an attorney representing you
- Using or threatening to use violence
- Calling repeatedly with the intent to harass — courts have generally treated multiple calls per day as harassment
Prohibited statements and representations include:
- Falsely claiming to be a government agency, attorney, or law enforcement officer
- Threatening arrest or criminal prosecution for an unpaid medical debt (this is illegal — medical debt is a civil matter)
- Misrepresenting the amount owed or the legal status of the debt
- Threatening to take legal action they do not actually intend to take or are not legally permitted to take
- Using obscene or profane language
How Do You Dispute a Medical Debt in Collections Step by Step?
Disputing a medical debt is one of the most powerful tools you have — and the process is straightforward if you follow it correctly.
- Act within 30 days. Your dispute must be in writing and postmarked within 30 days of receiving the collector's initial validation notice. Missing this window does not eliminate your rights entirely, but it weakens your position significantly.
- Write a formal dispute letter. Your letter should state clearly that you dispute the debt, request verification, and ask for the name and address of the original creditor. Keep the tone neutral and factual — this letter may become legal evidence.
- Send it certified mail with return receipt requested. This creates a timestamped paper trail proving delivery. Keep the green card when it comes back.
- Document everything. Keep copies of all letters, notes on every phone call (date, time, name of representative, what was said), and any voicemails. Screenshot any text messages or emails.
- Review the verification they send back. When the collector responds, compare their documentation against your own Explanation of Benefits (EOB) from your insurer and any itemized bills you have. Look for duplicate charges, services you did not receive, incorrect patient information, or billing codes that do not match your treatment.
- Escalate if necessary. If the collector cannot verify the debt or continues contacting you after a cease-and-desist letter, file a complaint with the CFPB at consumerfinance.gov/complaint and with your state attorney general's office. Both are free and trigger a formal investigation process.
How Does Medical Debt in Collections Affect Your Credit Report?
Medical debt collection reporting rules changed significantly in recent years. As of 2023, the three major credit bureaus — Equifax, Experian, and TransUnion — no longer include medical collection accounts under $500 on credit reports. Additionally, paid medical collection accounts are now removed from reports immediately upon payment, and unpaid medical collections accounts must be at least one year old before they can appear on your report.
If a collection account appears on your credit report, you have the right under the Fair Credit Reporting Act (FCRA) — a separate but complementary law — to dispute inaccurate entries directly with the credit bureau. Submit your dispute with supporting documentation, and the bureau must investigate within 30 days. If the debt collector cannot verify the item, the bureau must remove it. Removing even one legitimate medical collection from your credit report can raise your score by a significant number of points, since FICO scoring models treat collection accounts as serious derogatory marks.
What Should You Do If a Debt Collector Violates the FDCPA?
If you believe a collector has violated the FDCPA, your response should be immediate and methodical.
- Write down every detail of the violation as soon as possible — date, time, the specific statement made, or the specific behavior that occurred.
- File a complaint with the CFPB at consumerfinance.gov/complaint. You can also file with the FTC at reportfraud.ftc.gov. These filings are free and create an official record.
- Contact your state attorney general. Many states have their own debt collection laws that offer protections beyond the federal FDCPA — and state penalties can be significant.
- Consult a consumer rights attorney. Many FDCPA attorneys work on contingency, meaning they collect their fees from the violating collector if you win — not from you. The FDCPA specifically entitles prevailing plaintiffs to attorney's fees, which makes these cases attractive to consumer law firms. Organizations like the National Association of Consumer Advocates (NACA) at consumeradvocates.org can help you find qualified attorneys in your state.
A single verified FDCPA violation can give you significant leverage in negotiating a settlement of the underlying debt. Collectors know that documented violations create real legal liability, and many will settle or significantly reduce the balance to avoid litigation.
Frequently Asked Questions
Yes — a debt collector can file a civil lawsuit against you to obtain a court judgment, and in most states a judgment can lead to wage garnishment or bank account levies. However, they must actually follow through with legal action to do this; threatening a lawsuit without intending to file one is itself an FDCPA violation. If you are served with a summons, respond in writing by the deadline listed — failing to respond results in a default judgment against you automatically.
A medical debt can remain in collections indefinitely until it is paid or resolved, but its ability to appear on your credit report is limited to seven years from the date of first delinquency under the FCRA. Separately, each state has a statute of limitations — typically between three and six years — after which a collector loses the legal right to sue you to collect the debt, though they may still attempt to contact you.
As of 2023, all three major credit bureaus — Equifax, Experian, and TransUnion — have adopted a policy of removing paid medical collection accounts from credit reports immediately upon payment. This is a significant change from prior policy, where paid collections could remain on a report for years. You should still verify removal by pulling your free credit report at AnnualCreditReport.com after payment is confirmed.
A pay-for-delete agreement is a negotiated arrangement in which you agree to pay a debt in exchange for the collector removing the collection account from your credit report. It is not prohibited by law, but collectors are not required to agree to it. Always get any pay-for-delete agreement in writing before you send payment — a verbal promise is unenforceable, and collectors are under no legal obligation to follow through unless the commitment is documented.
Under the FDCPA, collectors may contact third parties — including family members — only to locate you, and they are prohibited from disclosing that you owe a debt during those contacts. They may not discuss the details of your debt with anyone other than you, your spouse, or your attorney. If a collector tells a family member that you owe a debt, that is a direct FDCPA violation you should document and report immediately.