The Fair Debt Collection Practices Act was written in 1977, for a world of phone calls and envelopes. For decades afterward, courts and collectors argued about how a statute that predates the answering machine applies to a text message. Regulation F — the Consumer Financial Protection Bureau’s rule at 12 C.F.R. Part 1006, effective November 30, 2021 — settled most of those arguments. It dragged the FDCPA into the smartphone era, and it did so by writing down, in unusual detail, what collectors may and may not do in your texts, your inbox, and your DMs.
The rules cut both ways. Collectors got something they wanted: clear permission to use digital channels at all. Consumers got something better: specific, enforceable limits — a call-frequency line, mandatory opt-outs, a privacy wall around social media — that turn vague claims of “harassment” into checkable violations. And because the rule is not yet five years old, collectors get it wrong constantly. Every violation carries the same FDCPA remedies that have always existed: statutory damages up to $1,000, actual damages, and your attorney’s fees.
The short version
- More than 7 calls in 7 days about one debt — or any call within 7 days of speaking with you about that debt — is presumed harassment under Regulation F.
- Texts and emails are legal, but each one must include a simple way to opt out, and the opt-out must be honored.
- Social-media contact must be private: no public posts or comments about your debt, no anonymous friend requests, and the collector must say who it is.
- Screenshot everything, delete nothing. Digital harassment documents itself — if you preserve it.
The call-frequency line: 7 in 7
Start with the rule that produces the most violations. Regulation F presumes a collector has violated the FDCPA’s harassment prohibition if it places telephone calls about a particular debt more than seven times within seven consecutive days, or within seven days after having a telephone conversation with you about that debt. Two details do real work. The count runs per debt — a collector holding three of your accounts gets a separate allowance for each, which is why your log should note which debt each call concerned, if you can tell. And the post-conversation rule matters more than people expect: once you actually speak with a collector about a debt, that debt’s phone should stay silent for a week. The same-afternoon callback you’ve probably experienced is, presumptively, a violation.
A practical note: the presumption covers calls, which is why high-volume collectors have migrated so much energy into texts and email — channels with no numeric cap but with their own rules, below. Volume alone can still cross the FDCPA’s general line against harassing or abusive conduct, whatever the channel.
Texts and emails: legal, but only with an exit door
Regulation F permits collection by text message and email, on one recurring condition: every such message must include a clear and conspicuous, reasonable and simple way to opt out of receiving more communications at that number or address — and when you use it, the opt-out must be honored. “Reply STOP” in a text, an unsubscribe mechanism in an email. That gives you two distinct violations to watch for: messages that arrive with no opt-out language at all, and messages that keep arriving after you opted out. We see both routinely. Opting out by the collector’s own stated method — and screenshotting your opt-out before you send it — sets up the cleanest evidence there is.
Channel-specific opt-outs are also a tactical tool: you can close the channels that intrude most while leaving one open, which is gentler than the full cease-communication letter — a tool with trade-offs we walk through in how to make a debt collector stop contacting you.
Social media: the privacy wall
The social-media rules are the part of Regulation F that still surprises people — usually because a collector just broke one of them. A collector may send you a private message on a social platform, but the rule builds a wall around it:
- Private means private. A collector may not post about your debt anywhere viewable by the general public or by your contacts — no wall posts, no comments under your photos, no tagging, no replies your followers can read. A debt mentioned in public on social media is also a disclosure to third parties, which the FDCPA has prohibited since 1977.
- The collector must identify itself. A private message attempting to collect must disclose that it’s from a debt collector. Anonymous or vague messages — “we have an important matter to discuss” from an unlabeled account — don’t comply.
- No fake-profile friend requests. A collector may not send you a friend or connection request without revealing it is a debt collector. The attractive-stranger request that turns out to be an agency trying to see your profile and friend list is exactly what this rule prohibits.
If any of this has happened to you — a comment your mother could read, a DM from a profile that never said what it was — preserve it immediately, before the collector thinks better of it and deletes its side.
Voicemails: the limited-content message
Regulation F also resolved an old trap for collectors: a voicemail that names the debt can be an illegal third-party disclosure if someone else hears it, while a vague one risked violating other rules. The fix is the limited-content message — a voicemail that may safely contain only: your name, a request that you reply, the name of an individual you can reply to, and a phone number. Critically, it may not say it’s from a debt collector, name the agency in a way that reveals debt collection, or mention a debt at all. A voicemail that stays inside that box isn’t a “communication” under the rule. One that strays outside it — naming the agency, the balance, or the word “debt” where a roommate or coworker could hear — is back under the full weight of the statute.
How to document digital harassment
Digital collection abuse comes pre-packaged with proof, but only if you keep it. The habits that win these cases:
- Screenshot everything, with timestamps visible — texts, DMs, friend requests, public comments, the profile that sent them. Capture the full thread, not just the worst message.
- Save voicemails outside your phone’s auto-delete window: export the audio file, or at minimum record it onto another device.
- Keep a contact log: date, time, channel, which debt, what was said. For calls, your phone’s call history backs it up — screenshot that too, since carriers and apps purge.
- Don’t delete anything, and don’t block — yet. Blocking feels good and stops the evidence. Mute the thread instead, let the violations accumulate, and decide about blocking after you’ve talked to someone.
- Preserve your opt-outs: the STOP reply, the unsubscribe confirmation, the date you sent each one.
The one-year clock is running. FDCPA claims must generally be brought within one year of the violation. A folder of screenshots from eighteen months ago may be too late to sue on — so if the messages crossing your screen look like what this article describes, get advice while the conduct is fresh.
What a violation is worth
The remedies for digital violations are the FDCPA’s standard set, under 15 U.S.C. § 1692k: statutory damages up to $1,000 per case, actual damages — documented emotional distress, lost wages, out-of-pocket costs — and attorney’s fees and costs paid by the collector. The fee-shifting is the engine: it makes a case over unlawful text messages economically possible to bring, and it is why our debt collector harassment practice can take these cases. And because Regulation F is young, collectors’ compliance systems lag — missing opt-outs, eighth calls, chatty voicemails, public comments. The rules are new; the mistakes are everywhere; the screenshots are yours.
Frequently asked questions
Can a debt collector text me at all without my permission?
Regulation F doesn’t require your advance consent for a collector to text you about a debt, though other laws can bear on automated texting. What every collection text must have is a simple way to opt out — and once you use it, the texts must stop. A text with no opt-out language, or one that arrives after you replied STOP, is the violation to look for.
A collector commented on my Instagram post. Is that really illegal?
If the comment relates to debt collection and is viewable by others, yes — Regulation F requires social-media collection contact to be private, and the FDCPA separately prohibits disclosing your debt to third parties. Screenshot the comment, the account that posted it, and the visibility setting before anything disappears. That single screenshot can carry a case.
Do the time-of-day rules apply to texts and emails?
Yes. The prohibition on contacting you at times known to be inconvenient — presumed before 8 a.m. and after 9 p.m. your local time — applies to communications generally, not just calls. A pattern of 11 p.m. collection texts belongs in your log next to everything else.
The texts are about a debt I don’t even owe. Does that change things?
It usually strengthens the case — demanding payment of a debt you don’t owe, in the wrong amount, or from the wrong person implicates the FDCPA’s prohibition on false and misleading representations, on top of any frequency or opt-out violations. Dispute the debt in writing within 30 days of the collector’s first notice so it must verify before continuing, and keep every message it sends in the meantime.
Collection moved into your pockets and feeds; the law moved with it. The frequency lines, opt-out duties, and privacy walls of Regulation F are specific enough that you can check a collector’s conduct against them tonight, screenshots in hand. If what you find looks like a violation, a free case review will tell you what it’s worth — or call us at 804.592.0792 before the one-year clock gets any shorter.
This article is general information, not legal advice, and debt-collection questions are fact-specific. For advice about your situation, talk to a lawyer.