If a debt collector is hounding you about a medical bill, the odds are good they have already done something illegal. Studies from the National Consumer Law Center found widespread Fair Debt Collection Practices Act (FDCPA) violations in medical debt collection, from misrepresenting balances to threatening actions they cannot legally take. In 2026, those violations still happen daily, and the law gives you concrete tools to push back.
Quick Answer: When a debt collector violates the FDCPA on a medical bill, you can demand written validation of the debt, file complaints with the CFPB and your state attorney general, and sue the collector in federal or state court for up to $1,000 in statutory damages plus actual damages and attorney fees, all within one year of the violation.
This guide walks through exactly what constitutes a violation, what to do next, and how to check whether the underlying bill is even accurate before paying a single dollar.
What the FDCPA Covers for Medical Bills
The Fair Debt Collection Practices Act (15 U.S.C. § 1692 et seq.) applies to third-party debt collectors, which includes collection agencies, debt buyers, and attorneys who collect debts on behalf of creditors. It covers personal debts including medical bills, credit cards, and auto loans.
The original healthcare provider billing you directly is generally not covered by the FDCPA. Once they sell or transfer the debt to a collection agency, however, the FDCPA applies in full. That distinction matters because most of the worst collection behavior happens after a debt gets sold.
The FTC's Debt Collection FAQ is the clearest plain-language summary of what collectors can and cannot do.
Common FDCPA Violations in Medical Debt Collection
Misrepresenting the Amount Owed
This is the most frequent violation in medical billing. Collectors sometimes seek amounts that do not account for:
- Insurance payments already made
- Negotiated adjustments between the insurer and the provider
- Partial payments you already sent
- No Surprises Act protections (for out-of-network emergency services billed above the allowed amount)
Collecting more than legally owed violates FDCPA section 1692f. Per the Federal Register rule on Regulation F, a collector who misrepresents the amount of a debt arising from No Surprises Act-covered services has committed both a deceptive and an unfair collection practice.
Calling Too Many Times
Collectors are presumed to violate the FDCPA if they place more than seven phone calls within any seven-day period about a specific debt, or if they call within seven days after a live phone conversation about that same debt. Regulation F established these bright-line limits.
Threatening Arrest or Legal Action They Cannot Take
No debt collector can threaten criminal penalties or arrest for an unpaid medical bill. Debt is a civil matter. Any collector who says you will be arrested if you do not pay has committed a clear FDCPA violation under section 1692e. According to GetOutOfDebt.org's reporting, these threats remain one of the most commonly documented violations.
Contacting You After a Cease-and-Desist Request
If you send a written request asking the collector to stop contacting you, they must stop. The only exceptions are confirming they are ceasing collection or notifying you of a specific legal action they intend to take. Any contact beyond those two exceptions after receiving your written request is a violation.
Reporting Medical Debt Improperly to Credit Bureaus
Federal enforcement here shifted significantly in 2026. The CFPB's rule to remove medical debt from credit reports was vacated by a federal court in July 2025. However, the three major credit bureaus (Equifax, Experian, TransUnion) still voluntarily exclude paid medical collections and unpaid collections under $500 from credit reports. Additionally, 15 states have passed their own laws banning medical debt from credit reports: California, Colorado, Connecticut, Delaware, Illinois, Maine, Maryland, Minnesota, New Jersey, New York, Oregon, Rhode Island, Vermont, Virginia, and Washington. Threatening to report debt in those states is itself a state law violation.
Your Rights Under the FDCPA: A 2026 Checklist
| Your Right | What It Means |
|---|
| Validation within 30 days | You can demand written proof the debt is valid; collector must stop all collection activity until they comply |
| Dispute the debt | You can dispute the amount or the fact that you owe it at any time |
| Cease-and-desist | You can request in writing that the collector stop contacting you |
| Sue for damages | You can file in state or federal court within one year of the violation |
| Statutory damages | Up to $1,000 per lawsuit even without proving actual harm |
| Attorney fees | If you win, the collector pays your legal costs |
| Class action | Multiple consumers harmed by the same practice can sue jointly, with damages up to $500,000 or 1% of the collector's net worth |
Step-by-Step: What to Do When a Collector Violates the FDCPA
Step 1: Document Everything
Write down every contact: date, time, what was said, who called, the phone number. Save all voicemails. Keep every piece of written correspondence. This is your evidence.
Step 2: Request Debt Validation in Writing
Within 30 days of the collector's first contact, send a written validation request via USPS certified mail with return receipt requested. Your letter should state:
- Your full name and address
- The account number or debt amount referenced in their communication
- That you are disputing the debt under 15 U.S.C. § 1692g
- A request for the name of the original creditor, the amount owed as of the original charge-off date, and documentation that the collector has the legal right to collect
Once they receive this letter, all collection activity must stop until they provide validation. If they continue calling or reporting to credit bureaus before doing so, that is a separate violation.
Step 3: Check the Underlying Bill for Errors
Before disputing or negotiating, request an itemized bill from the original provider. Federal law requires hospitals to provide this at no cost. An itemized bill lists every charge by procedure code, which is how you find:
- Duplicate charges for the same service
- Upcoding (a quick office visit billed as a complex one)
- Services marked as delivered that were not
- Out-of-network charges that should have been covered under the No Surprises Act
The CoveredUSA Bill Analyzer compares each line on your bill to Medicare benchmark rates and flags charges that look significantly above the expected range. Running your itemized bill through it before you dispute can show you exactly which line items are worth challenging, rather than disputing everything blindly.
Step 4: File Complaints
File with all three:
- CFPB (Consumer Financial Protection Bureau): consumerfinance.gov/complaint. Note that as of 2026, CFPB enforcement has been reduced significantly, but complaints still create a formal record.
- Your state attorney general: Most AGs have an active consumer protection unit for debt collection complaints. State enforcement in 2026 is more robust than federal enforcement.
- FTC (Federal Trade Commission): reportfraud.ftc.gov. The FTC uses complaint data for pattern investigations even if individual complaints do not generate a direct response.
Step 5: Consult an FDCPA Attorney
Many consumer attorneys take FDCPA cases on contingency, meaning no upfront cost to you. Because the statute guarantees attorney fee recovery when the consumer wins, these cases are viable for attorneys even when your out-of-pocket damages are small. The National Consumer Law Center maintains resources on finding consumer law attorneys who specialize in debt collection violations.
Step 6: File Suit If Warranted
You have one year from the date of the violation to file in state or federal court. You can sue for:
- Up to $1,000 in statutory damages per lawsuit (regardless of actual harm)
- Actual damages: lost wages, out-of-pocket costs, documented emotional distress
- Attorney fees and court costs
The one-year window runs from the date of the violation, not the date you discovered it. Do not wait.
Documents to Gather Before Filing a Complaint or Lawsuit
- All written communications from the collector (envelopes and letters)
- Call logs with dates, times, and what was said
- Certified mail receipts showing the collector received your letters
- Your itemized bill from the original provider
- Explanation of Benefits (EOB) from your insurance company
- Any credit reports showing the debt
- Bank statements if you made any payments
What Collectors Are Allowed to Do
Knowing the violations is only half the picture. Collectors can legally:
- Contact you Monday through Saturday between 8 a.m. and 9 p.m. local time
- Contact your employer once to verify employment (but not to discuss the debt)
- Report the debt to credit bureaus (subject to state restrictions noted above)
- File a lawsuit to collect the debt if it is within the statute of limitations
- Contact an attorney representing you (and only the attorney, once you have legal representation)
How to Spot Errors Before the Collector Ever Gets Involved
The best time to catch a billing problem is before it goes to collections. About 80% of medical bills contain at least one error, according to billing analysts. Common errors include:
- Duplicate charges: The same procedure billed twice
- Wrong diagnosis or procedure code: A typo that changes what insurance covers
- Unbundling: A procedure that should be billed as one code split into multiple codes to inflate the total
- Balance billing for in-network services: Charged the full rate when your insurer has a negotiated rate
Upload your itemized bill to the free CoveredUSA Bill Analyzer to find errors, overcharges, and charity care options in 30 seconds. The tool cross-references your line items against published Medicare rates and flags charges worth disputing.
Charity Care: A Separate Path If You Cannot Pay
If the debt is real and you cannot afford it, charity care is not the same as a payment plan. Nonprofit hospitals are required under IRS Section 501(r) to maintain financial assistance programs. In 2026, many hospital charity care programs cover patients earning up to 300 to 400% of the federal poverty level.
The 2026 federal poverty level figures from ASPE (HHS) for the contiguous 48 states are:
| Household Size | 2026 FPL | 300% FPL | 400% FPL |
|---|
| 1 | $15,960 | $47,880 | $63,840 |
| 2 | $21,640 | $64,920 | $86,560 |
| 3 | $27,320 | $81,960 | $109,280 |
| 4 | $33,000 | $99,000 | $132,000 |
| 5 | $38,680 | $116,040 | $154,720 |
| 6 | $44,360 | $133,080 | $177,440 |
| 7 | $50,040 | $150,120 | $200,160 |
| 8 | $55,720 | $167,160 | $222,880 |
| Each additional | +$5,680 | +$17,040 | +$22,720 |
2026 FPL thresholds, contiguous U.S. Source: aspe.hhs.gov
If your household income falls near or below those thresholds, apply for charity care directly with the hospital's billing department before engaging with any collection agency. The hospital can often recall the debt from the collector while the charity care application is under review.
Frequently Asked Questions
How long do I have to sue a debt collector for FDCPA violations?
You have one year from the date of the violation to file a lawsuit. This is a hard deadline set by the statute. If you are close to a year, consult an attorney before the window closes.
Does the FDCPA apply to the original hospital or doctor billing me?
Generally, no. The FDCPA applies to third-party debt collectors, not the original creditor. Once your debt is sold or assigned to a collection agency, the FDCPA applies in full. Some states have equivalent laws that cover original creditors.
What if the debt is not mine or the amount is wrong?
Send a written dispute to the collector immediately, citing 15 U.S.C. § 1692g. They must stop collection activity until they provide verification. If they cannot verify the debt or the amount, they must cease collection entirely.
Can a debt collector contact my employer or family about my medical bills?
They can contact your employer one time to verify employment. They cannot discuss the debt with your employer or contact family members except to locate you, and they cannot reveal they are calling about a debt. Doing so is a violation.
Will a medical debt hurt my credit score in 2026?
It depends on the amount and your state. Nationally, unpaid medical collections under $500 are voluntarily excluded by the three major bureaus. Paid collections are also excluded voluntarily. In 15 states (CA, CO, CT, DE, IL, ME, MD, MN, NJ, NY, OR, RI, VT, VA, WA), all medical debt is excluded from credit reports by state law.
What is debt validation, and how do I request it?
Debt validation is the collector's obligation to prove you owe the debt and that they have the right to collect it. Request it in writing within 30 days of first contact, sent by certified mail. The collector must stop all activity until they respond. If they cannot validate, the debt cannot be collected.
Can I sue if the only violation was too many phone calls?
Yes. Any FDCPA violation, including excessive calls, is actionable. You can recover up to $1,000 in statutory damages plus attorney fees even if you cannot prove specific financial harm from the calls.
What if the CFPB is not enforcing the law aggressively right now?
As of 2026, federal CFPB enforcement has been significantly reduced. Your best options are your state attorney general and a private FDCPA attorney. State AG offices in many states have stepped up medical debt enforcement, and private attorneys have strong financial incentive to take FDCPA cases because the statute guarantees fee recovery.
Sources
