Most small business owners chasing overdue invoices break FDCPA rules without realizing it. The Fair Debt Collection Practices Act is written to prevent abuse by professional collectors, but it creates a legal trap for first-party creditors who don’t know the boundary.
The boundary: if you’re collecting on a debt you originated, FDCPA doesn’t technically apply to you. But the moment you hand a debt to a third party (a lawyer, an agency, software that’s not obviously from you), FDCPA rules click on. Most small-business owners stay on the safe side by doing it themselves. The rules below are what you need to know when you do.
What FDCPA covers and what it doesn’t
FDCPA applies to third-party debt collectors: agencies, lawyers, and software platforms that collect on behalf of someone else. If you owe $5,000 to a supplier and you don’t pay, the supplier can chase you themselves with almost no legal restriction. But the moment the supplier hires a collector or sends your debt to one, FDCPA rules start.
What makes this weird: the law uses the term “debt collector” to mean the third party, not the creditor. So FDCPA doesn’t directly constrain what you (the original creditor) can do. But here’s where it gets relevant: if you present yourself as a collector or use language that implies you are one, FDCPA applies to you. And if you’re a small-business owner trying to recover a debt you originated, the safe assumption is: follow FDCPA anyway.
Why? Because the gray zone is expensive to fight in court, and the penalties are real for an actual debt collector: courts can award statutory damages up to $1,000 per violation, plus actual damages and attorney fees, under 15 U.S.C. § 1692k.
The core FDCPA rules that matter if you’re collecting yourself
No contact before 8 AM or after 9 PM, local time at the debtor’s location. That’s the statutory window under 15 U.S.C. § 1692c(a)(1), and it’s measured where the debtor is, not where you are. Calls and texts outside it are violations for a covered debt collector. Email doesn’t have the same hard rule, but the spirit applies: don’t contact during sleeping hours.
No contact at a debtor’s workplace if they say their employer objects. If they tell you “my boss doesn’t want me getting collection calls,” you can’t call them at work. Email and mail are cleaner.
No harassment or threats. The phrase “I’ll send your debt to collections” is fine. The phrase “I’ll destroy your credit” or “I’ll sue you personally for my time” crosses the line under 15 U.S.C. § 1692d and § 1692e’s bar on false or misleading representations. No profanity, no threats of property seizure without a court order, no repeated calls meant to harass (§ 1692d(5) covers “causing a telephone to ring or engaging any person in telephone conversation repeatedly… with intent to annoy, abuse, or harass”).
No third-party disclosure without consent. Under 15 U.S.C. § 1692c(b), don’t tell their boss, their family, or their bank that they owe you money. You can tell them if they ask your debtor, but you can’t volunteer it to other parties. Mail to their address and calls to their phone are fine; posting on social media about them is not.
You must state your purpose and name clearly on the first contact. If you call or email, the debtor needs to know who you are, who you represent (yourself, if that’s the case), and what you’re calling about. “Hi, this is [your name] calling about an overdue invoice” works. “Hi, do you have a minute to talk?” then revealing it’s a debt call does not.
You cannot call back after they say “stop calling.” If a debtor or their attorney tells you to stop, you must stop. The only exceptions are to confirm receipt of the written request or to notify them that you’re taking a specific action (like filing suit). One more call after that instruction is a violation.
In writing, you must include specific language. Under 15 U.S.C. § 1692g, a covered debt collector’s validation notice must include (i) the amount of debt, (ii) the original creditor’s name, (iii) a statement that they have 30 days to dispute in writing, and (iv) a notice that silence is not consent.
The debt letter rule
Section 1692g requires a validation notice within five days of the first contact, mailed or otherwise written. This requirement applies directly only to third-party debt collectors, not to a first-party creditor collecting its own debt. Sending one anyway is the gold-standard defensive practice, since it removes any argument that the debtor didn't know the amount, the basis, or their dispute window.
Where small-business owners usually go wrong
Calling repeatedly within a short window. Two calls to the same debtor within a week is fine if there’s a business reason (they didn’t pick up the first time). Five calls in three days, or “I’ll keep calling until you pick up,” is harassment under FDCPA.
Posting on social media about the debt. A very small number of small-business owners, frustrated with a non-paying customer, post the debtor’s name and the amount on social media or leave an angry Google review. That’s third-party disclosure without consent and is a clear FDCPA violation.
Calling from a number labeled “Collector” or using language that sounds official. Don’t call from a blocked number with a name like “Accounts Receivable” that could imply you’re a third party. Call from your business line, name yourself, and say “this is [your business name], calling about an overdue invoice.”
Assuming a cease-and-desist letter doesn’t apply to you. If a debtor’s attorney sends a letter saying “stop contacting my client,” or if the debtor themselves send a formal written request to stop, you stop. Period. The only exception is one final attempt to tell them you’re filing suit.
Skipping the written validation notice. The safest approach is to send a formal letter by mail within five days of the first verbal contact, outlining the amount, your name, and the 30-day dispute window. This isn’t technically required for first-party creditors, but it’s the gold standard for staying on the right side of the law. The pre-collection letter template covers the format and the certified-mail step.
The practical line: where first-party ends and risky territory begins
You’re safe (and clearly first-party) when:
- Your invoices show your name and contact info clearly.
- You contact the debtor directly by phone, email, or mail.
- The debtor knows you originally sold them something.
- You never claim to be a “debt collector” or “recovery agency.”
- You follow the contact hours and don’t escalate to harassment.
You’re moving into risky territory when:
- You use a third party to send notices or contact the debtor (a lawyer, even for one collection letter, technically triggers FDCPA).
- You call from a number that doesn’t clearly identify you.
- You contact anyone other than the debtor or their attorney about the debt.
- You threaten action you can’t take (bankruptcy filing, property seizure, license revocation without a court order).
The third-party handoff point
The moment you hand a debt to a lawyer, a collection agency, or software that's labeled as coming from a third party, FDCPA rules fully apply to whoever you hired. That's not your direct exposure, but it means you need to choose your vendor carefully. Make sure they're FDCPA-compliant. ti3.co is first-party software, not a third-party collector, so your ti3 messages come from you. Messages from agencies or lawyers do trigger FDCPA.
What to do if you make a mistake
If you’ve already called a customer repeatedly or posted on social media about an unpaid invoice, the practical steps are:
- Stop immediately. Don’t contact the debtor again unless you have a new, separate business reason (like notifying them of a lawsuit).
- Document what you did. Write down the dates and methods of contact.
- If they dispute, listen. If they claim you violated FDCPA, take it seriously. You may want to consult a lawyer, but your goal is usually to settle the dispute and move on.
- Going forward, stay in the safe zone. Use the templates and rules above.
FDCPA violations are expensive when they blow up, but most small-business debt disputes never escalate that far. The safer approach is to follow the rules from the start: clear identification, contact during business hours, no harassment, one formal letter by mail, and then a decision point about whether to escalate to a lawyer or software platform.
FAQ
Q: Does FDCPA apply to invoices for services I haven’t delivered yet?
A: FDCPA applies to “debt,” which means money owed for a past transaction. An invoice for work not done yet isn’t a debt under FDCPA. Once the work is complete and invoiced, it is.
Q: Can I sue them for the debt amount plus my time spent chasing it?
A: You can sue for the debt amount. Whether you can add damages for “collection effort” or “lost time” depends on your contract and state law. In most states, no. Write the contract to include a fee clause upfront (e.g., “unpaid invoices incur a $50 collection fee”) so it’s explicit and harder to challenge.
Q: If I send a collection letter by a lawyer, does the lawyer owe me money if they violate FDCPA?
A: No. The lawyer (or collector) is liable for FDCPA violations under their name. You’re not directly liable for their actions, but you selected them, so choose carefully.
Q: Can I text a customer about an unpaid invoice?
A: Yes. Text falls under “communication” and is subject to the same 8 AM to 9 PM window and harassment rules. It’s actually cleaner than calling because there’s a written record. The catch: if the debtor tells you to stop texting, you must stop.
Q: Is ti3 compliant with FDCPA?
A: ti3 is first-party software, not a debt collector, so FDCPA doesn’t regulate it. Your messages come from your name and business, and you control the escalation sequence. See how ti3’s first-party recovery works for the mechanics.
Sources
- Fair Debt Collection Practices Act, 15 U.S.C. §§ 1692-1692p
- § 1692c(a)(1) (permissible communication hours), § 1692c(b) (third-party disclosure), § 1692c(c) (cease-communication requests)
- § 1692d (harassment or abuse), § 1692e (false or misleading representations)
- § 1692g (validation notice requirements)
- § 1692k (civil liability and statutory damages)
A note on who wrote this
ti3 is built by Captira Analytical, a software company that has spent two decades building tools with customers working the unpaid-invoice problem. We sell first-party recovery software, so treat our view on the DIY-versus-software tradeoff as interested rather than neutral. We do not practice law and nothing here is legal advice. FDCPA case law and state add-on statutes vary, so confirm anything above with a local attorney before you rely on it for a disputed or high-value account. If your invoices have already gone past the point where more email helps, run a free analysis to see what’s recoverable on your current aging.