Most small business owners chasing overdue invoices break FDCPA rules without realizing it. The Fair Debt Collection Practices Act is written to prevent abuse by professional collectors, but it creates a legal trap for first-party creditors who don’t know the boundary.
The boundary: if you’re collecting on a debt you originated, FDCPA doesn’t technically apply to you. But the moment you hand a debt to a third party (a lawyer, a agency, software that’s not obviously from you), FDCPA rules click on. Most small-business owners stay on the safe side by doing it themselves. The rules below are what you need to know when you do.
What FDCPA covers and what it doesn’t
FDCPA applies to third-party debt collectors: agencies, lawyers, and software platforms that collect on behalf of someone else. If you owe $5,000 to a supplier and you don’t pay, the supplier can chase you themselves with almost no legal restriction. But the moment the supplier hires a collector or sends your debt to one, FDCPA rules start.
What makes this weird: the law uses the term “debt collector” to mean the third party, not the creditor. So FDCPA doesn’t directly constrain what you (the original creditor) can do. But here’s where it gets relevant: if you present yourself as a collector or use language that implies you are one, FDCPA applies to you. And if you’re a small-business owner trying to recover a debt you originated, the safe assumption is: follow FDCPA anyway.
Why? Because the gray zone is expensive to fight in court, and the penalties are real (courts award damages up to $1,000 per violation per debtor, plus attorney fees).
The core FDCPA rules that matter if you’re collecting yourself
No contact before 8 AM or after 9 PM, Eastern Time. Calls and texts outside this window are violations. Email doesn’t have the same hard rule, but the spirit applies: don’t contact during sleeping hours.
No contact at a debtor’s workplace if they say their employer objects. If they tell you “my boss doesn’t want me getting collection calls,” you can’t call them at work. Email and mail are cleaner.
No harassment or threats. The phrase “I’ll send your debt to collections” is fine. The phrase “I’ll destroy your credit” or “I’ll sue you personally for my time” crosses the line. No profanity, no threats of property seizure without a court order, no repeated calls meant to harass (the technical term is “calling repeatedly with the intent to annoy”).
No third-party disclosure without consent. Don’t tell their boss, their family, or their bank that they owe you money. You can tell them if they ask your debtor, but you can’t volunteer it to other parties. Mail to their address and calls to their phone are fine; posting on social media about them is not.
You must state your purpose and name clearly on the first contact. If you call or email, the debtor needs to know who you are, who you represent (yourself, if that’s the case), and what you’re calling about. “Hi, this is [your name] calling about an overdue invoice” works. “Hi, do you have a minute to talk?” then revealing it’s a debt call does not.
You cannot call back after they say “stop calling.” If a debtor or their attorney tells you to stop, you must stop. The only exceptions are to confirm receipt of the written request or to notify them that you’re taking a specific action (like filing suit). One more call after that instruction is a violation.
In writing, you must include specific language. If you send a debt notice or collection letter, it must include (i) the amount of debt, (ii) the original creditor’s name, (iii) a statement that they have 30 days to dispute in writing, and (iv) a notice that silence is not consent.
The debt letter rule
Federal law requires you to mail a validation notice within five days of the first contact (phone or email is less clear; the strictest interpretation is that you must mail within five days regardless). The notice must include the amount, the original creditor name, and the 30-day dispute window. If you skip this, the debtor can file a counterclaim against you for statutory damages.
Where small-business owners usually go wrong
Calling repeatedly within a short window. Two calls to the same debtor within a week is fine if there’s a business reason (they didn’t pick up the first time). Five calls in three days, or “I’ll keep calling until you pick up,” is harassment under FDCPA.
Posting on social media about the debt. A very small number of small-business owners, frustrated with a non-paying customer, post the debtor’s name and the amount on social media or leave an angry Google review. That’s third-party disclosure without consent and is a clear FDCPA violation.
Calling from a number labeled “Collector” or using language that sounds official. Don’t call from a blocked number with a name like “Accounts Receivable” that could imply you’re a third party. Call from your business line, name yourself, and say “this is [your business name], calling about an overdue invoice.”
Assuming a cease-and-desist letter doesn’t apply to you. If a debtor’s attorney sends a letter saying “stop contacting my client,” or if the debtor themselves send a formal written request to stop, you stop. Period. The only exception is one final attempt to tell them you’re filing suit.
Skipping the written validation notice. The safest approach is to send a formal letter by mail within five days of the first verbal contact, outlining the amount, your name, and the 30-day dispute window. This isn’t technically required for first-party creditors, but it’s the gold standard for staying on the right side of the law.
The practical line: where first-party ends and risky territory begins
You’re safe (and clearly first-party) when:
- Your invoices show your name and contact info clearly.
- You contact the debtor directly by phone, email, or mail.
- The debtor knows you originally sold them something.
- You never claim to be a “debt collector” or “recovery agency.”
- You follow the contact hours and don’t escalate to harassment.
You’re moving into risky territory when:
- You use a third party to send notices or contact the debtor (a lawyer, even for one collection letter, technically triggers FDCPA).
- You call from a number that doesn’t clearly identify you.
- You contact anyone other than the debtor or their attorney about the debt.
- You threaten action you can’t take (bankruptcy filing, property seizure, license revocation without a court order).
The third-party handoff point
The moment you hand a debt to a lawyer, a collection agency, or software that's labeled as coming from a third party, FDCPA rules fully apply to whoever you hired. That's not your direct exposure, but it means you need to choose your vendor carefully. Make sure they're FDCPA-compliant. ti3.co is first-party software, not a third-party collector, so your ti3 messages come from you. Messages from agencies or lawyers do trigger FDCPA.
What to do if you make a mistake
If you’ve already called a customer repeatedly or posted on social media about an unpaid invoice, the practical steps are:
- Stop immediately. Don’t contact the debtor again unless you have a new, separate business reason (like notifying them of a lawsuit).
- Document what you did. Write down the dates and methods of contact.
- If they dispute, listen. If they claim you violated FDCPA, take it seriously. You may want to consult a lawyer, but your goal is usually to settle the dispute and move on.
- Going forward, stay in the safe zone. Use the templates and rules above.
FDCPA violations are expensive when they blow up, but most small-business debt disputes never escalate that far. The safer approach is to follow the rules from the start: clear identification, contact during business hours, no harassment, one formal letter by mail, and then a decision point about whether to escalate to a lawyer or software platform.
FAQ
Q: Does FDCPA apply to invoices for services I haven’t delivered yet?
A: FDCPA applies to “debt,” which means money owed for a past transaction. An invoice for work not done yet isn’t a debt under FDCPA. Once the work is complete and invoiced, it is.
Q: Can I sue them for the debt amount plus my time spent chasing it?
A: You can sue for the debt amount. Whether you can add damages for “collection effort” or “lost time” depends on your contract and state law. In most states, no. Write the contract to include a fee clause upfront (e.g., “unpaid invoices incur a $50 collection fee”) so it’s explicit and harder to challenge.
Q: If I send a collection letter by a lawyer, does the lawyer owe me money if they violate FDCPA?
A: No. The lawyer (or collector) is liable for FDCPA violations under their name. You’re not directly liable for their actions, but you selected them, so choose carefully.
Q: Can I text a customer about an unpaid invoice?
A: Yes. Text falls under “communication” and is subject to the same 8 AM to 9 PM window and harassment rules. It’s actually cleaner than calling because there’s a written record. The catch: if the debtor tells you to stop texting, you must stop.
Q: Is ti3 compliant with FDCPA?
A: ti3 is first-party software, not a debt collector, so FDCPA doesn’t regulate it. Your messages come from your name and business, and you control the escalation sequence. [Link to the /recover/ pillar page.]