Debt Collection Call Compliance: FDCPA, FCA, and Recording Rules

Debt collection is one of the most heavily regulated phone-based activities in existence. In the US, the Fair Debt Collection Practices Act (FDCPA) governs what you can say, when you can call, and how you must identify yourself. In the UK, the Financial Conduct Authority (FCA) imposes its own set of requirements. And both jurisdictions have specific rules around call recording compliance.

Getting compliance wrong is not a minor issue. FDCPA violations can result in statutory damages of up to $1,000 per violation plus actual damages and attorney fees. FCA enforcement actions can include unlimited fines and restrictions on your firm's permissions. Beyond the financial penalties, a reputation for non-compliant collection practices is commercially devastating.

This guide covers the practical compliance requirements that every debt collection team needs to understand and implement.

FDCPA: The Core Rules for US Debt Collection

The FDCPA applies to third-party debt collectors -- agencies collecting debts on behalf of original creditors. While original creditors collecting their own debts are not covered by the FDCPA, many states have equivalent consumer protection laws that apply similar standards.

Identification Requirements

Every collection call must include specific disclosures:

• Agent identity -- the collector must state their name
• Company identity -- the collection agency must be named
• Purpose disclosure -- the "Mini-Miranda" statement: "This is an attempt to collect a debt, and any information obtained will be used for that purpose"
• Debt verification rights -- within five days of initial contact, you must send written notice of the debtor's right to dispute

The Mini-Miranda must be delivered in every communication, not just the first call. Missing it on a single call creates liability.

Communication Restrictions

The FDCPA places strict limits on when and how collectors can contact debtors:

Prohibited Conduct

The FDCPA explicitly prohibits:

• Threats of violence or criminal prosecution
• Obscene or profane language
• False or misleading representations -- including misrepresenting the amount owed, falsely claiming to be an attorney, or implying legal action that is not intended
• Unfair practices -- collecting amounts not authorised by the original agreement, threatening to seize property without legal authority
• Publishing debtor lists -- publicly shaming debtors

Validation of Debts

When a debtor disputes a debt within 30 days of initial contact, the collector must:

1. Cease collection activity until verification is provided
2. Obtain verification from the original creditor
3. Provide the debtor with verification of the debt, including the amount and the original creditor's identity

Continuing to collect on a disputed debt without providing verification is a clear FDCPA violation.

FCA Requirements for UK Debt Collection

In the UK, debt collection firms must be authorised by the FCA. The FCA's approach centres on treating customers fairly, with specific expectations for how firms handle customers in financial difficulty.

Consumer Duty

The FCA's Consumer Duty, which came fully into force in 2024, requires firms to deliver good outcomes for customers. For debt collection, this means:

• Demonstrate that collection practices do not cause foreseeable harm
• Communications must be clear, fair, and not misleading
• Products and services must meet the needs of the target market -- including payment arrangements that are sustainable for the debtor
• Customer support must be accessible -- vulnerable customers must receive appropriate treatment

Treating Customers Fairly

The FCA expects collection firms to:

• Assess affordability before agreeing payment arrangements -- do not set up arrangements the debtor cannot maintain
• Recognise vulnerability -- financial difficulty, mental health issues, bereavement, and other circumstances that affect a debtor's ability to engage
• Offer forbearance where appropriate -- freezing interest, reducing payments, or pausing collection activity
• Provide clear information about the debt, the debtor's rights, and available options

Record-Keeping

FCA-authorised firms must maintain adequate records of:

• All communications with debtors
• Decisions made about payment arrangements and forbearance
• Complaints and their resolution
• Evidence of treating customers fairly

This record-keeping requirement is where call recording becomes not just good practice but a regulatory expectation. For a detailed breakdown of what the FCA specifically requires around call recording, retention, and regulator access, see our guide on FCA call recording requirements.

Call Recording Requirements

US Recording Laws

US recording laws operate on a state-by-state basis:

One-party consent states (majority): The collector's knowledge that the call is being recorded satisfies the legal requirement.

All-party consent states (California, Florida, Illinois, Maryland, Massachusetts, Pennsylvania, Washington, and others): All parties must be informed and consent to the recording.

For collection agencies operating across state lines, the practical solution is straightforward: always disclose recording and obtain consent. A simple announcement at the start of every call covers you in every jurisdiction.

"This call may be recorded for quality assurance and compliance purposes."

UK Recording Laws

In the UK, the Regulation of Investigatory Powers Act 2000 (RIPA) and the Telecommunications Regulations 2000 govern call recording. For FCA-authorised firms, the position is relatively clear:

• Recording is expected -- the FCA expects firms to maintain records of customer communications, and call recording is the primary method
• Inform the caller -- UK law requires that at least one party consents to the recording. Best practice is to inform all parties
• GDPR applies -- call recordings contain personal data and must be handled in accordance with GDPR requirements

GDPR and Debt Collection Recordings

GDPR adds a layer of complexity to call recording in debt collection:

Lawful basis: The most appropriate basis for collection call recording is legal obligation (FCA record-keeping requirements) or legitimate interests (compliance monitoring, dispute resolution).

Data minimisation: Record only what is necessary. While most firms record all calls for completeness, the retention period should be proportionate.

Retention periods: There is no single mandated period, but industry practice is:

Subject access requests: Debtors have the right to request copies of their call recordings under GDPR Article 15. You must respond within one month.

Building a Compliance Framework

Knowing the rules is necessary but not sufficient. The challenge is ensuring that every agent, on every call, follows them consistently.

Agent Training

Every collection agent should receive training on:

1. FDCPA/FCA requirements -- not just what the rules say, but what they mean in practice
2. Opening scripts -- embedding the Mini-Miranda and recording disclosure into muscle memory
3. Prohibited phrases -- specific language to avoid, with examples
4. Vulnerability recognition -- how to identify and respond to signs of vulnerability
5. Dispute handling -- the exact process when a debtor disputes
6. Escalation procedures -- when to escalate to a supervisor or compliance officer

Call Monitoring

Manual call monitoring has an inherent limitation: sample size. A compliance officer reviewing 20 calls per day from a team making 500 calls is reviewing 4% of the volume. The other 96% goes unmonitored.

This is where call intelligence platforms change the equation. Automated analysis can monitor every call for:

• Mini-Miranda delivery -- was the required disclosure made?
• Prohibited language -- did the agent use any banned phrases or make threats?
• Calling hours compliance -- were calls made within permitted timeframes?
• Vulnerability indicators -- did the debtor express signs of vulnerability via sentiment analysis that should trigger a different approach?
• Disclosure completeness -- were all required elements covered?

Compliance Scorecards

Build compliance scorecards that track key metrics over time:

• Percentage of calls with compliant openings
• Number of calls flagged for prohibited language
• Dispute handling compliance rate
• Average time to send written verification after dispute
• Complaint volumes and resolution times

These metrics give you a real-time view of your compliance posture and allow you to identify problems before they become regulatory issues.

Common Compliance Failures

Failure 1: Inconsistent Mini-Miranda Delivery

The most common FDCPA violation. Agents forget the disclosure on follow-up calls, or they deliver it so quickly that it is unintelligible. Solution: embed it into your dialler's call script prompt and monitor delivery via call analytics.

Failure 2: Third-Party Disclosure

An agent calls a debtor's home number and the spouse answers. The agent mentions the debt. This is a violation. Solution: train agents to ask to speak with the named individual without disclosing the reason for the call until identity is confirmed.

Failure 3: Continuing Collection on Disputed Debts

A debtor disputes in writing but the agency continues calling because the dispute was not properly logged. Solution: integrate dispute tracking into your collections system so that disputed accounts are automatically flagged and paused.

Failure 4: Ignoring Vulnerability

An agent continues pressing for payment when the debtor is clearly in distress. Under FCA rules, this is a failure to treat customers fairly. Solution: train agents on vulnerability indicators and establish clear escalation procedures.

Failure 5: Inadequate Record-Keeping

Calls are recorded but not linked to debtor accounts, making it impossible to retrieve specific recordings during an audit or complaint investigation. Solution: ensure your recording system tags calls with account identifiers and stores them in a searchable, auditable format.

Technology for Compliance

Modern collection operations rely on technology to maintain compliance at scale. The key tools are:

Call recording with automatic tagging -- recordings linked to debtor accounts, call types, and compliance status.

AI-powered call analysis -- automated monitoring of every call for compliance indicators. Coldread analyses calls from Aircall and Ringover, automatically flagging compliance gaps and generating the audit trail that regulators expect to see.

Compliance dashboards -- real-time visibility into compliance metrics across the team.

Dispute tracking integration -- automated pausing of collection activity when disputes are logged.

Getting Started

If you are reviewing or building your compliance framework:

1. Audit your current calls -- listen to a sample and check for Mini-Miranda delivery, prohibited language, and proper dispute handling
2. Review your recording practices -- are all calls recorded? Are recordings linked to accounts? Is consent obtained?
3. Check your training -- when were agents last trained on FDCPA/FCA requirements?
4. Assess your monitoring -- what percentage of calls are reviewed for compliance?
5. Implement automated monitoring -- move from sample-based to comprehensive compliance coverage

Related reading:

• Coldread for Debt Collection
• Debt Collection Call Scripts
• Coldread for Compliance Teams
• GDPR Call Recording Guide
• Coldread for Debt Collection Using Aircall
• Coldread for Debt Collection Using Ringover