Medical Debt Validation Rights Under the FDCPA.

A collection letter about a hospital bill lands with a number on it and almost nothing behind the number. No dates of service, no itemization, no record of what the insurer paid. Medical billing runs through the patient, the provider, the insurer and sometimes Medicare or Medicaid, so by the time a balance reaches a third-party collector, the chain of documentation has usually thinned to a name and an amount. The Fair Debt Collection Practices Act gives you a way to force that chain back into the open, and the window to use it is short.

The right comes from 15 U.S.C. § 1692g. Within five days of the initial communication, a debt collector must send a written notice stating the amount of the debt, the name of the creditor to whom the debt is owed, and the consumer’s right to dispute. Dispute in writing within thirty days of receiving that notice and the collector must cease collection of the debt until it obtains verification and mails it to you.

This covers FDCPA validation as it applies to medical debts in collection. It does not cover billing disputes with the original provider, insurance claim appeals, or hospital financial assistance programs. A consumer who believes a bill was already paid or improperly coded should run the validation request and the underlying billing dispute in parallel, because they reach different parties and produce different documents.

The 5-day notice and the 30-day clock both run on receipt, not on the first phone call

FDCPA § 1692g sets two deadlines and they belong to different parties. The collector owes you a written notice within five days after the initial communication. You then have thirty days, and those thirty days run from your receipt of the written notice. A phone call does not start your clock. A voicemail does not start your clock. The letter arriving in your mailbox does.

Section 1692g(b) is the part that carries weight: where the consumer disputes in writing within the thirty-day period, the collector “shall cease collection of the debt, or any disputed portion thereof, until the debt collector obtains verification of the debt or a copy of a judgment” and mails it to the consumer. A verbal request triggers none of this. Put it in writing.

Section 1692g(a) lists five required items, and the original creditor’s name is the fifth

The notice a collector must send within five days is a closed list under § 1692g(a): the amount of the debt; the name of the creditor to whom the debt is owed; a statement that unless the consumer disputes within thirty days of receipt the debt will be assumed valid; a statement that a timely written dispute obligates the collector to obtain verification or a copy of a judgment and mail it; and, under § 1692g(a)(5), a statement that on written request within the thirty-day period the collector will provide the name and address of the original creditor if different from the current creditor.

That fifth item is the one that answers whether the account was ever yours. A resold medical debt can pass through several hands, and the current collector’s name tells you nothing about which hospital, imaging group or anesthesiology practice originated the charge.

Regulation F at 12 CFR 1006.34 adds the itemization the statute does not spell out. The validation information at (c)(2) includes the itemization date, the amount of the debt on that date, an itemization of interest, fees, payments and credits since it, the current amount of the debt, the creditor’s name, and the merchant brand where applicable. A collector that sends a one-line balance with no itemization date has not met that list.

Verification under § 1692g is not the same thing as full documentation

Courts have read “verification of the debt” with varying strictness, and the statute does not define it. What § 1692g(b) obliges is verification of the debt or a copy of a judgment, mailed to the consumer. What a consumer working a medical account usually wants to see is broader:

• A copy of the original bill or itemized statement from the provider showing dates of service, services rendered, and charges.
• The original creditor’s name, address, and the account number used when the debt originated.
• An accounting of payments made on the debt, with dates and amounts.
• The chain of ownership if the debt has been transferred or sold.
• Documentation of any insurance payments that should have been applied to the original bill.

Two limits belong with that list. The FDCPA imposes no duty to verify: a collector that cannot assemble the documentation may simply stop collecting and leave the account where it sits. And § 1692g imposes no duty to delete anything from a credit report. Removal of a reported tradeline runs through an FCRA § 1681i dispute filed with the bureau, which is a separate process described below.

HIPAA narrows what a medical collector holds, which narrows what it can verify

Medical debt validation is harder for the collector than consumer credit validation, and the reason is the document trail. The Health Insurance Portability and Accountability Act restricts how medical information moves between providers and collectors. A collector generally receives a limited set of billing information rather than full medical records, so its ability to substantiate what was billed and why is thinner than a card issuer’s.

The billing errors that show up in medical collections reflect that:

• Insurance reimbursements never credited to the patient’s account.
• Charges for services covered under the patient’s plan but billed as uncovered.
• Out-of-network charges during an in-network procedure that should fall under surprise billing protections.
• Duplicate billing for the same service across separate provider entities inside one hospital.
• Charges for services the patient never received, or billed under the wrong patient name.

The Federal Trade Commission’s 2013 study The Structure and Practices of the Debt Buying Industry found that most contracts between creditors and debt buyers stated the creditor did not warrant that the information it supplied about the debts was accurate, and that buyers did not receive whether consumers had previously disputed the debts or whether collectors had previously verified them.

Attempts to collect debt not owed leads every debt collection complaint category

Across the 333,590 Debt collection complaints recorded in the CFPB’s public Consumer Complaint Database from July 2025 through June 2026, the leading issue is Attempts to collect debt not owed at 41.4%, followed by Took or threatened to take negative or legal action at 24.2% and Written notification about debt at 17.9%. These are unverified consumer allegations and the CFPB does not confirm the facts alleged; a high count also tracks company size as well as conduct.

The Consumer Financial Protection Bureau’s FDCPA Annual Report to Congress 2025 adds the shape of the “not owed” claim: among 2024 debt collection complaints about false statements or representations, 91% concerned attempts to collect the wrong amount from the consumer. These too are unverified consumer allegations rather than findings of wrongdoing. What they describe is the same failure a validation request is built to surface, which is a number the collector cannot tie back to a service.

Send the request by certified mail and date the file from the letter you received

The request must be written to trigger anything. It needs no magic language and no specific form.

1. Find the date you received the collector’s first written communication. That receipt starts the thirty days, and keeping the envelope is worth more than it sounds.
2. Draft a request identifying yourself, the alleged debt, and the information you want. Ask for the original creditor’s name and address under § 1692g(a)(5) if the current collector is not the provider.
3. Send it certified mail, return receipt requested. The receipt establishes both delivery and date.
4. Keep a copy of the request and everything enclosed with it.
5. Wait. Under § 1692g(b) the collector cannot resume collection until it mails verification.
6. Review what arrives. If the verification is thin or contradicts your own records, the next step is a billing dispute with the provider, a claim review with your insurer, or an FCRA dispute with the bureau, depending on what the documents show.

Our own debt validation letter guide walks through the wording, and what happens when an account goes to collections covers what the collector does on its side before the letter ever reaches you.

Ignoring the letter is how the debt gets assumed valid

Section 1692g(a)(3) requires the notice to state that unless the consumer disputes within thirty days of receipt, the debt will be assumed to be valid by the debt collector. That assumption is the collector’s, not a court’s, and it does not extinguish any other defense. What it does cost you is § 1692g(b): once the thirty days pass, nothing obliges the collector to pause collection while it looks for paperwork.

A collector that continues collecting after a timely written dispute and before mailing verification has violated § 1692g(b). Under 15 U.S.C. § 1692k a consumer can recover actual damages, additional damages the court may allow up to $1,000 in an individual action, and costs plus a reasonable attorney’s fee. The action must be brought within one year of the violation. Section 1692k(b)(1) directs the court to weigh the frequency, persistence, nature and intent of the noncompliance in setting that additional award, so multiple violations raise the figure inside the single $1,000 ceiling rather than stacking a separate $1,000 each. Complaints can also go to the CFPB, the Federal Trade Commission, or a state attorney general.

Validation challenges the collector; an FCRA § 1681i dispute challenges the report

These are two different letters to two different recipients, and confusing them wastes a round.

Both can run at once. Validation is the better tool when you question whether the debt is yours or whether this collector may collect it. A bureau dispute is the better tool when the account is reported inaccurately, incompletely, unverifiably, or past the reporting window. Both can end with the tradeline gone, but they get there by different routes, and § 1692g does not order anyone to change a credit report.

Validation does not stop reporting, and the CFPB’s medical debt rule was vacated in 2025

A collector that successfully verifies a medical debt may report it. What validation can do is surface a defect the collector then decides not to defend.

Where verification comes up short, a few things follow: the collector may close the account and return it to the original creditor; it may keep collecting without reporting; it may sell the debt to another collector, who owes you a fresh § 1692g notice of its own; or it may report anyway, at which point an FCRA § 1681i dispute is the remedy.

The reporting rules themselves changed twice and are widely misdescribed. On April 11, 2023, Equifax, Experian and TransUnion announced they had removed medical collection tradelines with an initial balance under $500 from U.S. credit reports, bringing the cumulative total to nearly 70% of all medical collection debt tradelines reported to the nationwide agencies now removed. That was a voluntary bureau policy. Separately, the CFPB finalized a Regulation V rule in January 2025 that it estimated would remove about $49 billion in medical debt from the reports of roughly 15 million Americans, but a federal court in the Eastern District of Texas vacated that rule on July 11, 2025, and the CFPB issued an interpretive rule on October 20, 2025 that the FCRA preempts state bans. Medical debt generally remains reportable today.

What the 2023 bureau change actually reached is measurable. The CFPB’s July 2022 Consumer Credit Trends analysis found about 62.6% of medical collection tradelines carried an initial balance under the $500 threshold, but only 2.5% were ever marked paid, so the paid-collections half of the policy moved little. The Bureau projected the share of consumers with at least one medical collection falling from roughly 14% in March 2022 to about 7%, with about half of affected consumers still carrying at least one. We cover the mechanics in medical debt on credit reports and the scoring side in does medical debt affect your credit score in 2026.

The reporting clock starts 180 days after the delinquency, not when the collector bought the debt

FCRA § 1681c sets seven years for most negative items. The subsection that matters on a resold medical account is § 1681c(c)(1): the seven-year period begins on the expiration of the 180-day period beginning on the date of the commencement of the delinquency that immediately preceded the collection activity or charge-off. The reportable life therefore runs about seven and a half years from the original delinquency, never from the date a debt buyer acquired the file.

FCRA § 1681s-2(a)(5)(A) puts the duty to report that date on the furnisher, within 90 days of furnishing, at month-and-year precision, and subparagraph (B) requires a subsequent furnisher to carry the same date forward. A debt buyer reporting a fresher date of first delinquency than the original provider is failing a duty it has, and that is a § 1681i dispute with the bureau.

Keep the paper, because the timeline is the case

If this escalates, what you can prove is the sequence. Records worth holding:

• The collector’s initial dunning letter and every later communication, with envelopes.
• Your written validation request, the certified mail receipt, and the return receipt.
• Everything the collector mails back as verification.
• Original bills, explanation of benefits statements from your insurer, and proof of any payment.
• Call notes with date, time, the representative’s name, and what was said.
• Credit reports pulled before and after the request, so a change in how the item is reported is documented.

Where the balance was insurance-payable, the explanation of benefits is the single strongest document you can hold. It shows what the insurer paid, what your responsibility was, and whether the provider billed correctly. Contact the insurer directly while the validation request is out; that document supports both the FDCPA challenge and any later FCRA dispute. If the collector is willing to talk about the amount, how to negotiate with debt collectors covers getting any arrangement in writing before money moves.

Which tool you need depends on whether the fight is with the collector or the report

Medical validation is a letter to a collector. Fixing what the bureaus show is a different job, and most tools do only one of them. Here is what each option gives a reader working a medical collection across all three reports.

Every price is that company’s own published rate, read off that company’s own site on September 15, 2026. Trustpilot scores and review counts as published on September 24, 2026.

None of these writes your § 1692g validation letter for you, and a tool that reaches one bureau leaves the other two reports untouched. Eduardo F, in a 1-star Trustpilot review of Credit Karma dated September 14, 2026, wrote: “Credit Karma gets people to apply for loans or credit cards with outstanding approval odds which I believe to be a complete lie. So they make me hurt your credit score with hard inquiries, when in actuality you have 0 approval odds, not outstanding.”

What CreditRefresh does once the medical item is already on the report

Our members do not arrive with one medical collection. In our September 18, 2026 analysis of paying-member data, 97.7% of paying members carry at least one negative tradeline entry, and the average member carries 30 across the bureaus with a median of 25. The same account can appear at more than one bureau, these are bureau-level entries rather than 30 distinct debts, and a negative entry is not automatically inaccurate or disputable. Mailed dispute rounds average 23.6 disputed bureau-level items.

In that same extract, 2.3% of disputed bureau-level items in mailed rounds had a recorded outcome. Within that subset, 47.9% were no longer reported on a newer pull of the same bureau, while 52.1% remained reported with a changed balance, status or negative flag.

CreditRefresh is included with Refresh Monitoring at $49.99 a month, with no setup fee, no per-dispute charge and no contract. It pulls all three bureau reports, flags items that look inaccurate, incomplete, unverifiable or too old to report, and drafts a print-ready FCRA letter for each one you pick. It does not draft FDCPA validation letters, and the bureaus decide dispute outcomes. Nothing leaves the building without your review and your signature.

It is backed by our 100% money-back guarantee: members who work the full program and see no bureau score rise above where they started can claim back every Refresh Monitoring payment. It is a refund promise, never a score promise.

Frequently asked questions about medical debt validation

What constitutes validation of debt under the FDCPA?

Section 1692g(b) requires the collector to obtain “verification of the debt or a copy of a judgment” and mail it to the consumer. The statute does not define verification further, and courts have applied it with varying strictness. Regulation F at 12 CFR 1006.34(c)(2) sets the itemization the notice must carry, including the itemization date, the amount owed on that date, interest, fees, payments and credits since, the current amount, and the creditor’s name.

What can I do if a debt collector refuses to validate my debt?

Nothing in § 1692g compels a collector to verify. What it compels is silence: collection must stay paused until verification is mailed. If the collector keeps collecting without verifying, that is a § 1692g(b) violation, and § 1692k allows actual damages, additional damages up to $1,000 in an individual action, and costs and fees, on an action brought within one year of the violation. You can also file with the CFPB, the FTC, or your state attorney general.

Is it legal for medical debt to be sent to collections?

Yes. A provider that has not been paid may place the account with a collection agency or sell it to a debt buyer. What changes at that point is which law applies: the FDCPA reaches third-party collectors and debt buyers, so the § 1692g notice and the thirty-day dispute right attach once the account leaves the provider’s own hands.

Does sending a validation request stop the collector from calling?

A timely written request does. Once you dispute in writing inside the thirty-day window, § 1692g(b) requires the collector to cease collection of the debt, or the disputed portion, until it mails verification. That covers calls, letters, and lawsuits. Resuming before verification is mailed violates the subsection.

Can a hospital itself be a debt collector under the FDCPA?

Generally no. The FDCPA reaches third-party debt collectors and debt buyers, so a hospital collecting its own account usually falls outside it, though state law may impose similar duties. Once the hospital refers the account to an outside agency or sells it, that party is covered. FICO’s own guidance notes a parallel distinction on the scoring side: its special treatments for collections apply to third-party collections, and first-party collections worked in house get none of those carve-outs.

Can I dispute a medical debt that is already paid?

Paid medical collections were removed from credit reports under the three bureaus’ April 2023 policy. A paid medical collection still showing after that is a reporting problem rather than a collection problem, so the direct remedy is an FCRA § 1681i dispute with the bureau, not a validation letter to the collector.

What if the medical debt is older than the statute of limitations?

According to the CFPB, most states set a statute of limitations of three to six years for debt, though some are longer, and the period varies with the type of debt, the state the consumer lives in, and the state law named in the agreement. Once it expires, a collector may generally still contact you by letter or phone but may not sue or threaten to sue. The CFPB also warns that making a partial payment or acknowledging an old debt, even after the period has run, may restart it. The tradeline can remain reportable under FCRA § 1681c while the lawsuit is off the table.

How long does the collector have to respond to my request?

The FDCPA sets no deadline for the collector’s verification. It sets a consequence instead: collection stays paused until verification is mailed. A collector that cannot assemble the records quickly may close the account rather than keep working it, which is more common with older medical debts where the provider’s records are incomplete or the account has changed hands.

Last reviewed: September 2026

This article is for educational purposes only and does not constitute legal or financial advice. The Fair Credit Reporting Act, the Fair Debt Collection Practices Act and related regulations are complex, and outcomes depend on individual circumstances. Consumers with specific questions about their credit reports or rights under federal law should consult a licensed attorney or contact the Consumer Financial Protection Bureau directly.

Ready to see what all three of your reports actually say about a medical collection? Get Started with Refresh Monitoring at $49.99 a month, cancel anytime, or read the guarantee first.

CreditRefresh reads the medical collections on all three reports, including the paid and small ones the bureaus said they would stop carrying, and drafts the dispute for each. Connecting your three reports takes a few minutes, and the first scan is ready the same day. Backed by a 100% money-back guarantee.

See the medical collections on your reports →