First: do not panic, and do not pay immediately
When you receive a collection letter for medical debt, your first instinct may be to pay it immediately to make it go away. Do not do that yet. Here is why:
- The debt may not be valid. Medical billing errors are common, especially on complex hospital bills. A debt that was incorrectly calculated, sent to collections in error, or for services you never received is not a valid debt.
- You may qualify for charity care. If the original provider is a nonprofit hospital, they are legally required to have a financial assistance program under IRS Section 501(r). You may be able to get the debt reduced or eliminated retroactively.
- The statute of limitations may have expired. Every state has a statute of limitations on debt collection — typically 3-6 years. If the debt is past the statute of limitations, the collector cannot sue you to collect it (though they can still ask for payment).
- Paying can restart the clock. In some states, making a payment on time-barred debt can restart the statute of limitations, giving the collector the legal right to sue you again.
Step 1: Send a debt validation letter
Under the Fair Debt Collection Practices Act (FDCPA), you have the right to demand that a debt collector prove the debt is valid and that they have the legal right to collect it. This is called “debt validation.”
Within 30 days of receiving the collector’s written validation notice, send your dispute in writing by certified mail. Two of these asks are the ones federal law actually attaches a collection pause to:
What the FDCPA requires them to answer
- 1That you dispute the debt, and you want verification of it
- 2The name and address of the original creditor (the hospital or provider), if it is different from whoever is collecting now
Worth asking for too — but the law does not compel these
- 3The exact amount of the debt, including a breakdown of principal, interest, and fees
- 4Proof that the collector is licensed to collect in your state
- 5A copy of the original signed agreement or contract (if any)
- 6Complete payment history showing how the balance was calculated
- 7Confirmation that the debt is within your state statute of limitations
Collectors often answer these anyway, and the answers are useful. But leaving them unanswered does not extend the pause described below.
Once you dispute in writing inside that 30-day window, the collector must stop collecting the debt until it mails you verification of the debt, a copy of a judgment, or the original creditor’s name and address. If it keeps collecting before mailing one of those, that is a violation of federal law — and the FDCPA lets you recover statutory damages of up to $1,000 plus costs and reasonable attorney fees if you sue and win. The pause is tied to those items; it is not a pause until every question in your letter is answered.
Your rights under the FDCPA
The Fair Debt Collection Practices Act gives you specific protections against abusive, deceptive, and unfair collection practices. Collectors violate the FDCPA more often than most people realize. Here are your key rights:
Harassment protection
Collectors cannot call you before 8 AM or after 9 PM, or use threatening or abusive language. Calls to your job are governed by two different rules: a collector must not call your workplace once it knows or has reason to know your employer does not allow those calls (15 U.S.C. 1692c(a)(3)), and separately it must not contact you at any place it knows or should know is inconvenient for you (15 U.S.C. 1692c(a)(1)) — that second one is the rule your own "stop calling me at work" request relies on. On call volume: a collector that places more than 7 phone calls within 7 consecutive days about one debt — or calls again within 7 days of actually speaking with you — is presumed to be harassing you (12 CFR 1006.14(b)(2)). That presumption can be rebutted, it does not cover letters or emails, and calls that never connect or that you consented to do not count toward the 7.
Written notice requirements
Within 5 days of first contacting you, the collector must send a written validation notice — unless it already gave you that information in the first communication, or you have already paid the debt. The notice states the amount of the debt, the name of the creditor the debt is owed to, and your right to dispute it within 30 days. The original creditor’s name and address is a separate right: you get that by asking in writing inside the 30-day window.
Dispute rights
If you dispute the debt in writing within 30 days, the collector must stop collecting it until it mails you verification of the debt, a copy of a judgment, or the original creditor’s name and address. If it never sends one of those, it cannot keep collecting. It does not automatically have to delete a credit-report entry — getting a tradeline removed is a separate dispute with the credit bureaus under the Fair Credit Reporting Act.
Cease communication
You can send a written "cease and desist" letter demanding that the collector stop contacting you entirely. After receiving it, they can only contact you to confirm they will stop or to notify you of specific legal action.
Medical debt and your credit report — the 2023 changes
The three major credit bureaus announced voluntary changes to how they handle medical collections. These policies are separate from federal law and can change:
Paid medical collections: voluntary bureau policy
Equifax, Experian, and TransUnion announced that paid medical collections would be excluded from their consumer credit reports. Check all three of your actual reports and the bureau’s current policy; this is not a federal reporting ban.
Initial reported balance under $500: voluntary bureau policy
The three major bureaus announced that medical collections with an initial reported balance under $500 would be excluded. The threshold is based on the initial reported balance, not necessarily the balance shown today. Verify the entry and current bureau policy.
365-day delay: voluntary bureau policy
The three major bureaus announced a one-year waiting period before reporting unpaid medical collections. Treat that as current industry policy, not a federal prohibition, and verify the relevant bureau’s policy and dates on your report.
The federal rule to remove all medical debt was struck down
In January 2025, the CFPB finalized a rule that would have removed all medical debt from credit reports entirely. A federal court vacated that rule on July 11, 2025 (Cornerstone Credit Union League v. CFPB), so it is not in effect. The separate bureau policies above are voluntary. A number of states have their own restrictions, but in October 2025 the CFPB issued an interpretive rule saying the federal Fair Credit Reporting Act generally preempts state credit-reporting laws — the agency’s reading, not a court ruling, and it puts the practical force of those state laws in question. Verify current bureau policy, and check with your state attorney general or banking regulator before relying on a state law.
If an entry appears inaccurate or inconsistent with the relevant bureau's current policy, you can submit a dispute and identify the specific issue. Check the entry on each actual report first; for the $500 policy, use the initial reported balance. The Fair Credit Reporting Act governs the bureau's reinvestigation duties, while the paid-debt, $500, and 365-day treatments described above come from voluntary bureau policy rather than federal law.
Got a collection letter?
Upload it and we will check your rights for free
Get Started FreeCharity care: you may not owe anything at all
If your medical debt originated at a nonprofit hospital — and about 57% of US hospitals are nonprofit — the hospital is legally required to have a Financial Assistance Policy (FAP) under IRS Section 501(r). This is commonly called “charity care.”
Here is why this matters even after the debt goes to collections:
- Retroactive eligibility. Under 501(r), the hospital must accept and process financial assistance applications at least 240 days after the first billing statement. Even if the debt is already in collections, you may be able to apply for charity care with the original hospital and get the debt reduced or eliminated.
- Income-based eligibility. Most hospital FAPs provide free care for patients with incomes below 200% of the Federal Poverty Level (about $31,920 for a single person in 2026) and discounted care for incomes up to 300-400% FPL. Many people who qualify do not know these programs exist.
- 501(r) violations. If a nonprofit hospital sent your bill to collections without first screening you for financial assistance, without notifying you of their FAP, or while your application was pending, they may have violated 501(r). These violations can be reported to the IRS and to your state attorney general.
To find out if your hospital is a 501(c)(3) nonprofit, search for the hospital on the IRS Tax Exempt Organization Search tool (apps.irs.gov/app/eos). Then contact the hospital directly and ask for their Financial Assistance Application.
Statute of limitations on medical debt
Every state has a statute of limitations that limits how long a creditor can sue you to collect a debt. For medical debt, this is typically governed by the statute of limitations for written contracts or open accounts, which varies by state — usually 3 to 6 years from the date of last activity on the account.
Key things to know about the statute of limitations:
- Once the statute expires, the collector cannot sue you — but they can still try to collect by phone or letter. This is called “time-barred” debt.
- In some states, making any payment — even a small one — on time-barred debt can restart the statute of limitations. Be careful about making partial payments on old debt without understanding your state's rules.
- If a collector sues you for time-barred debt, you must raise the expired statute of limitations as a defense in court — it is not automatic. If you do not show up or do not raise the defense, the collector can still get a judgment.
- Under the CFPB's Regulation F (12 CFR 1006.26(b)), a debt collector must not sue — or threaten to sue — on time-barred debt. There is no knowledge requirement in the rule: it applies even if the collector says it did not know the debt was too old. The only carve-out is a proof of claim filed in a bankruptcy case.
Common FDCPA violations to watch for
Debt collectors violate the FDCPA frequently. If a collector does any of the following, document it — you may be entitled to statutory damages of up to $1,000 per lawsuit, plus actual damages and attorney fees:
Calling before 8 AM or after 9 PM
FDCPA Section 805(a)(1)Document the date and time of each call. Phone records from your carrier are sufficient evidence.
Failing to send written notice within 5 days
FDCPA Section 809(a)If the collector called you but never sent a written validation notice, this is a violation.
Continuing to collect after you disputed in writing
FDCPA Section 809(b)If you sent a written dispute within 30 days and the collector continued collection activity without verifying the debt, document every contact.
Threatening legal action they cannot or will not take
FDCPA Section 807(5)If a collector threatens to sue but the debt is time-barred, or if they threaten wage garnishment in a state that does not allow it for medical debt, this is a violation.
Calling your workplace when your employer does not allow it
FDCPA Section 805(a)(3)This section turns on your EMPLOYER, not on your own request: it applies once the collector knows or has reason to know your employer prohibits you from taking these calls at work. Say that in writing, keep a copy, and log every later call. If instead you simply told the collector that work is a bad place to reach you, the rule that fits is Section 805(a)(1) — no contact at a place the collector knows or should know is inconvenient for you.
Misrepresenting the amount owed
FDCPA Section 807(2)(A)If the collector is trying to collect more than you actually owe — including unauthorized fees, interest, or charges — this is a violation.
Your step-by-step action plan
- 1Do not pay anything until you have validated the debt and checked your rights
- 2Send a debt validation letter within 30 days of receiving the first collection notice (certified mail, return receipt)
- 3Check the statute of limitations for your state — if expired, the collector cannot sue you
- 4Check if the original provider is a 501(c)(3) nonprofit hospital and apply for financial assistance
- 5Review each credit report for entries that may conflict with current major-bureau policy (paid medical collections, an initial reported balance under $500, or reporting within 365 days)
- 6Document any FDCPA violations — every threatening call, every contact after a dispute, every misrepresentation
- 7If the debt is valid and you owe it, ask whether the collector can settle for a reduced lump sum
- 8Get any settlement agreement in writing before making payment, including confirmation that the remaining balance will be reported as satisfied
- 9If you cannot afford to pay, consult with a consumer law attorney — many offer free consultations for FDCPA cases
- 10File complaints with the CFPB (consumerfinance.gov/complaint), your state attorney general, and the FTC for any violations
Disclaimer: This guide provides general information about medical debt and consumer rights. It is not legal or financial advice. Laws vary by state. For personal advice, talk to a licensed attorney or financial counselor.
Upload your collection letter
Lysco analyzes your collection notice and identifies your rights, potential FDCPA violations, and options for responding.
Get Started FreeNo credit card required.