Collections Compliance for Note Investors: FDCPA Rules, Servicer Roles, and Common Mistakes

What Does "Collections" Actually Mean in Note Investing?

In consumer lending, collections typically refers to a third-party agency chasing delinquent credit card balances or medical bills. In the secondary mortgage note market, the term means something different. Collections is the full resolution process -- every step you take to turn a non-performing loan into a performing asset, a settled debt, or a property acquisition.

When you buy a non-performing loan, the borrower has already stopped paying. The prior lender or bank has already exhausted its internal workout options (or decided the loan was not worth the effort). Your job as the new note holder is to re-engage that borrower and move the loan toward one of several outcomes: a loan modification that restores monthly cash flow, a discounted payoff that settles the lien, a deed in lieu that transfers the property to you, or -- as a last resort -- foreclosure.

Each of those paths involves contacting the borrower about a defaulted debt. And every one of those contacts is a collections activity governed by federal and state law. The compliance requirements are not optional, they are not waivable, and they apply whether you handle borrower outreach yourself or delegate it entirely to a loan servicing company.

Are Note Investors Considered Debt Collectors?

This is the threshold question, and the answer determines your entire compliance posture.

Under the Fair Debt Collection Practices Act (FDCPA), a "debt collector" includes any person who acquires a debt that was in default at the time of acquisition for the purpose of collection. When you purchase a non-performing mortgage note, the debt was in default when you bought it. Your subsequent efforts to contact the borrower, negotiate a workout, or collect payment constitute debt collection. You are a debt collector under federal law -- regardless of how you view the relationship with the borrower.

This classification surprises many newer investors who see themselves as problem solvers offering homeowners a fresh start. Both things can be true simultaneously. The FDCPA does not care about your intentions. It cares about the classification of the debt at the time of acquisition and the nature of your subsequent activity.

Does It Matter If You Use a Servicer?

No. Delegating borrower communications to a licensed servicer does not remove your FDCPA obligations. It distributes them. Both you and your servicer are subject to the statute's requirements, and a violation committed by your servicer on your loan is your liability to defend. The borrower's lawsuit names the note holder, not just the servicing company.

This is why servicer selection is a compliance decision, not just an operational one. A servicer who mishandles a cease and desist letter, fails to include the Mini Miranda on outgoing correspondence, or continues collection activity during a debt validation period creates federal exposure for you. As we covered in FDCPA and RESPA Compliance for Note Investors, your servicer's compliance infrastructure should be audited before you board a single loan.

What About Performing Loans?

The FDCPA analysis changes when you purchase a loan that is current at the time of acquisition. If the borrower was performing when you bought the note, you are the creditor -- not a debt collector. Creditors have their own obligations under various consumer protection statutes, but the FDCPA's specific restrictions on communications, validation notices, and cease and desist handling do not apply in the same way. The distinction turns entirely on the loan's status at the time of purchase, not its status later. If the borrower defaults after you acquire a performing loan, you remain the creditor under the FDCPA for that debt.

How Should You Divide Collections Responsibilities with Your Servicer?

The division of labor between you and your servicer determines both efficiency and compliance risk. There are three common models, and each carries different implications.

Full-Service Collections

Under a full-service plan, the servicer handles everything -- borrower outreach, loss mitigation negotiations, payment arrangement offers, and all related correspondence. You receive status reports and approve or reject proposed resolutions, but the servicer manages every borrower interaction.

The advantage is operational simplicity. The disadvantage is cost (typically $80-$100+ per loan per month, often with contingency fees), lower resolution rates due to the servicer's lack of deal-specific context, and reduced visibility into what is being communicated to your borrowers. You are trusting that every interaction complies with federal and state law without seeing most of it in real time.

Client-Managed Collections

Under a client-managed plan, the servicer handles administrative functions -- payment processing, statements, escrow management, tax reporting -- while you retain control of borrower outreach and resolution negotiations. This is the model most experienced investors use, and it is the foundation of the workflow described in High-Level Servicing Strategy for Note Portfolios.

The compliance implication is significant: when you are the one making calls, sending emails, or directing your attorney to send a demand letter, you bear direct responsibility for the content and timing of those communications. Every outbound message must include the Mini Miranda (as detailed in The Mini Miranda: What Every Note Investor Must Include). Every communication must comply with state-specific disclosure requirements. And every contact must respect any active cease and desist or debt validation dispute.

Hybrid Arrangements

Some investors use a hybrid model where the servicer handles initial outreach (hello letters, early-stage follow-up calls) and the investor takes over once the borrower engages. This approach can work, but it creates a handoff point where compliance gaps emerge. The servicer may have noted a borrower's verbal dispute on a call but failed to flag the account before transferring communication responsibility to you. You then send a follow-up letter that constitutes collection activity during a validation period -- a violation neither party intended but both are liable for.

If you use a hybrid model, define the handoff protocol in writing. Specify exactly what information transfers with the account, what flags must be set before the handoff occurs, and who is responsible for compliance monitoring during the transition.

Compliance Rules That Apply to Every Collections Contact

Regardless of which model you use, certain federal requirements apply to every collections communication with a borrower. These are not guidelines or best practices. They are statutory mandates with per-violation penalties.

The Validation Notice

The first time you or your servicer contacts the borrower about the debt, the FDCPA requires a validation notice (also called the Section 1692g notice) to be sent within five days. This notice must include the amount of the debt, the name of the creditor, and statements informing the borrower of their right to dispute the debt within 30 days. If the borrower sends a written dispute within that window, all collection activity must stop until you provide verification of the debt.

Time, Place, and Manner Restrictions

The FDCPA restricts when and how you can contact borrowers. Calls before 8:00 AM or after 9:00 PM in the borrower's time zone are prohibited. Contacting the borrower at their workplace is prohibited if you know or have reason to know the employer does not allow such communications. Contacting a borrower you know to be represented by an attorney regarding the debt is prohibited -- all communication must go through their counsel.

These restrictions apply to your servicer's automated dialing and letter systems as well. If your servicer's system is configured to the wrong time zone and a call goes out at 7:45 AM local time, the violation exists regardless of what time zone the servicer's office is in.

Third-Party Disclosure Prohibitions

The FDCPA prohibits communicating about the borrower's debt with third parties, with narrow exceptions for the borrower's spouse, attorney, or a credit reporting agency. You cannot discuss the debt with the borrower's family members, neighbors, employer, or anyone else. This rule catches investors who call a phone number on file, reach someone other than the borrower, and mention the reason for the call. Even saying "I'm calling about a debt" to someone other than the borrower is a violation.

Harassment and Abuse Prohibitions

The statute prohibits conduct that is intended to harass, oppress, or abuse. This includes repeated phone calls placed with the intent to annoy, threats of violence, use of obscene language, and publishing the borrower's name on a "bad debt" list. It also includes calling repeatedly without meaningful purpose -- even if each individual call is polite. A pattern of calls that serves no legitimate collections purpose can constitute harassment under the FDCPA.

Common Compliance Mistakes in Note Collections

After working through hundreds of non-performing loans across multiple servicers and jurisdictions, certain compliance failures appear with predictable regularity. Each one is preventable with proper systems and attention.

Sending Communications After a Cease and Desist

When a borrower sends a written cease and desist, the FDCPA permits only three further communications: a notice that collection efforts are being terminated, a notice that a specific remedy may be invoked, or a notice that a specific remedy is being invoked. Nothing else. No monthly statements framed as collection activity. No "checking in" calls. No emails asking whether the borrower has reconsidered.

The most common failure mode is a servicer's automated system sending the next scheduled letter or statement after the cease and desist flag was either never entered or was entered but did not suppress automated correspondence. The letter goes out, the borrower's attorney documents it, and the violation is established.

A cease and desist does not eliminate the debt or prevent you from pursuing legal remedies -- it restricts communication. Your attorney can still initiate foreclosure. You can still enforce your lien. But your servicer's outbound communications must stop, and confirming that they actually stopped is your responsibility as the note holder.

Ignoring Informal Debt Disputes

Not every dispute arrives as a formal letter citing the FDCPA. A borrower who calls your servicer and says "I don't think I owe that much" has verbally disputed the debt. A handwritten note saying "this balance is wrong" is a written dispute that triggers the validation process. The FDCPA does not require specific language or format -- any communication from the borrower expressing disagreement with the amount, validity, or ownership of the debt qualifies.

Servicers that route these informal communications as general correspondence rather than flagging them as disputes create exposure for both parties. Collection activity that continues after an unrecognized dispute violates the statute just as clearly as collection activity that continues after a formally labeled dispute.

Skipping Transfer Notices

Under both the FDCPA and RESPA, borrowers must receive notice when loan ownership or servicing transfers. The outgoing servicer must send notice at least 15 days before the transfer effective date. The incoming servicer must send notice no later than 15 days after. When note investors acquire loans from banks and board them to a new servicer, both notices must go out.

Skipping the transfer notice is a dual violation -- RESPA and FDCPA -- and it also eliminates the first opportunity to establish contact with the borrower on productive terms. The hello letter (which doubles as the incoming servicer's transfer notice) is one of the most effective pieces of borrower outreach in the entire resolution process.

Failing to Pause Automated Systems During Validation

When a borrower disputes the debt within the 30-day validation window, all collection activity must cease until verification is provided. The word "all" includes automated monthly statements, payment reminders, and credit bureau reporting. Most servicer systems do not pause these functions automatically when a dispute is logged. Someone has to flag the account and manually suppress automated outputs until verification is sent and the validation process is complete.

If your servicer's system does not support this manual override -- or if the override requires multiple steps that are easy to skip -- you need a different system or a documented escalation procedure that ensures the pause happens every time.

How Do State Laws Add to the Federal Requirements?

The FDCPA establishes a federal baseline, but many states impose additional requirements that exceed it. Operating in multiple states means your collections process must satisfy the most restrictive applicable standard -- not just the federal minimum.

Common state-level additions include:

• Licensing requirements. Many states require debt collectors (including note investors who meet the statutory definition) to obtain a state license before engaging in collection activity. California's Debt Collection Licensing Act, New York's licensing requirements, and similar statutes in other states apply independently of the FDCPA.
• Additional disclosures. Some states require specific language in collections communications beyond the federal Mini Miranda. These disclosures vary by state and may need to be included in every letter, not just the initial communication.
• Shorter response timelines. A handful of states impose response deadlines for borrower inquiries that are shorter than the federal RESPA timelines. If your loans are in those states, the shorter deadline governs.
• Restrictions on fees and charges. Some states limit what fees can be assessed during collections and require specific disclosures about fee amounts before they are charged.

Your servicer should be licensed in every state where they service your loans. Verify this annually -- licenses expire, and a servicer operating on a lapsed license creates compliance exposure for every loan they touch in that state.

How Do You Build a Compliance-Ready Collections Process?

Compliance failures in note investing rarely stem from deliberate misconduct. They stem from operational gaps -- missing flags, untrained staff, outdated templates, and systems that do not enforce the rules automatically. Closing those gaps requires building compliance into the process rather than layering it on top.

Audit Your Servicer Before Boarding Loans

Before you board your first loan, request documentation of your servicer's procedures for handling cease and desist letters, debt disputes, validation notices, and transfer notices. Ask specifically:

• How does the system flag a cease and desist, and what automated communications does it suppress?
• How are informal disputes identified and escalated?
• What is the internal deadline for sending the validation notice after initial contact (it should be shorter than the five-day statutory deadline to build in a buffer)?
• Does the system automatically pause collection activity when a dispute is logged during the validation period?

If the answers are vague or undocumented, you do not have a compliance-ready servicer.

Standardize Every Outgoing Communication

Every letter, email, and notice that goes to a borrower should be generated from a pre-approved template reviewed by counsel. Your template library should include hello letters, demand letters, modification offers, dispute acknowledgments, cease and desist acknowledgments, and transfer notices. Each template should include the Mini Miranda, the bankruptcy safe harbor, and any state-specific disclosures required for the borrower's jurisdiction.

Ad hoc communications -- informal emails, quick text replies, unscripted phone conversations -- are where compliance violations are born. If you communicate with a borrower in writing, it comes from a template. If you communicate by phone, you follow a script that covers required disclosures.

Track Every Deadline

Collections compliance runs on deadlines. Five business days to send a validation notice after initial contact. Thirty days for the borrower to dispute the debt. Immediate cessation of collection activity upon receiving a dispute during the validation period. Immediate cessation of communications upon receiving a cease and desist. Fifteen days for transfer notices.

These deadlines should live in your servicing system or project management tool with automated alerts. Manual tracking -- spreadsheets, calendar reminders, memory -- fails at scale. If you manage more than a handful of loans, a missed deadline is not a question of if but when.

Document Every Interaction

Every borrower communication -- inbound and outbound -- must be documented with a date, a timestamp, the content of the communication, and the name of the person who handled it. If a borrower or their attorney alleges a violation, your defense is your documentation. Without a contemporaneous record showing that the validation notice was sent on day three, that collection activity was paused on the day the dispute was received, or that no communications were sent after the cease and desist was logged, the borrower's version of events stands unchallenged.

Documentation also protects you in servicer disputes. If your servicer failed to flag an account and sent a prohibited communication, your records showing that you provided the cease and desist letter to the servicer on a specific date establish where the breakdown occurred.

The Cost of Getting Collections Wrong

The penalties for FDCPA violations are specific and cumulative. In individual actions, statutory damages can reach $1,000 per violation plus actual damages and attorney's fees. In class actions, damages can reach $500,000 or 1% of the debt collector's net worth. Each prohibited communication, each missed validation notice, and each post-cease-and-desist letter is a separate violation.

Beyond the statutory penalties, collections violations create practical problems that cost more than the fines. A borrower who files an FDCPA complaint is far less likely to agree to a workout. A borrower represented by a consumer protection attorney will use every procedural misstep as leverage in negotiations. And a pattern of violations across multiple loans can attract regulatory attention from state attorneys general or the FTC.

The cost of compliance infrastructure -- proper templates, servicer audits, documented procedures, deadline tracking -- is a fraction of the cost of defending a single FDCPA lawsuit.

Collections Compliance as Portfolio Infrastructure

Collections is not a standalone activity. It is the operational engine that drives every resolution in your portfolio. The compliance framework surrounding it -- the FDCPA, RESPA, state licensing requirements, and borrower communication rules -- is not a constraint on your business. It is the structure that makes sustainable note investing possible.

Every loan you acquire will require some form of collections activity, and every borrower interaction is governed by rules with specific penalties. The investors who treat collections compliance as infrastructure -- built once, maintained consistently, and integrated into every workflow -- resolve loans efficiently without creating legal exposure that erodes their returns.