FCRA vs FDCPA in plain English: which law actually helps when
This update was drafted on a schedule by the AI I build with, from real project notes — part of the vibecoding experiment this blog documents.
Let me clear something up, because it trips up almost everyone the first time they look at their own credit situation. There are two different federal laws that people mash together into one blob called "credit stuff," and they do completely different jobs. If you grab the wrong one for your problem, you waste a letter, you waste the clock, and sometimes you make yourself look like the exact kind of person the system is built to ignore.
I ended up deep in this because of Fundability. The whole point of that project is getting someone to a yes from a lender, and a huge amount of the time what's standing between them and that yes is something being reported wrong, or a collector doing something they're not allowed to do. So I had to actually learn where one law ends and the other begins. Here's the plain-English version I wish someone had handed me.
FCRA is about what your report says. FDCPA is about how a collector behaves.
That's the whole thing. Memorize that one sentence and you're ahead of most people arguing on forums about this.
The Fair Credit Reporting Act — the FCRA, 15 U.S.C. § 1681 and onward, from 1970 — governs the accuracy of what's on your credit report. It's the law that sits between you, the credit bureaus (Equifax, Experian, TransUnion), and the companies that feed them data about you (the law calls those "furnishers"). It gives you the right to dispute something on your report that's inaccurate or incomplete. When you dispute with a bureau, the bureau generally has 30 days to investigate — that window can stretch to 45 if you hand them extra documentation partway through — and they have to pass your dispute to the furnisher, who has to actually look into it, not just rubber-stamp it. It's also the law behind your free annual report and the rule that people can only pull your credit if they have a permissible reason to.
So FCRA is your tool when the problem is information. A debt that isn't yours. A balance that's wrong. An account showing open when you closed it. A late payment that was never late. A collection that's a duplicate of one already listed. The complaint, in FCRA land, is always some version of "this is not accurate, and here's why."
The Fair Debt Collection Practices Act — the FDCPA, 15 U.S.C. § 1692 and onward, from 1977 — is a totally different animal. It doesn't care what your report says. It governs how a debt collector is allowed to treat you, and importantly it mostly applies to third-party collectors — the agencies that buy or are assigned debts — not usually the original creditor collecting its own debt. It's the law that says a collector can't call you before 8 in the morning or after 9 at night, can't harass you, can't lie about what you owe or pretend to be someone they're not, and can't tell your coworkers about your debt.
It also gives you a specific, powerful move: validation. Within five days of first contacting you, a collector has to send you written notice of the debt, and you get 30 days to dispute it in writing. If you dispute in writing inside that window, the collector has to stop collecting until it sends you verification of the debt. That pause is real leverage, and it's leverage you only have for a short time, which is exactly why knowing which law you're in matters so much.
So FDCPA is your tool when the problem is conduct. A collector calling ten times a day. A collector threatening something they legally can't do. A collector you've never heard of demanding money for a debt you can't confirm is even yours. The complaint here isn't "this is inaccurate" — it's "prove it, and behave while you do."
Here's where it gets practical, and where the two actually touch. A lot of the time the same bad debt is both a conduct problem and an accuracy problem. A junk collection account can be something you validate under the FDCPA and something you dispute as inaccurate under the FCRA, and the smart sequence uses both: make the collector prove the debt, and separately make the bureau verify what's being reported. Different letters, different recipients, different laws, same goal.
Which brings me to the thing I most want to say, because the internet is full of the opposite advice: "dispute everything" is wrong. It's the single most common mistake, and it comes from treating the FCRA like a magic eraser. It isn't. The FCRA is a mechanism for correcting inaccurate information. If you dispute something that's accurate, the best case is nothing happens and you've burned time; a bureau can also decide a dispute is frivolous and decline to investigate it. Worse, the "dispute everything, overwhelm the system" strategy that credit-repair hustlers sell is a good way to get your disputes dismissed wholesale and to look like you're gaming the process rather than correcting a real error. The law rewards specific and accurate. It punishes shotgun.
So the honest workflow isn't "fire off thirty disputes." It's slower and it's duller. Read the report line by line. For each negative item ask one question: is this inaccurate, or is this accurate but being collected badly? If it's inaccurate, that's FCRA — dispute it with the bureau, be specific about what's wrong, keep your documentation. If it's a collector behaving badly or a debt you can't confirm, that's FDCPA — demand validation inside the window, in writing, and make them prove it before a dollar moves. If an accurate, properly-collected debt is just sitting there dragging your score down — neither law is going to wave it away, and pretending otherwise is how people lose months.
None of this is legal advice — I build software, I'm not your lawyer, and the specifics of your situation and your state can change the picture. But the mental model is the part people are missing, and it's simple enough to carry around: report says something false, reach for the FCRA. Collector acts out of line, reach for the FDCPA. The reason Fundability bothers to tell these two apart instead of just spitting out "dispute" letters is that the funding doesn't come from a cleaner report for its own sake. It comes from fixing the right thing with the right tool, and leaving the stuff that's genuinely yours alone.