Regulation F SMS Compliance: What Every Debt Collector Needs to Know
In November 2021, the Consumer Financial Protection Bureau’s Regulation F took effect, modernizing debt collection rules for the digital age. For the first time, federal regulation explicitly addressed text messages, emails, and other electronic communications.
For debt collectors using SMS, Regulation F provides both clarity and complexity. Clarity in that texting is explicitly permitted. Complexity in that specific requirements govern how, when, and what you can text.
This guide breaks down every Regulation F requirement relevant to SMS collection.
Table of Contents
- What Is Regulation F?
- How Regulation F Applies to Text Messages
- Timing Restrictions
- Required Opt-Out Language
- Frequency Limitations
- Phone Number Reassignment Checks
- Record Retention Requirements
- Mini-Miranda and Disclosure Requirements
- State-Specific Rules
- Platform Features for Compliance
What Is Regulation F?
Regulation F is the CFPB’s implementation of the Fair Debt Collection Practices Act (FDCPA). It provides detailed rules for how debt collectors can communicate with consumers.
Key provisions relevant to SMS: – Explicit permission to use electronic communications (including text) – Opt-out requirements for electronic messages – Time and place restrictions – Frequency limitations – Disclosure requirements – Recordkeeping mandates
Who does Regulation F apply to? – Third-party debt collectors – Debt buyers collecting on purchased debt – Some creditors collecting on behalf of others
Who is exempt? – Original creditors collecting their own debts (mostly) – Some attorneys in limited circumstances – Non-consumer debts
If you’re a collection agency or debt buyer, Regulation F applies to you.
How Regulation F Applies to Text Messages
Regulation F explicitly addresses “electronic communications,” which includes: – Text messages (SMS/MMS) – Emails – Social media direct messages
Key recognition: The CFPB acknowledged that consumers increasingly prefer electronic communication, and that debt collectors should be permitted to use these channels—with appropriate guardrails.
The basic framework:
- Permission: You may use SMS to communicate with consumers about debts
- Consent: You must have consent to use automated systems (per TCPA)
- Opt-out: Every electronic message must include opt-out instructions
- Timing: Cannot contact at unusual or inconvenient times
- Frequency: Subject to the 7-in-7 rule
- Disclosures: Mini-Miranda and other required disclosures apply
SMS isn’t treated differently from phone calls in most respects—the same rules about harassment, false statements, and unfair practices apply.
Timing Restrictions
Regulation F establishes when you can and cannot contact consumers.
The Basic Rule
§ 1006.6(b)(1): A debt collector may not communicate with a consumer at a time that the debt collector knows or should know is inconvenient to the consumer.
Presumptively Convenient Times
§ 1006.6(b)(1)(i): Times before 8:00 AM and after 9:00 PM local time at the consumer’s location are presumed inconvenient.
What this means: – Don’t text before 8:00 AM consumer’s local time – Don’t text after 9:00 PM consumer’s local time – Consumer can consent to different times
Time Zone Considerations
“Local time at the consumer’s location” means you need to determine the consumer’s time zone.
Methods: – Phone number area code (imperfect due to number portability) – Billing address zip code – Consumer-provided location information – When uncertain, use the most restrictive interpretation
Best practice: Use billing address time zone when available; fall back to area code.
Consumer-Specific Times
§ 1006.6(b)(1)(ii): If a consumer tells you a specific time is inconvenient, that time is inconvenient regardless of the 8-9 presumption.
Example: Consumer says “Don’t text me during work hours.” You must honor that even though 9 AM – 5 PM is presumptively convenient.
Implementation
Your SMS platform should: – Automatically detect consumer time zone – Queue messages that would send outside allowed window – Respect consumer-stated preferences – Log all timing decisions for compliance records
Required Opt-Out Language
Every electronic message must include opt-out instructions. No exceptions.
The Requirement
§ 1006.6(e): Electronic communications must contain “a clear and conspicuous statement describing a reasonable and simple method by which the consumer can opt out of further electronic communications.”
What “Clear and Conspicuous” Means
- Easily readable
- Not buried in other text
- Stands out from message content
- Uses plain language
What “Reasonable and Simple” Means
- Single-step process (reply STOP)
- No requirements to call or visit website to opt out
- Works immediately
- Free to the consumer
Standard Implementation
Reply STOP to opt out.
This appears at the end of every message. It’s: – Clear: Plain English instruction – Conspicuous: Separate from message body – Reasonable: Single reply – Simple: One word
Variations That Work
Reply STOP to unsubscribe.
Text STOP to opt out of texts.
Reply STOP to stop messages.
What Doesn’t Work
- “Visit our website to manage preferences”
- “Call 1-800-XXX-XXXX to opt out”
- “Text STOP to this number during business hours”
- Opt-out buried in message middle
- Opt-out requiring multiple steps
Processing Opt-Outs
When a consumer opts out: 1. Immediately stop electronic communications 2. Send single confirmation (then stop) 3. Document the opt-out 4. Continue collection via other permitted channels (phone, mail)
Frequency Limitations
Regulation F limits how often you can attempt to contact consumers.
The 7-in-7 Rule
§ 1006.14(b)(2): A debt collector is presumed to violate the harassment prohibition if they place telephone calls to a consumer more than 7 times within 7 consecutive days, or within 7 days after having a telephone conversation with the consumer.
Does This Apply to SMS?
Directly: The rule specifically says “telephone calls.”
Interpretively: The CFPB has indicated that excessive electronic communications can constitute harassment under the general prohibition, even if not specifically covered by 7-in-7.
Safe harbor: Applying 7-in-7 to all communication attempts (including texts) provides strong harassment defense.
Practical Application
| Day | Calls | Texts | Total | Compliant? |
|---|---|---|---|---|
| Mon | 1 | 1 | 2 | Yes |
| Tue | 0 | 1 | 3 | Yes |
| Wed | 2 | 1 | 6 | Yes |
| Thu | 0 | 1 | 7 | Yes (at limit) |
| Fri | 1 | 0 | 8 | Presumed violation |
After Conversation
§ 1006.14(b)(2)(ii): The 7-day clock resets after a conversation (not just an attempt).
If you have a phone conversation with the consumer on Wednesday, you must wait until the following Wednesday before resuming attempts.
Note: A text message reply may or may not constitute a “conversation” depending on substance. Brief opt-out or “wrong number” likely doesn’t count. Substantive exchange about the debt likely does.
Best Practice
- Limit total attempts (calls + texts + emails) to 5-6 per week
- Track all contact attempts across channels
- Respect consumer requests to reduce frequency
- Document rationale for contact patterns
Phone Number Reassignment Checks
This is unique to electronic communications and catches many collectors off guard.
The Requirement
§ 1006.6(d)(5): Before sending an electronic communication to a telephone number, a debt collector must take steps to verify that the telephone number has not been reassigned.
Why This Matters
Phone numbers get reassigned constantly. The person who has the number today may not be the person who had it when the debt was incurred.
Texting a reassigned number means: – Contacting wrong person (potential FDCPA violation) – No consent from current subscriber (TCPA violation) – Consumer complaint risk
Verification Methods
Options include: – Phone number lookup services – Carrier verification APIs – Reassigned Numbers Database (FCC) – Direct confirmation from consumer
Timing of Verification
- Before first contact to a number
- Periodically for ongoing communication
- After any indication of wrong person
“Not [Name]? Reply WRONG” Approach
Include in messages:
Not [Consumer Name]? Reply WRONG.
This isn’t a substitute for verification, but helps catch reassignments quickly.
Record Retention Requirements
Documentation protects you when (not if) questions arise.
What to Retain
For every electronic message: – Complete message content (as sent) – Recipient phone number – Date and time sent – Delivery status – Any replies received
For every consumer: – Consent documentation – Opt-out records – Communication preferences stated – All communication history
Retention Period
Regulation F doesn’t specify retention period for electronic communications, but: – FDCPA statute of limitations: 1 year – TCPA statute of limitations: 4 years – State laws: Varies – Practical recommendation: 5-7 years
Format Requirements
Records must be: – Accurately preserved – Retrievable on demand – Not alterable after creation – Organized for review
Audit Readiness
Be prepared to produce: – All communications with a specific consumer – Consent documentation for any phone number – Opt-out processing records – Timing and frequency compliance evidence
CloudContactAI maintains complete message archives with all required metadata, exportable on demand.
Mini-Miranda and Disclosure Requirements
The Mini-Miranda applies to SMS just like any other communication.
First Communication Requirement
FDCPA § 1692e(11): The first communication must disclose: – The communication is from a debt collector – Any information obtained will be used for debt collection
Standard language:
This is an attempt to collect a debt by a debt collector. Any information obtained will be used for that purpose.
The SMS Challenge
The Mini-Miranda is long. SMS should be short. How do you reconcile?
Options:
Option 1: Full disclosure in first text
[Agency] here re: your [Creditor] acct. This is an attempt to collect a debt. Info obtained will be used for that purpose. Call [Phone]. Reply STOP to opt out.
(May require two segments)
Option 2: Disclosure via link
[Agency] contacting you about [Creditor]. Important info: [link]. Call [Phone]. Reply STOP to opt out.
(Link contains full disclosures)
Option 3: Prior written disclosure Send Mini-Miranda via mail or email before beginning SMS communication. Then texts can reference prior disclosure.
Validation Notice
FDCPA § 1692g: Within 5 days of initial communication, you must provide: – Amount of debt – Creditor name – Statement of consumer rights to dispute
For SMS: Usually sent via mail or email rather than trying to fit in text messages.
State-Specific Rules
Federal rules set the floor. States can (and do) add requirements.
Notable State Variations
California: – Rosenthal Act extends FDCPA-like protections to original creditors – Stricter timing requirements in some circumstances – Additional disclosure requirements
New York: – City and state consumer protection rules – Specific disclosure requirements – Licensing requirements for collectors
Texas: – State debt collection act – Registration requirements – Specific prohibited practices
Massachusetts: – Strict regulation of debt collection – Additional timing and frequency restrictions – Specific disclosure requirements
Practical Approach
- Default to most restrictive standard
- Track consumer location (billing address)
- Consult state-specific requirements when expanding
- Update policies as laws change
Platform Features for Compliance
Manual compliance doesn’t scale. Build it into your technology.
Essential Platform Features
Time zone enforcement: – Automatic detection from phone/address – Queuing for outside-hours messages – Consumer preference tracking
Opt-out processing: – Keyword recognition (STOP, etc.) – Immediate processing – Confirmation and blocking – Cross-campaign application
Frequency management: – Attempt tracking across channels – Automatic limits enforcement – Conversation detection – Per-debt tracking
Message archiving: – Complete content preservation – Timestamp logging – Delivery status tracking – Search and export
Number verification: – Integration with lookup services – Wrong-number processing – Reassignment detection
Template management: – Pre-approved templates – Required element enforcement – Compliance review workflow
The Bottom Line
Regulation F provides a clear framework for SMS debt collection. The rules are detailed but not unreasonable: don’t contact at bad times, let consumers opt out, don’t overdo frequency, verify you’re reaching the right person, keep records.
The collectors who thrive under Regulation F aren’t the ones who find loopholes. They’re the ones who build compliance into their operations from the ground up.
Need a Regulation F-compliant SMS platform?
CloudContactAI was built with debt collection compliance in mind:
- Automatic time zone enforcement
- Required opt-out in every message
- Frequency limit tracking
- Number verification integration
- Complete message archiving
Start your free 14-day trial →
FAQ
Does Regulation F allow debt collectors to text consumers? Yes. Regulation F explicitly permits electronic communications including text messages, subject to consent, timing, opt-out, and other requirements.
What opt-out language is required in every text? A “clear and conspicuous statement describing a reasonable and simple method” to opt out. Standard: “Reply STOP to opt out.”
How many texts can I send in a week? The 7-in-7 rule technically applies to telephone calls, but excessive texting can constitute harassment. Best practice: Apply 7-in-7 to all communication attempts combined.
Do I need to verify phone numbers aren’t reassigned? Yes. Regulation F requires taking steps to verify numbers haven’t been reassigned before sending electronic communications.
Does the Mini-Miranda apply to text messages? Yes. The first communication with a consumer must include the Mini-Miranda disclosure, though it can be abbreviated with reference to fuller disclosure.
How long must I retain SMS records? Regulation F doesn’t specify, but considering TCPA’s 4-year statute of limitations and state variations, 5-7 years is recommended.