Yes. It is legal for a debt collector to buy your medical debt. Hospitals, clinics, and other providers routinely sell unpaid medical accounts to third-party companies called debt buyers, and once that sale happens the debt buyer becomes the new owner with the right to try to collect from you. There is no federal law that forbids the sale itself. What the law does is regulate how that debt buyer treats you afterward, and as you will see, the way these debts are bought and sold often leaves the buyer unable to actually prove you owe what they claim.
Why providers sell medical debt in the first place
When a medical bill goes unpaid for months, a provider has a choice. They can keep chasing it themselves, hire an outside collection agency to chase it for a percentage, or simply sell the account outright to a debt buyer for pennies on the dollar. Selling is attractive because it turns a stale, uncertain bill into immediate cash and removes the account from the provider's books.
Debt buyers purchase these accounts in giant bundles, sometimes thousands of accounts at once, for a small fraction of the face value, often just a few cents per dollar owed. Because they paid so little, they can profit even if they only collect from a minority of people. This is a legal, established market, and medical debt is one of the most commonly traded categories of consumer debt in the United States.
Is it illegal for a debt collector to buy your medical debt?
No, buying the debt is not illegal. The sale and purchase of consumer debt, including medical debt, is permitted. You do not have to consent to the sale, and you generally cannot stop your account from being sold. What changes is who you owe and who is allowed to contact you.
However, once a debt buyer owns and tries to collect your account, it becomes a debt collector under the federal Fair Debt Collection Practices Act (FDCPA). That is the key point. A company that buys defaulted debt for the purpose of collecting it is held to the same rules as any other third-party collector. The FDCPA is enforced by the Federal Trade Commission (FTC) and the Consumer Financial Protection Bureau (CFPB), and your state Attorney General often enforces a parallel state collection law as well.
The hidden weakness of purchased medical debt: proof
Here is the angle that matters most for you. Because debt buyers purchase accounts in bulk and cheaply, what they actually receive is frequently very thin. In many cases the buyer gets little more than a spreadsheet: your name, an amount, an account number, and the name of the original provider. They often do not receive the detailed records that prove the debt is valid and that the amount is correct.
For medical debt specifically, full proof can require:
- The original itemized bill from the provider showing the services and charges.
- Proof of what your health insurance was supposed to pay versus what was billed to you.
- The agreement or signed documents establishing you are responsible for the balance.
- A clear chain of ownership showing the debt was actually sold to this specific buyer.
When debt changes hands two or three times, that documentation often gets lost, garbled, or never transferred at all. Amounts can be inflated by charges insurance should have covered, by duplicate billing, or by simple data-entry errors copied from one spreadsheet to the next. The result is a debt the buyer is demanding but may be unable to substantiate if you push back. This is exactly why a validation dispute is such a powerful tool.
Your right to make them prove it: debt validation
Under the FDCPA, when a debt collector (including a debt buyer) first contacts you about a debt, it must send you a written notice with key information about the debt and your rights. You then have the right to dispute the debt and request validation in writing. The current federal collection rules give you a defined window after that first communication to make this request and trigger important protections, but rather than rely on a specific number of days, check the dates and deadlines printed on the notice you received and act well before them.
When you send a timely written dispute requesting validation, the collector must stop collection efforts until it provides verification of the debt. For a debt buyer working from a thin spreadsheet, gathering real verification can be difficult or impossible. If they cannot validate, they are not supposed to keep collecting.
Practical steps to dispute effectively:
- Put it in writing. Send a dispute and validation request by mail, and keep a copy. Using certified mail with return receipt gives you proof of what you sent and when.
- Be specific. Ask for the itemized statement of services, proof of the amount owed, proof of insurance adjustments, and proof that this collector owns the debt.
- Do not admit the debt or agree to pay while you are still verifying it. Acknowledging or making a partial payment can have consequences, and in some states it can affect time-related defenses.
- Document every contact. Save letters, log phone calls with dates and names, and keep voicemails. This record matters if the collector breaks the rules.
What the collector is NOT allowed to do
The FDCPA prohibits a wide range of abusive and deceptive conduct, no matter who owns the debt. A collector generally may not:
- Lie about the amount you owe or claim you owe more than you do.
- Threaten arrest, legal action it cannot or does not intend to take, or other false consequences.
- Call you at unusual or harassing hours, or call repeatedly to annoy you.
- Contact you at work after you tell them your employer prohibits it.
- Contact you directly once you are represented by an attorney and they know it.
- Discuss your debt with third parties, beyond limited allowed contact to locate you.
If a collector violates the FDCPA, you can report it to the CFPB and the FTC, complain to your state Attorney General, and in many cases you have the right to sue. Keep your documentation, because it is the foundation of any complaint or claim.
Medical debt and your credit report
A separate law, the Fair Credit Reporting Act (FCRA), governs how medical collection accounts can appear on your credit reports. The credit reporting industry has adopted practices that give medical debt special treatment compared with other debts, including delays before unpaid medical bills can be reported and the removal of medical collections once they are paid. The rules in this area have been changing, so check your three credit reports directly to see what is actually being reported.
If you find a medical collection that is inaccurate, not yours, already paid, or never validated, you have the right under the FCRA to dispute it with the credit bureaus. The bureau and the company that furnished the information must investigate, and inaccurate or unverifiable items are supposed to be corrected or deleted. A debt buyer that cannot prove the debt to you may also be unable to verify it to the credit bureaus.
Where state law adds stronger protections
Federal law is the floor, not the ceiling. Many states layer on additional protections, and these vary significantly by state. Depending on where you live, state law may:
- License or register debt buyers and collectors and bar them from collecting if they are not properly licensed.
- Require a debt buyer to actually possess specific documents and proof before filing a lawsuit over a purchased debt.
- Set a time limit (a statute of limitations) after which a collector can no longer sue you to collect, with the length differing from state to state.
- Provide extra rules or protections specific to medical debt, including limits on certain billing and collection practices.
Because these limits and deadlines differ so much, do not assume a number you read for one state applies to you. Look up your own state's collection and debt-buyer rules, or ask your state Attorney General's office or a local legal aid organization. Many areas have free legal aid that helps consumers facing medical-debt collection.
- Do not panic or pay immediately. Confirm who is contacting you and what they claim you owe.
- Get the validation notice in writing and read the dates and rights it lists.
- Send a written dispute and validation request within the window stated on the notice, asking for itemized proof and proof of ownership.
- Compare any amount against your own records and your insurance explanation of benefits to catch charges insurance should have covered.
- Check your credit reports for the same account and dispute it with the bureaus if it is wrong or unverified.
- Keep every document and consider talking to a consumer attorney or legal aid, especially if you are sued.
The takeaway is that a debt buyer owning your medical bill is legal, but it does not automatically mean the debt is valid, accurate, or provable. The bulk, bargain-priced way these debts are traded is precisely why so many of them fall apart under a careful validation dispute. Knowing that turns a scary collection letter into a manageable, step-by-step process.
This article is general information, not legal advice. Rules and deadlines change and differ by state, so verify your specific situation with your state Attorney General, the CFPB, or a qualified attorney.
Know the law
Medical debt has special protections — the No Surprises Act, billing-error rights, and new limits on medical debt in credit reports.
Key federal laws:
Where to get help or file a complaint:
Your state matters too. Federal law is the floor — your state sets the statute of limitations on debt, garnishment and exemption limits, payday and repossession rules, and has its own Attorney General and consumer-protection laws. Always check your state’s rules. This is general legal information, not legal advice.
Frequently asked questions
Can debt collectors buy medical debt?
Yes. Medical providers routinely sell unpaid accounts to third-party debt buyers, usually in large bundles for a small fraction of the face value. There is no federal law preventing the sale, and you generally cannot stop your account from being sold. Once a debt buyer owns and tries to collect the account, it is treated as a debt collector under the Fair Debt Collection Practices Act.
Is it illegal for a debt collector to buy your medical debt?
No, the purchase itself is legal. What is regulated is how the buyer collects afterward. As a debt collector under the FDCPA, the buyer cannot lie about the amount, harass you, make false threats, or keep collecting on a debt it cannot validate after you send a timely written dispute. The FTC and CFPB enforce these rules, along with your state Attorney General.
Why is purchased medical debt often hard to prove?
Debt buyers purchase accounts in bulk and cheaply, so they often receive only a basic spreadsheet with your name and an amount, not the itemized bills, insurance records, or signed agreements needed to prove the debt. When debt is resold multiple times, that documentation frequently gets lost. If you dispute and request validation, the buyer may be unable to produce real proof.
What should I do first when a debt buyer contacts me about a medical bill?
Do not pay or admit the debt right away. Get the validation notice in writing, read the dates and rights it lists, and send a written dispute requesting an itemized bill, proof of the amount, insurance adjustments, and proof the collector owns the debt. Mail it within the window on the notice, keep copies, and consider certified mail for proof of delivery.
Can a debt buyer put medical debt on my credit report?
It can, but the Fair Credit Reporting Act governs how, and the credit reporting industry gives medical debt special treatment, including delays before reporting and removal once paid. If a medical collection is wrong, not yours, already paid, or unverified, you can dispute it with the credit bureaus, who must investigate. Check your own credit reports to see exactly what is listed.
This article is general legal information, not legal advice, and may not reflect the most current law or the law in your jurisdiction. Laws vary by state and change over time. For advice about your specific situation, consult a licensed attorney.
