CFPB Penalizes Medical Debt Collector Over Disputes

Case: In the Matter of Phoenix Financial Services, LLC
Source: Consumer Financial Protection Bureau
Citation: File No. 2023-CFPB-0004
Decided: June 8, 2023
Bottom line: A collector cannot investigate a dispute just by confirming your identity against its own records; it has to look at what you actually disputed.

Background

Debt collectors that report accounts to credit bureaus are “furnishers” under the FCRA. When a consumer disputes an account, either directly with the collector or through a credit bureau, the collector must conduct a reasonable investigation. 15 U.S.C. § 1681s-2(a)(8)(E), (b)(1)(A). Regulation V also requires furnishers to have reasonable written policies for the accuracy of what they report. Separately, the Fair Debt Collection Practices Act (FDCPA) requires a collector that receives a written dispute within 30 days of its validation notice to stop collecting until it obtains verification of the debt. 15 U.S.C. § 1692g(b).

Phoenix Financial Services, LLC, of Indianapolis, collects mostly past-due medical debts. According to the CFPB, clients placed about 54.4 million accounts with it for collection between January 2017 and December 2020.

What the order requires

On June 8, 2023, the CFPB issued a consent order finding violations of the FCRA, Regulation V, the FDCPA, and the Consumer Financial Protection Act. Phoenix consented without admitting or denying the findings.

Circular dispute investigations. The CFPB found that Phoenix’s written procedures told staff, regardless of what the consumer disputed, to compare the consumer’s name, Social Security number, and date of birth to the data already in its system. The order explains why that fails: “Simply matching the consumer’s personally identifying information provided in the dispute against data already in Respondent’s system of record is not sufficient to constitute a reasonable investigation of many types of disputes because it is a circular inquiry that assumes the accuracy of the information in Respondent’s system of record.” Matching identifiers says nothing about whether a balance is right, a payment was credited, or insurance should have paid. The CFPB also found that Phoenix usually had little information about the underlying medical bills, such as itemized bills or insurance information, and did not obtain more when disputes required it.

Automated handling. Phoenix sent about 30% of indirect disputes from the credit bureaus to an automated program that resolved them without human review, including disputes coded as “settlement or partial payment accepted,” which typically require checking payment records.

Missing oversight. Until at least April 2020, Phoenix did not perform the periodic accuracy reviews its own policies called for and did not review dispute trends. It also failed to report the results of direct dispute investigations to consumers.

Collecting on disputed debts. The CFPB found Phoenix sent collection letters after receiving timely written disputes without first obtaining verification, and represented that consumers owed debts without a reasonable basis.

The order imposed a $1,675,000 civil penalty and required Phoenix to refund amounts that eligible consumers paid on unverified, disputed debts between January 1, 2017 and the order’s effective date. It required reasonable written dispute procedures and barred Phoenix from representing that a consumer owes a debt unless it can substantiate the claim. Commentators noted Phoenix also agreed to CFPB supervision for the order’s five-year term.

Our take

This order describes a dispute process that confirms the account belongs to the person disputing it and nothing more. That is not an investigation of a dispute that says the bill was paid, was covered by insurance, or is for the wrong amount. Courts have long held that furnishers must review the substance of a dispute, and the CFPB’s findings are consistent with that law.

Collectors handle very large dispute volumes and often receive limited data from hospitals and other clients. That is a real constraint. But the answer under the FCRA is to get the information needed to investigate, not to verify the account by checking it against itself. These findings were reached by consent, not after trial, and the Bureau’s 2025 retreat from enforcement does not change the furnisher duties the order applied.

What it means if your report is wrong

Medical collections can be wrong for many reasons, such as insurance that was never billed or a payment that was not credited. If a medical collection on your report is wrong, dispute it in writing with each bureau and with the collector, and say specifically what is wrong: paid, covered by insurance, wrong amount, or not your bill. Attach your explanation of benefits, receipts, or provider statements. If you dispute in writing within 30 days of a collector’s first notice, the collector must stop collecting until it verifies the debt.

A free case review can assess how this order affects a claim, and there is no fee unless we win.

Sources

Primary

Commentary we reviewed

Commentary: CFPB announces consent order with third-party collector of medical debt (Consumer Finance Monitor, Ballard Spahr)

Updated November 1, 2026. "Our take" is the firm's opinion. This page is general information, not legal advice, and later decisions may change the law.