WHO'S BUYING YOUR DATA? | PART 6 OF 10
They Know Where You Live. They Know Where You Work. They Know Who to Call.
How debt collectors use data brokers to hunt you down — and why the industry that profits from your financial distress wants to know everything about you.
You moved to a new apartment. You changed your phone number. You thought you'd left your old debts behind.
Then the calls started.
They knew your new address before you'd even finished unpacking. They had your new cell number within days. They called your mother. They called your employer. They knew where you worked before you'd updated your LinkedIn.
This isn't a horror movie. It's the skip tracing industry — and it's powered by data brokers who make their living helping debt collectors find people who don't want to be found.
The Skip Tracing Machine
"Skip tracing" sounds almost quaint, like a private eye in a noir film tracking down a deadbeat. The reality is an industrial surveillance operation that processes millions of searches per day.
Experian — yes, the credit bureau — openly markets its "TrueTrace" skip tracing service to debt collectors. The sales pitch is chilling in its efficiency:
"Exposed data with first-seen/last-seen dates for enhanced, exposed person data including: names, addresses, and Social Security numbers... known relatives and associates... updated property records, liens and judgments, and professional licenses."
The service offers "batch skip-tracing" via API, allowing debt collectors to run thousands of searches simultaneously. Every search returns a "right-party-contact score" — a prediction of how likely the phone number or address is to actually reach the debtor.
Where does all this data come from?
- National Change of Address records (when you file a forwarding address with the Post Office)
- Electronic Directory Assistance (phone records)
- Consumer and business credit data
- Public records including property filings, court records, and professional licenses
- Utility connections and service activations
- Social media profiles and online activity
The moment you turn on electricity at your new apartment, update your driver's license, or connect your phone service, debt collectors can find you. The data broker ecosystem ensures there's nowhere to hide.
The Data They're Buying
Debt collectors don't just want to know where you are. They want to know everything about your financial situation so they can maximize pressure and extraction.
Data brokers sell specialized lists targeting people in financial distress:
- "Suffering Seniors" — Elderly Americans on fixed incomes struggling with debt.
- "Cash Cows — Underbanked File" — People without traditional banking relationships, often the most financially vulnerable.
- "Bankruptcy Filers" — People who've sought legal protection from creditors.
- "Paycheck to Paycheck Consumers" — Working Americans with no financial cushion.
- "Bad Credit — Card Declines" — People whose cards have been rejected at point of sale.
These aren't neutral descriptors. They're targeting categories designed to identify the desperate, the struggling, and the vulnerable. Data brokers package human misery and sell it to companies whose business model depends on extracting money from people who don't have it.
The lists include detailed financial profiles: estimated income, assets, debts, payment history, and behavioral predictions. Collectors know before they call whether you're likely to pay, how much you might have, and what pressure tactics are most likely to work.
The CFPB Sounds the Alarm
In December 2024, the Consumer Financial Protection Bureau proposed a landmark rule that would reshape the relationship between data brokers and debt collectors.
The proposed rule would classify data brokers who sell certain financial information as "consumer reporting agencies" under the Fair Credit Reporting Act. That sounds technical, but the implications are significant:
- Accuracy requirements: Consumer reporting agencies must maintain "reasonable procedures" to ensure data accuracy. Currently, data brokers face no such requirement.
- Consumer access: You'd have the right to see what information is being sold about you and dispute inaccuracies.
- Permissible purpose: Companies would need a legitimate reason to access your data, not just a willingness to pay.
- Liability: Data brokers would face legal consequences for selling inaccurate information that harms consumers.
The CFPB specifically cited concerns about data brokers selling "personal identifiers" — Social Security numbers, phone numbers, addresses — to bad actors including scammers and stalkers.
"These data brokers operate in the shadows," CFPB Director Rohit Chopra explained. "Americans deserve to know who is selling their personal information and have the right to correct errors."
The rule is proposed, not final. Industry lobbyists are fighting it aggressively. But it represents the most significant federal attempt to regulate the data broker ecosystem feeding the debt collection industry.
The Fair Debt Collection Practices Act: Outdated and Outgunned
The primary federal law governing debt collection is the Fair Debt Collection Practices Act (FDCPA), passed in 1977.
Before the internet. Before cell phones. Before data brokers existed.
The FDCPA includes some protections:
- Collectors can't call before 8 AM or after 9 PM
- They can't contact you at work if you tell them your employer disapproves
- They can't harass you with repeated calls intended to annoy
- They can't discuss your debt with third parties (with limited exceptions)
- They must stop calling if you send a written cease-and-desist letter
But the FDCPA was designed for a world where collectors had limited information and made phone calls from a list. It doesn't contemplate an industry with access to:
- Real-time location tracking
- Social media monitoring
- AI-powered behavioral analysis
- Comprehensive financial profiles updated continuously
- Automated calling systems that can reach thousands of people per hour
The law restricts what collectors can do with information once they have it. It barely touches how they acquire that information in the first place.
A collector can purchase your entire financial life from a data broker — your income, your debts, your spending patterns, your family members' contact information — and the FDCPA has almost nothing to say about it.
The Harassment Playbook
Debt collectors aren't known for gentle persuasion. The industry has a long history of abusive practices:
Third-party disclosure: Despite FDCPA restrictions, collectors routinely contact family members, neighbors, and employers. They use data broker information to identify everyone in your life who might pressure you to pay.
Workplace harassment: Collectors call your job, sometimes repeatedly. They may identify themselves vaguely, but coworkers notice. The embarrassment is the point.
Social media contact: Collectors increasingly reach out via Facebook, LinkedIn, and other platforms. They may send friend requests, comment on posts, or message family members.
Sewer service: Some collectors claim they've served legal papers when they haven't, obtaining default judgments against people who never knew they were being sued.
Zombie debt: Collectors purchase old debts — sometimes past the statute of limitations, sometimes already paid, sometimes belonging to someone else entirely — and attempt to collect anyway.
Credit reporting threats: Collectors threaten to damage your credit score, even for debts that can't legally be reported or that you don't actually owe.
Data brokers supercharge all of these tactics. The more collectors know about you, the more effectively they can identify pressure points and exploit them.
When They Get It Wrong
The debt collection industry is notorious for pursuing the wrong people.
Data broker information is often inaccurate. Names get confused. Social Security numbers are mismatched. Debts get attributed to the wrong person. And collectors, paid on commission, have little incentive to verify before harassing.
Consider what happens when a collector purchases a data file with your name attached to someone else's debt:
- Your phone starts ringing with demands for money you don't owe
- Your credit report shows a collection account that isn't yours
- Your employer receives calls about "an urgent personal matter"
- Your elderly mother gets contacted by people asking where you are
- If you ignore it, you might get sued and have wages garnished for a stranger's debt
Disputing these errors is your responsibility. You have to prove you're not the person who owes the money. You have to navigate bureaucratic processes designed to frustrate consumers. You have to spend hours — sometimes years — cleaning up a mess created by sloppy data and aggressive collectors.
The data brokers who sold the inaccurate information face no consequences. The collectors who harassed you based on that information face minimal penalties. You're left to pick up the pieces.
Medical Debt: The Cruelest Collection
Medical debt deserves special attention because it illustrates everything wrong with the data broker-to-collector pipeline.
Two-thirds of bankruptcies in America are linked to medical expenses. People don't choose to get sick. They don't rack up hospital bills through irresponsibility. They get cancer, have heart attacks, get hit by cars — and wake up with debts they never agreed to and can never pay.
The medical debt collection industry is worth billions. Data brokers sell detailed information about patients to collectors, including:
- Treatment history (sometimes in violation of HIPAA)
- Insurance status and coverage gaps
- Income estimates and ability to pay
- Other outstanding debts
- Family contacts for third-party pressure
In 2023, the three major credit bureaus (Equifax, Experian, TransUnion) agreed to remove medical debts under $500 from credit reports and delay reporting new medical debts for one year. Some states have gone further, restricting medical debt collection entirely.
But collectors still purchase data broker profiles on medical debtors. They still call. They still sue. They still garnish wages from people whose only crime was getting sick in America.
The Location Data Threat
Skip tracing has always been about finding people. Location data from mobile phones takes it to a terrifying new level.
As we covered in Part 3, data brokers collect precise location information from mobile apps — often without meaningful user consent. That data is available to anyone willing to pay, including debt collectors.
The FTC's action against Mobilewalla revealed that the company collected location data on over 500 million unique consumer devices. The data could track visits to healthcare facilities, workplaces, and homes.
Now imagine that capability in the hands of an aggressive debt collector:
- They know you're at work right now — and they have your work number
- They know you visited a hospital last week — maybe a new medical emergency means new leverage
- They know you stopped at your mother's house on Tuesday — time to give her a call
- They know you're home right now — a process server is on the way
This isn't science fiction. Location data is commercially available. Debt collectors are eager buyers. The only thing missing is widespread public awareness of how invasive collection practices have become.
The Debt Buyer Ecosystem
Many debts aren't collected by the original creditor. They're sold — often for pennies on the dollar — to debt buyers who specialize in aggressive collection.
Here's how it works:
- You default on a credit card with Bank A
- Bank A tries to collect, fails, and writes off the debt
- Bank A sells a portfolio of defaulted debts to Debt Buyer B for 4 cents on the dollar
- Debt Buyer B purchases data broker profiles on everyone in the portfolio
- Debt Buyer B attempts collection using skip tracing, automated calling, and legal threats
- If that fails, Debt Buyer B sells the remaining debts to Debt Buyer C for 2 cents on the dollar
- The cycle continues
Each time debt changes hands, data quality degrades. Account numbers get corrupted. Payment histories get lost. By the time a debt is on its third or fourth owner, the documentation may be nearly nonexistent.
But data brokers provide fresh targeting information at every step. Even if the debt buyer can't prove you owe the money, they know where you live, where you work, and who to call.
What You Can Do
Dealing with debt collectors is stressful. Knowing they have extensive data on you makes it worse. But you have rights:
Know the statute of limitations. Every state has a time limit on debt collection lawsuits. In many states, it's 3-6 years. If your debt is past this limit, collectors can't successfully sue you. Don't restart the clock by making payments or acknowledging the debt.
Request debt validation. Under the FDCPA, you can demand written verification of any debt within 30 days of first contact. Collectors must prove you actually owe the money before continuing collection efforts.
Send cease-and-desist letters. A written letter demanding that collectors stop contacting you is legally enforceable. Keep copies and send certified mail.
Check your credit reports. You're entitled to free credit reports from each bureau annually at AnnualCreditReport.com. Dispute any inaccurate collection accounts.
Document everything. Keep records of every call, letter, and contact. Note dates, times, and what was said. This documentation is essential if you need to file complaints or lawsuits.
File complaints. Report FDCPA violations to the CFPB (consumerfinance.gov/complaint) and your state attorney general. Agencies track complaints and take action against repeat offenders.
Opt out of data brokers. Services like ZoraSafe help you remove your information from data broker databases. Less data means collectors have a harder time finding and targeting you.
Consider legal help. Consumer attorneys often take FDCPA cases on contingency. If collectors have violated your rights, you may be entitled to damages.
The Bottom Line
The debt collection industry exists because some people don't pay what they owe. That's a legitimate function in a credit-based economy.
But the data broker ecosystem has transformed debt collection from a financial service into a surveillance operation. Collectors don't just know you owe money. They know where you live, where you work, who your family members are, what your financial situation looks like, and increasingly, where you physically are at any given moment.
They buy lists of vulnerable people — the elderly, the desperate, the bankrupt — and target them with aggressive tactics designed to extract payment regardless of accuracy or fairness.
The CFPB's proposed rule could bring some accountability to this shadow industry. But the rule isn't final, and even if passed, enforcement will be a challenge.
In the meantime, millions of Americans are being hunted by collectors armed with data broker intelligence. Some owe the money. Some don't. Some owed it once but paid. Some have debts belonging to strangers.
None of them consented to being tracked. None of them agreed to have their financial distress packaged and sold. None of them understood that the data broker economy would turn them into targets.
If you're struggling with debt, you're not just dealing with creditors. You're dealing with an entire industry built to find you, profile you, and pressure you.
They bought your data. Now they're coming to collect.
This is Part 6 of "Who's Buying Your Data?" — a 10-part investigation into the companies and organizations purchasing your personal information from data brokers. Next week: Landlords & Property Managers.
Sources:
- CFPB Proposed Rule on Data Brokers (December 2024)
- Experian TrueTrace Product Documentation
- Fair Debt Collection Practices Act (15 U.S.C. § 1692)
- CFPB Consumer Complaint Database
- FTC v. Mobilewalla (2024)
- Urban Institute: Medical Debt in America
- Consumer Financial Protection Bureau: Debt Collection Practices Report
- National Consumer Law Center: Fair Debt Collection