Relating to the collection of consumer debt incurred by certain individuals as a result of identity theft.
CriticalImmediate action required
Low Cost
Effective:2025-06-20
01
Compliance Analysis
Key implementation requirements and action items for compliance with this legislation
Implementation Timeline
Effective Date: June 20, 2025 (Immediate effect triggered by supermajority vote).
Compliance Deadline: Immediate. Operational workflows must be active now to meet the "7 business day" turnaround upon receipt of an order.
Agency Rulemaking: No specific agency rulemaking is mandated, but judicial interpretation will likely define what constitutes a "substantially similar" out-of-state order.
Immediate Action Plan
Issue a "Stop Work" directive to third-party agencies for any account currently flagged with a court order.
Update dispute resolution SOPs to prioritize Section 521.103 orders over standard FCRA disputes.
Review and scrub pending debt sale portfolios to ensure no flagged accounts are included.
Verify E&O insurance coverage for statutory violations of the Texas Finance Code.
Operational Changes Required
Contracts
Debt Sale Agreements: Must be amended to explicitly exclude accounts subject to ID theft court orders from portfolio sales; selling these accounts is now statutorily prohibited.
Third-Party MSAs: Vendor contracts must be updated to require immediate cessation of collection and return of accounts within 24-48 hours of notification to ensure the creditor meets the 7-day statutory cap.
Hiring/Training
Frontline Triage: Train intake staff to distinguish between a standard police report (insufficient) and a Section 521.103 Court Order (mandatory stop).
Legal Review: Establish a rapid escalation path for out-of-state court orders to Legal Counsel to determine validity under the "substantially similar" standard.
Reporting & Record-Keeping
CRA Notification: Implement a specific workflow to notify all Credit Reporting Agencies that the debt is "disputed and not collectible" within 7 business days of receiving the order.
Audit Trail: Maintain a precise log of the date/time the court order was received and the date/time the CRA notice was sent to establish an affirmative defense against potential litigation.
Fees & Costs
Write-Offs: Budget for total loss on unsecured balances; deficiency balances on repossessed assets are legally uncollectible from the victim.
Subrogation: Allocate resources for potential civil suits against the identified identity theft perpetrator, as the statute explicitly grants standing for this.
Strategic Ambiguities & Considerations
"Substantially Similar" Laws: The statute applies to orders issued under laws "substantially similar" to Texas Business & Commerce Code 521.103. It is unclear if administrative findings from federal agencies or orders from states with weaker evidentiary standards qualify. Adopt a conservative approach until case law settles this.
Tax Reporting: The law is silent on 1099-C issuance. Issuing tax forms to victims for cancelled debt could be litigated as continued "collection activity" or harassment.
Need Help Understanding Implementation?
Our government affairs experts can walk you through this bill's specific impact on your operations.
Information presented is for general knowledge only and is provided without warranty, express or implied. Consult qualified government affairs professionals and legal counsel before making compliance decisions.
The bill author has informed the committee that coerced debt, a type of identity theft in which an abuser incurs credit-related transactions using the identity of a victim without their consent, is an increasingly common form of economic abuse in family violence and human trafficking situations that can substantially limit a victim's economic self-sufficiency or prevent them from leaving an abusive relationship. Even if a victim manages to escape from an abusive situation, the coerced debt follows, negatively impacting their finances. In 2021, the Texas Legislature passed H.B. 3529, which allowed victims to take legal action against the effects of debt incurred involuntarily by abusers. This process, however, can be complex and cost prohibitive, especially for victims of domestic violence or human trafficking and other vulnerable adults without the means to hire an attorney. H.B. 4238 seeks to address this issue by providing streamlined access to debt collection protections for certain victims of identity theft and coerced debt.
CRIMINAL JUSTICE IMPACT
It is the committee's opinion that this bill does not expressly create a criminal offense, increase the punishment for an existing criminal offense or category of offenses, or change the eligibility of a person for community supervision, parole, or mandatory supervision.
RULEMAKING AUTHORITY
It is the committee's opinion that this bill does not expressly grant any additional rulemaking authority to a state officer, department, agency, or institution.
ANALYSIS
H.B. 4238 amends the Finance Code to prohibit a creditor, debt collector, or third-party debt collector from attempting to collect a consumer debt or a portion of a consumer debt from a consumer who provides the following information:
·a criminal complaint alleging the consumer was a victim of the offense of the fraudulent use or possession of identifying information under Penal Code provisions, or a substantially similar federal law or law in another state, accompanied by a statement identifying the consumer debt or the portion of consumer debt that resulted from the offense;
·a court order issued under Business & Commerce Code provisions, or a substantially similar federal law or law in another state, declaring the consumer a victim of identity theft; or
·a copy of a Federal Trade Commission identity theft victim's report, completed, signed, and filed by the consumer affirming that the consumer is a victim of identity theft and identifying the consumer debt or affected portion of the consumer debt incurred as a result of identity theft.
H.B. 4238 requires a creditor, debt collector, or third-party debt collector who receives such notice from a victim of identity theft that a consumer debt is a result of the identity theft to immediately cease efforts to collect the disputed debt or disputed portion of the debt from the victim of identity theft and send to each person who has previously received a report relating to that debt from the creditor, debt collector, or third-party debt collector notice that the debt is disputed under the bill's provisions and not collectible from the victim of identity theft. The bill prohibits a creditor, debt collector, or third-party debt collector from selling the debt or transferring it for consideration, except to collect the debt from the alleged perpetrator of identity theft or from a responsible person other than the victim of identity theft. The bill authorizes a creditor, debt collector, or third-party debt collector, if the disputed debt or disputed portion of the debt is secured by tangible personal property, to enforce the security interest but prohibits the creditor, debt collector, or third-party debt collector from collecting or seeking to collect any deficiency from the victim of identity theft.
H.B. 4238 authorizes a creditor, debt collector, or third-party debt collector who has a good faith reason to believe that a consumer has disputed a consumer debt or portion of a consumer debt based on a material misrepresentation that the consumer is a victim of identity theft to file suit in a court of competent jurisdiction to collect the debt from the consumer. With respect to such a suit, the bill requires the creditor, debt collector, or third-party debt collector to show by a preponderance of the evidence that the consumer is not a victim of identity theft. The bill establishes that a creditor, debt collector, or third-party debt collector has standing to bring and may bring an action to exercise any right, seek any remedy, or use any lawful means to collect a consumer debt or a portion of consumer debt that is disputed under the bill's provisions from an alleged perpetrator of identity theft who by means of identity theft obtained, used, or possessed the money, goods, services, or property of the consumer who is a victim of the alleged perpetrator's identity theft.
H.B. 4238 defines "identity theft" as a violation of Business & Commerce Code provisions relating to the unauthorized use or possession of personal identifying information, or a substantially similar federal law or law in another state, or a criminal offense under Penal Code provisions relating to fraudulent use or possession of identifying information, or a substantially similar federal law or law in another state. The bill does not apply to the collection of a judgment already obtained or to a consumer debt that is a home loan, as defined by reference to statutory provisions relating to such loans.
Effective immediately, Texas creditors and debt collectors must cease all collection attempts against a consumer within seven business days of receiving a court order declaring identity theft. This law shifts the burden from internal investigation to immediate compliance, prohibiting debt sales and deficiency balance pursuit for these specific accounts while explicitly excluding home loans. Implementation Timeline Effective Date: June 20, 2025 (Immediate effect triggered by supermajority vote).
Q
Who authored HB4238?
HB4238 was authored by Texas Representative Morgan Meyer during the Regular Session.
Q
When was HB4238 signed into law?
HB4238 was signed into law by Governor Greg Abbott on June 20, 2025.
Q
How urgent is compliance with HB4238?
The compliance urgency for HB4238 is rated as "critical". Businesses and organizations should review the requirements and timeline to ensure timely compliance.
Q
What is the cost impact of HB4238?
The cost impact of HB4238 is estimated as "low". This may vary based on industry and implementation requirements.
Q
What topics does HB4238 address?
HB4238 addresses topics including crimes, crimes--against persons, crimes--against persons--general, financial and financial--general.
Legislative data provided by LegiScanLast updated: November 25, 2025
Need Strategic Guidance on This Bill?
Need help with Government Relations, Lobbying, or compliance? JD Key Consulting has the expertise you're looking for.