A credit repair contract can look official and still break federal law. Congress wrote the Credit Repair Organizations Act, at 15 U.S.C. § 1679 and following, in 1996 after a wave of credit repair fraud. Its advance fee ban in § 1679b(b) has real teeth: a credit repair organization cannot charge for any service until that service is fully performed.
Most people signing up assume CROA is fine print that protects the company. It protects you, and it also requires the company to tell you that the core work is free elsewhere.
What Rights Does CROA Give Every Credit Repair Customer?
CROA gives you a short list of hard rights: no payment before the work is fully done, a written contract describing exactly what will be done, three business days to cancel, and a ban on false promises (Credit Repair Organizations Act, 1996). A company that breaks the Act has an unenforceable contract.
- No money up front. A credit repair organization cannot collect payment before services are fully performed.
- A written contract. It must list services, costs, and a timeline, and a rights disclosure comes before you sign.
- Three business days to cancel. Every customer gets that window to back out without charge.
- No forbidden promises. Promising to remove accurate information, or advising a new credit identity, is illegal.
- Real remedies. Contracts that violate CROA are void, and consumers can sue for damages and fees.
- Free rights underneath. Everything a repair company can lawfully do, the consumer can do free under the FCRA.
Whether a given business falls under CROA’s definitions involves legal judgments beyond a general guide. The consumer-side rights are the focus here.
Why Does CROA Exist?
The credit repair industry’s founding business model was collecting large fees up front for results it could not deliver, then disappearing. Congress answered by regulating the payment itself. If a company can only charge after performing, the pay-first, vanish-later model dies by statute.
The Act also targets the industry’s two signature lies. One is that accurate information can be removed on demand. The other is that a new credit identity can be manufactured, and that one survives today as the CPN schemes dissected in the CPN scams guide.
How Does the FCRA Make Credit Repair Possible?
Every honest credit repair service runs on rights the Fair Credit Reporting Act has given consumers since 1970. When a bureau gets a dispute, it must run a reasonable reinvestigation, in general within 30 days, and delete or correct what it cannot verify (Fair Credit Reporting Act, Section 611). That right belongs to you, and it costs nothing to use.
The need is real. In the national study Congress mandated, one in five consumers had an error on at least one of their three credit reports (FTC, 2013). Equifax, Experian, and TransUnion each keep their own file, so an error at one bureau can be missing at another.
Of the 3,482,718 complaints recorded in the CFPB’s public Consumer Complaint Database under “Incorrect information on your report” from July 2025 through June 2026, 66.9% said the information belongs to someone else. “Account information incorrect” came next at 18.4%, then “Account status incorrect” at 8.7%. These are unverified consumer allegations, and the CFPB does not confirm the facts alleged.
The FCRA also sets how long bad news can stay. Most negative items, including collections and charge-offs, can be reported for seven years, and a Chapter 7 bankruptcy for ten (Fair Credit Reporting Act, Section 605). After that, the item is too old to report and can be disputed on that basis.
What Does CROA Actually Require?
Each duty in the Act maps to the abuse it was written against. Here is how they line up.
| Requirement | Where it sits in the law | Abuse it blocks |
|---|---|---|
| No payment until services fully performed | § 1679b(b) | Collect up front, deliver nothing |
| No untrue or misleading representations | § 1679b(a) | Guaranteed deletions and score promises |
| No advising consumers to lie or alter identity | § 1679b(a) | CPNs and falsified disputes |
| Written rights disclosure before any contract | § 1679c | Customers unaware disputes are free |
| Written contract listing services, cost, timeline | § 1679d | Vague open-ended monthly billing |
| Three business day cancellation right | § 1679e | High-pressure same-day signups |
The disclosure rule deserves emphasis. Before any contract, the company must hand over a statement of file rights that says, among other things, that you can dispute inaccurate information directly with the bureaus at no charge. The industry is required by law to tell you its core service is free elsewhere.
How Common Are Credit Repair Complaints and Scams?
The regulator’s own database shows the payment rule is where firms break down most. Of the 2,786 complaints naming a credit repair firm under “Credit repair services” in the CFPB’s public Consumer Complaint Database, over the three years to September 10, 2026, 26.1% said the firm “Charged upfront or unexpected fees.” That is the practice § 1679b(b) bars.
The single largest complaint in that same group was “Didn’t provide services promised,” at 31.3%. These are unverified consumer allegations, and the CFPB does not confirm the facts alleged.
Credit reporting overall is the most complained-about consumer financial product in the country, at 88% of the roughly 6.6 million complaints the CFPB received in 2025, according to its Consumer Response Annual Report. The worst operators run at real scale. The FTC announced it had halted Credit Glory, a network of 16 related entities and five principals that collected nearly $200 million from consumers through unlawful charges since at least 2016. The FTC also sent more than $3.5 million in refunds to people harmed by The Credit Game, a credit repair scheme run by Michael and Valerie Rando.
What Do CROA Violations Look Like in Practice?
The monthly fee charged from day one is the most common gray-to-black zone. Fees collected before the promised services are fully performed sit in tension with the advance fee ban. Guaranteed deletion marketing, score promises, and pay-per-deletion pricing collected up front are the plainer violations.
Misleading claims about how the work gets done count too, since § 1679b(a) bans untrue representations. Here is how one customer described a dispute app’s pitch:
“advertises as an AI powered credit repair service, but this is not true at all. all letters created using previously used or entered templates, it does not include any ai generated wording”
That is alan, in a 1-star Trustpilot review of Dispute Beast, September 8, 2026.
The money behind the subscription model, and what the fees actually buy, is broken down in why credit repair companies charge 2,400 dollars a year. The template-letter reality is in the 2,400 dollar template letter scam.
What Remedies Does a Wronged Customer Have?
Strong ones. A contract that fails CROA’s requirements is void and cannot be enforced by the company. § 1679g gives consumers a private right of action for actual damages or everything paid, whichever is greater, plus punitive damages, class actions, and attorney fees, with a five year limitations period.
Rights under the Act cannot be waived. A contract clause that tries to waive them is itself a violation.
Here is the practical order for a burned customer. Stop payments. Demand a refund in writing citing the violation. Complain to the FTC and your state attorney general. Then see a consumer attorney with the contract in hand.
How Can a Consumer Screen a Credit Repair Offer?
Five questions sort the field quickly, and any wrong answer is your exit.
- Does any money move before services are performed? Advance fees violate the Act.
- Is anything guaranteed, such as deletions, score gains, or timelines? Guarantees are the forbidden promise.
- Is there a written contract listing services, total cost, and duration before signing?
- Did you get the rights disclosure, including that disputes are free directly with the bureaus?
- Does the pitch involve a CPN, a new credit identity, or disputing accurate items as false? Walk away.
The FTC keeps plain-language guidance on spotting credit repair fraud at consumer.ftc.gov. Its enforcement record against the industry is why these screening questions are written into law instead of left to style.
What Can Credit Repair Lawfully Accomplish?
Exactly what you can. That means disputing inaccurate, incomplete, unverifiable, or too-old information through the FCRA’s channels, negotiating with creditors, and organizing the paperwork. Done honestly, that is real work with real value for people without the time, and the dispute rights it runs on are free by statute.
What no one can lawfully do is remove accurate, verifiable, timely information. That is why the honest version of the industry sells labor and organization, never outcomes. The realistic picture of what works is laid out in does credit repair actually work.
Bureaus cannot just rubber-stamp a dispute either. Both bureaus and the furnishers that supply the data must run a reasonable, independent investigation, and one that merely repeats the furnisher’s word can violate the FCRA (FCRA Section 611(a)(1)(A) and Section 623(b); Cushman v. Trans Union, 3d Cir. 1997).
Skip the paperwork. Start your dispute.
CreditRefresh drafts your FCRA dispute letter and tracks the 30-day investigation window. You review, approve, and send. You stay in control.
Get StartedHow Does Software-Based Dispute Help Fit the Picture?
Self-help software keeps you as the one acting. Tools like CreditRefresh read the reports, flag items with accuracy problems, and draft custom dispute letters that you review, approve, and send under your own FCRA rights. The rights used are yours, and no one files on your behalf.
The difference matters for incentives too. A flat-price tool has no reason to stretch disputes across billable months, the conflict examined in why paying 2,400 dollars a year buys back federal rights.
Do State Laws Add Anything on Top of CROA?
Often. Many states layer their own credit services laws over the federal floor. These can include registration and bonding rules, longer cancellation windows, fee caps, and state enforcement with its own penalties.
A company barred in one state often turns up in another, so the state registry is worth checking. Your state attorney general’s consumer division handles both the lookup and the complaint. A company’s reaction to being asked about its bond and registration is itself a useful screening result.
Should You Pay a Firm to Dispute, or File Under Your Own Name?
CROA exists because paying someone else to use your dispute rights is where the abuse happened, so the real choice is who does the disputing and what you see before it goes out. Here is how the main options compare on price, what you get, and how many bureaus they reach.
| Tool | What you pay | What that buys | Bureaus | Trustpilot |
|---|---|---|---|---|
| CreditRefresh | $49.99/mo, no setup fee, cancel anytime. Mail letters yourself free, or pay RushMail per letter | You see and sign every FCRA letter before it goes out | All three | 4.3 (9 reviews) |
| Dispute Beast | From $49.99/mo for required monitoring. Mail letters yourself free, or pay Sprint Mail per letter | AI dispute app you run yourself, bundled with paid monitoring | All three | 4.2 (2,067 reviews) |
| DisputeBee | $49/mo personal, $129/mo business | Letter software; you print, mail, and track responses yourself | All three | 3.2 (68 reviews) |
| The Credit People | $99/mo standard, $119/mo premium, or $599 for 6 months | Done-for-you service; you do not approve each letter | All three | 1.7 (17 reviews) |
| Lexington Law | $139.95/mo, invoiced at the end of each service period | Law firm handles disputes for you; letters not shown | All three | 3.2 (624 reviews) |
| Credit Karma | Free, paid for by lender referrals | Free monitoring; its Direct Dispute works with TransUnion only | TransUnion | 1.1 (912 reviews) |
Every price is that company’s own published rate, read off that company’s own site on September 15, 2026. Trustpilot scores and review counts as published on September 24, 2026.
How CreditRefresh Drafts FCRA Letters for All Three Bureaus That You Sign
CROA’s whole point is keeping you in control of your own dispute rights, and that is how we built CreditRefresh. In CreditRefresh’s September 18, 2026 member-data extract, 2.3% of disputed bureau-level items in mailed rounds had a recorded outcome. Within that subset, 47.9% were no longer reported on a newer pull of the same bureau, while 52.1% remained reported with a changed balance, status or negative flag.
Here is how it works. Our AI scans all three bureau reports and flags items that look inaccurate, incomplete, unverifiable, or too old to report. It drafts a print-ready FCRA letter for each one you choose, and nothing goes out until you review and sign it. You mail it yourself, or hand the round to RushMail for a small per-letter fee, and we track each letter against the 30-day window.
It is included with Refresh Monitoring at $49.99 a month, with no setup fee, no per-dispute charge, no contract, and you can cancel anytime. The bureaus decide dispute outcomes, and no tool can lawfully remove accurate information.
It is backed by our 100% money-back guarantee: members who work the full program and see no bureau score rise above where they started can claim back every Refresh Monitoring payment. It is a refund promise, never a score promise.
Frequently Asked Questions
Can a credit repair company charge a monthly fee?
Only for services already fully performed in that period, which is where many subscription models strain against the advance fee ban. Fees collected before the contracted services are delivered are the classic violation, and courts have voided contracts over exactly this setup.
Does CROA apply to lawyers and nonprofits?
The Act carves out genuine nonprofits and certain regulated entities, and courts have split on various business setups. The carve-outs are also where bad actors hide, so verify a nonprofit label before you trust it.
What makes a credit repair contract void?
Any failure to follow the Act’s protections: advance fees, missing disclosures, no written contract, or a denied cancellation right. A void contract cannot be enforced against you, and payments made under one can be recovered in a CROA action.
Is it illegal for a company to dispute accurate items?
Advising or helping a consumer make untrue statements to bureaus or creditors violates § 1679b(a). Disputing an item you believe is inaccurate is the lawful core of the work, and manufacturing disputes against information known to be accurate is the violation.
How does someone report a CROA violation?
File with the FTC, the CFPB, and your state attorney general, attaching the contract and payment records. To recover money paid, the private right of action under § 1679g runs five years and includes attorney fees, which makes consumer attorneys open to documented cases.
Do states require a licensed attorney on staff for credit repair?
State rules differ, and some go well past federal law. Ask your state attorney general’s consumer division whether your state requires a licensed attorney, registration, or a bond before a company can sell credit repair there.
Last reviewed: September 2026
This article is for educational purposes only and does not constitute legal or financial advice. The Fair Credit Reporting Act and related regulations are complex, and outcomes depend on individual circumstances. Consumers with specific questions about their credit reports or rights under federal law should consult a licensed attorney or contact the Consumer Financial Protection Bureau directly.
CreditRefresh drafts the FCRA dispute letters for all three bureaus, and nothing goes out until you review and sign it. Backed by a 100% money-back guarantee.
Dispute your report errors under your own CROA and FCRA rights →
