Credit Repair Companies and the Law That Governs Them

A company that charges money to improve someone’s credit record is regulated by federal statute before it does anything else. The Credit Repair Organizations Act, 15 U.S.C. Sec. 1679 et seq., applies to any person or business that sells, provides, or performs a service for the express or implied purpose of improving a consumer’s credit record, credit history, or credit rating in exchange for payment. The statute does not regulate what a credit file says. It regulates the conduct of the business selling the service.

That distinction matters because the law most people associate with credit problems, the Fair Credit Reporting Act, governs the consumer reporting agencies and the businesses that furnish data to them. The Fair Debt Collection Practices Act governs third-party debt collectors. Neither one governs the credit repair company itself. CROA does, and it imposes obligations that are specific enough to check against a contract.

What CROA requires before money changes hands

The statute sets several conditions that apply to every covered company, regardless of how it advertises.

No advance payment. Under 15 U.S.C. Sec. 1679b(b), a credit repair organization may not charge or receive any money or other valuable consideration for services before those services are fully performed. The prohibition is on payment before completion, not on payment before a result is achieved in the consumer’s favor. A company cannot collect a monthly fee while work is ongoing.

A written contract. Section 1679d requires a written agreement, signed by the consumer and dated, that states the terms and conditions of payment, a full description of the services to be performed, and a description of any guarantee. The contract must carry a conspicuous statement that the consumer may cancel without penalty or obligation at any time before midnight of the third business day after signing.

A separate disclosure statement. Section 1679c requires the company to provide a written statement of consumer rights before any contract is signed. The required text is set out in the statute itself and covers the consumer’s right to dispute inaccurate information directly and without charge, and the right to sue a credit repair organization that violates the Act.

A three-day cancellation window. Section 1679e gives the consumer three business days to cancel, and the company must provide a form for that purpose. Cancellation within the window carries no penalty.

Prohibited conduct. Section 1679b(a) bars a list of specific practices. A company may not make an untrue or misleading statement about its services. It may not advise a consumer to make an untrue or misleading statement to a consumer reporting agency, creditor, or government agency. It may not advise a consumer to alter their identification to prevent the display of a credit history. And it may not engage in conduct constituting fraud or deception.

The rule against a new credit identity

The prohibition on creating a new credit identity is the one most often misunderstood. Section 1679b(a)(1) and (2) bar a company from advising a consumer to make untrue statements to a credit bureau, creditor, or government agency, and from advising the alteration of identification to hide a credit history. A separate criminal provision, 18 U.S.C. Sec. 1028, governs identity documents, and 18 U.S.C. Sec. 1001 governs false statements to federal agencies.

A company that offers to build a “new credit profile” using an employer identification number or a different spelling of a name is describing conduct the statute prohibits. The consumer who follows that advice is the one exposed to the consequences, which can include prosecution. The company’s advice is itself a CROA violation.

What the law does not let anyone remove

Accurate negative information stays on a credit report for its reporting period, which the FCRA sets at seven years for most adverse items and ten years for a Chapter 7 bankruptcy, under 15 U.S.C. Sec. 1681c. No company can lawfully shorten that period. A credit repair organization that promises to remove accurate information is either making a statement it cannot perform or planning to dispute information it knows to be correct, which runs into the prohibition on untrue statements.

What a company can lawfully do is what the consumer can do without paying anyone: file a dispute under FCRA Sec. 611, 15 U.S.C. Sec. 1681i, when information is inaccurate or incomplete. The bureau must investigate, generally within 30 days, and delete or modify information it cannot verify. That process is free. It is also the entire lawful toolkit. Nothing a credit repair company does within CROA is beyond what the consumer can do directly.

The Telemarketing Sales Rule adds a second layer

Credit repair sold by telephone is also covered by the FTC’s Telemarketing Sales Rule, 16 CFR Part 310. Section 310.4(a)(2) prohibits requesting or receiving payment for credit repair services until the promised time frame has passed and the seller has given the consumer a consumer report, issued more than six months after the results were achieved, that shows those results. The rule reaches transactions the seller might argue fall outside CROA, and it applies to calls across state lines. The FTC enforces it under the Telemarketing Act, 15 U.S.C. Sec. 6101 et seq.

Where the rules apply and where they do not

The mistake people make most often

The common error is treating a credit repair contract as a service agreement that can be evaluated after the fact, like a gym membership. People sign, pay a monthly fee, and only later read the cancellation clause or notice that the fee was collected before any work was done. The reason is structural: the sales conversation is designed to produce a signature, and the disclosure statement required by Sec. 1679c is a separate document that is easy to set aside unread. CROA places the disclosure before the contract precisely because the decision happens in that window.

The second version of the same mistake is assuming that a company’s willingness to take a fee means the fee is lawful. Advance fees are prohibited under Sec. 1679b(b) no matter what the contract says, and a clause purporting to waive the right is void under Sec. 1679f. A consumer who has already paid is not without recourse, but the leverage is strongest before signing.

Enforcement and remedies

CROA is enforced by the FTC and by state attorneys general, and it also creates a private right of action. Under 15 U.S.C. Sec. 1679g, a consumer may sue for the greater of actual damages or the amount paid to the organization, plus punitive damages as the court allows and attorney’s fees. Section 1679h makes a violation of the statute a violation of the FTC Act, which brings the FTC’s enforcement powers into play.

State law adds another layer. Many states license credit services businesses and impose their own bonding and disclosure requirements. Those requirements vary by state, and a consumer checking a company’s standing needs to look up the licensing regime in their own state, usually through the state attorney general or the state regulator that handles consumer finance. CROA sets its own time limit for bringing a claim, in Sec. 1679i, and it should be checked rather than assumed.

Where a company has taken money and performed nothing, or where a consumer is facing a lawsuit over a debt that a credit repair company was supposedly handling, that is the point to get actual legal help. This page describes how the statute works; it is not legal advice.

Checking a company against the statute

The documents to ask for are the written contract required by Sec. 1679d and the disclosure statement required by Sec. 1679c. The contract should state the services, the terms of payment, and the three-day cancellation right. If payment is requested before the services are complete, Sec. 1679b(b) is the provision to cite. If the company suggests a new identification number or a different name to start over, Sec. 1679b(a)(1) and (2) are the provisions to cite. The full text of CROA is available through the U.S. Code, and the FTC publishes guidance on credit repair scams that tracks the same requirements.