The Credit Repair Organizations Act is a 1996 federal law that regulates any business selling services to improve your credit for a fee. It requires those businesses to give you a written statement of your rights before you sign, put every promise in a detailed written contract, wait three business days before starting work, and refrain from collecting any payment until the promised results are actually delivered. It also gives you the right to cancel within three days, the right to sue for damages and attorney’s fees, and the right to treat a noncompliant contract as void.
Who Has to Follow the Act
The law reaches any person or business that uses phone, mail, or the internet to sell services aimed at improving a consumer’s credit record, credit history, or credit rating in exchange for payment.1Legal Information Institute. 15 USC 1679a(3) – Credit Repair Organization Definition That covers companies that dispute items on your behalf, firms that coach you through disputes for a fee, and businesses that simply claim they can improve your standing. If money changes hands for a credit-related promise, the company is almost certainly covered.
Three groups are exempt: tax-exempt nonprofits recognized under Section 501(c)(3), your own creditors when they help restructure a debt you owe to them, and federally insured banks and credit unions along with their subsidiaries and affiliates. Attorneys are not exempt. A lawyer who charges you to dispute items on your credit report must follow the same disclosure, contract, and fee rules as any other credit repair business.
Practices the Act Prohibits
Four categories of conduct are off-limits, and they go well beyond the advance fee ban.2Office of the Law Revision Counsel. 15 USC 1679b – Prohibited Practices
A company cannot make a false or misleading statement about your creditworthiness to a credit bureau or a creditor, and it cannot advise you to make one either. That prohibition covers the common tactic of flooding bureaus with fabricated disputes or coaching you to claim accurate accounts aren’t yours. A company that “should know” its statements are misleading is just as liable as one that lies outright.
A company cannot advise you to alter your identity to hide accurate negative information. This is the provision that makes “credit privacy number” and “new credit identity” schemes illegal. If someone tells you to apply for an Employer Identification Number and use it in place of your Social Security number on credit applications, that advice violates federal law. The FTC has warned that filing a false identity theft report at a company’s direction is itself a crime that can bring fines or imprisonment.3Federal Trade Commission. Looking to Fix Your Credit? An Illegal Credit Repair Scam Isnt the Answer
A company cannot misrepresent what its services do. Guaranteeing removal of accurate negative items or a specific score increase, with no basis for the promise, falls squarely inside this prohibition. And a catch-all provision bars any fraud or deception in the offer or sale of credit repair services, giving regulators room to reach schemes that don’t fit the first three categories neatly.
The Written Disclosure You Must Receive Before Signing
Before you sign anything, the company must hand you a separate written document titled “Consumer Credit File Rights Under State and Federal Law.”4Office of the Law Revision Counsel. 15 USC 1679c – Disclosures “Separate” is the operative word. The disclosure cannot be buried in the contract, attached as a rider, or folded into a welcome packet. It stands alone.
The document tells you that you have the right to obtain your own credit report from a credit bureau, that you can dispute inaccurate or incomplete information yourself without paying anyone, and that a bureau receiving a written dispute must investigate and correct or remove information it cannot verify. It also tells you that you can sue a credit repair company that violates the act. Skipping this disclosure is itself a violation.
What the Contract Must Say
No company can begin work until you sign a written, dated contract that meets specific content requirements.5Office of the Law Revision Counsel. 15 USC 1679d – Credit Repair Organizations Contracts Verbal agreements don’t count. A company that starts sending dispute letters before you sign is already in violation.
The contract has to state the total amount you’ll pay, when payments are due, and to whom. It has to describe the services in detail, not with vague language like “we’ll improve your credit,” and it must include any performance guarantees the company is offering. It has to give either an estimated completion date or the total length of the service period. And it has to list the company’s name and principal business address.
Even after you sign, the company must wait three full business days before doing any work. That waiting period exists to protect your cancellation right. A company that rushes to send dispute letters the same day you sign is trying to create a sense of obligation before your cooling-off period ends.
No Payment Until the Work Is Done
The rule that catches the most companies is simple: no credit repair company may charge or receive any payment until the promised service has been fully performed. Setup fees, enrollment charges, consultation costs, first-month payments collected at signing — every one of these violates the act if collected before results are delivered.
The statute ties payment to completion of each specific service, not to time passing or work starting. If a company promises to get an inaccurate collection removed, it cannot bill you for that service until the collection is actually gone from your report. Sending a dispute letter isn’t “fully performing” the service. Getting the item removed is.
Companies try to get creative here. Some charge monthly subscriptions regardless of results. Others split work into tiny tasks and bill per task at the moment a letter goes out. Both approaches are legally risky, and the FTC has pursued companies using exactly these models. In 2025, the agency sent more than $3.5 million back to consumers harmed by a credit repair operation that lied about the effectiveness of its services and charged illegal fees.6Federal Trade Commission. FTC Sends More Than $3.5 Million to Consumers Harmed by The Credit Game Credit Repair Scheme
Stricter Rules for Phone Sales
Credit repair sold over the phone faces an additional layer under the FTC’s Telemarketing Sales Rule. Before a telemarketing seller can collect payment, two conditions must both be met: the full time period the seller promised for delivering services must have passed, and the seller must provide a consumer report issued more than six months after the promised results were achieved, showing the improvement actually happened.7Federal Trade Commission. Complying With the Telemarketing Sales Rule If the seller made different timeline claims at different points, the longest one controls. A phone-sold credit repair contract can easily leave a company waiting well over six months for its first dollar.
Your Three-Day Right to Cancel
You can cancel any credit repair contract within three business days of signing it, for any reason, with no penalty.8Office of the Law Revision Counsel. 15 USC 1679e – Right to Cancel Contract At the moment you sign, the company must give you a “Notice of Cancellation” form in duplicate, and the form must clearly state that you can cancel without penalty before midnight of the third business day. To cancel, sign and send the form before the deadline. The company must stop all work and cannot bill you for anything already done. Because the company is also barred from starting work during the same three days, you can always walk away before any services begin.
Waivers Don’t Work, and Noncompliant Contracts Are Void
Every protection the act gives you is nonwaivable. Any clause asking you to give up your right to cancel, your right to sue, your right to the written disclosure, or any other protection is void and unenforceable.9Office of the Law Revision Counsel. 15 USC 1679f – Noncompliance With This Subchapter Initialing a waiver or signing a separate acknowledgment does not change that. Even asking you to sign a waiver is itself a violation.
The law goes further. Any contract that does not comply with the act’s requirements is automatically void, and no court can enforce it. If a company sued you for unpaid fees under a contract missing the required service description or timeline, that contract would be treated as though it never existed. Compliance is all-or-nothing: a sloppy contract isn’t just a regulatory problem, it’s an uncollectable one.
What You Can Recover If You Sue
When a credit repair company violates any part of the act, you can sue and recover three categories of damages.10Office of the Law Revision Counsel. 15 USC 1679g – Civil Liability
- Actual damages equal to the greater of the financial harm you actually suffered or the total amount you paid the company. That floor matters: even without proof of separate harm, you recover every dollar you handed over.
- Punitive damages at the court’s discretion, with no statutory cap in individual lawsuits. Class actions allow punitive damages for named plaintiffs and class members alike.
- Attorney’s fees and costs, paid by the company if you win. That fee-shifting is what makes smaller claims economically worth bringing.
You have five years from the date of the violation to file. If the company willfully misrepresented information it was required to disclose and you didn’t discover the misrepresentation until later, the clock starts on the date of discovery instead.11Office of the Law Revision Counsel. 15 USC 1679i – Statute of Limitations
Government Enforcement
Private lawsuits are not the only route. The FTC has direct authority to enforce the act, and any violation is treated the same as an unfair or deceptive trade practice under the FTC Act.12Office of the Law Revision Counsel. 15 USC 1679h – Administrative Enforcement That classification gives the FTC power to seek injunctions, impose civil penalties, and force companies to refund consumers. The Consumer Financial Protection Bureau has also brought cases against credit repair companies under its Dodd-Frank authority and the Telemarketing Sales Rule.
State attorneys general can independently sue credit repair companies for federal act violations, recover damages on behalf of state residents, and collect attorney’s fees if they win. The state must notify the FTC before filing, and the FTC has the right to intervene. If the FTC has already filed against the same company for the same conduct, the state case pauses until the federal case concludes.
How State Credit Repair Laws Fit
The federal act sets a floor, not a ceiling.13Office of the Law Revision Counsel. 15 USC 1679j – Relation to State Law State laws are overridden only where they directly conflict with a federal requirement, and only on the specific point of conflict. Many states add their own requirements on top: mandatory registration, surety bonds, longer cancellation periods, or stricter contract terms. A company operating across state lines has to comply with both the federal act and every applicable state law, meeting whichever standard protects the consumer more.