Credit repair is one of the few industries Congress found troubling enough to regulate by name. The Credit Repair Organizations Act — CROA, 15 U.S.C. § 1679 — passed in 1996 after years of companies charging desperate people hundreds of dollars for results that never came, or that came by methods that made things worse. The statute didn’t outlaw credit repair. It outlawed the business model the scams depend on.
That gives you a clean test. Before you give any credit repair company a dollar, hold its pitch up against what CROA requires. A company violating the statute on day one — and a striking number do, starting with the upfront fee — is not going to get scrupulous on day thirty. This article covers what the law demands, what the common scams look like from the inside, the scheme that can turn the customer into a fraud participant, and what to do instead — because everything legitimate these companies sell, you can do yourself for the cost of postage.
The short version
- Under CROA, a credit repair company cannot charge you before it performs the services — an upfront fee is itself a violation.
- You’re entitled to a written contract and a three-day right to cancel, and no one can make you waive either.
- Accurate negative information cannot be removed by anyone, no matter the fee. A company promising otherwise is describing a service that does not exist.
- A CPN or “new credit identity” is not a fresh start — using one on a credit application can make you a participant in fraud.
What CROA actually requires
The statute’s core rules are short enough to memorize. A credit repair organization may not charge or collect money before the promised services are fully performed. It must give you a written contract describing the services, the timeline, and the total cost, along with a separate written disclosure of your rights. You then have three business days to cancel without owing anything. And the company may not advise you to lie — it cannot tell you to make untrue statements to a credit bureau or to alter your identity to hide your credit history, and it cannot make untrue or misleading claims about its own services.
Notice how directly those rules attack the scam model, which runs on collecting money first and managing disappointment later. CROA also has teeth pointing your way: a company that violates it can be liable to you for actual damages or what you paid it, punitive damages, and attorney’s fees, and contracts that don’t comply with the statute are void. People who paid a noncompliant credit repair outfit are not without recourse.
What the scams look like in practice
The species vary, but the field marks repeat:
- Money up front. A “setup fee,” an “audit fee,” a “first work fee” before anything has been done. This is the brightest red flag because it is, by itself, a CROA violation.
- Guarantees. A specific score increase, a promise to remove particular accounts, “guaranteed results or your money back.” Nobody controls what a credit bureau will do; a guarantee is a sales script, not a service.
- Promising to remove accurate information. This one deserves its own line: no one can remove accurate, timely negative information from your credit report. Not a lawyer, not a company, not a secret method. The dispute process exists to fix what’s wrong. A company promising to erase what’s true is promising to defraud the credit reporting system, with your file as the instrument.
- Dispute-everything spam. The actual “method” at many firms: fire form letters disputing every negative item, month after month, hoping something falls off when a furnisher misses a deadline. The bureaus recognize template floods and may deem the disputes frivolous, which can make later, genuine disputes harder. Items deleted this way often reappear once the furnisher verifies them.
- Telling you not to contact the bureaus yourself. A company that wants to be the only one talking to the bureaus is protecting its process from your scrutiny, not your credit from harm.
The CPN pitch is the one that can wreck your life. If anyone offers you a “credit privacy number,” a “credit profile number,” or a “new credit identity” to use instead of your Social Security number, walk away. These numbers are frequently stolen Social Security numbers — often children’s — and using one on a credit application means misrepresenting your identity to a lender. That is fraud, and the customer who used the number is a participant in it, whatever the salesman said about it being legal.
Everything they sell, you can do free
Here is the part the industry would rather you not sit with: the entire legitimate service — disputing inaccurate information — is a right you already own under the Fair Credit Reporting Act, and exercising it costs you postage. You can pull all three of your credit reports at no charge, identify what’s wrong, and send each bureau a written dispute with your documents attached. The bureau then generally has 30 days to investigate and must correct or delete information it can’t verify. That is the machine. There is no premium tier.
Two of our resources do most of the work: a step-by-step guide to disputing credit report errors the right way — in writing, by mail, with documents, never through the quick-click online portal if you want a usable paper trail — and the current dispute addresses for all three bureaus. One careful, specific, documented dispute letter accomplishes more than a year of someone else’s template spam, and it builds the record that matters if the bureau gets it wrong.
When the answer is a lawyer, not a subscription
There is a scenario where neither self-help nor any credit repair company is the right tool: you disputed a genuine error, properly, and the bureau verified it anyway. At that point the problem is no longer your paperwork — it’s the bureau’s or the furnisher’s failure to conduct a reasonable investigation, and the FCRA makes that failure actionable. Damages can include the credit you were denied, the higher rates you paid, the hours and distress the error cost you — and the statute shifts attorney’s fees to the defendant, which is why a consumer lawyer can take these cases at no out-of-pocket cost.
This is the structural difference worth understanding: a credit repair company’s only tool is the dispute letter, sent over and over. A lawyer’s tool is the federal claim that exists precisely because a proper dispute failed. If you’ve already disputed and lost, you may not need a better letter; you may have a case. Our credit report errors practice is built on exactly that pattern.
A fair test for any company you’re considering
If you still want professional help with disputes — and for some people, paying for organization and persistence is a reasonable choice — screen the company against the statute. Ask for the written contract and the three-day cancellation notice before you sign. Confirm in writing that you will not be charged until services are performed. Ask the company to state, in writing, that it cannot remove accurate information. A legitimate operation will answer all three without flinching, because the honest version of this business has nothing to hide. Watch what happens instead: the upfront-fee outfit will explain why its fee is “different,” the guarantee outfit will soften the guarantee, and the worst of them will stop returning calls. The statute is a filter; let it run.
Frequently asked questions
Are all credit repair companies scams?
No — there are firms that follow CROA, charge only after work is done, and honestly sell convenience: they organize your disputes and keep them moving. What they cannot honestly sell is a result you couldn’t get yourself, because the dispute process is the same one you have free access to. Judge any company by CROA compliance first and by what it promises second; the promise of removing accurate information disqualifies an outfit by itself.
I already paid a credit repair company that did nothing. Can I get my money back?
Possibly more than that. If the company charged you in advance, skipped the written contract or disclosures, or made false claims, it violated CROA — and the statute gives consumers a claim for what they paid, potentially punitive damages, and attorney’s fees. Keep your contract, receipts, and every email or text. Those documents turn “they ripped me off” into a case.
What is a CPN, exactly, and is it ever legal to use one?
A “credit privacy number” is a nine-digit number sold as a substitute for your Social Security number on credit applications. There is no legitimate version of this product: the numbers are commonly stolen or fabricated SSNs, and writing one on an application means lying to a lender about who you are. People have faced federal charges over exactly this. If a company’s plan for your credit involves a new number, the plan is fraud.
How long do accurate negative items stay on my report?
Most negative information ages off after seven years; certain bankruptcies can remain up to ten. Nothing lawful accelerates that for accurate items — which is the honest, unglamorous answer the scams are built to obscure. The productive work is making sure everything on the report is actually accurate, disputing what isn’t, and letting time do the rest.
The pattern to hold onto: if it’s inaccurate, you can fix it yourself for free — and if your proper dispute fails, that failure is a legal claim with fee-shifting attached. If it’s accurate, no one can remove it, whatever they charge. If you’ve been burned by a credit repair company, or a bureau has verified an error you know is wrong, a free case review will tell you where you stand — or call us at 804.592.0792.
This article is general information, not legal advice, and credit reporting questions are fact-specific. For advice about your situation, talk to a lawyer.