What Credit Repair Companies Can and Can't Legally Do

Two federal laws govern what credit repair companies can do. The Credit Repair Organizations Act (CROA) regulates how companies operate, while the Fair Credit Reporting Act (FCRA) defines the dispute rights they exercise on your behalf.

Under CROA, credit repair companies must give you a written contract before starting work. They cannot charge upfront fees before performing services. They must tell you your right to dispute errors yourself for free. And they must give you a 3-day cancellation window after signing.

The FCRA gives every American — and by extension, any representative they authorize — the right to dispute inaccurate information on their credit reports. This is the legal basis for everything credit repair companies do. They send dispute letters to credit bureaus and creditors, challenging items that are inaccurate, outdated, or unverifiable.

These laws exist because the credit repair industry attracted bad actors in the 1990s. The FTC and CFPB actively enforce both laws, and violations can result in significant fines.

Dispute inaccurate items on your behalf. This is the core service. They analyze your credit reports, identify errors or questionable items, and send dispute letters to the bureaus. Common disputes include: wrong account balances, accounts that aren't yours (identity theft or mixed files), paid debts still showing as unpaid, and items past the 7-year reporting window.

Negotiate with creditors. Some companies offer debt validation — forcing the original creditor to prove the debt is yours and the amount is correct. If the creditor can't produce documentation, the item must be removed.

Provide guidance on credit-building. Many companies advise you on strategies to improve your score alongside the dispute process: reducing utilization, becoming an authorized user, or opening secured credit cards.

Send goodwill letters. For accurate negative items (like a single late payment on an otherwise perfect account), some companies write goodwill letters to creditors requesting removal as a courtesy. This isn't a legal right — it's a request — but it works more often than consumers expect.

Monitor your credit reports. Most companies pull your reports monthly or every 35-45 days to track progress, identify new items, and plan the next round of disputes.

They cannot remove accurate information. If you were genuinely 60 days late on your mortgage in March 2024, and the creditor can verify it, no company can force its removal. Anyone who promises to remove all negative items regardless of accuracy is lying.

They cannot create a "new credit identity." Some scam companies suggest applying for an EIN (Employer Identification Number) or a CPN (Credit Privacy Number) to start fresh. This is federal fraud. Using any number other than your Social Security Number on a credit application is a crime.

They cannot guarantee specific score increases. No company can guarantee your score will reach a specific number. Credit repair outcomes depend on what's actually on your report, whether items are truly inaccurate, and whether creditors respond to disputes. Ethical companies set realistic expectations.

They cannot charge before performing services. Under CROA, fees can only be collected after services are rendered. A company demanding $500 upfront before doing anything is breaking federal law.

They cannot prevent new negative items. Credit repair fixes your report's past. It doesn't prevent future late payments, new collections, or other negative marks. Your ongoing payment behavior determines your credit trajectory.

Credit repair has a gray zone that ethical companies navigate carefully.

Disputing accurate-but-old items. A collection from 2019 is technically accurate, but if the collector has gone out of business or sold the debt three times, they may not be able to verify it within 30 days. Disputing it is perfectly legal — the burden of proof is on the creditor, not on you. This is where experienced companies have an edge: they know which creditors rarely respond to disputes.

Multiple-round dispute strategies. Bureaus sometimes rubber-stamp disputes as "verified" without actually investigating. Companies then escalate by contacting the original creditor directly (called a "direct dispute"), filing complaints with the CFPB, or disputing with different language. This is legal but requires persistence.

Timing disputes strategically. Creditors are less responsive during quarter-end, tax season, and the holiday period. Some companies time their disputes to maximize the chance of non-response, which results in automatic deletion. This is legitimate strategy, not manipulation.

Challenging the credit bureaus' process. Under the FCRA, bureaus must conduct a "reasonable investigation" for each dispute. Simply forwarding your dispute to the creditor and accepting their response may not qualify. Some companies push back on this basis, and courts have sided with consumers in several cases.

Upfront fees. Any company demanding payment before performing services is violating CROA. Period. Legitimate companies charge monthly after work begins, or per-deletion after items are removed.

Guarantees of specific outcomes. "We guarantee your score will hit 750" or "We remove all negative items" are illegal promises under CROA, which prohibits misleading representations.

Telling you not to contact the bureaus yourself. Legitimate companies have nothing to hide. You should be able to pull your own reports, see what's been disputed, and track progress independently.

Suggesting a CPN or new identity. This is straight-up fraud. Walk away immediately and report the company to the FTC.

No written contract. CROA requires a written contract disclosing your cancellation rights, the total cost, the timeline, and a description of services. No contract = illegal operation.

Pressure to sign immediately. The law gives you three business days to cancel after signing. Companies that create urgency ("this price expires today!") are using pressure tactics that should make you suspicious of their legitimacy.

Before signing with any credit repair company, check these five things:

BBB rating and complaint history. The Better Business Bureau tracks complaint patterns. A low rating doesn't automatically mean "scam," but a pattern of complaints about unfulfilled promises is a red flag. Check both the rating and the actual complaint text.

FTC and CFPB enforcement actions. Search the company's name on ftc.gov and consumerfinance.gov. If they've been fined or sued by regulators, that's a hard no.

Fee structure transparency. Before signing, you should know exactly what you'll pay, when, and what happens if you cancel. If the pricing is vague or changes after you sign, walk away.

Realistic expectations in their sales pitch. The best companies explain that results vary, that accurate items usually can't be removed, and that the process typically takes 3-6 months. Companies that promise fast, guaranteed results are setting expectations they can't meet.

Your right to do this yourself. Any ethical company will tell you upfront that you can dispute items yourself for free. They should be selling their expertise and convenience, not pretending they have magical access.