The Credit Repair Organizations Act (CROA) is a federal law that protects you from unfair and deceptive credit repair practices. Most importantly, it prohibits credit repair companies from charging you before they fully perform the services they promised. It also bans false or misleading promises, prohibits advising you to lie to credit bureaus or create a new credit identity, and requires companies to give you a written disclosure of your rights, a written contract with specific terms, and three business days to cancel. If a company violates CROA, you can sue to recover your money, damages, and attorney’s fees.

CROA exists because credit repair has long attracted scams that take upfront fees and deliver nothing. Knowing what the law requires makes it easy to tell a legitimate company from a bad one — and gives you real leverage if something goes wrong.

CROA gives you clear, enforceable protections when dealing with credit repair companies.

Key takeaways

• Credit repair companies can’t charge you until services are fully performed.
• They can’t make false promises or advise you to lie to credit bureaus or creditors.
• They must give you a written disclosure of your rights before you sign.
• Your contract must include specific terms, including the total cost and a cancellation notice.
• You can cancel within three business days without penalty.
• You can sue for violations and recover damages and attorney’s fees.

Why CROA Exists

Congress passed CROA in 1996 after years of complaints about companies that charged large upfront fees, promised to “erase bad credit,” and then did little or nothing. The law’s stated purposes are to make sure consumers get the information they need to make informed decisions about credit repair services and to protect the public from unfair or deceptive advertising and business practices.

The Federal Trade Commission and state attorneys general enforce CROA, and consumers can enforce it themselves through lawsuits.

Who CROA Covers

CROA applies to credit repair organizations — any person or business that, for payment, offers or performs services to improve a consumer’s credit record, history, or rating, or provides advice or assistance about doing so. That includes most for-profit credit repair companies.

Some organizations are exempt, including:

• Tax-exempt nonprofit organizations
• Creditors helping to restructure a debt owed to them
• Banks, credit unions, and other depository institutions

Being exempt from CROA doesn’t exempt a company from other consumer protection laws.

What CROA Prohibits

Five things credit repair companies can’t do.

Charging before services are performed

This is CROA’s most important protection. A credit repair organization can’t charge or receive any payment for services before those services are fully performed. That means no upfront fees for work that hasn’t been done.

In practice, legitimate companies bill after completing work for a period, rather than asking for money first.

False or misleading statements

Credit repair companies can’t make untrue or misleading statements about their services, including:

• Promising to remove accurate negative information
• Guaranteeing a specific score increase or result
• Misrepresenting what they can do or how quickly

Advising you to lie

A credit repair company can’t advise you to make statements that are untrue or misleading to a credit bureau or creditor — for example, telling you to dispute accurate information as “not mine.”

Helping you create a new identity

CROA prohibits advising you to alter your identification to hide your credit record. That includes schemes that use a credit privacy number (CPN) or an employer identification number in place of your Social Security number. Using a false identity on credit applications is illegal and can expose you to fraud charges.

Fraud and deception

Credit repair companies can’t engage in any act or practice that constitutes fraud or deception in connection with their services.

What CROA Requires

A written disclosure before you sign

Before you sign a contract, the company must give you a separate written statement titled “Consumer Credit File Rights Under State and Federal Law.” It explains, among other things, that:

• You have the right to dispute inaccurate information directly with the credit bureaus
• Neither you nor a credit repair company can remove accurate, current negative information
• You have the right to obtain your credit report and dispute errors yourself for free
• You can sue a credit repair company that violates the law
• You have the right to cancel your contract within three business days

The company must keep a copy of your signed acknowledgment of this disclosure for two years.

A written contract with specific terms

Your contract must include these terms.

The contract must include:

• The terms and conditions of payment, including the total amount of all payments
• A full and detailed description of the services to be performed
• An estimate of how long the services will take
• Any guarantees of performance
• The company’s name and principal business address
• A conspicuous statement of your right to cancel within three business days

Services can’t begin until you’ve signed the contract and the three-day cancellation period has passed.

Three business days to cancel

You can cancel the contract without penalty or obligation within three business days after signing. The company must give you a notice of cancellation form you can use. If you cancel, you owe nothing.

Your CROA rights, in the order they apply.

No waivers

Any attempt to have you waive your CROA rights is void. A contract that doesn’t comply with CROA is also treated as void and can’t be enforced by the company.

How to Enforce Your CROA Rights

If a credit repair company violates CROA, you can sue. You may recover:

• The greater of your actual damages or the amount you paid the company
• Punitive damages, as the court allows
• Attorney’s fees and court costs

Because CROA allows fee recovery, consumer attorneys often take these cases. Class actions are also possible.

You generally have five years to bring a CROA claim.

You generally have five years from the violation to file a lawsuit. You can also report violations to the Federal Trade Commission, the Consumer Financial Protection Bureau, and your state attorney general.

The Telemarketing Sales Rule Adds Protection

When credit repair services are sold over the phone, the FTC’s Telemarketing Sales Rule adds another layer: the company generally can’t collect payment until it has provided you with a consumer report, issued more than six months after the results were achieved, showing that the promised results happened.

California Adds Its Own Protections

California’s Credit Services Act also regulates credit repair companies serving California residents. It includes requirements such as registration with the state, a surety bond, specific contract provisions, and cancellation rights. If you live in California, you can ask a company to show proof of registration and bond. Where state law gives you more protection, you generally get the benefit of both.

How to Use CROA When Choosing a Company

Before signing with any credit repair company, check that it:

• Doesn’t ask for payment before doing the work
• Gives you the written disclosure before you sign
• Provides a written contract with all required terms
• Explains your three-day cancellation right and provides a cancellation form
• Doesn’t guarantee results or promise to remove accurate information
• Doesn’t suggest a CPN, a new identity, or disputing accurate information
• Is registered and bonded where required, such as in California

If any of those are missing, walk away.

What CROA Doesn’t Do

CROA regulates credit repair companies. It doesn’t:

• Regulate the credit bureaus themselves — that’s the Fair Credit Reporting Act
• Regulate debt collectors — that’s the Fair Debt Collection Practices Act
• Give anyone the power to remove accurate information from your credit report
• Apply to exempt organizations, such as nonprofits and banks

You Can Do It Yourself

CROA’s required disclosure says it plainly: you have the right to dispute inaccurate information yourself, for free. You can pull your reports at AnnualCreditReport.com, dispute errors with the bureaus and the companies that reported them, and follow up on the results. Our step-by-step guide on how to fix your credit walks through the process.

CROA in Practice: What Good Billing Looks Like

Because payment can’t come before the work, legitimate credit repair companies usually:

• Bill after each period of work is completed, such as at the end of a month after disputes and letters have been sent
• Describe the work performed in each billing period
• Stop billing promptly when you cancel

A company that asks for a large payment at signup “to get started,” or requires several months of payments in advance, is likely violating CROA.

An Example of a CROA Violation

Here’s an illustrative example. A consumer calls a company after seeing an ad promising to “erase bad credit in 30 days.” The company asks for a $499 “setup fee” by phone before doing anything, tells her not to contact the credit bureaus herself, and says it will dispute every negative item on her report. It never gives her a written disclosure or contract.

That scenario involves several likely violations: payment before services, misleading claims about results, advice that could lead to false disputes, and missing disclosures and contract terms. She could cancel, dispute the charge with her card issuer, report the company to the FTC and her state attorney general, and talk to a consumer attorney about recovering what she paid and more.

CROA and Online Credit Repair Services

CROA applies whether a company operates in person, by phone, or entirely online. Apps and websites that offer to dispute items or improve your credit for a fee must follow the same rules: no payment before services, the required disclosure, a compliant contract, and a three-day cancellation right. Electronic signatures and online forms don’t change those obligations.

What About “Credit Coaching” or “Education”?

Some companies describe their services as coaching or education to avoid CROA. But CROA covers anyone who, for payment, provides advice or assistance about improving your credit record, history, or rating. Calling it coaching doesn’t necessarily take it outside the law. If a company charges you for help improving your credit, ask whether it complies with CROA.

How CROA Fits With Other Laws

Together, these laws protect you at every step: how your information is reported, how debts are collected, and how anyone you pay to help you behaves.

Questions to Ask Any Credit Repair Company

Use these to test whether a company follows CROA:

• When exactly will you charge me, and for what work?
• Can I see the “Consumer Credit File Rights” disclosure before I sign?
• Does your contract state the total cost and a timeframe?
• How do I cancel, and where is the cancellation form?
• Will you dispute only information that’s inaccurate, incomplete, or unverifiable?
• Are you registered and bonded in my state, if required?

A legitimate company will answer every question clearly and in writing.

Common Myths About CROA

• “CROA means credit repair is illegal.” No. It regulates credit repair and sets rules companies must follow.
• “A company can charge a small upfront fee.” Payment generally can’t be collected before services are fully performed, regardless of the amount.
• “CROA protects me from debt collectors.” Debt collectors are covered by the Fair Debt Collection Practices Act instead.
• “If I signed a waiver, I can’t sue.” CROA rights can’t be waived, and waivers are void.
• “CROA only applies to big companies.” It applies to any covered credit repair organization, regardless of size.

Keep Your Records

If you hire a credit repair company, keep copies of the disclosure, the contract, the cancellation notice, every invoice, and every communication. If something goes wrong, those documents are the foundation of any complaint or lawsuit.

What Happens When the FTC Enforces CROA

The Federal Trade Commission has brought many cases against credit repair companies over the years, often for charging upfront fees and making false promises. Outcomes can include court orders stopping illegal practices, bans on operating in the industry, and refunds to consumers. State attorneys general bring similar cases. These actions are one reason legitimate companies take CROA seriously — and one reason to report violations when you see them.

How to File a Complaint

• Federal Trade Commission: ReportFraud.ftc.gov
• Consumer Financial Protection Bureau: consumerfinance.gov/complaint
• Your state attorney general: most have online complaint forms
• California residents: the Attorney General’s office also handles credit services registration

Include the company’s name, what you were promised, what you paid, and copies of your documents.

If You Paid a Credit Repair Company Upfront

• Ask for a refund in writing, citing CROA’s prohibition on payment before services.
• Dispute the charge with your card issuer if you paid by card.
• Cancel any recurring payments.
• Report the company to the FTC and your state attorney general.
• Talk to a consumer attorney about recovering what you paid, and more.

A Simple CROA Checklist

• I received the written disclosure before signing
• My contract lists the total cost, services, timeframe, and any guarantees
• My contract includes the company’s name and address
• I received a notice of cancellation form
• I haven’t been asked to pay before services were performed
• No one has promised to remove accurate information or suggested a new identity

Frequently Asked Questions

Can credit repair companies charge upfront fees?

No. Under CROA, a credit repair organization can’t charge or receive payment before it fully performs the services it agreed to provide.

How long do I have to cancel a credit repair contract?

Three business days after signing, without penalty. The company must give you a notice of cancellation form.

What must a credit repair contract include?

The total cost and payment terms, a detailed description of services, an estimated timeframe, any guarantees, the company’s name and address, and a conspicuous statement of your right to cancel.

Can a credit repair company guarantee results?

Companies can’t make false or misleading statements about results, and no one can legally remove accurate, current negative information. Be wary of guarantees.

What can I recover if a company violates CROA?

The greater of your actual damages or the amount you paid, plus possible punitive damages and attorney’s fees.

Does CROA apply to nonprofit credit counselors?

Tax-exempt nonprofit organizations are exempt from CROA, although other laws may apply.

Is using a CPN legal?

No. Using a credit privacy number in place of your Social Security number on credit applications is illegal, and CROA prohibits credit repair companies from advising it.

Can a credit repair company charge a monthly fee?

Yes, as long as the fee is charged only after the services for that period are fully performed and the contract discloses the terms.

What if I didn’t get the written disclosure?

That’s a CROA violation. Keep a record of what you did receive and consider talking to a consumer attorney.

Can I cancel after three days?

Your guaranteed penalty-free cancellation right lasts three business days. Many contracts allow cancellation later with notice; check your contract.

Does CROA apply if I found the company online?

Yes. CROA applies regardless of how the company markets or delivers its services.

Is it a violation if a company promises a specific score?

Promising a specific score or guaranteed removal of accurate information can be a false or misleading statement, which CROA prohibits.

Can I sue if I canceled and still got charged?

Yes, you may have a claim. Keep your cancellation notice and proof of the charge, dispute the charge with your card issuer, and talk to a consumer attorney.

Can a credit repair company keep my money if it did some work?

It can charge only for services actually performed under the contract, and only after they’re performed. If you were charged in advance, you may be entitled to a refund.

Does CROA require a company to get results?

No. CROA regulates how companies operate and what they can promise. It doesn’t require specific outcomes, which is why guarantees are a red flag.

Does CROA apply to attorneys?

Some attorneys offering credit repair services may be covered depending on how they operate. Ask any attorney or firm whether they comply with CROA.

Can a company require me to use its credit monitoring?

It can offer monitoring, but any fees must be disclosed in the contract and can’t be charged for credit repair services before they’re performed.

Does CROA cover credit repair for businesses?

CROA protects consumers. Services aimed at improving a business’s credit may not be covered, but services that affect your personal credit generally are.

Can I cancel by email?

The contract should explain how to cancel. Using the company’s notice of cancellation form and keeping proof of when you sent it is the safest approach.

Does CROA require a company to explain what it will dispute?

The contract must include a full and detailed description of the services. Ask for specifics.

The Bottom Line

The Credit Repair Organizations Act protects you from the most common credit repair abuses: upfront fees, false promises, advice to lie, and new-identity schemes. It requires a written disclosure, a detailed written contract, and a three-day cancellation right, and it lets you sue when a company breaks the rules. Use it as a checklist before you sign with anyone — and remember you can always dispute errors yourself for free, using the same process any company would use on your behalf.

For more on how the process works, see our guide on how to fix your credit.

Want to Know Your Options?

Strong Credit Report has helped consumers across California and nationwide since [year] review their credit reports and dispute errors. Your first consultation is free, and we’ll tell you honestly whether you need our help or can do it yourself.

Schedule a free consultation or call 800-603-8045.

Strong Credit Report is a credit repair organization as defined under the Credit Repair Organizations Act. You have the right to dispute inaccurate information in your credit report yourself at no cost. We cannot guarantee specific results or the removal of accurate information. This article is general information, not legal advice.