The Credit Repair Organizations Act: Your Rights, in Plain English

What the Credit Repair Organizations Act Is

The Credit Repair Organizations Act (CROA) is a federal law — Title IV of the Consumer Credit Protection Act, codified at 15 U.S.C. §§ 1679–1679j — that regulates companies selling credit repair services. Congress passed it after finding that some credit repair organizations advertised untrue or misleading claims and engaged in practices harmful to consumers in financial difficulty.

CROA applies to any person or business that uses commerce to sell, provide, or perform services intending to improve a consumer's credit record, history, or rating. That covers large national brands and one-person outfits alike. Note the boundary: nonprofit credit counselors who do not sell credit repair are not CROA 'credit repair organizations,' which is one reason legitimate counseling is structured so differently.

Right 1: No Payment Until Services Are Completed

CROA prohibits a credit repair organization from requesting or receiving any payment — or other valuable consideration — for services until they are fully performed. This is the provision the entire industry's billing structure bends around, and the reason so many companies bill 'monthly in arrears' or charge a 'setup fee' only after initial work.

If a company demands money before performing its promised services, that demand is illegal no matter what the contract calls it. Some companies also structure monthly payment plans specifically to avoid the advance-fee prohibition; the CFPB advises consumers to treat all forms of upfront payment before services are completed as illegal.

Right 2: A Written Contract With Required Disclosures

Before you sign, CROA requires a detailed written contract that states: the payment terms and total cost; a full and detailed description of the services to be performed; the date the services will be performed or the time needed to complete them; the company's complete name and principal business address; and an express statement of your right to cancel.

The contract must also include specific CROA-mandated statements: that you are not required to pay anything until the services are performed, and — in the separate disclosure document required before you sign — notices that accurate credit information cannot be changed, that you can dispute information yourself at no cost, and that you have the right to sue a credit repair organization that violates the law. A company that skips these disclosures is violating the statute, not cutting corners.

Right 3: Cancel Within Three Business Days

CROA gives you an unconditional right to cancel the contract, without any charge or obligation, until midnight of the third business day after you sign it. The company must disclose this right and provide the cancellation procedure. You do not need a reason, and you do not owe a fee.

Beyond the three-day window, you can generally terminate per the contract's terms — and the CFPB has reminded customers of large credit repair companies that they have the right to terminate services at any time and for any reason. If a company makes cancellation difficult or keeps charging after you cancel, that is a complaint to the CFPB and your state attorney general.

What CROA Prohibits the Company From Doing

Beyond billing and disclosure rules, CROA bans the conduct that defines scam operations: making untrue or misleading representations about what the company can achieve; advising or advising-and-assisting you to make statements that are untrue or misleading to a consumer reporting agency — which covers the instruction to dispute information you know is accurate; and promising a 'new credit identity' or any scheme to conceal accurate history.

These prohibitions have teeth. The FTC and CFPB have brought enforcement actions resulting in settlements, bans, and refunds — including cases against some of the largest companies in the industry. If a pitch involves any of the tactics above, our [[/learn/credit-repair-red-flags|red flags guide]] explains how to document and report it.

If a Company Violates CROA

CROA gives you a private right of action: you can sue in federal court and recover actual damages, punitive damages as the court allows, and reasonable attorneys' fees for negligent violations — plus, for willful violations, double the amount of money you paid, statutory punitive damages, and fees. Class actions are also permitted under the statute.

You do not have to sue to get results, though. Complaints to the Consumer Financial Protection Bureau are forwarded to the company and feed the enforcement record, and the FTC takes referrals from state enforcers. And remember the practical remedy that always exists: the disputes themselves are free to file, as our [[/learn/how-to-dispute-credit-report-error|dispute guide]] and [[/learn/credit-bureau-contact-information|bureau contact directory]] show — so a bad company costs you money, not your ability to finish the job yourself.

Frequently asked questions