Credit repair is one of the most scammed categories in all of consumer finance. The FTC reports thousands of complaints against credit repair operations every year, and state attorneys general routinely shut down companies that take thousands of dollars from desperate consumers and deliver nothing. This guide gives you the specific red flags to watch for — written by a legitimate credit repair practice that has seen every scam trick up close.
The Law That Makes Credit Repair Scams Illegal
Credit repair in the United States is regulated by the Credit Repair Organizations Act (CROA), a federal law passed in 1996. CROA sets out what legitimate credit repair companies can and cannot do. Most credit repair scams are scams specifically because they violate CROA. The core CROA rules:
- Credit repair companies may not collect any money in advance of performing the services
- They must provide a written contract before any work begins
- They must give you a 3-day right to cancel the contract without penalty
- They may not make false or misleading statements about your credit report or what they can do
- They may not guarantee specific results
- They may not advise you to misrepresent your identity (e.g., by applying for a new EIN in place of your SSN)
Every one of these rules maps directly to a specific scam tactic. If a company violates any of them, you’re looking at an illegal operation — not a gray-area aggressive marketer.
The 10 Red Flags That Mean Walk Away
1. They want money upfront
This is the most common violation. CROA is explicit: no fees before services are performed. Any company that asks for $500, $1,000, or $2,000 “to get started” is violating federal law. Legitimate companies bill after work has been completed, either monthly in arrears or on a per-result basis.
2. They guarantee a specific score or a specific removal
“We guarantee a 100-point increase in 30 days.” “We guarantee all collections removed.” Nobody can guarantee either of these things, ever, regardless of how skilled they are. Credit bureaus are independent third parties whose behavior cannot be controlled. Any guarantee like this is either a lie or a carefully-worded deception.
3. They tell you to dispute accurate information
Legitimate credit repair challenges inaccurate, unverifiable, or obsolete information. Scammers tell you to dispute everything — including debts you know you owe — in the hope that a few come off temporarily when furnishers don’t respond in time. This is short-term gaming and it almost always backfires when the items return, and it can expose you to accusations of filing a frivolous dispute.
4. They tell you to create a new credit identity (CPN scam)
The “Credit Privacy Number” or CPN scam is one of the most dangerous. Scammers tell you a CPN is a legal alternative to your Social Security number you can use to apply for credit. In reality, most CPNs are stolen Social Security numbers — often belonging to children, inmates, or the elderly. Using one is federal identity theft and SSN fraud, which can carry prison time. Any company suggesting a CPN or “new credit identity” is asking you to commit a felony.
5. They tell you to dispute in bulk or “shotgun” everything
Disputing every negative item on your report at once, with templated letters, is the mark of a company that doesn’t know what it’s doing. Bureaus flag these as frivolous, which reduces your leverage on real disputes and signals to the furnisher that you’re not a serious credit risk. Real credit repair is targeted.
6. There’s no written contract
Federal law requires a written contract disclosing the work to be performed, the total cost, and your cancellation rights. If a company wants to start “working on it” before you sign anything, or offers a purely verbal agreement, that’s a CROA violation.
7. They pressure you into signing immediately
“This offer expires today.” “We can only take on five new clients this week.” High-pressure sales tactics are designed to prevent you from exercising your 3-day cancellation right and from researching them online. Any company that won’t give you 24 hours to think is a company you should walk away from.
8. They can’t explain what they’re going to do
Ask specifically: “What laws are you using to dispute my items, and what’s the sequence?” A legitimate company can answer that question with specific references to FCRA Sections 609, 611, and 623, and can explain how they handle furnisher disputes and MOV requests. A scammer will hedge, say “our proprietary process,” or try to change the subject.
9. They ask for your account usernames and passwords
No legitimate credit repair company needs access to your bank accounts, credit card logins, or online credit monitoring usernames and passwords. They need your credit reports and your signed authorization — not your digital keys. Password requests are almost always a precursor to fraud or identity theft.
10. Reviews don’t exist or all look identical
Check the BBB, Google, Yelp, Trustpilot, and the CFPB complaint database. A legitimate operating credit repair company has a digital footprint — an address, real reviews with real narrative details, years of operating history. If the company exists only in Instagram DMs, walks away from review platforms, or has reviews that all sound suspiciously similar, it’s a front.
Common CROA Violations by Scammers
Here are the exact phrases that should end a sales call immediately:
- “We guarantee we’ll delete every collection”
- “We need half up front to get started”
- “We have a relationship with the bureaus”
- “We can delete anything — even accurate items”
- “We’ll set you up with a CPN so you can start fresh”
- “Our success rate is 100%”
- “You don’t need to see a contract — just sign up and we’ll start”
How to Verify a Legitimate Credit Repair Company
- Check your state’s CROA bonding requirement. Many states require credit repair companies to post a bond before operating. Verify with your state attorney general.
- Look up the company on the CFPB complaint database. Every major credit repair company has a file — look at the number and nature of complaints and, importantly, the company’s responses.
- Google the company name + “lawsuit” and + “FTC”. Active enforcement actions are a clear signal.
- Read the contract. A real CROA-compliant contract will explicitly state your 3-day right to cancel, the total cost, the work to be performed, and a statement of consumer rights.
- Ask for references from existing clients. A legitimate company will provide them.
If You’ve Been Scammed
- File a complaint with the FTC at reportfraud.ftc.gov
- File a complaint with the CFPB at consumerfinance.gov
- Contact your state attorney general’s consumer protection division
- If you paid by credit card, dispute the charge through your card issuer
- If you used a CPN or were advised to commit fraud, talk to a consumer protection attorney before taking any further action
For a complete framework on how to evaluate credit repair companies — including the specific questions that separate real operations from scams — see our 2026 guide to choosing a credit repair company. If you’d like to talk to a licensed, CROA-compliant practice about your specific situation, book a free consultation.
FAQ
What is CROA?
The Credit Repair Organizations Act, a 1996 federal law that regulates how credit repair companies operate. It prohibits upfront fees, requires written contracts, guarantees a 3-day right to cancel, and bans false or misleading claims about results.
Is a CPN legal?
No. The vast majority of CPNs sold to consumers are stolen Social Security numbers, often belonging to children or elderly people. Using one is federal identity theft and SSN fraud. Any company recommending a CPN is asking you to commit a felony.
Can a credit repair company guarantee removals?
No. Guarantees of specific outcomes are a direct CROA violation because credit repair depends on third-party bureaus and furnishers whose decisions cannot be controlled. Any guarantee of results is an immediate red flag.
Is it legal to pay a credit repair company in advance?
No. CROA prohibits credit repair companies from collecting any payment before services are performed. Companies that demand upfront fees are operating illegally.
How Much Do Credit Repair Scams Actually Cost Consumers?
Credit repair scams are not a minor inconvenience — they represent a significant and measurable financial drain on American households. According to the Federal Trade Commission, consumers reported losing more than $2.6 billion to imposter and financial fraud schemes in a recent reporting year, with credit repair fraud consistently ranking among the most-complained-about categories. State attorneys general across the country have secured judgments totaling tens of millions of dollars against individual credit repair operations, with some single cases resulting in settlements exceeding $3 million in consumer restitution.
The average consumer who falls victim to a credit repair scam loses between $1,000 and $3,000 in upfront fees — money paid before any service is performed, in direct violation of CROA. That financial loss compounds quickly when you factor in the missed opportunity to pursue legitimate options, the time lost waiting for results that never arrive, and in some cases, the legal exposure that comes from following a scammer’s illegal advice, such as the CPN scheme described above.
Vulnerable populations bear a disproportionate share of these losses. Consumers recovering from bankruptcy, those carrying significant medical debt, and individuals who have been denied a loan or a credit card due to poor credit are specifically targeted by scammers because their desperation makes them more likely to pay first and ask questions later. If you’ve recently been turned down for a financial product — a mortgage, a car loan, a credit card — and you’re searching urgently for a fix, you are exactly the profile that fraudulent credit repair organizations are advertising to reach.
What a Legitimate Credit Repair Company Can and Cannot Do
One of the most effective ways to avoid credit repair scams is to understand precisely what the law permits — and what it prohibits — so that no salesperson can overpromise without you recognizing it immediately.
What a Credit Repair Company Is Legally Allowed to Do
- Review your credit reports from all three major credit bureaus — Equifax, Experian, and TransUnion — and identify items that may be inaccurate, unverifiable, or outdated
- Submit written disputes on your behalf to the credit bureaus and directly to original furnishers under FCRA Sections 611 and 623
- Request method-of-verification documentation when a bureau claims it has verified a disputed item
- Communicate with creditors and collection agencies to negotiate goodwill adjustments or settlements, where applicable
- Educate and advise you on credit-building strategies to improve your credit over time, such as secured credit card use, credit utilization management, and payment history repair
- Monitor your credit reports for changes, new disputes, and furnisher responses throughout the engagement
What a Credit Repair Company Cannot Legally Do
- Guarantee removal of any specific item, regardless of how inaccurate it appears
- Promise a specific credit score increase within a defined timeframe
- Charge fees before the promised services have been fully performed
- Advise you to dispute accurate, verifiable information as a strategy
- Suggest, facilitate, or encourage you to create a new credit identity or use a Credit Privacy Number
- Begin any work before providing a written contract and disclosing your 3-day cancellation right
A reputable credit repair company will tell you all of this upfront. If the company you’re speaking with either doesn’t know these limitations or dismisses them, treat that as a disqualifying signal.
Your 3-Day Cancellation Right Under CROA — And Why Scammers Hide It
CROA mandates that every credit repair organization provide you with a written notice of your right to cancel any contract within three business days of signing — without penalty and without owing any fees. This right is non-negotiable. It cannot be waived by contract language, and any credit repair company that tells you otherwise is lying.
Legitimate credit repair companies provide this notice clearly, in writing, as part of the required contract disclosure. Scammers, on the other hand, bury it, skip it entirely, or use high-pressure closing tactics designed to ensure you feel emotionally and financially committed before the three-day window opens. Phrases like “we need to lock in your spot today” or “we can only guarantee this pricing if you sign now” are specifically designed to override your federally protected cooling-off period.
If you have signed a contract with a credit repair organization and you are within three business days of signing, you can cancel in writing without owing anything. Send your cancellation notice via certified mail with return receipt requested so you have proof of delivery. Keep a copy of everything.
How to Dispute Errors on Your Credit Reports — And What to Realistically Expect
Understanding the dispute process helps you evaluate whether a credit repair company is actually working or simply billing you for inaction. Under the Fair Credit Reporting Act, credit bureaus are required to investigate disputed items within 30 days — or 45 days if you provide additional documentation after the initial dispute. Furnishers (the creditors, lenders, or collection agencies that reported the item) must also conduct a reasonable investigation and report their findings back to the bureau.
Here is what a legitimate dispute timeline typically looks like:
- Days 1–5: Your credit reports are reviewed, inaccurate or unverifiable items are identified, and targeted dispute letters are prepared with supporting documentation
- Days 5–35: Disputes are submitted to the relevant credit bureaus and, where appropriate, directly to the furnisher under FCRA Section 623
- Days 30–45: The bureau completes its investigation and notifies you of the results — updated, deleted, or verified as accurate
- Days 45–90+: If items are verified but you believe the investigation was inadequate, escalated disputes, method-of-verification requests, or CFPB complaints may follow
Realistic outcomes depend entirely on the nature of the item being disputed. Inaccurate personal information, duplicate accounts, and accounts reported after the 7-year statute of limitations are highly disputable. Accurate negative items — a late payment you genuinely made, a collection on a debt you legitimately owe — are not removable through the dispute process, regardless of what any credit repair company promises you.
Real Cases: When Credit Repair Scams Get Prosecuted
The FTC and CFPB have both taken enforcement action against credit repair scams that collected millions of dollars from consumers before being shut down. In one notable FTC action, Financial Education Services (FES) and its affiliated entities were charged with operating a pyramid scheme disguised as a credit repair service, with the FTC alleging that the company collected fees from tens of thousands of consumers while delivering little to no actual financial benefit. The case resulted in a settlement requiring significant redress to harmed consumers.
In another case, the CFPB took action against a network of credit repair organizations that charged illegal advance fees, failed to provide required disclosures, and made deceptive claims about their ability to improve your credit. The bureau secured orders requiring restitution and banning the principals from the credit repair industry permanently.
These cases share a common pattern: consumers paid upfront, received templated dispute letters they could have sent themselves for free, and were strung along for months with vague progress reports. The financial damage was real. The credit improvement was not.
How to File a Complaint Against a Credit Repair Scam
If you believe you have been victimized by one of the many fraudulent credit repair companies operating today, take these steps immediately:
Step 1: File a Complaint with the CFPB
The Consumer Financial Protection Bureau accepts complaints against credit repair organizations at consumerfinance.gov/complaint. Provide all documentation — your contract, payment receipts, communications, and a clear timeline of what was promised versus what was delivered. The CFPB forwards complaints directly to the company and requires a response, and your complaint becomes part of the public Consumer Complaint Database.
Step 2: File a Complaint with the FTC
Report the company at ReportFraud.ftc.gov. The FTC uses these reports to identify patterns across multiple victims and build enforcement cases. Individual complaints may not trigger immediate action, but they contribute to the investigative record that leads to prosecutions like the ones described above.
Step 3: Contact Your State Attorney General
Most states have consumer protection divisions that handle credit repair fraud complaints. State-level enforcement can move faster than federal action, and many state laws provide additional protections beyond CROA. Find your state AG’s office through the National Association of Attorneys General at naag.org.
Step 4: Dispute Unauthorized Charges with Your Bank or Credit Card Company
If you paid via credit card or debit card, contact your financial institution immediately to dispute the charge. Explain that the services were not delivered as contracted. The Fair Credit Billing Act gives credit card holders specific rights to dispute charges for services not rendered, and this financial recovery step can happen independently of any regulatory complaint you file.
Step 5: Pull Your Credit Reports and Verify No New Damage Was Done
Some fraudulent credit repair organizations use access to your personal information to open new accounts or commit identity theft. Pull your credit reports immediately from AnnualCreditReport.com — the only federally authorized source for free credit reports — and review them carefully for any accounts or inquiries you do not recognize. If you find unauthorized activity, place a fraud alert or security freeze with all three credit bureaus immediately.
Taking these steps quickly maximizes your chances of financial recovery and helps protect other consumers from falling victim to the same operation.
Legitimate vs. Scam: A Side-by-Side Comparison
| Factor | Reputable Credit Repair Company | Credit Repair Scam |
|---|---|---|
| Fees | Billed after services are performed; no upfront payment required | Large upfront payment required before any work begins |
| Contract | Written contract provided before work starts, including 3-day cancellation notice | No written contract, or contract lacks required disclosures |
| Guarantees | Explains realistic outcomes; no score or removal guarantees | Promises specific point increases or guaranteed removal of all negatives |
| Dispute Strategy | Targeted disputes based on FCRA; only challenges inaccurate or unverifiable items | Bulk “shotgun” disputes filed on everything, including accurate information |
| Transparency | Can explain specific legal basis for each dispute; references FCRA sections by number | Vague about process; references “proprietary methods” without detail |
| Identity Advice | Never suggests altering your identity or using a CPN | May suggest a Credit Privacy Number or “new credit file” strategy |
| Verifiable History | BBB listing, Google reviews, CFPB complaint database record, physical address | Instagram or social-media-only presence; no verifiable business history |
| Your Credit Reports | Reviews your credit reports with you and explains findings in detail | May not review your actual credit reports at all before collecting fees |
Use this comparison as a checklist when evaluating any credit repair company you are considering. A single column mismatch is worth a follow-up question. Multiple mismatches mean you walk away.
Kevin Romero
Founder & CEO, Online Credit Repair
Kevin built Online Credit Repair after fixing his own credit — going from a 560 score to buying a home at a low interest rate and launching a 20-employee company. He knows firsthand how a better credit score unlocks real opportunities: homeownership, business credit lines, and financial freedom. Kevin and his team help clients exercise their rights under the FCRA and CROA to dispute inaccurate items and rebuild their credit the right way.
About Kevin & the team ·
Free consultation ·
@kevthecreditguy ·
Last reviewed: April 2026
