Credit Defense Hub

Credit Repair Scam Red-Flag Index

A numbered register of 29 credit repair red flags, the CROA section each one runs into, what a lawful contract must contain, and where to report a company.

Updated SEP 5, 2026Credit Defense Hub Editorial Team Pending professional review16 official sources

On this page

How this index works
Red flags in the money
Red flags in the promises
Red flags in the paperwork
Red flags in identity and documents
Red flags in pressure and contact
What a lawful credit repair contract must contain
The disclosure that comes before the contract
What the law provides when these rules are broken
How to report a credit repair company
Common mistakes to avoid
When to talk to a professional
Frequently asked questions
What is the single biggest red flag in credit repair?
Is it illegal for a credit repair company to charge before it does the work?
Can any company remove accurate negative information from a credit report?
What must a credit repair contract say?
How long is the cancellation window on a credit repair contract?
What is a CPN, and why does it appear on this list?
Where do I report a credit repair company?
Can a consumer sue a credit repair company?
Does a contract clause that waives my rights hold up?

Aviso de traducción

Esta página aún no está traducida. Se muestra la versión en inglés. Ver esta página en inglés

Most credit repair pitches are not creative. They reuse a small set of moves, and federal law names almost every one of them. This index numbers those moves so a reader can find one fast, see why it matters, and see the rule it runs into. It describes practices, not companies.

Short answer

Credit repair red flags cluster in five places: the money, the promises, the paperwork, the identity documents, and the pressure. The clearest single flag is a fee charged before the work is done, which the Credit Repair Organizations Act bans outright. The next clearest is any claim that accurate, current negative information can be removed.

How this index works

Each row has an ID, the red flag, why it matters, and the rule it runs into. Most rules come from the Credit Repair Organizations Act (CROA), 15 U.S.C. §§ 1679-1679j. A few come from state law or the Federal Trade Commission (FTC).

Two limits are worth stating up front. A red flag is a reason to slow down and check. It is not a legal ruling. Whether a company broke a rule is decided by a regulator or a court, not by a checklist.

CROA also applies to a "credit repair organization," and § 1679a(3) defines that by what a business does, not by its name. Three groups sit outside the definition: nonprofits exempt under section 501(c)(3), creditors restructuring a debt owed to them, and banks and credit unions.

One flag is enough to stop and check

These flags are not scored or weighted. A company can look polished, answer the phone, and still charge a setup fee at sign-up. CROA § 1679b(b) does not care about the amount or the label. It cares about the timing.

Red flags in the money

ID	Red flag	Why it matters	Rule it runs into
RF-01	Asks for payment before the promised work is done.	The fee buys a service that does not exist yet.	CROA § 1679b(b). No charge before a service is fully performed.
RF-02	Calls it a setup, first-work, audit, or activation fee and takes it at sign-up.	The label does not change the timing. The timing is the rule.	CROA § 1679b(b).
RF-03	Splits the price into monthly payments taken before that month's work is done.	The CFPB says plans built to collect early are still illegal.	CROA § 1679b(b), plus CFPB guidance.
RF-04	Sold by phone, then billed before showing proof of results.	The CFPB says a phone seller must first give you a consumer report showing the results, made more than six months after them.	Telemarketing Sales Rule, as described by the CFPB.
RF-05	Wants payment only by gift card, wire, crypto, or a cash app.	These rails leave no chargeback and a thin paper trail.	Not a CROA section. It still matters, because § 1679g measures part of a recovery by what was paid.
RF-06	Will not put the total price in writing.	A price that is never written down cannot be compared.	CROA § 1679d(b)(1). The contract must state the total of all payments.

Red flags in the promises

ID	Red flag	Why it matters	Rule it runs into
RF-07	Guarantees a credit score, or a number of points.	No business controls what a scoring model outputs.	CROA § 1679b(a)(3). No untrue or misleading claim about the services.
RF-08	Says it can clear accurate, current negative items.	The CFPB is blunt. No one can do this. Accurate items stay until they age off.	CROA § 1679b(a)(3). The § 1679c disclosure says the same thing.
RF-09	Promises a clean slate, a fresh start, or to erase bad credit.	The phrase implies deleting history that is true.	CROA § 1679b(a)(3). Texas § 393.304(1)(A) bars “erase bad credit” ads without a clear disclosure.
RF-10	Guarantees a deletion by a date.	An estimate is lawful. A promised result is not the same thing.	CROA § 1679d(b)(2)(B) allows an estimate. § 1679b(a)(3) governs the claim.
RF-11	Claims an insider or a back channel at the bureaus.	Disputes run the same process for everyone.	CROA § 1679b(a)(3).
RF-12	Sells a secret law or magic letter that forces deletion.	No statute compels deletion of accurate, verifiable data.	CROA § 1679b(a)(3). See our 609 letter explainer.
RF-13	Tells you not to contact the credit bureaus yourself.	Disputing is a free FCRA right. Steering you away protects the fee.	Listed by the FTC as a credit repair scam signal.

Red flags in the paperwork

ID	Red flag	Why it matters	Rule it runs into
RF-14	Starts work with no written, dated, signed contract.	Without the contract there is no lawful service.	CROA § 1679d(a)(1).
RF-15	The contract does not describe the services in detail.	Vague scope is how “we sent some disputes” becomes the deliverable.	CROA § 1679d(b)(2). Guarantees must be in writing too.
RF-16	The contract omits the company name and principal business address.	An unnamed counterparty is an unreachable one.	CROA § 1679d(b)(3).
RF-17	No bold-face cancellation statement next to the signature line.	The warning has to sit where the pen is.	CROA § 1679d(b)(4).
RF-18	No Notice of Cancellation form, provided in duplicate.	The form is what makes the right usable.	CROA § 1679e(b).
RF-19	No separate rights disclosure before the contract.	It must be its own document, not a clause inside the contract.	CROA § 1679c(a) and (b). Your signed copy is kept for two years, § 1679c(c).
RF-20	Asks you to waive rights or promise not to complain.	The statute expects this move and blocks it.	CROA § 1679f. A waiver is void, asking for one is a violation, and a noncompliant contract is void.

Red flags in identity and documents

ID	Red flag	Why it matters	Rule it runs into
RF-21	Sells a CPN or credit privacy number as a new credit identity.	The FTC warns you will not get the credit, and could face fines or prison.	CROA § 1679b(a)(2). See our CPN explainer.
RF-22	Tells you to use an EIN in place of your Social Security number.	Same mechanism as RF-21, different number.	CROA § 1679b(a)(2).
RF-23	Tells you to report identity theft for accounts that are yours.	A false report to a federal agency is its own exposure.	Listed by the FTC as a credit repair scam signal.
RF-24	Coaches you to call an accurate item inaccurate.	The dispute goes to a bureau, which is where the limit bites.	CROA § 1679b(a)(1)(A).
RF-25	Coaches you to overstate income on a credit application.	The statement goes to a lender you are applying to.	CROA § 1679b(a)(1)(B). Also an FTC scam signal.

Red flags in pressure and contact

ID	Red flag	Why it matters	Rule it runs into
RF-26	Unsolicited call, text, or message offering to fix your credit.	Phone sales add the stricter condition described in RF-04.	Telemarketing Sales Rule, as described by the CFPB.
RF-27	Pushes a decision today, or says the price ends tonight.	Urgency removes the reading time the statute builds in.	CROA § 1679d(a)(2). No services before the 3-business-day period ends.
RF-28	Will not say whether it is registered or bonded in your state.	Several states add registration, licensing, or bonding.	State credit services organization statutes. See our verification guide.
RF-29	Charges a cancellation fee, or says you cannot cancel.	The right is unconditional inside the window.	CROA § 1679e(a). Cancel without penalty or obligation.

Why the index stops at practices

This site never attaches the word scam to a named company. Enforcement agencies name companies after an investigation and a filing. On August 10, 2026, the FTC announced that a federal court had temporarily halted a credit repair operation run through 17 related companies, which the agency alleges took nearly $200 million through illegal advance fees and false promises. Those are allegations, not findings. The pattern is what this index is for.

What a lawful credit repair contract must contain

CROA sets a floor. A contract that misses any of these is, under § 1679f(c), treated as void and unenforceable.

The federal contract floor

A written, dated contract for the purchase of the services, signed by the consumer — § 1679d(a)(1).
No services performed before the end of the 3-business-day period that begins the day the contract is signed — § 1679d(a)(2).
The terms and conditions of payment, including the total amount of all payments to the organization or to anyone else — § 1679d(b)(1).
A full and detailed description of the services, including all guarantees of performance — § 1679d(b)(2).
An estimate of the date performance will be complete, or the length of time the work will take — § 1679d(b)(2)(B).
The organization’s name and principal business address — § 1679d(b)(3).
A conspicuous bold-face cancellation statement, placed immediately next to the signature space — § 1679d(b)(4).
A Notice of Cancellation form, in duplicate, with the heading and bold-face wording the statute spells out — § 1679e(b).
A copy of the completed contract, the disclosure statement, and every other document you were asked to sign, handed to you at signing — § 1679e(c).

The disclosure that comes before the contract

Before any contract is signed, § 1679c(a) requires a separate written statement headed "Consumer Credit File Rights Under State and Federal Law." Section 1679c(b) says it must be its own document, not folded into the contract or the marketing material. Section 1679c(c) requires the organization to keep the consumer's signed copy for two years.

In plain English

The most useful thing about that disclosure is what it says. In the statute's own words, neither you nor any credit repair company "has the right to have accurate, current, and verifiable information removed from your credit report." A company selling removal of accurate items is legally required to hand you a document that contradicts its own pitch. If the document never arrives, that is RF-19. If it arrives and the pitch continues anyway, that is RF-08.

What the law provides when these rules are broken

Short answer

CROA § 1679g lets a consumer sue anyone who fails to comply. Recovery is the sum of three parts: actual damages, measured as the greater of the actual harm or any amount paid to the organization; punitive damages in an amount the court allows; and the costs of the action plus reasonable attorney's fees in a successful case.

Section 1679g(b) tells a court what to weigh when setting punitive damages: how often and how persistently the company failed to comply, the nature of the noncompliance, how intentional it was, and in a class action, how many consumers were affected. Section 1679f adds that a waiver signed by the consumer is void and cannot be enforced by any court.

How to report a credit repair company

Save the paper first
Keep the contract, the disclosure statement if you got one, every receipt and bank or card statement, the ads or messages that made the offer, and a dated note of what was said on each call. Section 1679g measures part of the recovery by what was paid, so the payment record matters.
Submit a CFPB complaint
Complaints go through consumerfinance.gov/complaint. Credit repair sits under the "Debt and credit management" category. The CFPB says it sends more than 100,000 complaints a week to companies and that most respond within 15 days. Complaints appear, de-identified, in its public database.
Report the practice to the FTC
ReportFraud.ftc.gov is the FTC's intake for scams and deceptive practices. The FTC does not resolve individual disputes, but reports feed the enforcement pattern behind actions like the one in August 2026.
Contact your state attorney general or consumer protection office
Many states regulate credit services organizations directly and can act where federal agencies do not. USAGov lists every state and territory office at usa.gov/state-consumer.
Ask about the private right of action
CROA § 1679g allows a private suit with costs and attorney's fees. Consumer attorneys often review these on contingency, and legal aid may help where income qualifies.

One ordering detail on bureau complaints

The CFPB states that a complaint against a credit reporting company about inaccurate or incomplete information must be preceded by a dispute filed directly with that company, citing 15 U.S.C. § 1681i(a) and (e). That rule is about the bureaus. A complaint about a credit repair company's conduct is a different track.

Common mistakes to avoid

Reading the advance-fee ban as a rule about big fees. A $45 setup fee taken at sign-up sits in the same section as a $2,000 one.
Treating a polished website, a phone line, or a paid ad slot as verification. None of them is a registration, a bond, or a license.
Signing first and reading the disclosure later. The statute requires the separate disclosure before the contract is signed, for a reason.
Letting the 3-business-day cancellation window pass while waiting for a call back.
Throwing away the contract after canceling. It is the evidence that the contract did or did not meet § 1679d.
Assuming a company outside your state is unreachable. CROA applies to any organization using interstate commerce or the mails, and several state statutes reach out-of-state solicitation.
Blanket-disputing accurate items on a company’s advice. Disputes with no specific error can be treated as frivolous, which wastes the process.

When to talk to a professional

Strongly consider talking to a professional

If money was paid before work was performed, if a promised deletion never had a legal basis, or if a contract skipped the written terms CROA requires, a consumer attorney can explain what remedies apply. Section 1679g provides for actual damages, punitive damages, and attorney's fees in a successful action, which is why many consumer lawyers review these matters at no upfront cost. Free help may be available through legal aid. Anyone who shared a Social Security number with an operation selling new credit identities can start recovery at IdentityTheft.gov. This page is general education, not legal advice about any particular contract.

Frequently asked questions

What is the single biggest red flag in credit repair?

A fee collected before the promised work is finished. The Credit Repair Organizations Act, 15 U.S.C. § 1679b(b), bars a credit repair organization from charging or receiving money for a service before that service is fully performed. The amount does not matter and neither does the label. A setup fee taken at sign-up is the same violation as a large advance payment.

Is it illegal for a credit repair company to charge before it does the work?

Yes. CROA § 1679b(b) prohibits charging or receiving any money for a service before the service is fully performed. The CFPB adds that some companies structure monthly payment plans to try to avoid the rule, and that all forms of upfront payment before services are completed are illegal. Lawful billing follows completed work rather than preceding it.

Can any company remove accurate negative information from a credit report?

No. The CFPB states that you generally cannot have negative information removed if it is accurate. Accurate, current, verifiable items stay until they age off, which is about seven years for most negative information and ten years for a Chapter 7 bankruptcy. The disclosure CROA § 1679c requires the company itself to hand you says the same thing.

What must a credit repair contract say?

Under CROA § 1679d(b), the written contract must state the terms of payment including the total amount of all payments, give a full and detailed description of the services with all guarantees of performance, estimate the completion date or the length of the work, name the organization and its principal business address, and carry a bold-face cancellation notice beside the signature space.

How long is the cancellation window on a credit repair contract?

Three business days. CROA § 1679e(a) lets a consumer cancel without penalty or obligation at any time before midnight of the third business day that begins after the contract is signed. Section 1679e(b) requires the company to attach a duplicate "Notice of Cancellation" form. Section 1679d(a)(2) separately bars services before that period ends.

What is a CPN, and why does it appear on this list?

A CPN, or credit privacy number, is sold as a replacement identity number for credit applications. The FTC warns that using a number other than your own will not get you credit and can bring fines or prison. CROA § 1679b(a)(2) prohibits statements intended to alter your identification in order to conceal accurate, non-obsolete adverse information.

Where do I report a credit repair company?

Three places, and they are not exclusive. The CFPB takes complaints at consumerfinance.gov/complaint under the "Debt and credit management" category. The FTC takes reports at ReportFraud.ftc.gov. Your state attorney general or consumer protection office, listed at usa.gov/state-consumer, may regulate credit services organizations directly under state law.

Can a consumer sue a credit repair company?

CROA § 1679g creates a private right of action against any person who fails to comply. Recovery combines actual damages, measured as the greater of actual harm or any amount paid to the organization, plus punitive damages the court allows, plus costs and reasonable attorney's fees in a successful case. Section 1679f makes any waiver of these rights void.

Does a contract clause that waives my rights hold up?

No. CROA § 1679f treats any consumer waiver of a protection or right under the statute as void and unenforceable by any federal or state court. It goes further: an attempt to obtain such a waiver is itself a violation. A contract that does not comply with the statute is also treated as void under § 1679f(c).

Terms used on this page

CROA (Credit Repair Organizations Act)FCRA (Fair Credit Reporting Act)Demanda por una deuda (Complaint)

Sources

This page is based on the following official and authoritative sources. Always check the source itself for the most current rules.

Educational information — not advice

This topic involves court deadlines and rights you can permanently lose.

This page provides general educational information about credit, debt, and consumer protections. It is not legal advice, financial advice, or credit repair services, and reading it does not create any professional relationship. Laws, procedures, deadlines, and dollar amounts vary by state and change over time.

Before acting or deciding not to act, strongly consider consulting a licensed attorney in your state. If cost is a concern, legal aid organizations may help for free. See our full disclaimer.