Your Legal Rights: FCRA and CROA Explained in Plain English
A plain-language guide to the federal laws that protect your credit rights — the Fair Credit Reporting Act and the Credit Repair Organizations Act.
Why These Laws Exist
Before 1970, credit bureaus operated with almost no oversight. They collected whatever information they wanted, often without verification, and consumers had no right to see their own reports — let alone dispute errors. Creditors reported inaccurate information with zero consequences, and consumers had no way to fight back.
The Fair Credit Reporting Act (FCRA) was enacted in 1970 and has been strengthened several times since. It's the foundation of all credit repair — the law that gives you the right to see your report, dispute errors, and force bureaus to investigate.
The Credit Repair Organizations Act (CROA) came later, in 1996, after the credit repair industry attracted scammers. It regulates how companies that offer credit repair services must operate, what they can charge, and what they can promise.
Together, these two laws are every consumer's most powerful tools for credit repair. You don't need to be a lawyer to use them — but understanding your rights puts you in a much stronger position.
FCRA: Your Rights With Credit Bureaus
The FCRA gives you specific, enforceable rights:
Right to access your report. You can get a free copy of your credit report from each of the three major bureaus (Equifax, Experian, TransUnion) once every 12 months through AnnualCreditReport.com. During and after COVID, the bureaus extended this to weekly free access.
Right to know who pulled your report. Your credit report includes a section listing every entity that accessed your information. Hard inquiries (from credit applications) stay for 2 years. You have the right to know who's looking at your data.
Right to dispute any information. This is the core of credit repair. You can dispute any item on your credit report that you believe is inaccurate, incomplete, or unverifiable. The bureau then has 30 days to investigate (45 days if you provide additional documentation during the investigation).
Right to a reasonable investigation. The bureau can't just rubber-stamp your dispute. They must conduct a "reasonable investigation" — which means actually checking with the creditor, not just re-verifying what's already in their system.
Right to have unverified items removed. If the creditor can't verify the disputed item within the investigation period, the bureau must delete it. This isn't optional — it's the law.
Right to add a consumer statement. If a dispute doesn't result in removal, you can add a 100-word statement to your report explaining your side. This is visible to anyone who pulls your report.
FCRA: Creditor Responsibilities
The FCRA doesn't just regulate bureaus — it also puts obligations on creditors (called "furnishers" in legal terms):
Accuracy obligation. Creditors must report accurate information to the bureaus. Reporting a balance that's wrong, a payment status that's incorrect, or an account that isn't yours is a violation.
Investigation obligation. When a bureau forwards your dispute to the creditor, the creditor must investigate and respond. They can't ignore disputes. If they don't respond within the investigation window, the item must be removed.
Correction obligation. If a creditor discovers they've been reporting inaccurate information, they must correct it with all bureaus they report to — not just the one that received the dispute.
Notice obligation. If a creditor takes adverse action based on your credit report (denying you credit, raising your interest rate), they must tell you which bureau's report they used so you can check it for errors.
Direct dispute right. You can dispute directly with the creditor (not just through the bureau). Under Section 623 of the FCRA, creditors must investigate direct disputes and correct any errors. This is a powerful alternative when bureau disputes get rubber-stamped.
CROA: What Credit Repair Companies Owe You
The Credit Repair Organizations Act sets strict rules for companies that offer to improve your credit:
Written disclosure before signing. Before you sign anything, the company must give you a document called the "Consumer Credit File Rights Under State and Federal Law." This tells you that you have the right to dispute items yourself for free, that you can sue the company if they violate CROA, and that you have 3 business days to cancel.
Written contract. The company must provide a written contract that includes: the total cost of services, a description of each service to be performed, an estimate of how long the process will take, the company's business address, and your 3-day cancellation right.
No upfront fees. This is one of the most important provisions. A credit repair company cannot collect any fee until the promised services have been "fully performed." In practice, most legitimate companies charge monthly after work begins, not before.
No misleading claims. The company cannot make false or misleading statements about what they can do. Promising specific score increases, guaranteeing removal of all negative items, or claiming special access to bureaus are all violations.
Three-day cancellation right. You have 3 business days after signing the contract to cancel without penalty. The company must honor this without argument.
How to Use These Laws in Practice
Knowing your rights is one thing. Using them effectively is another.
Filing a bureau dispute. Write a letter (not an online form — certified mail creates a legal paper trail) identifying the specific item, explaining why it's inaccurate, and requesting investigation. Include any supporting documentation. Send to the bureau's dispute address. Keep copies of everything.
Filing a direct dispute with a creditor. Section 623 of the FCRA gives you the right to dispute directly with the company that's reporting the information. Send a letter to the creditor's address (not the collection agency — the original creditor) explaining the error and providing documentation.
Requesting your dispute investigation results. After the bureau completes its investigation, they must send you the results in writing within 5 business days. They must also send you an updated credit report if changes were made.
Escalating to the CFPB. If a bureau or creditor doesn't respond to your dispute or conducts a sham investigation, file a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov. CFPB complaints get priority attention — companies know that CFPB complaints trigger regulatory scrutiny.
Suing for violations. Both the FCRA and CROA include private right of action — meaning you can sue in federal court. Under FCRA, you can recover actual damages, attorney's fees, and in cases of willful violations, statutory damages of $100-$1,000 per violation. This is why credit repair attorneys often work on contingency.
Common Violations and How to Spot Them
Bureau violations: - Not investigating your dispute within 30 days - Reinserting a previously deleted item without notifying you (they must notify you within 5 business days) - Including outdated information (most negative items must be removed after 7 years, bankruptcies after 7-10 years) - Mixing your file with someone else's information
Creditor violations: - Reporting a debt as owed after it's been discharged in bankruptcy - Continuing to report a disputed item as "verified" without actually investigating - Failing to report an account as disputed while a dispute is pending - Reporting to the bureaus after you've sent a cease-and-desist letter (for debt collectors)
Credit repair company violations: - Charging any fee before services are performed - Not providing the required written disclosures - Promising to remove accurate negative information - Suggesting you create a new credit identity (CPN fraud) - Not honoring the 3-day cancellation right
What to do if you spot a violation: Document everything. Keep copies of all correspondence with dates. File complaints with the CFPB and your state attorney general. Consult a consumer rights attorney — many offer free consultations and work on contingency for FCRA cases.
Frequently Asked Questions
What happens if a credit bureau ignores my dispute?
If a bureau fails to investigate within 30 days, they are in violation of the FCRA. File a complaint with the CFPB immediately. You also have the right to sue for damages. Document the timeline carefully — when you sent the dispute (use certified mail receipt) and when the 30-day window expired.
Can I sue a credit repair company that charged me upfront?
Yes. Under CROA, charging fees before services are performed is illegal. You can sue for actual damages, punitive damages, and attorney's fees. You can also file complaints with the FTC and your state attorney general.
Do these laws apply to all three credit bureaus equally?
Yes. The FCRA applies equally to Equifax, Experian, and TransUnion, as well as specialty bureaus like ChexSystems, LexisNexis, and NCTUE. Each must accept disputes and investigate within the same 30-day window.
Harvey Brooks
Senior Financial Editor
Harvey Brooks is a consumer finance writer specializing in credit repair, personal lending, and debt management. With over a decade covering the industry, he makes financial literacy accessible to everyday Americans. About our editorial team.
Financial Terms Explained (11 terms)
New to credit and lending? Here are the key terms used on this page, explained in plain language with real-number examples.
Credit & Scoring
Credit Score
A 3-digit number (300-850) that summarizes how reliably you've handled borrowed money. Higher scores mean lower risk to lenders and better loan terms for you.
Your credit score determines whether you get approved and at what rate. A 100-point difference can mean thousands of dollars more or less in interest over a loan's life.
Example
On a $250,000 30-year mortgage: a 760 score gets you 6.2% ($1,536/month). A 660 score gets 7.4% ($1,729/month). Over 30 years, the lower score costs you $69,480 more.
FICO Score — Fair Isaac Corporation Score
The most widely used credit scoring model, created by Fair Isaac Corporation. 90% of top lenders use FICO scores for lending decisions.
FICO has many versions (FICO 8, 9, 10). Mortgage lenders still use older versions (FICO 2, 4, 5), so your mortgage score may differ from what free apps show you.
Example
Your FICO 8 score (used for credit cards) is 740. Your FICO 5 score (used for mortgages) is 725 because it weighs collections differently. Same credit history, different scores.
Credit Report — Consumer Credit Report
A detailed record of your borrowing history maintained by credit bureaus. It lists every loan, credit card, payment history, collection, and public record tied to your name.
Errors on credit reports are common — 1 in 5 consumers has at least one mistake. Checking your report regularly is the first step to fixing errors that are costing you money.
Example
You pull your free report from AnnualCreditReport.com and find a $2,400 medical collection you already paid. You dispute it, the bureau verifies it's resolved, and your score goes up 40 points.
Credit Utilization — Credit Utilization Ratio
The percentage of your available credit that you're currently using. If you have $10,000 in credit limits and owe $3,000, your utilization is 30%.
Utilization is the second-biggest factor in your credit score (after payment history). Keeping it below 30% helps your score; below 10% is ideal.
Example
You have 3 cards with a $15,000 total limit. You're carrying $4,500 in balances (30% utilization). Paying down to $1,500 (10% utilization) could boost your score by 20-50 points.
Hard Inquiry — Hard Credit Inquiry (Hard Pull)
When a lender checks your credit report because you've applied for credit. Each hard inquiry can lower your score by 5-10 points and stays on your report for 2 years.
Multiple hard inquiries in a short period suggest you're desperately seeking credit, which is a red flag. Exception: mortgage and auto loan shopping within 14-45 days counts as one inquiry.
Example
You apply for 5 credit cards in one month. Each application triggers a hard inquiry. Your score drops 25-50 points from the inquiries alone, making each subsequent application harder.
Fees & Costs
Setup Fee — Setup Fee / First Work Fee
A one-time fee charged at the beginning of a service, often by credit repair companies, to cover the cost of your initial credit analysis and account setup.
Legitimate credit repair companies are NOT allowed to charge before they do work (per the Credit Repair Organizations Act). A setup fee before any results is a red flag.
Example
Company A charges $99 setup fee before doing anything (potential CROA violation). Company B does a free audit first, then charges a $199 work fee only after completing work (legitimate).
Service Fee — Monthly Service Fee
A recurring charge for maintaining a financial account or receiving ongoing services, such as credit monitoring, credit repair, or loan servicing.
Monthly service fees add up quickly. A $79/month credit repair service costs $948/year — make sure the value justifies the ongoing expense.
Example
A credit repair company charges $79/month to dispute items on your report. After 6 months ($474 spent), they've removed 3 negative items and your score went up 65 points. Was it worth it? Depends on your situation.
Legal Terms
FCRA — Fair Credit Reporting Act
The federal law that regulates how credit bureaus collect, share, and use your information. It gives you the right to see your report, dispute errors, and limit who can access it.
FCRA is the legal basis for disputing errors on your credit report. Bureaus must investigate within 30 days and remove inaccurate information. You can sue if they violate your rights.
Example
You dispute an incorrect collection on your Equifax report. Under FCRA, Equifax has 30 days to investigate. If they can't verify it, they must remove it. If they ignore your dispute, you can sue for damages.
CROA — Credit Repair Organizations Act
A federal law that regulates credit repair companies. It bans them from charging upfront fees, making false promises, and requires written contracts with a 3-day cancellation right.
CROA protects you from credit repair scams. If a company demands payment before doing any work, they're likely violating federal law. Legitimate companies charge after results.
Example
A company says 'Pay $500 upfront and we'll remove all negative items guaranteed.' That violates CROA on two counts: upfront fees and guaranteed results. Legitimate companies charge monthly after work begins.
Debt & Recovery
Charge-Off
When a creditor declares your debt a loss after 180 days of nonpayment and removes it from their books. But you still owe the money — they just stop expecting to collect it themselves.
A charge-off is one of the most damaging entries on your credit report and stays for 7 years. The debt is usually sold to a collection agency who will pursue you for it.
Example
You stop paying your $4,000 credit card. After 180 days, the bank charges it off and sells the debt to a collector for $800. The collector now contacts you demanding the full $4,000 (they profit from what they collect above $800).
Collections — Debt Collections
When an unpaid debt is transferred or sold to a third-party collection agency that specializes in recovering the money. Collection accounts appear on your credit report for 7 years.
Even a $50 collection account can drop your score 50-100 points. Some newer FICO models (FICO 9) ignore paid collections, but many lenders still use older models.
Example
An old $200 gym bill goes to collections. It appears on all 3 credit reports and drops your 720 score to 640. Paying it helps with newer scoring models but under FICO 8 (still widely used), a paid collection still hurts.
Want to learn more? Read our Financial Wellness Guides for in-depth explanations and practical advice.
Disclaimer: This guide is for educational purposes only and does not constitute financial advice. CreditDoc is not a financial advisor, lender, or credit repair company. Always consult with a qualified financial professional before making financial decisions. Your individual circumstances may differ from the general information presented here.
Key Takeaways
- The FCRA gives you the right to dispute any inaccurate item and forces bureaus to investigate within 30 days
- Under CROA, credit repair companies cannot charge upfront fees or guarantee specific outcomes
- You can dispute directly with creditors under FCRA Section 623 as an alternative to bureau disputes
- Violations of both laws carry private right of action — you can sue and recover damages
- Always dispute by certified mail, not online forms, to create a legal paper trail