Credit repair has a trust problem, and it's earned — not by the industry as a whole, but by a real subset of operators who take money for promises they can't legally make. The good news: the federal law governing this industry, the Credit Repair Organizations Act (CROA), gives you a specific checklist to tell a legitimate company from one that's about to disappear with your money.

Red Flag #1: They Want Payment Before They Do Any Work

This is the single clearest violation to watch for. Under CROA, a credit repair organization is legally prohibited from charging or collecting any fee until it has fully performed the services it promised. Not a deposit. Not a "processing fee." Nothing, until the work is done. Any company asking you to pay upfront — before a single dispute has been filed — is breaking federal law, no matter how professional the contract looks.

Red Flag #2: They Guarantee a Specific Score Increase

"Guaranteed 100 points in 90 days" is a marketing promise, not a legal one. No company — however good — can guarantee a specific outcome, because the result depends on what's actually inaccurate on your report, how each bureau and creditor responds to a dispute, and details of your file no salesperson has reviewed yet before you sign. A confident, specific timeline built around your actual accounts is a good sign. A guaranteed number attached to a generic sales pitch is not.

Red Flag #3: They Tell You to Dispute Everything, Including Accurate Items

Disputing every negative item on your report — including ones that are completely accurate — isn't a clever strategy; it's a tactic that can backfire. Bureaus can flag frivolous or repetitive disputes, and disputing accurate debts doesn't make them disappear, it just wastes the 30-day window that's better spent on items that are actually inaccurate, outdated, or unverifiable under the FCRA. A company reviewing your specific accounts and identifying which items are legitimately disputable — not blanket-disputing everything — is doing the job correctly.

Red Flag #4: They Tell You to Create a New Identity or "File Segregation"

This is not a gray area — it's fraud. "File segregation" schemes involve applying for a new EIN or CPN (credit privacy number) and using it in place of your Social Security number to build a "fresh" credit file. This is illegal, and consumers who fall for it face real federal liability, not just a bad outcome with the credit repair company that sold it to them. Any company suggesting this should be reported, not hired.

Red Flag #5: No Written Contract, or a Contract You Can't Take Home to Read

CROA requires a written contract before any payment, and requires that you get a copy of it. The contract must disclose your right to cancel within three business days of signing, with no penalty. If a company is pressuring you to sign on the spot, verbally, or without a copy to review, that's the company avoiding disclosures the law requires them to make.

Red Flag #6: They Discourage You From Checking Your Own Progress

A legitimate company wants you informed — showing you what's been disputed, what response came back, and what's next. A company that's vague about what it's actually doing, discourages you from pulling your own reports, or gets defensive when asked for specifics is hiding something, usually that not much dispute work is actually happening.

What a Legitimate Process Actually Looks Like

  • A written contract, provided before payment, disclosing your 3-day cancellation right
  • No fee charged until services are actually performed
  • A specific review of your three-bureau report — not a generic sales script
  • Disputes targeted at items that are genuinely inaccurate, outdated, or unverifiable, with the legal basis explained
  • Realistic timelines (most cases: 3–6 months, some longer)
  • Willingness to show you what's been disputed and what response came back

This is the same standard whether the company has a storefront on Main Street or works with clients nationwide by phone — location has nothing to do with whether a company follows CROA. We wrote more about why proximity isn't the right filter in our piece on searching for a credit repair company near you.

Know the Law Behind the Checklist

Everything above traces back to two federal laws worth knowing by name: the Credit Repair Organizations Act (CROA), which governs what credit repair companies can promise, charge, and disclose, and the Fair Credit Reporting Act (FCRA), which gives you the underlying right to dispute inaccurate information in the first place. Our full breakdown of your rights under FCRA, FDCPA, and CROA covers all three in depth.

If You Think You've Already Been Scammed

File a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov/complaint and the Federal Trade Commission at reportfraud.ftc.gov. Upfront fees charged before work was performed are, on their own, a reportable CROA violation. Keep every contract, receipt, and message — that documentation is what makes a complaint actionable.

The Bottom Line

Legitimate credit repair is legal, regulated, and can genuinely move your score by disputing what's actually wrong on your report. The red flags above aren't subtle judgment calls — they're specific violations of a specific federal law, and any company committing them is telling you something important about how they'll handle your money and your case.

If you want a second opinion on a contract you're considering, or you're trying to untangle what a previous company actually did (or didn't do) on your behalf, we're glad to look at it with you.

Book a free 30-minute consultation — no obligation, no pressure, just a straight answer about where you actually stand.