Credit repair company FAQ: how they work, timeline, and legality

What is a credit repair company, in one minute?

An ad promises a specialist who “knows the bureau codes,” your denial letter is still on the table, and you just want a straight FAQ: what do these firms actually do, how long it takes, and whether any of it is legal.

A credit repair company is a paid helper that typically reviews your reports, identifies items it believes are inaccurate or unverifiable, sends disputes to bureaus and sometimes furnishers, tracks responses, and repeats cycles. It uses the same federal rights under the FCRA that you already have for free. CROA regulates many sellers on contracts, cancel rights, honest claims, and fee timing. Nothing about a logo creates a faster legal track inside Equifax, Experian, or TransUnion.

Use this page as an answer-first FAQ. For full process deep-dives, use the linked guides - here the goal is clear questions before you hire.

How do credit repair companies work day to day?

On a good day, the workflow looks like organized consumer self-help with more staff hours:

• Intake: identity check, goals, and authorization to communicate on your behalf.
• Report pull or client-provided reports across the three nationwide bureaus.
• Item triage: mixed-file risks, wrong balances, outdated entries, duplicates.
• Dispute drafting with specific reasons (when the company is doing honest work).
• Tracking reinvestigation results and planning the next cycle or escalation.

On a bad day, the workflow is mass templates, outcome hype, and invoices that arrive before any real work. Ask which workflow you are buying - staffing for specific accuracy problems, or a kit with a monthly draft.

A practical intake test: after the first week, can the company name the exact tradelines for cycle one, the reason each is inaccurate or unverifiable, and the proof they will attach? If the answer is still "we dispute negatives," you bought volume. If the answer is a dated item plan, you bought analysis.

How long does a company take - real timeline expectations?

Honest timelines are cycle-based. Calendar miracles belong in ads. Operations talk in cycles. After a dispute, bureaus generally reinvestigate within the statutory window under 15 U.S.C. § 1681i (commonly described as about 30 days, with limited extensions in some situations). Multi-item files often need several cycles across months.

Here is what “done” usually is not, in plain hiring terms:

• Overnight deletion of every negative item on all three bureaus.
• No company can guarantee a score number by a wedding or closing date.
• One letter that settles three bureaus forever without follow-up.

Here is what real progress can look like across a few reinvestigation cycles:

• A wrong balance updates after the first cycle.
• A not-yours account needs identity evidence and a second round.
• Accurate items remain while you rebuild on-time history in parallel.

If a salesperson refuses to talk in cycles and only talks in overnight wins, you are not hearing operations - you are hearing marketing. For a deeper timeline map, use the dedicated “how long does credit repair take” guide.

Budget calendar time for the slow middle: waiting on bureau results, gathering better proof, and re-filing only when something new exists. Also budget parallel rebuild work - utilization and on-time payments - so you are not idle for three cycles hoping letters alone finish the job. Companies that discourage you from positive habits while "they handle everything" are selling dependency. Real outcomes still need habits and accurate data changes.

Are credit repair companies legal?

Yes - when they stay inside consumer-protection lines. Disputing inaccurate, incomplete, or unverifiable information is a right the FCRA protects. Selling help with that process is lawful when the seller follows CROA (written contract, cancel right, no untrue claims, no fees for credit-repair services before those services are fully performed).

Illegal or high-risk patterns include these classic red flags:

• Coaching false statements or new-identity schemes.
• Promising to erase accurate history on demand.
• Taking repair fees before work is fully performed under § 1679b(b).
• Skipping required disclosures that you can do the work yourself for free.

Legality is contract text, fee timing, and honest limits. Five-star review collages are marketing. They are weak compliance proof. The “is credit repair legal” page expands the statute map; this FAQ keeps the hiring questions tight.

What can a company do - and what can it not do?

What a company can do when the facts and documents support it:

• Organize multi-bureau disputes on concrete errors.
• Track deadlines and reinsertions so items do not quietly return.
• Help you gather documents and keep a paper trail.
• Explain ordinary reporting periods so you stop paying to fight verified truth.

What a company cannot do no matter how polished the sales deck is:

• Force deletion of accurate, verifiable negatives still inside § 1681c periods.
• Create a new legal credit identity to hide history.
• Promise a fixed score jump or a loan approval as if models were a warranty.
• Compel a collector to accept pay-for-delete as a right.

If the pitch collapses those “cannot” items into “watch us work,” leave. Process support is real; magical outcomes are not.

Decision criteria for staying enrolled: each month should show finished work on named items, clear fee timing, and an honest update when remaining lines are accurate scars that only time and habits will soften. If months pass with only "we sent more letters" and no item-level log, you are funding theater.

Cancel rights, fees, and getting out cleanly

Before you enroll, lock these answers in the written contract:

• Total cost language and what triggers each charge.
• Whether fees wait until credit-repair services are fully performed under 15 U.S.C. § 1679b(b).
• The three-business-day cancel method under CROA (§ 1679e).
• How to cancel after the window (email, portal, mail) and how long drafts continue.
• What happens to open disputes if you leave mid-cycle.

Cancel friction after day three is a customer-service problem; illegal advance fees are a legal problem. Do not confuse the two. Keep PDFs of the contract, receipts, and cancel notice.

When you leave mid-cycle, ask for copies of every dispute letter, tracking number, and bureau response so you can continue DIY without starting from zero. A firm that withholds your own case file after cancel is telling you how it treats process ownership - take the lesson for the next vendor or for self-help.

What documents do companies usually need?

Expect ordinary identity and authorization paperwork - not a request for your online banking password or a blank affidavit factory.

Common legitimate document asks during ordinary onboarding include:

• Government ID and proof of address for bureau requirements.
• Social Security number handling under a privacy policy you actually read.
• Recent credit reports or permission to pull soft data where offered.
• A limited power of attorney or authorization letter for disputes - scoped, dated, and revocable.
• Your list of suspected errors, police/FTC identity-theft reports if relevant, and payment proofs.

Walk away if they want you to sign false statements, ship original government IDs without a clear return plan, or “create a new file” with an EIN-as-person trick. That is fraud territory. Ordinary onboarding never needs those tricks.

When hiring makes sense vs DIY

Hire (or lean on help) when the file is multi-bureau messy, time is scarce, and the company shows CROA-compliant paperwork plus specific item plans. DIY when you have one or two clear errors, enough hours, and comfort with free reports and free dispute channels.

Use these quick decision prompts before you hire or stay DIY:

• Can I name the inaccuracies without a salesperson’s script?
• Is the fee timing legal and the cancel path usable?
• Does the company admit what it cannot do?
• Would three focused evenings of DIY cover 80% of the value?

Either path still starts with the same evidence: your real reports. Companies do not replace that step; they only rearrange who types the letters.

Scenario A: one wrong balance with a clear statement - DIY is usually enough. Scenario B: mixed file, identity-theft affidavits, and reinsertions across three bureaus - paid organization can be rational if contracts are clean. Scenario C: only accurate lates and high utilization - neither DIY dispute spam nor a firm will lawfully erase the truth; put money into balances and autopay instead of letters.

Frequently asked questions