Your rights under the FCRA and CROA

What do the FCRA and CROA protect?

You open a denial letter that cites “information in a consumer report,” then an ad promises a paid team will “fix it fast” - and you realize you don't know which rights apply to the bureau versus the salesperson.

The Fair Credit Reporting Act (FCRA, 15 U.S.C. § 1681 et seq.) sets rules for credit bureaus and many furnishers: access to your file, accuracy, and a formal dispute path. The Credit Repair Organizations Act (CROA, 15 U.S.C. § 1679 et seq.) sets rules for many companies that sell credit-repair services: contracts, cancel rights, truth in claims, and when they may take your money. Together they protect accuracy work and block common sales abuses.

Memorize the split. FCRA is mostly about the file and the investigation. CROA is mostly about the seller. You need both maps when something goes wrong.

FCRA rights you can use without hiring anyone

The FCRA is why free reports and disputes exist at all. Practical rights consumers use every week:

• Free nationwide reports through AnnualCreditReport.com, including free weekly online pulls, plus free copies in several other situations such as certain adverse actions (15 U.S.C. § 1681j and related rules).
• The right to dispute inaccurate, incomplete, or unverifiable information and force a reinvestigation (15 U.S.C. § 1681i).
• File disclosures that show what is in your file and, in important ways, where information came from (15 U.S.C. § 1681g).
• Limits on how long many negatives may be reported - most about up to 7 years (often from the date of first delinquency; many collections and charge-offs add a statutory 180 days under § 1681c), and certain bankruptcies up to 10 years.
• Tools against identity theft such as fraud alerts and free security freezes under the statute's identity-theft provisions.
• Notice rules when information is used against you in credit decisions, so you can obtain the report that hurt you.

None of those rights require a monthly plan. They require identification, clear requests, and records you keep.

The reinvestigation window when you dispute

This page names the rights. The consumer wait-and-escalate walkthrough for a filed dispute is how to dispute credit report errors.

Results should arrive in writing. Corrected or deleted items should match what you asked for. “Verified” items need a second look: better evidence, a direct furnisher dispute, or acceptance that the line is accurate and will age under ordinary reporting periods.

Furnishers have their own duties once they receive a dispute through the bureau or, in many cases, directly from you. Thin rubber-stamp verifications are a common fight; stronger documents help more than angry adjectives.

CROA rights when you hire credit-repair help

CROA exists because advance-fee scams and empty promises were common. If a seller is covered, you should see these protections in the paperwork:

• A written contract describing services and total cost (15 U.S.C. § 1679d).
• A three-business-day cancel right without penalty in ordinary cases (§ 1679e).
• A clear written notice that you can perform similar dispute work yourself for free.
• A ban on false or misleading statements about services, and on advising you to make untrue statements to bureaus (§ 1679b).
• A ban on charging or receiving payment for credit-repair services before those services are fully performed (15 U.S.C. § 1679b(b)).

Read “fully performed” carefully. A company that takes a setup fee, retainer, or first-month charge for repair work before the contracted services are completed is in the danger zone the statute targets. Labels like “education kit” do not automatically save an illegal advance fee structure when the real product is credit repair.

How the two laws work together

Use FCRA tools against wrong data on Equifax, Experian, or TransUnion files and against furnishers who reported it. Use CROA tools against a seller who lies, hides the contract, or takes illegal fees.

A clean example: you hire a company that follows CROA, and it helps you assemble a specific dispute packet. The bureau still owes you the same reinvestigation duties under FCRA. The company did not buy a better statute. It organized work you could have done alone.

If the company takes money illegally while the bureau ignores a real dispute, you may have two different complaints - one about the seller, one about the reporting agency. Keep the files separate so each regulator sees a clean story.

When a bureau or company ignores your rights

Here's what I'd do after a dead-end form letter. Rebuild the timeline: what you sent, when it was received, what proof you attached, and what answer you got. For bureau silence or rubber-stamp verifications after a real accuracy problem, resend with stronger evidence and use the CFPB complaint path described under the reinvestigation window. Name the company and attach PDFs.

For CROA problems - illegal advance fees, missing cancel rights, deletion promises that are scam signals - file with the CFPB and the FTC (reportfraud.ftc.gov), plus your state attorney general. Save the contract, payment records, ads, texts, and call notes with dates.

Second-round disputes work best with new proof, not the same paragraph resent in a louder font. Bank statements, payoff letters, identity documents, and police reports for theft beat volume alone.

Your right to take legal action

Both statutes include private rights of action. That means individuals can sue in court when the rules are broken - enforcement is not limited to agencies.

Under the FCRA, remedies differ for willful and negligent noncompliance (15 U.S.C. §§ 1681n, 1681o). Willful cases can include statutory damages ranges, actual damages, and possible punitive damages, plus attorney's fees as the statute allows. Negligent cases focus on actual damages and fees. Facts and court standards matter; this is not a DIY damages calculator.

Under CROA (15 U.S.C. § 1679g), a violating company can owe actual damages or the amount you paid, whichever is greater, plus costs and attorney's fees in successful cases. That structure exists so small-dollar scams are still worth challenging. Talk to a consumer attorney licensed in your state before you sue; many evaluate these matters on contingency when the paper trail is clear.

State laws that can add extra protection

Many states add credit-services registration, bonding, extra disclosures, or stronger consumer-fraud remedies on top of federal law. State rules do not erase FCRA or CROA. They can give you more leverage against a local operator.

Your state attorney general's consumer protection division is the practical starting point for local add-ons and complaint forms. If a company is nationwide, federal complaints still matter even when a state case is available.

When federal and state claims both fit, keep one evidence binder. Regulators and lawyers move faster when contracts, ads, and payment proof are already sorted.

Frequently asked questions