Federal Statute Library
Complete statutes governing credit reporting, debt collection, billing, and credit repair — with practical guidance for consumers.
Fair Credit Reporting Act 15 U.S.C. § 1681
This title may be cited as the "Fair Credit Reporting Act." Enacted by Congress in 1970 and significantly amended by the Fair and Accurate Credit Transactions Act of 2003, the FCRA represents the primary federal legal framework governing the consumer reporting industry.
The Act establishes a comprehensive system designed to ensure that consumer reporting agencies adopt reasonable procedures for meeting the needs of commerce while protecting consumer privacy, accuracy, and fairness in credit reporting. It balances the legitimate business need for consumer information against the individual's right to privacy.
The FCRA has been amended multiple times, most notably by the Consumer Credit Reporting Reform Act of 1996, the FACT Act of 2003, and the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, which transferred rulemaking authority to the Consumer Financial Protection Bureau.
How This Applies to You
The FCRA is your primary legal shield when disputing errors on your credit reports. Every time you send a dispute letter to Experian, Equifax, or TransUnion, you are exercising rights granted by this statute. The FCRA requires the bureaus to investigate your dispute within 30 days and remove any information that cannot be verified. Understanding this law gives you powerful leverage in credit repair.
Congress found that the banking system is dependent upon fair and accurate credit reporting, and that inaccurate credit reports directly impair the efficiency of the banking system and undermine public confidence in the financial system as a whole.
Congress further found that an elaborate mechanism has been developed for investigating and evaluating consumer credit worthiness, credit capacity, and credit history, and that there is a need to ensure that consumer reporting agencies exercise their responsibilities with fairness, impartiality, and a respect for the consumer's right to privacy.
The purpose of the FCRA is to require consumer reporting agencies to adopt reasonable procedures for meeting the needs of commerce for consumer credit, personnel, insurance, and other information in a manner that is fair and equitable to the consumer, with regard to the confidentiality, accuracy, relevancy, and proper utilization of such information.
The Act is intended to protect consumers from wilful and negligent violations of these requirements by providing for statutory damages, punitive damages, and attorney's fees for successful plaintiffs.
How This Applies to You
Congress recognized that credit reporting errors harm not just individuals but the entire economy. This section confirms that the law's purpose is to protect you. When a credit bureau refuses to investigate or verify a dispute, they are acting against the express findings of Congress. You can cite §602 to establish that the FCRA was designed specifically to protect consumers and promote accuracy, not to shield bureaus from accountability.
§603 provides the statutory definitions that govern the entire FCRA. A "consumer" is defined as an individual, and a "consumer report" is any written, oral, or other communication of any information by a consumer reporting agency bearing on a consumer's credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living that is used or expected to be used in establishing the consumer's eligibility for credit, insurance, employment, or other purposes authorized under the Act.
A "consumer reporting agency" (CRA) is defined as any person that regularly engages in assembling or evaluating consumer credit information or other information on consumers for the purpose of furnishing consumer reports to third parties, and that uses any means of interstate commerce for this purpose. The three major nationwide CRAs — Equifax, Experian, and TransUnion — are specifically categorized as "nationwide consumer reporting agencies."
"Investigative consumer reports" are defined as reports containing information on a consumer's character, general reputation, personal characteristics, or mode of living obtained through personal interviews with neighbors, friends, or associates. These reports are subject to additional disclosure requirements.
The term "furnisher" refers to any entity that provides information to a consumer reporting agency about a consumer. This includes credit card companies, lenders, collection agencies, landlords, and other data providers. "Adverse action" includes a denial of credit, insurance, or employment, or an increase in the cost of credit or insurance based on information in a consumer report.
A "consumer file" is defined as all of the information on a consumer recorded and retained by a consumer reporting agency, regardless of how the information is organized. The term "employment purposes" means a report used for evaluating a consumer for employment, promotion, reassignment, or retention.
How This Applies to You
Understanding these definitions is critical. Because the FCRA defines a "consumer report" broadly, it covers far more than just credit scores — it includes background checks, tenant screening, and insurance reports. This means you have dispute rights for all of these reports, not just traditional credit reports. If a company takes adverse action against you based on any information from a CRA, you are entitled to a free report and a dispute process under the law.
§604 strictly limits the circumstances under which a consumer reporting agency may furnish a consumer report to any person. A consumer reporting agency may only provide a consumer report to a person that it has reason to believe intends to use the information for one of the following permissible purposes: in response to a court order or federal grand jury subpoena; in accordance with the written instructions of the consumer to whom the report relates; or for use in connection with a credit transaction involving the consumer, including a review or collection of an existing account.
Additional permissible purposes include use for employment purposes, with the written consent of the consumer; use for underwriting insurance involving the consumer; use for evaluating eligibility for a government license or benefit; use as a potential investor or servicer of an existing credit obligation; and use for legitimate business needs in connection with a business transaction initiated by the consumer, or to review an existing account to determine whether the consumer continues to meet the account's terms.
Employers may only obtain consumer reports with the written authorization of the employee or applicant, and must certify to the CRA that the information will not be used in violation of any federal or state equal employment opportunity law. Before taking adverse employment action based on a consumer report, the employer must provide the consumer with a copy of the report and a description of their rights under the FCRA.
Any person who knowingly and willfully obtains a consumer report under false pretenses, or without a permissible purpose, is subject to criminal penalties of up to two years imprisonment, as well as civil liability for actual damages, punitive damages, and attorney's fees.
How This Applies to You
This section protects you from unauthorized access to your credit information. If a company pulls your credit report without a permissible purpose — such as for marketing, curiosity, or any reason not listed here — they have violated federal law and you may be entitled to damages. Always check your credit report for unauthorized inquiries. A hard inquiry from a company you never applied with is a red flag that may indicate a violation of §604.
§605 sets strict limitations on the type and age of information that may appear in a consumer report. Generally, no consumer reporting agency may report adverse information that is more than seven years old, with several important exceptions. Bankruptcies may be reported for up to ten years from the date of entry of the bankruptcy order or the date of discharge. Civil suits, civil judgments, and records of arrest that predate the report by more than seven years are also excluded.
Paid tax liens that predate the report by more than seven years may not be reported. Accounts placed for collection or charged to profit and loss that predate the report by more than seven years must be removed. Any other adverse item of information older than seven years is also excluded, with the notable exception that information contained in consumer reports used for employment involving an annual salary of $75,000 or more is not subject to the seven-year limitation.
For reports used in connection with credit or insurance transactions involving an amount of $150,000 or more, or for employment purposes, the seven-year limitation does not apply. This section also provides that if a consumer reporting agency learns that information in a consumer's file is inaccurate or cannot be verified, it must promptly delete the information and notify the furnisher of the deletion.
Information that has been deleted from a consumer's file may not be reinserted unless the furnisher certifies that the information is complete and accurate. The CRA must notify the consumer of any reinsertion within five business days, including the name, address, and phone number of the furnisher who certified the information.
How This Applies to You
§605 is the statute you will use most often. If you have negative items older than seven years — or a bankruptcy older than ten years — they MUST be removed from your credit report. This is non-negotiable under federal law. Additionally, any account that was deleted due to a dispute cannot be re-added without the furnisher certifying its accuracy and the CRA notifying you. This gives you a powerful tool: if an item reappears on your report after being deleted, you can sue for noncompliance.
§607 requires consumer reporting agencies to maintain reasonable procedures to assure maximum possible accuracy of the information contained in consumer reports. These procedures must be established and implemented whenever a consumer report is prepared, and they must be designed to prevent the reporting of obsolete information as defined in §605.
The CRA must also maintain strict procedures to limit the furnishing of consumer reports to those persons identified in §604 who have a permissible purpose. Before furnishing a consumer report, the CRA must require that the prospective user identify themselves, certify the purpose for which the information is sought, and certify that the information will be used only for that purpose.
Consumer reporting agencies must make a reasonable effort to verify the identity of any new prospective user and the uses certified by such prospective user prior to furnishing the user a consumer report. A CRA may not furnish a consumer report to any person if it has reasonable grounds for believing that the person will not use the report for a permissible purpose.
When a CRA prepares an investigative consumer report, it must disclose to the consumer that such a report may be made and that the consumer is entitled to request additional disclosures about the nature and scope of the investigation. This disclosure must be made within three days of the request for the report.
How This Applies to You
This section establishes that credit bureaus have an affirmative duty to maintain procedures ensuring accuracy. When you find errors on your credit report, it means those procedures failed. You can use this section to argue that the bureau's procedures are insufficient and that they have violated the FCRA by failing to maintain "maximum possible accuracy." This is particularly powerful when you find the same error appearing multiple times or across multiple bureaus.
§609 requires consumer reporting agencies to clearly and accurately disclose to the consumer all information in the consumer's file at the time of the request, including the sources of the information. Upon request by a consumer, the CRA must disclose the following: the nature and substance of all information in the consumer's file (except medical information); the sources of that information; the recipients of any consumer reports on the consumer that the CRA has furnished within the two-year period preceding the request for employment purposes, or within the one-year period for any other purpose.
The CRA must also provide a consumer with a written summary of all rights under the FCRA, including the right to dispute inaccurate information, the right to request a reinvestigation, and the right to add a consumer statement to the file. This summary of rights must be provided with every written disclosure made to the consumer.
Upon the consumer's request, a CRA must provide the consumer with a credit score and a statement explaining the key factors that adversely affected the credit score. The statement must include the range of possible credit scores, the distribution of scores among consumers, and the date the score was created.
A consumer reporting agency may not require a consumer to waive their rights under the FCRA as a condition of receiving a credit score or a consumer report. Any such waiver is void as against public policy. The CRA must maintain records of all requests for disclosure for a period of not less than two years.
How This Applies to You
You are entitled to a free credit report every 12 months from each of the three major bureaus at AnnualCreditReport.com. But §609 gives you more: you can request your complete file — including the "source codes" that show exactly what is being reported and who reported it. When disputing, request your full file first so you can see all the details. The CRA must also tell you who received your report, which helps identify unauthorized access.
§610 specifies the conditions under which consumer reporting agencies must provide disclosures to consumers. The CRA must make disclosures during normal business hours and on reasonable notice. The disclosure must be made in a form that is understandable to the consumer, and the CRA must provide trained personnel to explain the information to the consumer if requested.
A consumer may be accompanied by one other person of their choosing when making a request for disclosure. The CRA may require the consumer to provide proper identification, but may not impose unreasonable identification requirements that create barriers to disclosure. The CRA must also provide disclosures by telephone if the consumer has made a request in writing and the toll-free telephone number is provided in the summary of rights.
If the consumer appears in person, the CRA must provide the disclosure visually. If the consumer requests disclosure by telephone, the CRA must either make the disclosure orally or schedule a time for the consumer to appear in person. The CRA may require that requests for disclosure be made in writing and may require that the consumer provide identifying information such as name, address, and Social Security number.
How This Applies to You
The FCRA ensures you can access your credit file without bureaucratic barriers. If a credit bureau makes it difficult to obtain your report — requiring excessive documentation, long wait times, or refusing telephone disclosures — they may be violating §610. You have the right to have someone with you when reviewing your file, and the bureau must explain anything you do not understand. Use these rights if you encounter resistance.
§611 establishes the dispute and reinvestigation process, which is the heart of the FCRA for consumer enforcement. If a consumer disputes the completeness or accuracy of any information in their file, the CRA must conduct a reasonable reinvestigation within 30 days of receiving the dispute. The CRA must review all relevant information provided by the consumer and determine whether the disputed information is inaccurate, incomplete, or cannot be verified.
The CRA must notify the furnisher of the disputed information within five business days of receiving the dispute, providing all relevant information submitted by the consumer. The furnisher must then conduct an investigation, review all relevant information, and report its findings to the CRA. If the furnisher finds the information to be inaccurate or cannot verify it, the furnisher must notify the CRA and all other CRAs to which it furnished the information.
If the reinvestigation does not resolve the dispute, the consumer may add a brief statement of up to 100 words explaining the nature of the dispute. The CRA must include this statement in all future consumer reports containing the disputed information. If the CRA determines the information is inaccurate or cannot be verified, it must delete the information within five business days and notify the furnisher.
If the consumer files a dispute and the CRA fails to conduct a reasonable reinvestigation or fails to delete information that is inaccurate or unverifiable, the CRA may be liable for actual damages, statutory damages of $100 to $1,000 per violation, punitive damages, and attorney's fees. The CRA must also provide written notice of the results of the reinvestigation to the consumer within five business days of completion.
How This Applies to You
§611 is the most powerful tool in your credit repair arsenal. When you dispute an item, the bureau must investigate within 30 days. If the furnisher cannot verify the item — which happens often because old data is frequently purged from creditor systems — the bureau MUST delete it. This is why "not verified" disputes are so effective. If a bureau ignores your dispute or conducts a superficial investigation (like merely matching name and SSN without contacting the furnisher), you may have a claim for damages.
§612 governs fees for consumer report disclosures. A consumer reporting agency may charge a reasonable fee for providing a consumer report to a consumer, except that the fee may not exceed $8.00 for a standard disclosure (adjusted annually for inflation). However, no fee may be charged in several important circumstances.
A consumer is entitled to one free consumer report every twelve months from each nationwide CRA upon request. A consumer is also entitled to a free report if they certify in writing that they are unemployed and intend to seek employment within 60 days, if they are a recipient of public welfare assistance, or if they have reason to believe that the file contains inaccurate information due to fraud. Additionally, a consumer who has been the victim of identity theft is entitled to two free reports per year from each nationwide CRA.
No fee may be charged if the consumer requests a report within 60 days of receiving an adverse action notice based on information in a consumer report. The CRA must prominently disclose the availability of free reports and the toll-free telephone number for requesting them.
How This Applies to You
You are entitled to free credit reports in many situations, not just the annual free report. If you are denied credit, insurance, or employment based on your credit report, you can request a free report from the bureau that supplied the report. Similarly, if you suspect identity theft or fraud, or if you are unemployed and looking for work, you can get free reports. Never pay for a report you are entitled to receive for free under §612.
§613 imposes special requirements when consumer reporting agencies furnish public record information for employment purposes. If a CRA furnishes a consumer report for employment purposes that contains public record information that is likely to have an adverse effect on the consumer's ability to obtain employment, the CRA must either notify the consumer of the public record information at the time it is reported to the employer, or maintain strict procedures to ensure that the public record information is complete and up to date.
"Public record information" includes records of arrests, indictments, convictions, suits, tax liens, and outstanding judgments. The CRA must, at a minimum, maintain procedures to ensure that the information being reported is the most recent public record information available and that it has been accurately transcribed from the original public record.
If the CRA chooses to notify the consumer rather than maintain verification procedures, it must provide the notification to the consumer at the same time or before the report is furnished to the employer. This gives the consumer an opportunity to challenge the accuracy of the public record before it is used in an employment decision.
How This Applies to You
If you are applying for a job and a background check reveals criminal or public record information, the CRA must either notify you or have procedures ensuring the data is accurate and current. Many public record databases contain errors — old cases, expunged records, or mistaken identity. If you were not notified before the employer received the report, the bureau may have violated §613 and you could have a claim.
§615 imposes obligations on anyone who uses a consumer report and takes adverse action against the consumer based on information in that report. If a user takes adverse action — such as denying credit, insurance, or employment, or increasing the cost of credit — based in whole or in part on a consumer report, the user must provide the consumer with an adverse action notice containing the name, address, and telephone number of the CRA that furnished the report.
The adverse action notice must also include a statement that the CRA did not make the adverse decision and is unable to provide the consumer with the specific reasons for the adverse action. The user must also inform the consumer that they are entitled to a free copy of their consumer report from the CRA if requested within 60 days, and that the consumer has the right to dispute the accuracy or completeness of the information with the CRA.
If a user denies credit or increases the charge for credit based on information obtained from a person other than a CRA, such as a former creditor or neighbor, the user must disclose that fact to the consumer. If the user bases the adverse action on information from an affiliate, the user must provide a similar disclosure.
Any person who uses a consumer report in connection with credit, insurance, or employment must identify themselves and certify the permissible purpose to the CRA. A person who knowingly violates this requirement may be subject to criminal penalties.
How This Applies to You
If you are denied credit or receive less favorable terms, the lender must tell you why and which credit bureau provided the information. This adverse action notice is your ticket to a free credit report and your right to dispute. If a lender denies you but does not provide the required notice, they have violated §615. Save all adverse action letters — they are evidence of potential FCRA violations and entitle you to free reports.
§616 establishes that any person who willfully fails to comply with any FCRA requirement is liable to the consumer for actual damages sustained by the consumer, or statutory damages of $100 to $1,000 per violation, as determined by the court. Additionally, the consumer may recover punitive damages as the court may allow, together with the costs of the action and reasonable attorney's fees.
Willful noncompliance includes both knowing violations and reckless disregard for the requirements of the FCRA. The Supreme Court has held that a company acts recklessly when it takes an action that presents an "unjustifiably high risk" of violating the FCRA and the risk is either known or so obvious that it should be known.
For violations involving the willful failure to comply with the reinvestigation requirements of §611 or the accuracy requirements of §607, consumers do not need to prove actual damages to recover statutory damages. The availability of statutory damages without proof of actual harm makes §616 a powerful enforcement mechanism for consumers.
Multiple violations may give rise to multiple damage awards. Each time a CRA furnishes an inaccurate consumer report containing erroneous information that should have been deleted, or fails to provide required disclosures, each occurrence may constitute a separate violation subject to its own damage award. Class actions are also permitted under this section, with statutory damages of up to the lesser of $500,000 or 1% of the defendant's net worth.
How This Applies to You
This is the enforcement provision that gives the FCRA its teeth. If a credit bureau, creditor, or other covered entity willfully violates the FCRA — for example, by failing to investigate a dispute, reinserting information without proper procedures, or reporting information they know is inaccurate — you can sue for statutory damages of $100 to $1,000 PER VIOLATION, plus punitive damages and attorney's fees. Many consumers have received substantial settlements under this section.
§617 provides that any person who is negligent in failing to comply with any FCRA requirement is liable to the consumer for the actual damages sustained by the consumer as a result of the failure. The consumer may also recover the costs of the action and reasonable attorney's fees as determined by the court.
Unlike willful noncompliance under §616, negligent noncompliance does not require proof that the defendant knew or recklessly disregarded the law. Instead, the consumer must show that the defendant failed to act with reasonable care, meaning that they did not exercise the degree of care that a reasonably prudent person in the same position would have exercised under similar circumstances.
Actual damages under §617 may include emotional distress damages, injury to reputation, and pecuniary losses such as lost credit opportunities, higher interest rates, or denial of employment. Courts have awarded substantial emotional distress damages in cases where consumers suffered anxiety, humiliation, or stress due to inaccurate credit reporting.
While §617 does not provide for statutory or punitive damages, the availability of emotional distress damages and attorney's fees makes it a viable remedy for consumers whose credit reports contain errors caused by a CRA's or furnisher's negligence but not willfulness.
How This Applies to You
Even if a credit bureau did not intentionally violate the law, you can still recover damages if they were simply negligent — meaning they failed to exercise reasonable care. For example, if a bureau automated its dispute investigation process without actually reviewing the evidence you provided, that may be negligence. Actual damages can include emotional distress from dealing with credit errors. Many successful FCRA lawsuits are brought under §617 because proving negligence is easier than proving willfulness.
§618 provides that any action brought under the FCRA may be brought in any United States district court without regard to the amount in controversy, or in any other court of competent jurisdiction. This means consumers can file FCRA lawsuits in either federal or state court, and there is no minimum damages threshold required to access federal court.
Actions under the FCRA must be brought within the earlier of two years after the date of discovery by the plaintiff of the violation that is the basis of liability, or five years after the date on which the violation occurred. This statute of limitations means consumers must act promptly upon discovering a violation.
The two-year discovery period is measured from the date the consumer actually discovered the violation, not when they should have discovered it through reasonable diligence. However, courts have applied this differently in various circuits, and some require that the consumer exercise reasonable diligence to discover violations.
This section also provides that no action may be brought more than five years after the violation occurred, regardless of when it was discovered. This absolute five-year bar serves as an outer limit on FCRA claims. The FCRA also provides that any written statement prepared by a consumer reporting agency in connection with a reinvestigation is protected from defamation claims, provided the CRA acted in good faith.
How This Applies to You
If you discover an FCRA violation, you have two years to file a lawsuit. Do not delay — statutes of limitations are strict. Courts have dismissed cases filed even one day late. If you have been working on credit repair and discover that a bureau failed to investigate a dispute, note the date of discovery and ensure you file within two years. You can file in your local federal district court or state court, often without jurisdictional hurdles.
§619 makes it a crime to knowingly and willfully obtain information about a consumer from a consumer reporting agency under false pretenses. Any person who does so is subject to criminal prosecution and, upon conviction, may be fined or imprisoned for up to two years, or both.
False pretenses include situations where a person obtains a consumer report by misrepresenting the purpose for which the report will be used, by impersonating someone with a permissible purpose, or by otherwise deceiving the CRA into providing the report. This is a strict criminal statute that does not require proof that the defendant intended to harm the consumer or that the consumer actually suffered harm.
Additionally, any officer or employee of a consumer reporting agency who knowingly and willfully provides information about a consumer to a person not authorized to receive it is subject to the same criminal penalties. This creates dual criminal liability both for the person who fraudulently obtains the report and for any insider who improperly provides access.
A person who obtains a consumer report under false pretenses is also subject to civil liability under §616 for willful noncompliance, including actual damages, statutory damages of $1,000, punitive damages, and attorney's fees.
How This Applies to You
If someone pulls your credit report without a legitimate permissible purpose — such as an employer who never hired you, a landlord who never rented to you, or a company that ran a "pre-screening" without your consent — they may have violated §619. This is a federal crime. You can report such violations to the CFPB or the FBI, and you can also sue the person who obtained the report for civil damages under §616.
§621 delegates enforcement of the FCRA to multiple federal agencies. The Consumer Financial Protection Bureau (CFPB) has primary enforcement authority for most consumer reporting agencies and furnishers. The Federal Trade Commission (FTC) retains enforcement authority over certain entities not subject to CFPB jurisdiction. The Federal Reserve Board, the Federal Deposit Insurance Corporation, and the Office of the Comptroller of the Currency enforce compliance for banks and financial institutions under their supervision.
The National Credit Union Administration enforces FCRA compliance for credit unions. The Secretary of Transportation enforces compliance for air carriers, and the Farm Credit Administration enforces compliance for agricultural lenders. The Securities and Exchange Commission enforces compliance for brokers, dealers, and investment companies. This multi-agency framework ensures that all types of entities that use or furnish consumer information are subject to federal oversight.
Each enforcing agency has the authority to conduct investigations, hold hearings, issue cease-and-desist orders, impose civil money penalties, and require corrective action. The CFPB may also issue rules and regulations to implement the FCRA and may require consumer reporting agencies to submit reports about their activities.
State attorneys general may also bring civil actions in federal district court to enforce the FCRA when there is reason to believe that a violation has harmed the residents of their state. The state must notify the CFPB before filing such an action and may recover damages, injunctive relief, and attorney's fees.
How This Applies to You
If a credit bureau or furnisher violates the FCRA, you can file a complaint with the CFPB. The CFPB has collected millions of dollars in fines and restitution from credit bureaus for violations. While filing a complaint does not guarantee individual relief, it puts the bureau on notice and creates a paper trail. Many consumers file CFPB complaints alongside private lawsuits. Aggressive enforcement by state attorneys general has also led to significant industry reforms.
§623 imposes duties on entities that furnish information to consumer reporting agencies. Furnishers — including credit card companies, lenders, collection agencies, and other data providers — must provide accurate and complete information to CRAs. A furnisher may not report information that it knows or has reasonable cause to believe is inaccurate.
Upon notice from a CRA that a consumer has disputed information, the furnisher must conduct an investigation, review all relevant information provided by the CRA and the consumer, and report the results of the investigation to the CRA within 30 days. If the investigation reveals that the disputed information is inaccurate or cannot be verified, the furnisher must notify all nationwide CRAs to which it furnished the information so that the information can be corrected or deleted.
If a furnisher determines that information previously furnished to a CRA is inaccurate, it must promptly notify the CRA of the correct information and provide any corrections necessary to ensure the CRA's records are accurate. Furnishers must also establish reasonable policies and procedures to prevent the reporting of information relating to a consumer that the furnisher knows or has reasonable cause to believe is the result of identity theft.
A furnisher that fails to comply with these duties may be sued directly by the consumer for damages. The furnisher is not protected by qualified immunity if it knew or should have known that the information was inaccurate. The statute provides for both actual damages and, in cases of willful noncompliance, statutory and punitive damages.
How This Applies to You
§623 allows you to sue furnishers directly — not just credit bureaus. If a credit card company, collection agency, or other data provider reports inaccurate information about you and refuses to correct it after investigation, you have a federal claim. This is especially useful when dealing with debt collectors who report invalid debts or fail to mark accounts as disputed. When disputing directly with a furnisher (a "direct dispute"), cite §623 and demand they investigate and correct their reporting.
Fair Debt Collection Practices Act 15 U.S.C. § 1692
This title may be cited as the "Fair Debt Collection Practices Act." Enacted by Congress in 1977 and effective March 20, 1978, the FDCPA was created to eliminate abusive debt collection practices by debt collectors, to ensure that debt collectors who refrain from using abusive practices are not competitively disadvantaged, and to promote consistent state action to protect consumers against debt collection abuses.
The FDCPA applies exclusively to "debt collectors" as defined in the Act — third-party collectors who collect debts owed to others — and does not generally apply to original creditors collecting their own debts, though some states have laws that extend similar protections. The Act was extensively amended by the Dodd-Frank Act in 2010, which transferred rulemaking authority to the CFPB.
The FDCPA is a strict liability statute in certain respects, meaning that a debt collector may be liable for violations even if the violation was unintentional. This places the burden on debt collectors to ensure strict compliance with the law in all communications with consumers.
How This Applies to You
The FDCPA is your primary protection against abusive debt collectors. Every time a debt collector calls you, sends you a letter, or contacts you in any way, they must comply with the FDCPA. If they violate any provision — even accidentally — they may be liable for up to $1,000 in statutory damages plus actual damages and attorney's fees. Understanding this law empowers you to stop collector harassment and hold abusive collectors accountable.
Congress found that abusive debt collection practices contribute to personal bankruptcies, marital instability, loss of jobs, and invasions of individual privacy. Congress also found that existing laws and procedures were inadequate to protect consumers from such practices.
Congress declared that the purpose of the FDCPA is to eliminate abusive debt collection practices by debt collectors, to insure that debt collectors who refrain from using abusive debt collection practices are not competitively disadvantaged, and to promote consistent state action to protect consumers against debt collection abuses.
The FDCPA is intended to be a consumer protection statute that must be construed liberally in favor of the consumer. Courts have repeatedly held that the FDCPA should be enforced strictly to further its remedial purpose of protecting consumers from debt collection abuse.
How This Applies to You
Congress explicitly recognized that abusive debt collection causes serious harm — bankruptcy, marital problems, job loss, and privacy violations. This finding demonstrates that the FDCPA was designed to be a powerful tool for consumer protection. Courts interpret the FDCPA broadly in favor of consumers. When asserting your rights under this law, you can point to §802 to show that Congress intended the statute to provide strong consumer protections.
§803 provides the key definitions for the FDCPA. A "debt" is defined as any obligation or alleged obligation of a consumer to pay money arising out of a transaction in which the money, property, insurance, or services were primarily for personal, family, or household purposes. This includes credit card debt, medical debt, car loans, student loans, mortgages, and other personal debts, but excludes business debts.
A "debt collector" is defined as any person who uses any instrumentality of interstate commerce or the mails in any business the principal purpose of which is the collection of any debts, or who regularly collects or attempts to collect, directly or indirectly, debts owed or due or asserted to be owed or due to another. This definition includes collection agencies, debt buyers, and attorneys who regularly engage in debt collection activities.
The term "consumer" means any natural person obligated or allegedly obligated to pay any debt. "Creditor" means any person who offers or extends credit creating a debt or to whom a debt is owed, but only if the debt is not in default at the time it was obtained by the creditor. "Communication" means the conveying of information regarding a debt directly or indirectly to any person through any medium.
"Location information" means a consumer's place of abode, telephone number, or place of employment. "Consumer reporting agency" has the same meaning as in the FCRA. The FDCPA also defines "unfair or unconscionable" collection practices, providing specific examples of conduct that violates the Act.
How This Applies to You
The definition of "debt collector" is crucial. If the debt is in default when a third party acquires it — which is almost always the case with debt buyers — that third party is a "debt collector" subject to the FDCPA. This means companies like Midland Credit Management, Portfolio Recovery Associates, and other debt buyers must follow FDCPA rules. The definition of "debt" covers most consumer obligations, including medical bills, credit cards, and auto loans, giving you broad protection.
§804 governs how debt collectors may obtain location information about a consumer. A debt collector may not communicate with any person other than the consumer, the consumer's attorney, the credit bureau, the creditor, the attorney of the creditor, or the attorney of the debt collector to acquire location information about the consumer, except for the limited purpose of acquiring location information.
When communicating with a third party to acquire location information, the debt collector must identify themselves by name only and may not state that they are employed by a debt collection agency. The debt collector may not reveal that the consumer owes a debt, and may not communicate with any third party more than once unless requested to do so by the third party or unless the debt collector believes the earlier response was erroneous or incomplete and the third party now has correct information.
The debt collector may not communicate with third parties through postcard, or use any language or symbol on any envelope indicating that the sender is in the debt collection business. The communication must not indicate that the purpose of the communication is debt collection. These restrictions are designed to protect the consumer's privacy.
How This Applies to You
Debt collectors have very limited ability to contact third parties about you. They cannot tell your employer, family members, neighbors, or friends that you owe a debt. If a collector contacts your employer and reveals the nature of the debt, or calls your family member and discusses your debt, they have violated §804. This is one of the most commonly violated FDCPA provisions and can result in statutory damages of up to $1,000.
§805 establishes strict rules governing when, where, and how debt collectors may communicate with consumers. Without the consumer's prior consent or a court order, a debt collector may not communicate with a consumer at any unusual time or place. Communicating at any time before 8:00 a.m. or after 9:00 p.m. local time at the consumer's location is presumptively unlawful.
If the debt collector knows that the consumer is represented by an attorney regarding the debt, the collector must communicate only with the attorney, unless the attorney fails to respond within a reasonable time. If the consumer notifies the debt collector in writing that they refuse to pay the debt or wish the collector to cease further communication, the collector must stop communicating with the consumer, except to advise the consumer that further collection efforts are being terminated, that the collector may invoke specified remedies, or that the collector intends to invoke a specified remedy.
A debt collector may not communicate with a consumer at the consumer's place of employment if the collector knows or has reason to know that the consumer's employer prohibits such communications. The debt collector must respect any consumer request to stop calling at work and any request to communicate only by mail.
If a consumer has made a cease communication request in writing, the debt collector must honor it. However, the collector may still file a lawsuit or take other legal action. The consumer should send any cease communication letter by certified mail with return receipt requested to have proof of receipt.
How This Applies to You
You have the absolute right to tell a debt collector to stop contacting you. Simply send a written cease and desist letter, and the collector must stop all communications except to confirm they will stop or to notify you of a specific legal action. You also have the right to restrict when and where they can contact you. If a collector calls you before 8 a.m. or after 9 p.m., calls you at work after you told them not to, or continues calling after you sent a cease and desist letter, they are violating the FDCPA.
§806 prohibits debt collectors from engaging in any conduct the natural consequence of which is to harass, oppress, or abuse any person in connection with the collection of a debt. This prohibition is broad and covers both communications and other collection activities.
Specific examples of prohibited conduct include: the use or threat of use of violence or other criminal means to harm the physical person, reputation, or property of any person; the use of obscene or profane language; the publication of a list of consumers who allegedly refuse to pay debts, except to a consumer reporting agency; and the advertisement for sale of any debt to coerce payment of the debt.
Causing a telephone to ring or engaging a person in telephone conversation repeatedly or continuously with intent to annoy, abuse, or harass any person at the called number is also prohibited. The FDCPA does not set a specific number of calls that constitutes harassment, but courts generally consider calls made with excessive frequency — such as multiple calls per day or calls after the consumer has asked the collector to stop — to be harassing.
Debt collectors are also prohibited from placing telephone calls without meaningful disclosure of the caller's identity. This means collectors cannot block caller ID or fail to identify themselves when the consumer answers. "Ghost calling" or using technology to disconnect before the consumer answers is also considered abusive.
How This Applies to You
If a debt collector yells at you, uses profanity, threatens you, calls you repeatedly throughout the day, or engages in any conduct designed to harass or intimidate you, they have violated §806. This is one of the most powerful FDCPA provisions. Document every call — save voicemails, record the time and frequency of calls, and note any abusive language. Each harassing call can be a separate violation entitling you to up to $1,000 in statutory damages.
§807 prohibits debt collectors from using any false, deceptive, or misleading representation in connection with the collection of any debt. This is one of the most commonly cited FDCPA provisions, covering a wide range of deceptive practices.
Specific prohibitions include: falsely representing the character, amount, or legal status of any debt; falsely representing that any person is an attorney or that any communication is from an attorney; falsely representing that the consumer has committed a crime; threatening to take action that cannot legally be taken or that is not intended to be taken; falsely representing that a debt collector is affiliated with the United States government or any state government; and using any false representation or deceptive means to collect or attempt to collect a debt.
Debt collectors are also prohibited from: falsely representing that documents are legal process; using any business or organization name that suggests the collector is a government agency or that the communication is from a government agency; and falsely representing that the collector operates or is employed by a consumer reporting agency. The collector must also disclose in all initial written communications that the communication is from a debt collector attempting to collect a debt.
Misrepresenting that a debt has been time-barred by the statute of limitations but legally enforceable through legal action is also a violation of §807. Similarly, threatening to garnish wages, seize property, or file a lawsuit when the collector does not actually intend to take such action or does not have the legal authority to do so violates this section.
How This Applies to You
Debt collectors lie — it is their most common violation. They may tell you they will sue you when they have no intention of doing so. They may claim to be attorneys, government agents, or credit bureau employees. They may inflate the amount you owe or claim that time-barred debts are still legally enforceable. If any statement by a collector is false, misleading, or deceptive, it violates §807. Save all letters and record all calls (if legal in your state) to document false statements. Each false statement can be a separate violation.
§808 prohibits debt collectors from using unfair or unconscionable means to collect or attempt to collect any debt. This section covers practices that may not necessarily be false or harassing but are nonetheless unfair and oppressive.
Specific prohibited practices include: collecting any amount (including any interest, fee, charge, or expense) unless such amount is expressly authorized by the agreement creating the debt or permitted by law; soliciting a post-dated check for the purpose of threatening criminal prosecution; depositing or threatening to deposit a post-dated check before the date on the check; and causing charges to be made to the consumer for communications such as collect telephone calls or telegram fees.
Debt collectors are also prohibited from: taking or threatening to take any non-judicial action to dispossess property when there is no present right to possession of the property or when the property is exempt by law from such action; communicating with a consumer about a debt through the use of postcards; and using any language or symbol on any envelope in connection with a debt communication that indicates the sender is in the debt collection business.
The FDCPA prohibits debt collectors from using any methods that are considered shocking, unfair, or unconscionable in the collection of consumer debts. Courts have interpreted this prohibition broadly, applying it to novel collection practices that are designed to pressure or coerce consumers, such as threatening to contact immigration authorities or reporting debts to credit bureaus in a misleading manner.
How This Applies to You
A debt collector cannot add fees, interest, or charges that were not part of the original debt agreement unless authorized by law. Review the collector's validation notice carefully — if they are trying to collect amounts beyond what you owe, they may be violating §808. Also, any envelope or postcard that reveals a debt collector sent it is a violation. If you receive a postcard from a collection agency, or an envelope that references "debt collection" or a similar phrase, document it — this is a clear violation.
§809 requires debt collectors to send a written validation notice to the consumer within five days after the initial communication with the consumer about the debt. This notice must contain: the amount of the debt; the name of the creditor to whom the debt is owed; a statement that unless the consumer disputes the validity of the debt within 30 days, the debt will be assumed valid; and a statement that if the consumer notifies the collector in writing within 30 days that they dispute the debt, the collector will obtain verification of the debt and mail it to the consumer.
The validation notice must also inform the consumer that if the collector provides the name and address of the original creditor, the collector will provide that information upon the consumer's written request made within 30 days. The notice must be stated clearly so that the consumer understands their rights to dispute the debt and request verification.
If the consumer disputes the debt in writing within the 30-day period, the debt collector must cease all collection activities until the collector obtains verification of the debt and mails a copy of the verification to the consumer. The collector may not continue collection efforts during this period, including telephone calls, letters, reporting to credit bureaus, or filing lawsuits.
The consumer's dispute must be in writing to trigger the validation requirements. Courts have held that oral disputes do not require the collector to cease collections. The collector must provide the consumer with the "mini-Miranda" warning in all communications: "This is an attempt to collect a debt and any information obtained will be used for that purpose."
How This Applies to You
§809 gives you one of your most powerful tools: the 30-day validation period. When a debt collector first contacts you, they must send a written validation notice within five days. You then have 30 days to dispute the debt in writing. If you dispute in time, the collector must stop all collection activity until they provide proof of the debt. Many debt buyers cannot produce proper documentation, which means you can force them to abandon collection. Always dispute in writing within 30 days — send your letter certified mail with return receipt.
§810 governs how debt collectors must apply payments when a consumer owes multiple debts to the same collector. If a consumer makes a payment to a debt collector regarding multiple debts, the collector may not apply the payment to any debt that the consumer has disputed unless the consumer expressly directs the collector to do so.
If a consumer owes multiple debts and makes a payment that is insufficient to satisfy all debts, the collector must apply the payment according to the consumer's instructions. If the consumer does not provide instructions, the collector may apply the payment to any debt, but may not apply the payment to a disputed debt.
This section prevents debt collectors from unfairly allocating payments to maximize their recovery at the consumer's expense. For example, a collector cannot apply a partial payment to a disputed debt and then continue collections on the undisputed debt. The collector must honor the consumer's directions regarding how payments should be applied.
How This Applies to You
If you owe multiple debts to the same collector and make a payment, you have the right to direct how that payment is applied. If you do not provide instructions, the collector still cannot apply your payment to a disputed debt. If the collector misapplies your payment — for example, applying it to a disputed debt and continuing to pursue you for an undisputed one — they have violated §810. Always provide written instructions when making partial payments on multiple debts.
§811 restricts where debt collectors may file lawsuits against consumers. A debt collector may bring a legal action against a consumer only in the judicial district where the consumer signed the contract, or where the consumer resides at the commencement of the action. For suits seeking to enforce an interest in real property securing the consumer's obligation, the action must be brought in the judicial district where the property is located.
This venue restriction prevents debt collectors from suing consumers in inconvenient or distant locations to make it difficult for the consumer to defend themselves. The "judicial district where the consumer resides" means the district where the consumer actually lives when the lawsuit is filed, not where they lived when the debt was incurred.
A debt collector who violates this venue provision may be liable for damages. The consumer may also be able to vacate any default judgment obtained in an improper venue and recover damages and attorney's fees.
How This Applies to You
If a debt collector sues you, they must file the lawsuit in the county where you live or where you signed the contract. If they file in a distant county to make it harder for you to defend yourself, they are violating §811. This is a common tactic used by debt buyers who file lawsuits in friendly jurisdictions. Check the venue carefully — if it is incorrect, you can move to dismiss the lawsuit and may have a counterclaim against the collector for venue violations.
§812 makes it unlawful for any person to design, compile, and furnish any form or document that creates a false belief in a consumer that a person other than the creditor is participating in the collection of the debt. This targets "deceptive forms" that make the consumer think an attorney or third party is involved when they are not.
The section specifically prohibits any person from designing, compiling, and furnishing any form that simulates or creates the false impression that it has been authorized, issued, or approved by any court, official, or agency of the United States or any state, or that it is a legal document or process.
This provision is aimed at "flat-rating" schemes where creditors provide debt collectors with forms that make it appear as though a third party is collecting the debt, when in reality the creditor is doing the collection. Any person who violates this section is subject to the same civil liability as a debt collector.
How This Applies to You
If you receive a collection letter that looks like it is from an attorney or a court, but is actually from the creditor or a collection agency using deceptive forms, this may violate §812. Some debt collectors use letterhead that mimics legal documents or government forms to intimidate consumers into paying. If a letter looks like a lawsuit filing, a subpoena, or a government notice, but is not a genuine legal document, you may have a claim under this section. Keep the envelope and the letter as evidence.
§813 provides the civil remedy for violations of the FDCPA. Any debt collector who fails to comply with any provision of the FDCPA is liable to the consumer for actual damages sustained as a result of the failure, plus additional statutory damages of up to $1,000 per violation, as determined by the court. The consumer may also recover the costs of the action and reasonable attorney's fees.
In determining the amount of statutory damages, the court must consider the frequency and persistence of noncompliance by the debt collector, the nature of the noncompliance, and the extent to which the noncompliance was intentional. This means that a collector who repeatedly violates the law faces higher damages than one who commits an isolated technical violation.
The FDCPA also provides for class action relief. In a class action, the named plaintiffs and other class members may recover actual damages, and the class may recover statutory damages of up to the lesser of $500,000 or 1% of the debt collector's net worth. Attorney's fees and costs are also recoverable in class actions.
An action under the FDCPA must be brought within one year from the date on which the violation occurs. This statute of limitations is strict, and courts have generally measured it from the date of the actual violation, not the date the consumer discovered the violation. However, some courts have applied equitable tolling in limited circumstances.
How This Applies to You
The FDCPA gives you powerful remedies. For each violation, you can recover up to $1,000 in statutory damages — PLUS actual damages (such as emotional distress) — PLUS attorney's fees. This means you can hire an FDCPA attorney without paying upfront costs, because the debt collector pays the attorney if you win. However, you must file your lawsuit within one year of the violation. This is a very short window — shorter than most other consumer protection laws. Do not delay if you believe your rights have been violated.
§814 delegates enforcement of the FDCPA to the Consumer Financial Protection Bureau (CFPB) and the Federal Trade Commission (FTC). The CFPB has primary rulemaking and enforcement authority over debt collectors, including the power to issue regulations, conduct investigations, and bring enforcement actions.
The FTC retains authority to enforce the FDCPA against entities not subject to CFPB jurisdiction and may bring enforcement actions under the FTC Act's prohibition on unfair or deceptive acts or practices. The FTC has historically been the primary federal enforcer of the FDCPA and has brought hundreds of enforcement actions against debt collectors for violations including harassment, false representations, and unfair practices.
State attorneys general may also bring civil actions to enforce the FDCPA in federal district court when there is reason to believe that residents of their state have been harmed by a violation. The state must notify the CFPB before filing such an action. State attorneys general may recover damages, restitution, injunctive relief, and attorney's fees.
How This Applies to You
You can file a complaint against a debt collector with the CFPB, the FTC, or your state attorney general. While these agencies do not resolve individual disputes or award damages to you personally, enforcement actions can result in fines, restitution, and orders requiring the collector to change its practices. Filing a complaint also creates a paper trail that can help your private lawsuit. Many state attorneys general actively pursue debt collection abuses, so filing a complaint with your state AG can be effective.
§815 requires the CFPB and the FTC to submit annual reports to Congress summarizing their enforcement activities under the FDCPA. These reports must include the number and nature of consumer complaints received, the actions taken on those complaints, and a summary of enforcement actions brought against debt collectors during the prior year.
The reports also include statistical data on the most common types of FDCPA violations found by the agencies, the number of debt collectors operating in the United States, and recommendations for legislative or regulatory changes to improve consumer protections against debt collection abuses.
These annual reports have documented the persistent problem of debt collection abuse in the United States, with hundreds of thousands of consumer complaints filed each year. The most common complaints include collectors continuing to contact consumers after being asked to stop, false statements or representations, and attempts to collect debts the consumer does not owe. These reports are publicly available and provide valuable insight into the debt collection industry.
How This Applies to You
The annual reports under §815 document the scope of debt collection abuse and the types of violations that are most common. You can use these reports to demonstrate that your experience is part of a broader pattern of abuse by the debt collection industry. When filing a complaint or lawsuit, referencing the CFPB's annual report data can help establish that the debt collector's conduct is not an isolated incident but part of a systemic pattern.
Fair Credit Billing Act 15 U.S.C. § 1666
The Fair Credit Billing Act (FCBA), enacted in 1974 as an amendment to the Truth in Lending Act, establishes procedures for resolving billing errors on open-end credit accounts such as credit cards and revolving charge accounts. The FCBA requires creditors to promptly correct billing errors and provides consumers with a mechanism to dispute charges without damaging their credit standing during the dispute process.
A billing error is defined broadly to include: any charge for goods or services not accepted by the consumer or not delivered as agreed; any charge for which the consumer requests clarification or documentation; any charge that reflects an incorrect amount; any charge made without the consumer's authorization; and any failure to credit a payment or credit to the consumer's account. The definition also includes computational errors, incorrect finance charges, and any charge the consumer disputes as a billing error.
To invoke FCBA protections, the consumer must send a written notice of the billing error to the creditor at the address designated for billing disputes, which must be included on the periodic statement. The notice must be received by the creditor within 60 days of the date the first statement containing the error was sent. The consumer must include their name, account number, a description of the error, and the amount in question.
The FCBA does not apply to debit card transactions or to loans made in a single transaction, such as auto loans or mortgages (closed-end credit). It applies only to open-end credit accounts including credit cards, store charge cards, and home equity lines of credit.
How This Applies to You
If you see a charge on your credit card statement that you did not authorize, or that is for the wrong amount, or for goods you never received, you have 60 days from the statement date to dispute it in writing. The FCBA gives you the right to withhold payment on the disputed amount during the investigation without the creditor damaging your credit or reporting you as delinquent. This is one of the most powerful consumer protections available for credit card disputes.
The FCBA required the Federal Reserve Board to amend Regulation Z to implement its provisions. Regulation Z (12 CFR Part 226) now contains detailed rules governing the billing error resolution process, including specific requirements for periodic statement disclosures, the content of billing error notices, and the timeline for creditor response.
Under Regulation Z, creditors must include a billing rights summary on each periodic statement sent to consumers. This summary must include the creditor's address for billing error notices, a telephone number for inquiries, and a clear description of the consumer's rights and responsibilities under the FCBA. The statement must also include a notice that the consumer has 60 days to dispute errors in writing.
Regulation Z also requires creditors to include a "billing rights" notice in the initial mailing to new account holders and at least once per calendar year thereafter. This ensures consumers are continually informed of their right to dispute billing errors and the procedures for doing so.
How This Applies to You
Your credit card statement must include information about your billing dispute rights. Look for the "Your Billing Rights" statement on the back of your statement. This tells you exactly where to send dispute letters. If your creditor does not include this information, they are violating Regulation Z and you may have additional remedies. Always follow the specific address on the statement — sending the dispute to the general customer service address may not trigger FCBA protections.
Upon receiving a written billing error notice within the 60-day period, the creditor must acknowledge receipt within 30 days, unless the creditor resolves the error within that period. The creditor must then conduct a reasonable investigation and either correct the error or provide a written explanation of why the creditor believes the billing statement was correct.
The creditor has a maximum of two complete billing cycles (but not more than 90 days) from receipt of the notice to resolve the billing error. If the creditor determines that a billing error occurred, it must credit the consumer's account with the disputed amount and any related finance charges, late fees, or other charges. The creditor must also refund any overpayment caused by the error.
If the creditor determines that no billing error occurred, the creditor must provide a written explanation of the reasons and, upon the consumer's request, provide copies of documentary evidence of the consumer's indebtedness. The creditor must also notify the consumer of the amount due and the date by which it must be paid.
During the investigation period, the creditor may not take any action to collect the disputed amount, including sending collection notices, reporting the amount as delinquent to credit bureaus, or accelerating the balance. The creditor may not close or restrict the account solely because the consumer disputed a billing error.
How This Applies to You
Once you send your billing dispute letter, the creditor must acknowledge it within 30 days and resolve it within 90 days. During this time, they cannot report the disputed amount as late to credit bureaus, try to collect it, or close your account. This gives you significant leverage — if you have a legitimate dispute, you can withhold payment on the disputed amount while the investigation is ongoing. Keep copies of all correspondence and send your dispute to the correct address listed on your statement.
While a billing error investigation is pending, the consumer has the right to withhold payment of the disputed amount and any related finance charges. The creditor may not accelerate the consumer's debt, restrict the consumer's credit line, or take any other adverse action against the consumer because of the failure to pay the disputed amount during the investigation period.
However, the consumer must continue to pay any undisputed amounts on time. If the consumer fails to pay undisputed amounts, the creditor may take action as permitted by the account agreement, including reporting late payments to credit bureaus or accelerating the entire balance.
The creditor may not report the disputed amount as delinquent to any credit bureau or third party during the dispute period. If the creditor reports the consumer's credit information to a credit bureau, the report must indicate that the amount is disputed. If the creditor reports information to a credit bureau after the consumer disputes an amount but before the investigation is complete, the creditor must include a statement that the amount is in dispute.
If the creditor violates these protections, the consumer may be entitled to damages. The FCBA provides for actual damages plus twice the amount of any finance charge assessed on the disputed amount, up to a maximum of $500, plus attorney's fees and costs. The creditor is also liable for any damages caused by wrongful credit reporting during a pending dispute.
How This Applies to You
When you dispute a charge, you can withhold payment on that specific charge without fear of credit damage or collection activity. However, you MUST continue paying the rest of your bill on time. This is a common trap — consumers stop paying their entire bill and then face consequences on the undisputed portion. Pay everything except the disputed amount, and document that you are doing so. If the creditor reports the disputed amount as delinquent during the investigation, they have violated the FCBA and you may be entitled to damages.
§165 governs how creditors may report information to credit bureaus during a pending billing dispute. If a creditor receives a billing error notice and subsequently reports information to a credit bureau regarding the disputed amount, the creditor must include a statement that the amount is in dispute. Failure to do so constitutes a violation of the FCBA.
Once the investigation is complete, if the creditor determines that no billing error occurred and the consumer still owes the amount, the creditor may report the amount as due. However, the creditor must give the consumer the name and address of any credit bureau to which the information was reported, and must include in any subsequent credit report a statement that the amount was disputed by the consumer, if the consumer has requested such a statement.
If the creditor determines that a billing error did occur and corrects it, the creditor must ensure that any credit bureau that previously received incorrect information is notified of the correction. The creditor must also take steps to ensure that the corrected information is properly reflected in the consumer's credit file.
These reporting requirements work in conjunction with the FCRA's dispute provisions to provide comprehensive protection against inaccurate information being reported on a consumer's credit report as a result of billing disputes.
How This Applies to You
If a creditor reports a disputed amount to a credit bureau before the investigation is complete, they must indicate the amount is disputed. If they fail to do so, check your credit report after filing a dispute — if the item appears as delinquent with no "disputed" notation, the creditor has violated the FCBA. This is a common issue that can be used as leverage to negotiate removal of the item from your credit report. Under both the FCBA and FCRA, you have powerful rights when creditors report disputed information inaccurately.
Credit Repair Organizations Act 15 U.S.C. § 1679
This title may be cited as the "Credit Repair Organizations Act." Enacted by Congress in 1996, the CROA is a consumer protection statute designed to regulate the credit repair industry and protect consumers from deceptive and abusive practices by credit repair organizations.
The CROA replaced the largely ineffective state-level regulation of the credit repair industry with a comprehensive federal framework. Prior to the CROA, many credit repair companies engaged in fraudulent practices, charging consumers large upfront fees for services that were often worthless or illegal.
The CROA applies to all credit repair organizations operating in or affecting interstate commerce, which includes virtually every business that offers to improve a consumer's credit record, history, or rating in exchange for payment.
How This Applies to You
The CROA protects you from credit repair scams. If a company promises to "fix" your credit for a fee, the CROA gives you powerful rights, including the right to cancel within three days and the right to sue for damages if they violate the law. Most importantly, credit repair companies cannot charge you before providing services. If you have paid upfront fees to a credit repair company, you may be entitled to a refund plus damages under the CROA.
Congress found that consumers have a vital interest in establishing and maintaining good credit worthiness, and that credit repair organizations often charge large fees for services that provide little or no real benefit to consumers. Congress found that some credit repair organizations use fraudulent, deceptive, and misleading practices, and that consumers need protection from these practices.
Congress further found that the previous system of state regulation had proven inadequate to protect consumers from credit repair abuses. Many credit repair organizations operated across state lines, making it difficult for individual states to regulate them effectively.
The purposes of the CROA are to ensure that consumers are provided with accurate information about credit repair services and their costs, to prohibit deceptive and misleading advertising practices, and to provide consumers with enforceable rights to cancel credit repair contracts and recover damages for violations.
How This Applies to You
Congress enacted the CROA specifically because consumers were being exploited by credit repair companies. The law recognizes that many of these companies charge high fees for services consumers could do themselves. You can do everything a credit repair company can do — disputes, goodwill letters, debt validation — for free. If you are paying for credit repair, the CROA gives you the right to cancel and demand a refund.
§403 defines key terms under the CROA. A "credit repair organization" is defined as any person who uses any instrumentality of interstate commerce or the mails to sell, provide, or perform any service in return for the payment of money or other valuable consideration for the purpose of: improving any consumer's credit record, credit history, or credit rating; providing advice or assistance to any consumer regarding improving their credit record, history, or rating; or representing, expressly or impliedly, that they can or will improve a consumer's credit record.
The definition excludes several categories: non-profit organizations exempt from taxation under section 501(c)(3) of the Internal Revenue Code; creditors who assist consumers in repairing their own credit records without charging a separate fee; and licensed real estate brokers or attorneys whose credit repair activities are incidental to their primary business. However, even these entities may be covered if credit repair is a substantial part of their business.
A "consumer" under the CROA is defined as any individual who is solicited to purchase or who purchases the services of a credit repair organization. "Services" includes any advice, assistance, or instruction regarding improving a consumer's credit record, history, or rating, including any analysis of a consumer's credit situation and recommendations for improvement.
How This Applies to You
The CROA covers virtually any for-profit business that offers to help you improve your credit. This includes companies that offer to dispute items on your behalf, provide credit education for a fee, or sell credit monitoring with repair promises. If you pay someone to help with your credit and they are not a non-profit or an attorney acting incidentally, they are likely a credit repair organization and must comply with CROA requirements. Check whether any company you hire provides the mandated disclosures and contract rights.
§404 lists specific practices that are absolutely prohibited for credit repair organizations. First and foremost, a credit repair organization may not charge or receive any money or other valuable consideration for performing any service before the service is fully performed. This is the CROA's most important prohibition — no upfront fees for credit repair services.
Credit repair organizations are also prohibited from: making any false or misleading statement in connection with the sale or performance of any credit repair service; misrepresenting to any consumer, either directly or indirectly, that they can erase or remove accurate negative information from a credit report; and advising consumers to make false statements or misrepresentations to credit bureaus, creditors, or anyone else regarding their credit history.
The CROA also prohibits credit repair organizations from: advising consumers to change their name, address, Social Security number, or other identifying information for the purpose of creating a new credit record; creating a new credit identity for a consumer; and making any representation that they will obtain a new credit identity for a consumer. These practices are commonly known as "file segregation" and are illegal.
Additionally, credit repair organizations may not: engage in any act or practice that is fraudulent, deceptive, or misleading; fail to perform services as promised; or misrepresent the nature or effect of any service they provide. Any violation of these prohibitions is a violation of the CROA and gives the consumer a right to sue.
How This Applies to You
The most important prohibition in the CROA is the ban on upfront fees. If a credit repair company charges you before they have completed the services they promised, they are violating federal law. You are entitled to a full refund plus damages. The CROA also makes it illegal for credit repair companies to advise you to do anything fraudulent, such as creating a new credit identity. Legitimate credit repair focuses on disputing inaccurate, unverifiable, or obsolete information — not on hiding or fabricating information.
§405 requires credit repair organizations to provide consumers with specific written disclosures before any contract is signed. The CROA mandates a detailed disclosure statement that must include: the total amount the consumer will be charged for services; a complete and detailed description of the services to be performed; and the results the organization represents it can achieve.
Most importantly, the CROA requires the credit repair organization to provide a specific statement informing the consumer that they have the right to dispute inaccurate information on their credit report directly with the credit bureau for free, and that the credit repair organization cannot remove accurate negative information from a credit report. This statement must be prominent and in at least bold-face type.
The disclosure must also include: the consumer's right to receive a copy of their credit report from each credit bureau; the consumer's right to dispute inaccurate information directly and without charge; and a statement that the consumer may proceed without the assistance of the credit repair organization. The disclosure must be provided on a separate document that is signed and dated by the consumer.
The credit repair organization must also provide the consumer with a copy of any contract they sign and a complete, itemized statement of all services that have been performed, updated on a regular basis as services are completed. Failure to provide any of these disclosures is a violation of the CROA.
How This Applies to You
Before signing a credit repair contract, the company must give you a written disclosure that explains you can dispute items on your own for free. They must also tell you that they cannot remove accurate negative information. If you did not receive this disclosure before signing, the company has violated the CROA. You are also entitled to a copy of the signed contract. Keep all documents — if the company did not follow the disclosure requirements, you may have a claim for damages.
§406 requires all credit repair contracts to be in writing, dated, and signed by both the consumer and the credit repair organization. The contract must contain: the terms and conditions of payment, including the total amount to be paid; a full and detailed description of the services to be performed; an estimate of the time period within which the services will be performed; and a conspicuous notice in bold-face type explaining the consumer's right to cancel the contract within three business days.
The contract must also include the name and business address of the credit repair organization. The three-day cancellation notice must be placed immediately above the space reserved for the consumer's signature, in at least 10-point bold-face type, and must state clearly: "You may cancel this contract without any penalty or obligation at any time before midnight of the third business day after the date on which you signed this contract."
If the contract does not contain these required provisions, it is void and unenforceable. The consumer is entitled to a refund of all money paid and may also seek damages for violations. The credit repair organization bears the burden of proving that it provided all required disclosures and contract provisions.
How This Applies to You
Your credit repair contract must include specific language about your three-day cancellation right, placed directly above where you sign. If the contract lacks this notice or any other required element, the contract is void and you can demand all your money back. Additionally, you have three business days to cancel for any reason — or no reason at all. If a company makes it difficult to cancel or refuses your cancellation request, they are violating the CROA.
§407 gives consumers an unconditional right to cancel a credit repair contract within three business days of signing. The cancellation period runs from the date the consumer signs the contract, and the consumer does not need to provide any reason for cancellation. The cancellation is effective when the consumer gives written notice of cancellation to the credit repair organization.
Upon receiving a cancellation notice, the credit repair organization must refund all money received from the consumer within 10 business days. The organization may not retain any portion of the fees, including application fees, processing fees, or consultation fees. The refund must be made regardless of whether any services have been performed before the cancellation.
The credit repair organization is prohibited from: taking any action to collect payment from the consumer after cancellation; continuing to perform any services after cancellation; making any charges to the consumer's credit card or bank account; or taking any action that would require the consumer to pay for services after cancellation. The contract is void from the moment of cancellation.
The credit repair organization must also notify the consumer in writing that the contract has been cancelled and that no further charges will be made. The organization must return any documents or materials provided by the consumer in connection with the contract.
How This Applies to You
You have three business days to cancel a credit repair contract for any reason. Send your cancellation notice in writing (certified mail with return receipt) before midnight of the third business day. The company must refund all money within 10 business days — including any application or processing fees. If they do not refund promptly, they are violating the CROA and you can sue for actual damages, punitive damages, and attorney's fees. Never let a credit repair company pressure you into waiving your cancellation rights.
§408 provides the civil remedy for violations of the CROA. Any credit repair organization that fails to comply with any provision of the CROA is liable to the consumer for: actual damages sustained by the consumer as a result of the failure; punitive damages as the court may allow; and reasonable attorney's fees and costs incurred in bringing the action.
The consumer does not need to prove that they relied on any false statement or that they suffered actual harm to recover. The mere violation of the CROA is sufficient to establish liability. Courts have held that the CROA's damage provisions are remedial and should be construed broadly to effectuate Congress's intent to protect consumers.
An action under the CROA must be brought within five years after the date of the occurrence of the violation. This longer statute of limitations, compared to the FCRA and FDCPA, reflects Congress's understanding that consumers may not immediately discover violations by credit repair organizations.
Any waiver by a consumer of any CROA protection is void. Consumers cannot be required to waive their rights under the CROA as a condition of receiving services. Any contract provision that purports to waive CROA rights is unenforceable, and any attempt to require arbitration of CROA claims may be invalid if it prevents the consumer from effectively vindicating their statutory rights.
How This Applies to You
If a credit repair company violates the CROA — by charging upfront fees, failing to provide proper disclosures, or refusing to honor a cancellation — you can sue for actual damages, punitive damages, and attorney's fees. You have five years to file, which is much longer than the one-year limit under the FDCPA or the two-year limit under the FCRA. And here is the key: you cannot waive your CROA rights. Even if you signed a contract that says you give up these rights, that provision is void and unenforceable.