In 2024, the CFPB settled with Credit Repair Cloud for $3 million. Key Credit Repair paid $50 million. Grand Teton Professionals was shut down and had $6.2 million frozen. These weren't predatory shops. They were businesses that unknowingly violated federal law.
If you run a solo credit repair operation or small consultancy, the compliance landscape has shifted dramatically. Here are the 5 most common TSR/CROA violations that are landing solo consultants in regulatory crosshairs — and exactly how to fix them.
Charging Upfront Fees Before Results Are Proven
Under the Telemarketing Sales Rule (16 CFR § 310.4) and CROA (15 USC § 1679b), credit repair companies cannot charge any fee until they've delivered a consumer report showing the promised results were actually achieved — and that report must be dated more than 6 months after the results. This isn't a gray area. The law is absolute: no payment of any kind before results are documented.
Key Credit Repair enrolled 40,000 consumers between 2016–2019, charging upfront fees before delivering promised credit improvements. The Massachusetts federal court ruled that their standard practice of collecting payment upfront — even if they did the work later — violated the TSR. The judgment: $50 million. Courts applied statutory damages of $43,280 per violation. With 40,000 consumers, the math was brutal.
- Charging a "consultation fee" before signing a client (even if it's refundable)
- Taking payment via credit card during the first sales call
- Billing for the first month of service before any disputes are filed
- Charging for a "dispute package" before results are proven
- Eliminate phone sales entirely. Move to self-service sign-up forms on your website. If prospects call, direct them to chat or a landing page — do NOT discuss fees on the phone.
- Don't charge until 6+ months after results. File disputes for free first. Once consumers see documented results (improved credit score on an official report), then charge them.
- Keep proof of results. Save dated credit reports (from TransUnion, Equifax, Experian) showing before/after. The CFPB calls this your "audit trail."
- Write it in your contract. State clearly: "You will not be charged until [specific date, 6+ months from now] and only after your credit report shows improvement."
ClearCall's voice agents handle phone inquiries without discussing fees, directing prospects to self-service enrollment. The platform prevents any payment collection until you manually confirm 6+ months have passed and results are verified. Your audit trail is automatically logged.
Missing the 3-Day Cancellation Disclosure
CROA (15 USC § 1679d and § 1679e) requires every credit repair contract to include a conspicuous, bold-faced statement that reads: "You may cancel this contract without penalty or obligation at any time before midnight of the 3rd business day after the date on which you signed the contract." This must appear in immediate proximity to the space where the consumer signs — not buried in fine print, not on a separate page.
Grand Teton's contracts failed to include the 3-day cancellation statement. When consumers tried to cancel, Grand Teton threatened to sue them for violating fake "anti-chargeback" clauses. The FTC froze their assets and shut down operations.
- Using a contract template from 5+ years ago (before the 2024 CFPB crackdown)
- Hiding the cancellation statement in the footer
- Not providing a signed copy to the consumer
- Requiring consumers to call to cancel (instead of allowing written notice)
- Update your contract template now. Download the CROA-compliant template from the FTC website or have an attorney draft it.
- Place the 3-day cancellation statement above your signature line in bold, at least 12pt font, with extra white space around it.
- Email a signed copy to the client immediately. The law requires you to provide written proof of the cancellation right — best delivered as a PDF they can download.
- Document receipt. Track when you sent the contract and when they signed. The FTC will ask for this.
When prospects enroll, ClearCall automatically generates a CROA-compliant contract with the cancellation statement positioned correctly. It emails the signed contract to the consumer and logs the timestamp. Your audit trail is complete.
Failing to Disclose DIY Dispute Rights
CROA (15 USC § 1679c) requires you to provide consumers with a written disclosure — on a single page, in boldface type — before any contract is signed or payment is made. This disclosure must include: the consumer's right to dispute inaccurate information directly with credit bureaus (for free), their right to contact the FTC or CFPB, and the fact that only inaccurate information can legally be removed.
BoostMyScore misled consumers into thinking they had to use credit repair services to remove negative items. They buried the DIY disclosure in fine print and failed to make it clear that consumers could dispute items themselves — for free. Settlement: penalties plus consumer restitution.
- Not providing any written disclosure at all
- Including the disclosure in an email (instead of a standalone page)
- Discouraging consumers from contacting credit bureaus directly
- Saying things like "You'd be wasting your time disputing this yourself"
- Failing to provide the disclosure before the contract is signed
- Create a standalone disclosure document. Download the template from the FTC's CROA compliance page.
- Send it to every prospect before they sign anything. Include it in your enrollment email or require them to download it before accessing the contract.
- Make it clear that DIY disputes are free. Add a note: "If you choose to dispute items yourself, you can contact the credit bureaus directly at no cost."
- Keep proof of delivery. Log when you sent the disclosure and confirm the consumer received it.
ClearCall's enrollment flow automatically presents the DIY disclosure as a standalone PDF before any contract appears. Consumers must acknowledge they've read it before proceeding. The system timestamps everything.
Making Misleading Claims About Credit Score Improvements
CROA and the FTC Act prohibit any statement that guarantees removal of accurate negative information, promises a specific credit score increase, claims you can remove items "100% of the time," or suggests results will happen faster than realistic. You can describe your services — but you cannot promise outcomes you can't guarantee.
The nation's largest credit repair organizations paid $2.7 billion after falsely claiming they could remove all negative items and promising specific credit score improvements. Grand Teton Professionals (2019) claimed to "remove all negative items" and "remove hard inquiries" — assets frozen at $6.2 million.
- Saying "We typically improve scores by 50–100 points" (implied guarantee)
- Claiming "We remove 80% of negative items" (promise of specific results)
- Marketing taglines like "Bad Credit? GONE in 30 days"
- Using before/after testimonials without disclaimers
- ❌ WRONG: "We remove all negative items"
- ✅ RIGHT: "We file disputes with credit bureaus on your behalf to challenge inaccurate or outdated negative items"
- ❌ WRONG: "Guaranteed 100-point improvement"
- ✅ RIGHT: "Results vary based on the accuracy of items on your credit report"
- Audit all your marketing materials. Remove any language that promises specific outcomes.
- Rephrase as descriptions of your process, not promises of results.
- Add a disclaimer to all testimonials: "This is one customer's experience; results vary."
- Train anyone handling sales calls on what they can and can't say.
ClearCall's system logs every communication with clients automatically. The platform prevents agents from using prohibited language (like "remove," "guarantee," "improve by X points"). All client interactions are recorded and reviewed for compliance.
Failing to Maintain an Audit Trail for Phone Campaigns
The TSR (16 CFR § 310.4) requires telemarketers to keep detailed records of every phone call with consumers — including the date and time, script used, whether the consumer agreed to services, what fees were discussed, and whether the consumer was placed on a "Do Not Call" list. If the FTC investigates and you can't produce these records, you lose by default.
Credit Repair Cloud provided software that allowed credit repair businesses to take phone calls and charge advance fees without logging interactions. The CFPB ruled that by failing to maintain audit trails, Credit Repair Cloud was substantially assisting illegal activity. CEO Daniel Rosen personally paid $2 million of the settlement.
- Taking phone calls but not logging what was discussed
- Discussing fees verbally without written confirmation
- Not recording calls (where legal) and not documenting what was said
- Failing to track which prospects said "Do Not Call me again"
- Deleting chat logs or emails with clients
- Log every phone call. Record: date, time, caller name, what was discussed, outcome. Even a spreadsheet works.
- Get written confirmation after every call. Email a summary: "Hi John, thanks for our call today. Confirming you agree to enroll..."
- Save everything for at least 3 years — all emails, chat logs, and call notes.
- Respect Do Not Call requests immediately and log them.
- Audit your call logs monthly to ensure no one promised upfront fees or guaranteed results.
ClearCall's voice agents handle inbound and outbound calls with automatic logging. Every call is recorded (with legal consent), and AI transcription is saved to your audit trail. The system flags any agent that uses prohibited language and escalates to you for review. Your compliance documentation is automatically generated for the FTC.
Why This Matters Now
The FTC and CFPB have shifted from going after scammers to going after businesses making honest mistakes. Solo consultants often use outdated templates, don't understand the 6-month rule, don't log phone calls, and make casual promises to close deals.
The enforcement trend is clear:
You don't have to be a scammer to get fined. You just have to make one of these five mistakes — or not be able to prove you didn't.
The Bottom Line
Compliance isn't optional. It's the cost of staying in business. The good news: all five violations are preventable if you:
- ✓ Stop taking phone payments
- ✓ Use CROA-compliant contracts with correct disclosures
- ✓ Remove guarantee language from all marketing materials
- ✓ Keep detailed audit trails of all client interactions
- ✓ Wait 6+ months after proven results before charging
Ready to audit your own operation? Use the CROA compliance checklist — 35 items organized by category, with the exact requirements from each statute.
See How ClearCall Automates CROA Compliance
ClearCall automates all five violations away — built by credit repair consultants, for credit repair consultants.
Resources
- Federal Law FTC Credit Repair Organizations Act →
- Federal Regulation Telemarketing Sales Rule (TSR) Compliance Guide →
- Enforcement Actions CFPB Enforcement Actions Newsroom →
- Templates CROA-Compliant Contract Templates (FTC.gov) →
- Checklist CROA Compliance Checklist (35 Items) →
- Tool Free CROA Compliance Checker →