State Credit Services Acts: Bonds and Extra Rights Beyond CROA

A state credit services act is the layer of protection most people never hear about until something goes wrong. Federal law — the Credit Repair Organizations Act (CROA) — sets a baseline every credit repair company has to meet nationwide. Most states go further. They require companies to post a surety bond and get licensed before they can legally operate there. If you're researching a credit repair company, knowing both layers exist is the difference between checking one box and actually being covered.

Here's why that gap matters: "CROA compliant" and "legally operating in your state" aren't the same thing. A company can follow the federal contract rules to the letter and still be unbonded, unlicensed, or otherwise out of step with your state's credit services act. Below: what CROA guarantees everywhere, how much states typically require on top of it, and which rights travel with you no matter where you live.

The Federal Floor, Not the Ceiling

(https://www.law.cornell.edu/uscode/text/15/1679d), requires a signed written contract spelling out costs and services, and gives every consumer a 3-business-day window to cancel without penalty or explanation. That contract also has to disclose the company's name, business address, and — in bold type — the exact cancellation language the law requires. These protections apply in all 50 states, no matter what a state's own credit services act says on top.

What CROA doesn't do is stop states from adding more. (https://www.law.cornell.edu/uscode/text/15/1679j) — it doesn't block states from layering on stricter licensing, bonding, or trust-account rules. That's the legal hook behind the state-by-state patchwork of credit services acts, and it's why the exact bond amount a company needs depends entirely on where it's registered to do business.

(https://www.ftc.gov/legal-library/browse/statutes/credit-repair-organizations-act) confirms the same three federal pillars — no advance fees, written contract, right to cancel. Think of them as the floor every state builds on, not the ceiling.

How Much States Actually Require

Bond amounts vary more than most people expect. (https://surety1.com/state-by-state-guide-to-credit-services-bonds/), and a handful of states let regulators raise that ceiling as high as $1,000,000 for repeat violators or larger operations. California, Illinois, Louisiana, Nebraska, Nevada, and Tennessee all sit at the $100,000 mark — among the highest in the country.

A few states skip the flat number entirely. Arizona, New Hampshire, and Pennsylvania size the bond as a percentage of the company's total credit-services fees (5% in each case), so it grows as the business does. And in several states — Illinois, Iowa, Missouri, Nebraska, and Tennessee among them — the bond has to stay in force for two full years after a company closes. That's specifically so consumers with unresolved claims aren't left with nothing to collect against.

If you're in a state with a dedicated credit services statute, it's worth knowing the specifics before you sign anything. Readers in California can check California's credit-services law for the state's $100,000 bond requirement under the California Credit Services Act of 1984. Readers in Texas can check Texas's credit-services law for that state's continuous $10,000 bond rule.

What the Bond Doesn't Cover

A surety bond is a financial backstop, not a results guarantee. It exists so that if a company violates your state's credit services act — charging an illegal advance fee, breaking its own contract, skipping required disclosures — you or your state regulator can file a claim against the bond and recover money, up to its face amount. It says nothing about whether the company can actually improve your credit score, because no company legally can promise that. Accurate negative items on your credit report can't be removed for a fee by anyone, bonded or not. That's an FCRA fact, not a bonding technicality.

Some rights don't depend on the bond amount at all. (https://www.consumerfinance.gov/archive/newsroom/consumer-advisory-people-have-the-right-to-cancel-credit-repair-services/) — a right that stacks on top of, not instead of, the federal 3-day cancellation window. A bond alone won't stop a company from using misleading sales tactics, either. For the fuller pattern of red flags to watch for, see our guide to (/research/credit-repair-scam-red-flags-ftc-warns-about).

Frequently Asked Questions

Does every state require credit repair companies to have a surety bond?

Most states do, but not all — and the amounts vary widely, from around $3,000-$5,000 up to $100,000 or more depending on the state. A few states rely on licensing and trust-account rules instead of a standalone bond. Before signing with a company, check your state attorney general's or state banking regulator's website to confirm it's properly bonded or licensed where you live.

What does a credit services bond actually protect me from?

A surety bond is a financial guarantee the company posts before it's allowed to operate in a state. If the company violates the state's credit services act — say, by charging illegal advance fees or breaking its contract — you or the state can file a claim against the bond to recover money, up to the bond's face amount. It doesn't guarantee results, and it won't cover disappointment with outcomes the company never promised in writing.

Can a state require more than federal law (CROA) does?

Yes. Under 15 U.S.C. § 1679j, CROA only preempts a state law that directly conflicts with it — it doesn't stop states from adding requirements on top. That's why bonding, licensing, and registration rules vary so much state to state, while the federal 3-day cancellation right and advance-fee ban apply everywhere.

Can a credit repair company still take my money after I sign a contract?

No — not right away. Federal law bars any credit repair organization from charging or collecting a fee until it has fully performed the promised services. That's the CROA advance-fee ban, and it applies nationwide regardless of what a state's bond amount is. A few states with older statutes still permit some pre-completion payment for certain services, but a company that asks for money upfront before doing anything is a major red flag.

How do I check if a company is properly bonded in my state?

Contact your state's attorney general's consumer protection division or the state agency that licenses credit-services organizations — often the same office that handles debt-collector licensing. Ask for the company's bond or license number and confirm it's active. If a company can't produce one, or gets cagey when you ask, treat that as your answer.

Bottom Line

The bond isn't a technicality. It's a real, state-specific layer of protection sitting on top of CROA's federal baseline, and the amount required tells you something about how seriously your state regulates this industry. Before you pay anyone to work on your credit, confirm they're bonded and licensed where you live — and remember that the federal cancellation right travels with you no matter what. Still weighing whether to pay a company at all versus disputing errors yourself? (/#top-companies) before you commit.