For years, a lot of people treated a CFPB complaint as step one. Spot an error, file a complaint, wait for the bureau to jump.
That order is done. As of September 2026, the CFPB's notice for credit reporting complaints says you are "required by law to first dispute the information directly with the credit or consumer reporting agency." Skip that step, and the CFPB will stop processing your complaint once the company tells it you never disputed.
Here's what changed, what didn't, and how I'd dispute an error so it gets a real investigation.
Do I have to dispute with the credit bureau before filing a CFPB complaint?
Yes, if your complaint is about inaccurate or incomplete information on your credit report. The CFPB requires you to attest that you disputed with the credit bureau more than 45 days ago or that the dispute is no longer pending, and it will discontinue processing your complaint if the company alerts it that you didn't dispute first.
The 45-day mark lines up with the Fair Credit Reporting Act. A bureau gets 30 days to investigate a dispute, plus up to 15 more if you send it relevant information during those 30 days. That's 45 days at the outside.
So the complaint is now the second move. It's for when the dispute process failed you, not a way around it.
Why did the CFPB change its complaint rules?
The CFPB says the complaint system was being used to skip the dispute process the law already sets up. In its June 24, 2026 announcement, it put it directly: "Some credit repair clinics and individuals are using the Bureau's complaint process to circumvent this statutory process."
Look at the numbers behind that. The CFPB received more than 150,000 credit reporting complaints in 2019 and more than five million in 2025. It has added two-factor authentication to complaint accounts, and it plans to add address validation when a complaint is submitted.
It's not the only crackdown on the industry this year. In August, the FTC got a federal court order temporarily halting Credit Glory, an operation of 17 companies the FTC says took nearly $200 million from consumers through illegal advance fees and deceptive ads. That case is at the temporary restraining order stage, not a final judgment. If you're deciding who to trust with your file, here's how to spot a scammy credit repair company.
Did the FCRA dispute rules change in 2026?
No. The dispute section of the Fair Credit Reporting Act, 15 U.S.C. 1681i, was last amended in 2018, according to the U.S. Code as of September 2026. What changed this year is how the CFPB handles complaints, not your dispute rights or the bureaus' deadlines.
If you've read about a "2026 FCRA update" that supposedly changed how disputes work, ask for the citation. The dispute rights in the statute are the same ones you had last year. The only thing that moved is the CFPB's front door.
What can I dispute on my credit report?
Anything inaccurate, unverifiable, or outdated. Under the Fair Credit Reporting Act, a bureau has to delete information it finds inaccurate or incomplete or can't verify, and most negative items stop being reportable after seven years, bankruptcies after ten.
For a collection or a charge-off, the seven years start 180 days after the delinquency that led to it began. That's why the date of first delinquency on your file matters so much. A wrong date there means a wrong seven-year clock.
Here's the part the "dispute everything" crowd leaves out. If a late payment or a collection is accurate and still inside its reporting window, it stays. The FCRA also lets a bureau stop investigating a dispute it reasonably decides is frivolous or irrelevant. A stack of blanket disputes on accurate items hands the bureau a reason to use it.
How do I dispute a credit report error the right way?
Dispute with each bureau that shows the error, and with the company that reported it. The CFPB says to include your full name, address, and phone number, each error you want fixed with its account number, and copies (not originals) of documents that back you up.
Be specific. "This isn't right" gives an investigator nothing to check. "This account shows a date of first delinquency of March 2021, but my statements show it was current through August 2021, copies attached" gives them something to verify or correct.
Once the bureau has your dispute, the law puts it on a clock:
- 30 days to investigate, or up to 45 if you send relevant information during the first 30.
- 5 business days to pass your dispute to the company that furnished the information.
- 5 business days after it finishes to send you the results in writing.
Keep a copy of everything you send and the date you sent it. If you end up filing a CFPB complaint, you'll need to know when those 45 days are up.
What if the bureau doesn't fix the error?
Once your dispute is no longer pending, or more than 45 days have passed, you can file a CFPB complaint. Before you get there, the CFPB points to two other moves: dispute directly with the company that supplied the information, which generally has 30 days to investigate and respond, and ask the bureaus to add a statement explaining your dispute to your report.
Identity theft runs on its own track. If an account was opened by someone using your information, the process and the documents are different. Here's how to handle items that aren't yours.
The order that works now
- Pull all three reports at AnnualCreditReport.com and read each account line by line.
- Dispute each error with the bureau that shows it, with documents.
- Dispute with the company that reported it, too.
- Write down the date each dispute went out.
- Read the results when they arrive, bureau by bureau.
- File a CFPB complaint only if the error survived and the dispute is no longer pending or more than 45 days have passed.
If you're a client of mine, text me at 1-877-892-6691 before you send a dispute or file a complaint, and I'll check the item against your file first. If we haven't worked together, book a free call to go over your report. I'll read it line by line and tell you which items have real grounds for a dispute and which ones don't.