609 Letters and CPNs: What the Credit Repair Pitch Leaves Out

By Eric Ridley, attorney, Ridley Law. Updated September 2026.

Part of our money myths series, where we look at who gets paid when you follow money advice from social media.

What is a 609 letter?

A 609 letter is a request under Section 609 of the Fair Credit Reporting Act, 15 U.S.C. § 1681g, for a copy of what’s in your credit file and where it came from. That’s all Section 609 does: it requires the bureau to clearly and accurately disclose the information in your file and its sources. The summary of rights the same section requires says a bureau isn’t required to remove accurate derogatory information unless it’s outdated or can’t be verified.

Even a credit bureau says so. Experian’s explainer says a 609 request doesn’t invoke your right to dispute inaccuracies, and that the dispute right is in Section 611 (Experian, 2025).

Does a 609 letter remove accurate debts?

No. A dispute under Section 611, 15 U.S.C. § 1681i, requires the bureau to reinvestigate, usually within 30 days, and to delete an item only if it’s inaccurate, incomplete, or can’t be verified. The 30 days can stretch by up to 15 more if you send new information during the investigation. A bureau can also stop investigating a dispute it reasonably finds frivolous, as long as it tells you within five business days. Mass-produced template letters are what that rule is for.

California has its own version in the Consumer Credit Reporting Agencies Act, which gives bureaus 30 business days (Civ. Code § 1785.16). The FTC says it plainly: no one promising to repair your credit can legally remove information if it’s both accurate and current (FTC). The CFPB adds that you generally can’t have accurate negative information removed (CFPB).

Accurate negative items do age off. Collections and charge-offs drop off after seven years, and bankruptcies after ten (15 U.S.C. § 1681c).

Do credit reports have errors worth disputing?

Yes, and that’s the honest part of the pitch. When the FTC had 1,001 consumers review their reports, 26% found at least one potentially material error, and about 5% saw a score change big enough to move them to a better credit risk tier after disputing (FTC Section 319 study, 2012).

The CFPB says there’s no reason to pay someone to dispute inaccuracies for you, because it’s already a legal right available to you for free. Its 2025 complaint report shows how far the industry has pushed this: it received about 5.8 million credit or consumer reporting complaints that year, and it discussed the growth of third parties, including credit repair organizations and people offering credit advice on social media, filing through its system (CFPB Consumer Response report, 2026).

What is a CPN, and is it legal?

A CPN, sold as a credit privacy number, credit profile number, or secondary credit number, is a nine-digit number used in place of your Social Security number on credit applications. The Social Security Administration’s Inspector General told Congress that CPNs are a means of misusing the SSN and that, despite what credit repair websites imply, CPNs are not legal (SSA OIG testimony, 2011). Prosecutors keep finding where the numbers come from. In one Oklahoma case, the CPNs were stolen Social Security numbers of children born in 2006 and 2008 (DOJ, 2018).

The FTC warns that if you use a number other than your own to apply for credit, you won’t get it, and you could face fines or prison (FTC). The federal statutes back that up:

• 42 U.S.C. § 408(a)(7)(B): falsely representing a number as your Social Security number, with intent to deceive, is a felony punishable by up to five years.
• 18 U.S.C. § 1014: a false statement to influence a federally insured bank or credit union carries up to $1,000,000 in fines or 30 years in prison.

The U.S. Attorney in eastern North Carolina put it in one line after sentencing a ring leader to 100 months: if someone offers to get you a CPN so you can open credit lines or get loans, they are inviting you to participate in a crime (DOJ, 2021). In a related case, the synthetic identities called CPNs were added as authorized users on other people’s cards to build them up, which is the same mechanism sold as tradeline rentals (DOJ, 2022).

Has anyone gone to prison for using a CPN?

Yes, both sellers and buyers. The chart shows sentences from U.S. Attorney releases.

The North Carolina case also shows the risk for people who only use the numbers. Two co-defendants used their real names with nine-digit numbers the Social Security Administration never issued to them. Both pleaded guilty to the conspiracy. One got 24 months, and the other got one day in prison plus eight months of home detention.

What protections does credit repair law give you?

A lot, if you know them. Under the federal Credit Repair Organizations Act, a credit repair company can’t charge you until it has fully performed the service (15 U.S.C. § 1679b(b)), can’t advise you to make untrue statements to a bureau or lender, and can’t advise you to alter your identification to hide your credit record, which is the CPN pitch. Before you sign, it must give you a written disclosure saying no one has the right to have accurate, current, and verifiable information removed (§ 1679c). You have three business days to cancel (§ 1679e), and you can recover at least what you paid if it breaks the law (§ 1679g). The FTC’s Telemarketing Sales Rule separately bars collecting fees for credit repair sold by phone until the promised results show up on a credit report issued more than six months later (16 C.F.R. § 310.4(a)(2)).

California’s Credit Services Act goes further. A credit services organization can’t take money before full performance, can’t remove or advise removing accurate, non-obsolete adverse information, and can’t help you create a new credit record using a different name, address, Social Security number, or employer identification number (Civ. Code § 1789.13). It must register with the Attorney General and post a $100,000 surety bond (§ 1789.18), and a consumer who’s harmed recovers no less than what they paid, plus attorney fees (§ 1789.21). The Attorney General warns specifically against creating a new credit identity with an EIN (California Attorney General).

You can check whether a company is registered on the Attorney General’s list. Every older registration expired on December 31, 2022, so a company that hasn’t registered since then isn’t on it (Attorney General registry).

What happened to Lexington Law?

A federal court in Utah ruled in March 2023 that Lexington Law and its affiliates violated the Telemarketing Sales Rule’s ban on upfront fees, and in August 2023 it entered a judgment of $2,660,926,481 in consumer redress plus civil penalties (CFPB). The companies had filed for bankruptcy, and the CFPB said it would decide whether its victims relief fund can pay the people harmed. Treat the judgment as a measure of the conduct, not money people got back.

Some refunds do arrive. In the Financial Education Services case, the FTC is sending checks to 443,048 customers (FTC, 2026).

What does paid credit repair cost? A worked example

Take a hypothetical borrower who signs up for a year of credit repair at $89.99 a month, the fee alleged in one CFPB case, plus a $199 setup fee. The company sends template letters disputing everything. Accurate items stay, because the law doesn’t require deleting them.

That’s $1,278.88 for letters the borrower could have sent for the price of postage, about real errors only.

What should you do instead?

• Pull all three reports for free at AnnualCreditReport.com. The FTC says the bureaus now let everyone check weekly.
• Dispute specific errors yourself with each bureau and the company that reported the item. Keep copies.
• For accurate negatives, focus on paying on time from here. Most drop off after seven years.
• Never use any number but your own Social Security number on a credit application.
• Before paying any credit repair company, check the California Attorney General’s registry and refuse to pay up front.
• Freeze your children’s credit, since CPN sellers have used kids’ numbers.

If debt is the real problem, see debt settlement and elimination scams before you sign anything.

Frequently asked questions

Does a 609 letter work?

It works as a request for your file. It doesn’t make a bureau delete accurate information, and Experian says a 609 request isn’t a dispute at all. If an item is wrong, a Section 611 dispute is the tool.

Can a credit bureau ignore my dispute?

Only if it reasonably decides the dispute is frivolous or irrelevant, and then it must tell you within five business days. Template letters with no specifics are the usual target.

Is a CPN number legal?

No. The Social Security Inspector General says CPNs aren’t legal, and using a false number as your Social Security number on a credit application can be a felony under 42 U.S.C. § 408 and 18 U.S.C. § 1014.

Can I use an EIN instead of my Social Security number for personal credit?

No. California law bars credit services companies from helping you create a new credit record with a different SSN or EIN, and the Attorney General warns against it.

How much does credit repair cost?

In regulator cases, fees ran about $89 a month plus setup fees of hundreds of dollars. Disputing errors yourself is free.

Can I get my money back from a credit repair company?

Often. Federal law gives you three business days to cancel and lets you recover what you paid if the company broke the law. California law adds a minimum recovery of what you paid plus attorney fees.