Skip to main content

Here’s a newsflash:  There’s a troubling amount of inaccurate information in people’s credit reports that can result in the denial of a job, a place to live, and even necessities like groceries and medicine.  That’s why the Fair Credit Reporting Act requires consumer reporting agencies (CRAs) to “follow reasonable procedures to assure maximum possible accuracy.”  The FTC’s settlement with Certegy Check Services — which includes the second-largest civil penalty ever in an FCRA case — offers insights into what the law requires.

Certegy may not be a household name to consumers, but when people want to pay by check, many businesses turn to Certegy for a check authorization recommendation.  Certegy’s thumbs-up or thumbs-down suggestion is based in part on information in its files about consumers’ check writing history.  When Certegy’s data is inaccurate, businesses decline checks unnecessarily, resulting in lost sales and teed-off customers.  Certegy also furnishes information to other credit reporting agencies, multiplying the potential effect of inaccuracies.

FCRA mavens will spot that Certegy meets the legal definition of a “nationwide specialty consumer reporting agency,” defined in section 603(x) as a CRA that:

compiles and maintains files on consumers on a nationwide basis relating to (1) medical records or payments; (2) residential or tenant history; (3) check writing history; (4) employment history; or (5) insurance claims.

But according to the FTC, Certegy failed to honor many of the protections the FCRA extends to consumers.  For example, when a consumer contacts a CRA to say “Hey, guys, you’ve got it wrong,” the law requires CRAs to investigate the dispute within a reasonable time, report back to the consumer, and follow up by deleting inaccurate, incomplete, or unverifiable information.  Once a CRA learns that information is inaccurate, it has a responsibility to maintain procedures to make sure deleted info stays deleted.  Otherwise, it keeps popping up like the gopher that tormented Groundskeeper Carl in Caddyshack.  In addition, CRAs must implement reasonable written policies to ensure the accuracy of the information they give to other CRAs.  And under the law, CRAs – all of them, not just the Big Three most people are familiar with — have to have a streamlined process so consumers can get a free copy of the company’s report on them.  Those are just some of the areas where the FTC says Certegy fell short.

You’ll want to read the complaint for specifics, but one count merits special attention.  The FTC alleges that Certegy didn’t live up to its obligation to reinvestigate information consumers disputed as inaccurate.  According to the complaint, rather than conducting its own robust investigation, Certegy sat back and put an unreasonable onus on consumers, making them jump through hoops to do work the law assigns to the CRA.  For example:

  • “If a consumer disputes that he has a returned check from a particular merchant, Certegy requires the consumer to contact the merchant himself to resolve the dispute.”
  • “When the decline is a result of an ‘invalid’ ID, Certegy requires that the consumer obtain and send driving records to Certegy to ‘prevent future declines.’”
  • “When the consumer disputes that the consumer’s bank refused to honor a check, rather than accepting a bank statement as proof of the bank’s payment, Certegy requires that the consumer obtain a letter from the bank, on bank letterhead, signed by a bank employee before it will resolve the dispute in the consumer’s favor.”

FCRA followers, take note:  The case is the FTC's first alleging a violation of the Furnisher Rule.

The $3.5 million civil penalty should attract industry attention and the stipulated order will change how Certegy does business.  For example, to resolve a dispute, Certegy can’t require consumers to contact a third party if Certegy can get sufficient information on its own.  In addition, Certegy must complete reinvestigations within 30 days (or 45 days if consumers give them additional info in the meantime).  Certegy also has to beef up how it tracks and resolves consumer disputes and must implement written procedures to promote the accuracy and integrity of the information given to other CRAs.

Even if credit reporting isn't part of your business, the Certegy settlement offers a timely tip for your nights-and-weekends life as a consumer.  No need for a show of hands, but we hope people know about their right to a free copy of their credit report from each of the three nationwide CRAs every year.  But did you know you have a right to a free annual report from specialty CRAs, too?  If you write a lot of checks, considering going to a page on Certegy's site and getting your free annual report from them.  (Just a note:  Certegy’s report will have information on the checks you’ve written only to businesses that use Certegy’s services.)  Review all your reports for inaccuracies that could put the kibosh on that promotion you were expecting or make it more expensive for you to get credit, insurance, or a mortgage.

Bookmark the BCP Business Center’s credit reporting page for compliance resources.


It is your choice whether to submit a comment. If you do, you must create a user name, or we will not post your comment. The Federal Trade Commission Act authorizes this information collection for purposes of managing online comments. Comments and user names are part of the Federal Trade Commission’s (FTC) public records system, and user names also are part of the FTC’s computer user records system. We may routinely use these records as described in the FTC’s Privacy Act system notices. For more information on how the FTC handles information that we collect, please read our privacy policy.

The purpose of this blog and its comments section is to inform readers about Federal Trade Commission activity, and share information to help them avoid, report, and recover from fraud, scams, and bad business practices. Your thoughts, ideas, and concerns are welcome, and we encourage comments. But keep in mind, this is a moderated blog. We review all comments before they are posted, and we won’t post comments that don’t comply with our commenting policy. We expect commenters to treat each other and the blog writers with respect.

  • We won’t post off-topic comments, repeated identical comments, or comments that include sales pitches or promotions.
  • We won’t post comments that include vulgar messages, personal attacks by name, or offensive terms that target specific people or groups.
  • We won’t post threats, defamatory statements, or suggestions or encouragement of illegal activity.
  • We won’t post comments that include personal information, like Social Security numbers, account numbers, home addresses, and email addresses. To file a detailed report about a scam, go to

We don't edit comments to remove objectionable content, so please ensure that your comment contains none of the above. The comments posted on this blog become part of the public domain. To protect your privacy and the privacy of other people, please do not include personal information. Opinions in comments that appear in this blog belong to the individuals who expressed them. They do not belong to or represent views of the Federal Trade Commission.

More from the Business Blog

Get Business Blog updates