More than 4.3 million consumers are slated to receive refunds after federal regulators dismantled one of the largest alleged credit repair schemes in U.S. history. The case matters because it sits at the intersection of consumer desperation over damaged credit and aggressive marketing practices that federal law strictly limits. Understanding what happened explains not only why refunds are being issued, but also how similar schemes continue to proliferate.
How the Credit Repair Operation Worked
The enforcement action centered on companies that marketed credit repair and credit monitoring services as a way to quickly improve credit scores. Credit repair refers to services that claim to remove negative but accurate information from a consumer’s credit report or to materially raise scores through proprietary methods. Federal law, specifically the Credit Repair Organizations Act (CROA), prohibits charging consumers upfront fees before promised services are performed.
According to regulators, the companies collected millions of dollars in advance fees while making sweeping claims about guaranteed credit score improvements. Consumers were often enrolled through telemarketing or online funnels that emphasized urgency and fear of long-term credit damage. In practice, many customers received little more than generic dispute letters or access to information they could have obtained for free.
Why Federal Regulators Intervened
The Federal Trade Commission (FTC) alleged that the businesses engaged in deceptive and unfair practices, a legal standard meaning conduct likely to mislead reasonable consumers and cause financial harm. Allegations included illegal advance fees, misleading performance claims, and failure to deliver advertised results. The companies neither admitted nor denied wrongdoing but agreed to a settlement requiring refunds and permanent bans from the credit repair industry.
The size of the refund pool reflects both the number of affected consumers and the duration of the scheme. Millions of people paid relatively modest monthly fees that accumulated over time, creating large aggregate consumer losses. The case underscores how small recurring charges can produce massive harm when applied at scale.
Who Is Eligible for a Refund
Eligibility generally includes consumers who paid fees to the defendants during the period covered by the FTC’s complaint. This typically spans several years and includes customers who canceled early, remained enrolled for extended periods, or believed services were ongoing. Eligibility does not require proof that credit scores failed to improve; payment itself is often sufficient.
Consumers do not need to file a lawsuit or hire an attorney to participate. The FTC uses company records, payment processors, and bank data to identify affected customers. If records are incomplete, some consumers may need to submit a claim form to confirm identity and payment history.
How Refunds Will Be Distributed
Refunds are administered by a court-approved redress administrator, an independent entity responsible for distributing settlement funds. Payments are typically sent by check or electronic transfer, depending on available information. The amount each consumer receives may be less than the total paid if the refund pool does not fully cover all losses.
Refunds are not taxable income in most cases because they represent a return of money previously paid, not new earnings. Consumers should not pay any fee to receive their refund. Any request for payment in connection with the refund process is a warning sign of fraud.
How Consumers Can Verify Eligibility
Consumers should monitor mail, email, and official FTC communications for notices related to the settlement. Verification can be done by visiting the FTC’s official website or the refund administrator’s site listed in FTC press releases. Searching by company name involved in the scheme is often the fastest way to confirm eligibility.
Consumers should avoid responding to unsolicited calls or messages claiming to “expedite” refunds. The FTC does not charge for refunds and does not require sensitive information such as Social Security numbers to release payments. Verification should always occur through official government or court-appointed channels.
Broader Lessons About Credit Repair and Consumer Protection
The case illustrates a recurring pattern in credit repair scams: bold promises, upfront fees, and vague explanations of how results will be achieved. Accurate negative information generally cannot be removed from a credit report, regardless of who submits the dispute. Consumers can dispute errors directly with credit bureaus at no cost.
From a regulatory perspective, the action reinforces the FTC’s focus on industries that exploit financial vulnerability. For consumers and investors alike, the lesson is that businesses built on regulatory arbitrage rather than lawful value creation face significant enforcement risk. The refund program represents remediation, but it does not undo the broader financial stress experienced by affected households.
The Enforcement Action Explained: Which Company, Which Regulator, and What Laws Were Violated
The refund program stems from a federal enforcement action targeting a large-scale credit repair operation that marketed services nationwide while violating multiple consumer protection laws. The case was brought by the Federal Trade Commission (FTC), the primary federal regulator responsible for policing unfair or deceptive business practices affecting consumers. Approximately 4.3 million consumers who paid for the company’s services during the covered period are potentially eligible for refunds.
The Company at the Center of the Case
The enforcement action focused on Credit Bureau Center, LLC, a company that sold credit repair and credit monitoring services through websites such as MyScore and ScoreSense. The business advertised low-cost or “free” trials that purportedly helped consumers improve or monitor their credit scores. In practice, many consumers were enrolled in expensive monthly subscriptions without clear, informed consent.
According to the FTC’s findings, the company targeted consumers with existing credit problems, emphasizing urgency and overstating the benefits of its services. Marketing materials suggested that paying for the service would meaningfully improve credit standing, despite the company lacking the ability to remove accurate negative information from credit reports. These practices formed the factual basis for the enforcement action.
The Regulator: Why the FTC Took Action
The Federal Trade Commission enforces Section 5 of the FTC Act, which prohibits unfair or deceptive acts or practices in commerce. A practice is considered deceptive if it is likely to mislead a reasonable consumer and is material, meaning it affects consumer decision-making. The FTC concluded that the company’s marketing and billing tactics met this standard.
In addition to its general authority, the FTC has specific enforcement power over the credit repair industry. This sector receives heightened scrutiny because it frequently serves financially vulnerable consumers who may be more susceptible to misleading claims. The scale of consumer harm and the volume of affected customers elevated the case into one of the FTC’s largest credit repair enforcement actions.
The Laws That Were Violated
The primary statute violated was the Credit Repair Organizations Act (CROA). CROA prohibits credit repair companies from charging upfront fees before services are fully performed and from making untrue or misleading statements about their ability to improve a consumer’s credit. The law also requires clear disclosures informing consumers of their right to dispute credit report errors for free.
The FTC also alleged violations of the FTC Act itself, citing deceptive marketing and inadequate disclosure of recurring charges. In some instances, the Restore Online Shoppers’ Confidence Act (ROSCA) was implicated, which governs online sales involving negative option billing. Negative option billing occurs when a consumer’s silence or failure to cancel is treated as consent to ongoing charges, a practice that must be clearly disclosed and affirmatively accepted.
How the Violations Led to Consumer Refunds
As part of the court-ordered judgment, the company was required to surrender funds to create a refund pool for affected consumers. A court-appointed refund administrator is responsible for distributing payments, typically by check or electronic transfer, using the company’s historical billing records. Consumers do not need to file a lawsuit or hire an attorney to receive a refund.
Eligibility generally depends on whether a consumer paid for the company’s credit repair or monitoring services during the period covered by the complaint. While the total pool may not fully reimburse every dollar paid, the refunds are intended to partially remediate widespread financial harm. The structure of the relief reflects the FTC’s remedial authority, which focuses on returning money to consumers rather than imposing punitive damages.
Who Is Eligible for a Refund: How to Know If You’re One of the 4.3 Million Affected Customers
Understanding eligibility is essential because refunds are not distributed based on hardship or credit outcomes, but on objective transaction data. The court order ties eligibility directly to whether a consumer paid for specific services during a defined enforcement period. This approach reflects how FTC restitution operates: it relies on verifiable billing records rather than individual complaints or proof of harm.
Consumers Who Paid for Covered Credit Repair or Monitoring Services
Eligibility generally includes consumers who paid fees to the credit repair operation named in the FTC’s complaint during the period alleged to be unlawful. This typically covers charges for credit repair, credit monitoring, identity protection, or related bundled services marketed as improving or fixing credit. Payments may have been one-time fees, monthly subscriptions, or recurring charges deducted automatically.
Importantly, eligibility does not depend on whether the consumer believed the service was effective. Even consumers who saw some credit improvement, canceled early, or did not dispute charges may still qualify if they paid during the covered timeframe.
The Relevant Time Period and Why It Matters
FTC enforcement actions define a specific date range during which the unlawful conduct occurred. Only payments made within that window are included in the refund calculation. Charges outside the covered period, even if similar in nature, are typically excluded because they fall outside the court’s findings.
The refund administrator determines eligibility by reviewing the company’s internal payment databases. Consumers are not required to reconstruct years of bank statements unless the administrator cannot locate their records.
How to Tell If Your Payments Are on Record
Most eligible consumers will be identified automatically using historical billing data, including names, email addresses, mailing addresses, and payment methods. If the administrator has sufficient information, a refund is issued without any action required from the consumer. This is why many FTC refunds arrive unexpectedly.
Consumers who changed addresses, closed email accounts, or used prepaid cards may be harder to locate. In those cases, the FTC or refund administrator may publish a case page allowing consumers to verify eligibility or update contact information.
What Does Not Affect Eligibility
Several common misconceptions can cause unnecessary confusion. Filing a complaint with the FTC is not required to receive a refund. Likewise, participating in a class action lawsuit or disputing charges with a bank does not automatically disqualify a consumer.
Eligibility is also not affected by credit score, income level, immigration status, or whether the consumer still has an active account. The sole determining factor is whether qualifying payments were made during the covered period.
How Refund Amounts Are Calculated
Refunds are typically based on the total amount a consumer paid, subject to the limits of the refund pool. When the total harm exceeds available funds, refunds are often prorated, meaning each eligible consumer receives a percentage of what they paid rather than a full reimbursement.
This method reflects the FTC’s mandate to distribute recovered funds equitably. It prioritizes returning money to as many affected consumers as possible rather than fully compensating a smaller subset.
How to Verify Eligibility Safely
Consumers should only rely on official FTC communications or the refund administrator named in the court order. The FTC never charges a fee to process refunds and does not require consumers to provide full Social Security numbers or bank login credentials.
Any unsolicited call, email, or text requesting payment or sensitive financial information in connection with a refund is a red flag. Verifying eligibility should involve confirming basic identifying details, not transferring money or sharing confidential access information.
Why Eligibility Is Broad in Large Credit Repair Cases
Credit repair enforcement actions often involve millions of consumers because the underlying business models rely on high-volume, recurring billing. The laws violated, particularly CROA and the FTC Act, are designed to protect consumers regardless of sophistication or intent.
As a result, eligibility standards are intentionally inclusive. This reflects a broader regulatory goal: restoring consumer funds while reinforcing that deceptive credit repair practices carry real financial consequences for companies that engage in them.
How Refunds Will Be Issued: Timing, Amounts, and What to Expect in the Payment Process
Building on the broad eligibility standards described above, the refund process itself follows a structured, court-supervised sequence. Understanding how and when payments are sent helps consumers distinguish legitimate refunds from scams and set realistic expectations about timing and amounts.
When Refunds Are Typically Sent
Refunds in large FTC credit repair cases are not immediate. Payments are issued only after the court approves a final distribution plan and a refund administrator completes data validation, which can take several months or longer.
Consumers should expect refunds to arrive well after public announcements of a settlement. Delays are common and do not indicate a problem with eligibility or entitlement.
How Refund Amounts Translate Into Actual Payments
Although refund calculations are based on what each consumer paid, the amount received may differ from the total paid. When funds are insufficient to cover all losses, refunds are prorated, meaning each consumer receives a proportional share of the available pool.
As a result, two consumers who paid different amounts will generally receive different refunds, but neither may receive a full reimbursement. This approach reflects court-ordered equity rather than individualized fault or harm assessments.
Common Refund Payment Methods
Refunds are usually issued by check or electronic payment, such as ACH (Automated Clearing House) transfer or prepaid debit card. The method depends on the payment information the company originally collected and what the refund administrator can verify.
Checks are often mailed to the last known address on file. Electronic payments may be used when valid banking or card information is available and secure to process.
What to Expect From the Refund Administrator
A neutral third-party refund administrator is typically appointed to handle distributions. This administrator may send a notice confirming eligibility, requesting updated contact information, or explaining how the refund will be delivered.
These communications are informational, not transactional. Legitimate administrators do not charge fees, sell services, or pressure consumers to act urgently.
Updating Contact or Payment Information
If a consumer has moved or changed banking details since making payments, the administrator may provide a secure way to update information. Requests are limited to what is necessary to deliver the refund, such as a current mailing address.
Consumers are not required to provide full Social Security numbers, account passwords, or upfront payments. Any request for such information should be treated with skepticism.
What Happens If a Refund Is Not Cashed or Claimed
Uncashed checks or undeliverable payments are often handled according to court instructions. In some cases, funds may be reissued, redistributed to other eligible consumers, or transferred to a government or state unclaimed property fund.
This underscores the importance of responding to official notices and keeping contact information current during the refund period.
Tax and Reporting Considerations
Refunds from credit repair enforcement actions are generally a return of money paid, not income. However, individual circumstances can vary, particularly if prior payments were deducted or reimbursed elsewhere.
Consumers receiving substantial refunds may wish to review accompanying documentation to understand how the payment is characterized for recordkeeping purposes.
Recognizing Legitimate Payments Versus Scams
Authentic refunds arrive without any requirement to pay fees or purchase additional services. The FTC does not authorize intermediaries to “expedite” or increase refund amounts.
Any demand for payment, threats of forfeiture, or claims that action is required to “unlock” a refund are strong indicators of fraud, not part of the official refund process.
What You Should Do Right Now: Steps to Verify Eligibility and Avoid Refund-Related Scams
Given the scale of the refund program and the long timeframes common in enforcement actions, consumers should take deliberate, verifiable steps to confirm eligibility and protect themselves from opportunistic fraud. The goal is to ensure legitimate refunds are received without exposing personal or financial information to impostors.
Confirm Whether You Are Part of the Covered Group
Eligibility is limited to consumers who paid the specific credit repair companies named in the enforcement action during the defined period. Refund administrators rely on company records, not new applications, to identify eligible consumers.
The most reliable way to verify inclusion is through official notices sent by mail or email, or by checking the FTC’s case-specific webpage. These sources identify the administrator, outline eligibility criteria, and explain how refunds are issued.
Independently Verify Any Communication You Receive
All refund-related communications should be cross-checked against publicly available information from the Federal Trade Commission or the court-appointed administrator. Official notices use consistent branding, reference the specific case, and provide verifiable contact details.
Consumers should not rely on phone calls, text messages, or social media messages as proof of legitimacy. Scammers often mimic real cases but cannot direct consumers to an official FTC or court website that confirms the refund program.
Understand What Legitimate Administrators Will and Will Not Ask For
Refund administrators may request limited information necessary to deliver payment, such as a current mailing address or confirmation of a bank account already on file. These requests are typically made through secure portals or written forms linked from official notices.
They will not ask for full Social Security numbers, online banking passwords, credit card numbers, or payments of any kind. Requests for this information are incompatible with FTC refund procedures and indicate fraud.
Do Not Take Action Based on Urgency or Threats
Scam communications frequently impose artificial deadlines, warn that refunds will be forfeited, or claim immediate action is required to “release” funds. Legitimate refund programs operate on court-approved timelines and do not penalize consumers for taking reasonable time to verify authenticity.
Any message suggesting that a refund can be increased, expedited, or recovered for a fee should be disregarded. The refund amount is fixed by the enforcement action and cannot be altered by third parties.
Monitor Mail, Email, and Financial Accounts During the Distribution Period
Refunds may be delivered by check, prepaid debit card, or electronic payment, depending on the administrator’s process and available records. Consumers should watch for unexpected payments that align with official descriptions provided in FTC notices.
If a payment is received without prior notice, it should still be verified against official case information before being deposited or used. Keeping records of all communications and payments helps resolve discrepancies if questions arise later.
Report Suspected Refund-Related Scams Promptly
Suspected fraud should be reported to reportfraud.ftc.gov, which allows the FTC to track and disrupt scam activity connected to high-profile refund programs. Reports also help protect other consumers who may be targeted using similar tactics.
Reporting does not affect eligibility for a legitimate refund. Enforcement agencies treat scam reports as consumer protection tools, not as challenges to a consumer’s claim.
Recognize the Broader Consumer Protection Lesson
This refund program reflects a central principle of credit repair enforcement: companies may not charge upfront fees or misrepresent their ability to improve credit. Consumers are legally entitled to accurate information, verifiable services, and protection from deceptive practices.
Understanding how legitimate refunds work reduces vulnerability to future schemes. It also reinforces the importance of relying on official sources, documented processes, and statutory protections when dealing with credit-related services.
Common Red Flags of Credit Repair Scams—and How This Case Fits the Pattern
Understanding how this enforcement action unfolded helps clarify why regulators view certain credit repair practices as inherently risky. The conduct alleged in this case reflects patterns that the Federal Trade Commission (FTC) has identified repeatedly across the credit repair industry. Recognizing these warning signs can help consumers distinguish lawful credit assistance from prohibited schemes.
Upfront Fees Before Any Results
One of the clearest statutory violations in credit repair cases is the collection of fees before services are fully performed. Federal law prohibits credit repair organizations from charging consumers in advance for promised improvements to their credit reports or scores.
In this case, the companies allegedly required payment at the outset, often before disputing any credit information or delivering measurable results. That structure shifted financial risk entirely onto consumers, a hallmark of abusive credit repair operations.
Promises to Remove Accurate Negative Information
Legitimate credit reporting systems allow consumers to dispute information that is inaccurate or unverifiable. No company, however, can lawfully remove truthful negative data—such as late payments or defaults—from a credit report.
The enforcement action alleges that the defendants promised broad or guaranteed credit score improvements regardless of a consumer’s actual credit history. Such representations are misleading because credit bureaus are legally required to retain accurate information for defined periods.
Misrepresentation of Consumer Rights and Legal Authority
Another recurring red flag is the suggestion that a credit repair firm has special legal leverage unavailable to consumers. Some schemes claim proprietary methods, legal loopholes, or affiliations with government or credit bureaus.
According to regulators, the companies involved allegedly overstated their authority and implied that consumers could not achieve similar outcomes on their own. In reality, consumers have the right to dispute errors directly with credit reporting agencies at no cost.
Complex Pricing and Obscured Cancellation Rights
Deceptive credit repair programs often use complicated fee structures, recurring monthly charges, or unclear contract terms. These tactics can make it difficult for consumers to understand what they are paying for or how to stop the service.
The FTC’s complaint describes contracts and billing practices that allegedly made cancellation difficult or failed to clearly disclose refund rights. Such opacity is inconsistent with lawful credit services, which must provide clear, written disclosures and allow penalty-free cancellation within required timeframes.
High-Volume Marketing Targeting Financially Vulnerable Consumers
Enforcement actions frequently involve aggressive advertising directed at consumers experiencing financial stress. Marketing messages may emphasize urgency, guaranteed relief, or quick fixes to long-standing credit problems.
In this case, regulators allege that millions of consumers were reached through widespread marketing that played on fear of credit denial or financial exclusion. The scale of the refund—covering approximately 4.3 million customers—underscores how mass marketing can magnify consumer harm when claims are deceptive.
How These Red Flags Determine Refund Eligibility
Refund eligibility in this enforcement action is tied to whether consumers paid for services that violated credit repair laws or were misled by prohibited representations. Consumers do not need to prove individual harm; eligibility is determined by payment records and the scope of the court’s findings.
Refunds are distributed through a court-approved administrator using objective criteria, not through individual negotiations. This standardized process reflects how regulators remediate widespread misconduct while limiting opportunities for further consumer exploitation.
Why These Patterns Matter Beyond This Case
The practices identified here are not unique to one company or campaign. They represent structural risks in an industry where consumers often seek help during periods of financial vulnerability.
By examining how this case fits established enforcement patterns, consumers can better evaluate future offers and understand why certain promises are legally suspect. The refund program, in turn, illustrates how consumer protection law addresses systemic misconduct rather than isolated disputes.
What Legitimate Credit Help Actually Looks Like: Your Rights Under Federal Credit Laws
Understanding how lawful credit assistance operates provides a practical lens for evaluating whether a refund notice applies and whether past services complied with federal standards. The enforcement action underlying this refund program is grounded in long-standing consumer protection laws that define what credit help may and may not promise. Those same laws also establish clear consumer rights that remain enforceable regardless of a company’s marketing claims.
The Credit Repair Organizations Act: Baseline Legal Protections
The primary federal statute governing this industry is the Credit Repair Organizations Act (CROA). CROA prohibits companies from charging fees before services are fully performed and from making false or misleading claims about improving credit scores or removing accurate negative information.
Legitimate providers must give consumers a written contract that clearly discloses total costs, describes services in plain language, and explains cancellation rights. Consumers have an unconditional right to cancel within three business days without penalty, a safeguard designed to counter high-pressure sales tactics.
What Lawful Credit Assistance Can and Cannot Do
Federal law draws a firm line between permissible assistance and prohibited promises. Lawful credit help may include educating consumers about credit reports, assisting with disputes of inaccurate information, and explaining budgeting or debt management strategies.
No company can legally remove accurate, timely negative information from a credit report. Promises of guaranteed score increases, “new credit identities,” or rapid deletion of legitimate debts are inherently deceptive under federal law and frequently form the basis of enforcement actions.
How These Legal Violations Trigger Refund Eligibility
In this case, regulators determined that consumers paid for services that violated CROA and related consumer protection statutes. Refund eligibility is not based on whether a consumer’s credit improved, worsened, or stayed the same.
Instead, eligibility turns on objective factors such as payment records, the time period of enrollment, and whether the services were marketed or delivered unlawfully. This approach reflects how mass-market credit repair schemes cause legal harm even when individual outcomes vary.
How Refunds Are Distributed and Why Consumers Do Not Apply
Refunds are issued through a court-approved claims administrator using company records and payment data. Consumers do not negotiate refund amounts or submit individual complaints to qualify.
Payments are typically sent by check or electronic transfer to the last known contact information on file. This centralized process is intended to prevent further exploitation by ensuring consumers are not asked to pay fees or provide sensitive information to receive money they are already owed.
How Consumers Should Verify Refund Legitimacy
Official refund notices originate from the administrator named in court filings or from the enforcing agency, such as the Federal Trade Commission. Legitimate administrators do not request upfront payments, credit card numbers, or Social Security numbers to release refunds.
Consumers who believe they may be eligible can verify information directly through the FTC’s website or publicly available court documents. This verification step is critical, as refund announcements often attract secondary scams impersonating government programs.
Broader Lessons for Evaluating Future Credit Help Offers
This enforcement action illustrates that lawful credit assistance is slow, procedural, and limited by the accuracy of underlying data. Any service claiming to bypass credit reporting rules or deliver guaranteed outcomes is inconsistent with federal law.
Understanding these legal boundaries allows consumers and investors alike to distinguish compliant financial services from schemes built on prohibited representations. Federal credit laws do not eliminate credit challenges, but they do establish enforceable standards that protect consumers when companies cross the line.
Bigger Picture Lessons: What This Refund Means for Consumers, Credit Repair Companies, and Future Enforcement
The scale of this refund program signals more than compensation for past harm. It clarifies how regulators interpret illegal credit repair practices, how consumers should evaluate claims about credit improvement, and how future enforcement actions are likely to unfold. Each group affected by the credit marketplace faces distinct implications.
What This Means for Consumers With Credit Challenges
For consumers, the refunds confirm that paying for credit repair services does not shift legal responsibility away from the service provider. Under the Credit Repair Organizations Act (CROA), a federal law governing credit repair companies, consumers cannot be charged upfront fees and cannot be misled about what a service can realistically achieve.
This case reinforces that negative credit information cannot be lawfully erased simply because it is inconvenient or costly. Accurate information must remain on credit reports for legally prescribed periods, regardless of whether a third party is paid to dispute it. Refunds occur when companies violate these rules, not because credit outcomes failed to improve.
What This Means for Credit Repair and Credit Assistance Companies
For credit repair firms and adjacent financial service providers, the enforcement action draws a clear boundary between permissible assistance and prohibited conduct. Companies may help consumers understand credit reports and dispute inaccurate information, but they cannot guarantee results, misrepresent success rates, or charge fees before services are fully performed.
The size of the restitution order also highlights that compliance failures scale quickly in mass-market models. When millions of consumers are affected by standardized contracts and marketing scripts, violations compound into significant legal and financial exposure. This reality increasingly favors transparent, narrowly defined credit education services over aggressive “credit fixing” claims.
What This Signals About Future Regulatory Enforcement
From a regulatory perspective, the refund demonstrates that agencies are prioritizing systemic consumer harm rather than isolated complaints. Enforcement actions now commonly rely on data analytics, payment records, and marketing materials to establish violations across large customer populations.
This approach lowers the burden on individual consumers to prove harm and increases the likelihood of automatic restitution when unlawful practices are identified. As a result, companies operating near regulatory boundaries face heightened scrutiny, while consumers benefit from stronger institutional safeguards without needing to initiate legal action themselves.
Why This Refund Matters Beyond This Case
Taken together, these lessons emphasize that credit repair is governed by law, not marketing narratives. Refunds of this magnitude do not reflect a failure of the credit reporting system, but enforcement of the rules that constrain how third parties may interact with it.
For consumers and investors evaluating credit-related businesses, the enduring takeaway is structural. Sustainable credit assistance operates within legal limits, produces incremental outcomes, and avoids promises that federal law explicitly forbids. When those limits are crossed, refunds are not discretionary—they are the predictable consequence of regulatory enforcement.