Depends on the credit service organization. There are no guidelines as to a maximum. You're not allowed to receive up front payment under the CROA if you're a for-profit organization. Under state law, perhaps, if you have a bond. In light of that, most CSO's should have a trust account just as run of the mill law firms do. If they have attorney's, this is generally the way in which payment is taken.
