Credit freezes: the free, simple identity-theft prevention

Credit freezes are the most effective single thing you can do to prevent identity theft, and they're free. Despite that, most people don't use them, and don't know what they actually do, or how they differ from fraud alerts and credit locks. This guide explains the three different protections, when each makes sense, and the practical effect of each on your day-to-day finances.

Why credit freezes matter

Identity theft works because lenders can pull your credit report and open accounts in your name without you knowing. With a credit freeze in place, when a thief tries to open a new credit card or loan in your name, the lender pulls your report, sees the freeze, and the application can't be processed. The thief moves on.

A 2018 federal law made credit freezes free at all three bureaus (Equifax, Experian, TransUnion). Before that, freezes cost $5-10 per bureau. Now they're free, fast, and reversible.

The three protection tools

Credit freeze (the strong one)

A freeze locks your credit reports so lenders can't access them without your explicit permission. To open a new account, the lender needs to pull your report; if they can't, they decline the application, even from a legitimate fraudster who has all your info.

• Cost: Free at all three bureaus.
• Effect: Strongest available protection. Lenders genuinely can't pull your report.
• Inconvenience: You must temporarily lift the freeze when you want to apply for new credit. Lifts take effect within minutes via the bureau apps.
• What it doesn't do: Doesn't prevent fraud on existing accounts. Doesn't affect your credit score.

Fraud alert

A fraud alert is a flag on your credit report asking lenders to verify your identity (e.g., by calling you) before opening new credit in your name. Lenders can still pull your report, but they're alerted to the elevated fraud risk.

• Cost: Free.
• Effect: Weaker than freeze. Lenders should verify your identity but aren't legally required to refuse the application.
• Duration: 1 year for an "initial" fraud alert; 7 years for an "extended" alert (requires identity-theft documentation).

Worth using as a layered defense if you've been victim of identity theft, but a freeze is stronger.

Credit lock (the trap)

A "credit lock" is a private bureau product functionally similar to a freeze: locks your report, you unlock when you need to apply for credit. Sounds the same.

The difference: a credit lock is a contractual product, not a federal-law freeze. The bureaus generally charge for it (sometimes via "identity theft monitoring" bundles at $20-30/month) and have less legal obligation than they do with a federal-law freeze.

How to actually freeze your credit

You need to freeze at all three bureaus separately. Doing it at one doesn't affect the others.

Equifax

Online: equifax.com/personal/credit-report-services/credit-freeze

Or by phone: 1-800-685-1111

Experian

Online: experian.com/freeze/center.html

Or by phone: 1-888-397-3742

TransUnion

Online: service.transunion.com/dss/orderStep1_form.page

Or by phone: 1-888-909-8872

For each bureau, you'll set up an account, verify your identity (knowledge-based questions about past addresses or accounts), and place the freeze. Each one takes 5-10 minutes. You'll be issued a PIN, keep it safe; you'll need it to lift the freeze in the future, and online portals sometimes can't recover lost PINs.

Lifting a freeze when you need to apply

Most freezes can be temporarily lifted online via the bureaus' apps or websites. Two options:

• Lift for a specific period (e.g., next 7 days). The freeze automatically reapplies after.
• Lift for a specific creditor(e.g., Chase for a credit-card application). Other creditors still can't pull. Most flexible option.
• Permanent unfreeze if you want the freeze removed entirely.

Lifts take effect within an hour at all three bureaus. Lenders pull from a specific bureau, so if you know which bureau a card issuer uses (Chase pulls Experian most often, Capital One pulls all three sometimes), you can lift just that one.

Why doesn't everyone freeze?

It's an extra step. Each new card or loan application requires a quick lift first. For people who never apply for new credit, freezes are pure upside; for people applying often (mortgage, refinancing, new cards), the lift becomes a regular routine.

Most personal-finance advice now recommends keeping all three freezes on by default and lifting them on demand. The protection is too valuable not to use.

Children and credit freezes

Children have credit reports too, usually empty until they first have credit activity around age 18. Identity thieves can open accounts in a child's SSN that go undetected for years.

Federal law (passed in 2018) requires the bureaus to create a report on request for a minor child and freeze it. The process is similar to freezing your own report, with extra documentation required (proof of guardianship, child's SSN, etc.).

Worth doing for any child whose SSN has been exposed in a data breach (which, given the Equifax breach, includes most people). The freeze stays in place until the child turns 16, at which point they can manage it themselves.

If you're a victim of identity theft

Steps:

• Place a fraud alert immediately at one of the three bureaus (the bureau then notifies the others).
• Freeze all three reports if not already frozen.
• Pull free copies of all three reportsfrom annualcreditreport.com. Look for accounts and inquiries you don't recognize.
• Report fraud at IdentityTheft.gov, the FTC generates an Identity Theft Report you can use as evidence when disputing fraudulent accounts.
• Dispute fraudulent accounts directly with the lender and with each bureau.
• File a police report if significant fraud has occurred. Some bureaus require this for an extended fraud alert.
• Consider an extended fraud alert (7 years).

Routine maintenance

Even with freezes in place:

• Pull free credit reports at least annually (you can do all three weekly for free at annualcreditreport.com). Look for unfamiliar accounts.
• Set up purchase alerts on every card. Charges over $1, or some threshold, trigger a text notification, so you catch fraud immediately.
• Use unique passwords on financial accounts (a password manager makes this trivial). Most identity-theft incidents start with credential reuse.

Recap

• Credit freezes block lenders from opening new accounts in your name. Free, federally backed, available at all three bureaus.
• Freeze each of Equifax, Experian, TransUnion separately.
• Lift online when applying for new credit; takes effect within an hour.
• Don't pay for "credit lock" products, freezes are free and stronger.
• Freeze your kids' credit reports too.
• Layer freezes with purchase alerts and annual report checks for full protection.