Credit Freeze vs Fraud Alert
A credit freeze restricts prospective creditors’ access to a credit file and normally requires separate action at each nationwide bureau. A fraud alert leaves the report available but tells creditors to verify identity; contacting one bureau triggers alerts at the others. Both are free, can coexist and mainly…
Timeline
- 2026-10-12: Current FTC and CFPB freeze, fraud-alert and identity-theft recovery guidance was rechecked.
- 2026-10-11: Primary and authoritative sources were reviewed for this guide.
A credit freeze, also called a security freeze, restricts prospective creditors from accessing a consumer’s credit file. Because lenders usually check a report before granting new credit, this can make new-account identity theft harder. A fraud alert takes a lighter approach: the report remains available, but a creditor receiving it must take steps to verify identity before opening new credit, issuing an additional card or increasing a credit limit. Neither tool changes a credit score. [1][2][3]
Placement is the clearest procedural difference. To freeze all three nationwide files, contact Equifax, Experian and TransUnion separately; one bureau does not forward a freeze request to the others. For a fraud alert, contact any one of the three and that bureau must notify the other two. Use links reached through FTC, CFPB or the bureaus’ official sites, and retain confirmations. A caller demanding payment to place a federal freeze or alert is not providing the free statutory process. [1][2][3]
A freeze is available to anyone, whether or not identity theft has occurred, costs nothing to place or lift and remains until the consumer removes it. It also blocks the consumer’s own new-credit applications until access is restored. A person can temporarily lift it for a specified period or at the bureau a lender expects to use. CFPB says electronic or telephone lift requests generally must be completed within one hour, while mailed requests have a longer federal deadline. [1][2]
Fraud alerts come in several forms. An initial alert is available to someone who believes they are or may become an identity-theft victim, lasts one year and can be renewed. An extended alert requires an FTC identity-theft report or police report, lasts seven years and also removes the person from prescreened credit and insurance marketing lists for five years. An active-duty alert lasts one year, is renewable for a longer deployment and has additional marketing-list protections. [1][3]
The protections can coexist. Someone exposed in a breach may freeze all three files to restrict new-credit access and add an alert to require verification where a report is obtained. A freeze still allows certain access, including review by the consumer, existing creditors, some government entities and monitoring services. Federal freeze rules described by CFPB do not apply in the same way to employment, tenant-screening or insurance report requests, so those uses may need separate planning. [1][2]
Neither tool stops every form of fraud. A freeze does not prevent takeover or misuse of an existing bank, card, email, tax or government-benefit account. It does not remove a fraudulent tradeline already on a report, return stolen money or stop phishing. If misuse has occurred, contact affected institutions through verified channels, change exposed credentials, report at IdentityTheft.gov and follow its recovery plan. Fraudulent report information has a separate blocking or dispute process. [3]
Do not confuse a free security freeze with a commercial “credit lock.” CFPB notes that locks are often paid products bundled with monitoring, while the security freeze is a legal right. Monitoring can notify a consumer of changes but does not itself prevent an account from being opened. Whichever tool is used, inspect all three reports for unfamiliar accounts, addresses and inquiries and continue reviewing bank and card activity; prevention and detection solve different problems. [1][2][4]
A practical response is: freeze each nationwide file, add the appropriate alert if fraud is suspected or confirmed, secure existing accounts, then document every request and recovery step. Before applying for credit, housing or another service that needs a report, ask which bureau and type of report will be used and lift only what is necessary. Refreeze afterward. For a child under 16 or another protected consumer, follow each bureau’s special documentation process rather than submitting an ordinary adult request. [1][2][3][4]
Sources
- Federal Trade Commission — Credit Freezes and Fraud Alerts
- Consumer Financial Protection Bureau — What Is a Credit Freeze or Security Freeze?
- Consumer Financial Protection Bureau — What Do I Do If I Am a Victim of Identity Theft?
- Federal Trade Commission — Free Credit Reports