How to Freeze Your Credit and Why You Should Do It Now

How to Freeze Your Credit and Why You Should Do It Now

A credit freeze is the most effective tool available to consumers for preventing identity theft from resulting in new fraudulent accounts. Unlike fraud alerts, which merely flag your file, a credit freeze locks it — no new creditor can access your report to open an account until you lift the freeze. Knowing how to freeze your credit takes about ten minutes per bureau and costs nothing. The reasons to do it now, before you are a victim, are compelling.

What a Credit Freeze Does

When you freeze your credit with one of the three major bureaus — Equifax, Experian, and TransUnion — that bureau will not release your credit report to any new lender or creditor who requests it for the purpose of opening new credit in your name. Since virtually all lenders pull a credit report before opening a new account, the freeze prevents any new credit account from being opened without your authorization.

A credit freeze does not affect your existing accounts. Your current credit cards, loans, and lines of credit continue to function normally. Your credit score continues to update based on your existing account activity. Employers who conduct background checks may still access your report (though their access is governed by the Fair Credit Reporting Act and typically does not require a credit pull for scoring purposes). The freeze affects only applications for new credit products.

A freeze is not a fraud alert. A fraud alert asks creditors to take extra steps to verify identity before opening accounts but does not block access to your report. A freeze blocks the report entirely. Fraud alerts expire after one year (or seven years for extended alerts for identity theft victims); a credit freeze remains in place until you lift it.

How to Freeze Your Credit at All Three Bureaus

You must place the freeze separately at each of the three major credit bureaus. Freezing only one or two leaves gaps — a fraudster can open an account using whichever bureau you left unfrozen. The three bureaus, their freeze request methods, and their websites:

Equifax: freeze online at equifax.com, by phone, or by mail. Equifax also allows freeze management through its myEquifax portal.

Experian: freeze online at experian.com/freeze, by phone at 1-888-EXPERIAN, or by mail. Experian's freeze PIN is set at the time of the freeze request.

TransUnion: freeze online at transunion.com, by phone, or by mail. TransUnion requires account creation to manage freezes online.

Each bureau provides a PIN or password upon completing the freeze. Store this PIN securely — you will need it to temporarily lift the freeze when you apply for credit. If you lose the PIN, you can still lift the freeze, but the identity verification process takes longer.

The freeze takes effect immediately when placed online or by phone. Mail requests take three business days to take effect. There is no fee to place, lift, or remove a credit freeze at any of the three bureaus — the Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018 made freezes permanently free.

Why You Should Freeze Your Credit Now

The most common argument against a credit freeze is that it is inconvenient when you need to apply for credit. This is true but overstated. Lifting a freeze temporarily — for the period of a credit application — typically takes minutes online and can be done for a specified time window. The inconvenience is real but minor compared to the consequences of identity theft.

Data breaches at large institutions have compromised the personal information — names, addresses, Social Security numbers, dates of birth — of hundreds of millions of Americans. The combination of this data is sufficient for a fraudster to open credit accounts, file fraudulent tax returns, apply for government benefits, or take out loans in your name. A credit freeze prevents the credit account opening component of this fraud regardless of what data has been compromised.

The CFPB credit reports and scores page provides detailed guidance on credit freezes, fraud alerts, and steps to take if you suspect you are already a victim of identity theft. The CFPB is the primary federal regulatory authority for consumer credit and its guidance reflects current legal protections.

Freezing Credit for Children and Seniors

Children's Social Security numbers are particularly valuable targets for identity thieves because the fraud may go undetected for years — children do not apply for credit and may not discover a compromised identity until they turn 18 and apply for their first account. All three bureaus allow parents and legal guardians to freeze the credit of minors under 16. The minor's credit file may need to be created specifically for the freeze if it does not yet exist.

The process for minor freezes requires documentation — typically a certified copy of the birth certificate, the minor's Social Security card, and proof of the parent or guardian's identity and authority. Each bureau has specific documentation requirements. The time investment is approximately thirty to sixty minutes per bureau but provides comprehensive protection for the child's credit identity throughout their minor years.

Seniors are disproportionately targeted by identity thieves due to clean credit histories, accumulated assets, and in some cases reduced vigilance regarding account monitoring. Freezing credit for an elderly parent or relative — with their knowledge and consent — is a straightforward protective action. If the senior is unlikely to apply for new credit independently, the freeze requires zero maintenance after placement and eliminates the risk of fraudulent new accounts entirely.

None of this is financial advice. Your situation depends on variables this article can't see — taxes, risk tolerance, time horizon, dependents. A fiduciary advisor can model your specific case.

How to Temporarily Lift a Credit Freeze

When you need to apply for credit — a mortgage, an auto loan, a credit card — you can lift your freeze temporarily at just the bureau or bureaus the lender will pull. Most mortgage lenders pull all three bureaus; auto lenders and credit card issuers may pull only one. Ask the lender which bureau they use before lifting freezes to minimize the number of bureaus you need to temporarily unfreeze.

Lifting a freeze online or by phone typically takes effect within an hour and sometimes immediately. You can specify the duration of the lift — from one day to a specified end date — after which the freeze automatically reinstates. This means you do not have to remember to refreeze; the protection restores itself automatically.

If you prefer, you can lift the freeze permanently rather than temporarily, but this is rarely necessary. The permanent lift should be used only when you anticipate multiple credit applications over an extended period — such as during an extended home search when multiple mortgage applications may be submitted.

Credit Freezes vs. Credit Locks vs. Credit Monitoring

Credit bureaus offer a product called a "credit lock" through their own apps and services that functions similarly to a freeze but is contractual rather than statutory. Credit locks can typically be toggled on and off more quickly through a smartphone app than a statutory freeze. However, a credit freeze is a right established by federal law, while a credit lock is a service agreement that can be modified by the bureau's terms. For maximum legal protection, the statutory freeze is preferable.

Credit monitoring services notify you when new accounts are opened, inquiries are made, or changes occur in your credit file. Monitoring is complementary to a freeze but serves a different function — monitoring detects events after they occur, while a freeze prevents them from occurring. For comprehensive protection, a freeze plus monitoring provides both prevention and detection.

Free monitoring is available to all consumers through the three major bureaus, through many credit cards as a cardholder benefit, and through the AnnualCreditReport.com free weekly report service. Paid monitoring services typically add features like dark web scanning, identity theft insurance, and restoration assistance. The free options are adequate for most consumers' prevention and detection needs.

What a Credit Freeze Does Not Protect Against

A credit freeze prevents new credit accounts from being opened fraudulently but does not prevent all forms of identity theft. Account takeover fraud — where a thief accesses an existing account using compromised credentials — is not prevented by a freeze, since the existing account is already open. Protecting existing accounts requires strong unique passwords, two-factor authentication, and monitoring account activity regularly.

Tax identity theft — filing a fraudulent tax return in your name to claim a refund before you file — is also not prevented by a credit freeze. The IRS does not use the credit bureaus to verify tax filers. Obtaining an IRS Identity Protection PIN, available to all taxpayers through the IRS website, is the equivalent of a credit freeze for federal tax filing.

Medical identity theft, where a fraudster uses your identity to obtain medical services or equipment billed to your insurance, is also outside the scope of a credit freeze. Monitoring your Explanation of Benefits documents from your health insurer for services you did not receive is the detection mechanism for medical identity theft.

What to Do If You Are Already a Victim of Identity Theft

If you discover fraudulent accounts or inquiries on your credit report, the first step is to place a credit freeze at all three bureaus immediately to prevent additional fraudulent accounts from being opened. Then file an identity theft report with the Federal Trade Commission at IdentityTheft.gov, which creates an official record of the theft and generates a recovery plan tailored to your specific situation.

File a police report with your local law enforcement agency. A copy of the police report, combined with the FTC identity theft report, constitutes the documentation needed to dispute fraudulent accounts with the credit bureaus and with individual creditors. The credit bureaus are required to block information resulting from identity theft from appearing on your report when you provide the required documentation under the Fair Credit Reporting Act.

Contact each creditor where a fraudulent account was opened. Request the account be closed, ask for the fraudulent account not to be reported to the credit bureaus, and obtain written confirmation. Follow up in writing if the initial contact is by phone. Keep records of every contact — dates, names of representatives, reference numbers — throughout the recovery process.

Recovery from identity theft can take months and requires sustained effort. Each fraudulent account must be disputed separately with the relevant creditor and with the credit bureaus. Monitor your reports monthly during the recovery period to verify that disputed items are being removed and that no new fraudulent activity is occurring. The FTC's IdentityTheft.gov recovery plan keeps track of completed and pending steps across all affected accounts.

Using a Security Alert Alongside a Credit Freeze

A security freeze and a fraud alert serve complementary purposes and can be used simultaneously. A one-year fraud alert instructs creditors to take additional verification steps before opening accounts in your name and is easier to maintain than a freeze for people who frequently apply for new credit. An extended fraud alert — available to confirmed identity theft victims — lasts seven years.

Placing a fraud alert at one bureau automatically notifies the other two, making it simpler to establish than a freeze, which must be placed independently at each bureau. However, the fraud alert's protection is weaker — it requests additional verification but does not block report access, while the freeze prevents access entirely.

For most consumers with no immediate credit application plans, the freeze provides stronger protection than the fraud alert. For active credit applicants who find the freeze's lifting requirement burdensome, the fraud alert plus careful monitoring of new accounts provides meaningful protection with less friction. The two approaches represent different points on the protection-versus-convenience tradeoff, and the right choice depends on how frequently you expect to apply for new credit over the next one to two years.

After any significant data breach that compromises your personal information, placing a freeze promptly at all three bureaus — before any fraudulent account attempt is made — is the most effective single action available to limit the potential damage. Data breach notification letters often include free credit monitoring as remediation; accepting the monitoring while also placing a freeze provides a more comprehensive response than monitoring alone.