A credit freeze is one of the strongest free tools available when your personal information has been exposed or misused. It restricts access to your credit reports, making it much harder for an identity thief to open a new credit card, loan, or other account in your name.
The process is straightforward, but one common mistake causes incomplete protection: you must freeze your file separately with all three nationwide credit bureaus. This guide explains what to do, what a freeze can and cannot stop, and how to manage it afterward.
What a credit freeze does
A credit freeze, sometimes called a security freeze, blocks prospective creditors from accessing your credit report. Because most lenders will not open an account without checking a report, the freeze creates a major obstacle for someone using stolen personal information.
According to the Federal Trade Commission, placing and lifting a freeze is free, anyone can request one, and it does not affect your credit score. A freeze remains in place until you remove it or temporarily lift it.
A freeze does not close existing accounts, stop charges on a stolen card, or prevent every form of fraud. Continue monitoring bank, credit card, tax, insurance, and benefits accounts for activity you do not recognize.
Freeze all three credit reports
The United States has three nationwide credit bureaus: Equifax, Experian, and TransUnion. Freezing one does not automatically freeze the other two. Contact each bureau through the freeze page linked by the FTC, and avoid search ads or look-alike websites that may charge unnecessary fees.
- Open the official freeze page for the first bureau.
- Provide the identity information requested through its secure process.
- Create an account or save the confirmation information.
- Repeat the process with the other two bureaus.
You may need your name, address, date of birth, Social Security number, and information used to verify your identity. Requirements can vary. Complete the process from a trusted device and network, and never give a verification code to someone who calls or texts unexpectedly.
Save your confirmation records safely
Each bureau may provide an account login, confirmation number, or instructions for managing the freeze. Store these records in a password manager or another protected location. Do not keep them in an unencrypted note titled “credit freeze” on a phone or computer.
Also record the date you placed each freeze. A simple private checklist with the three bureau names can prevent you from accidentally leaving one report open.
Add a fraud alert when appropriate
A fraud alert tells businesses to verify your identity before opening new credit. Unlike a freeze, it does not block access to the report. The FTC explains that requesting an initial fraud alert from one nationwide bureau should prompt that bureau to notify the other two.
A freeze generally provides stronger prevention, while an alert adds a warning for lenders. People who believe they are identity-theft victims may use both. Active-duty and extended alerts have different eligibility and duration rules, so follow the FTC guidance for your situation.
Report identity theft and build a recovery plan
If an account has already been opened or your information has been used, a freeze is only one step. Report the incident at IdentityTheft.gov, the federal government’s recovery website. It can generate a personalized plan and provide letters and forms for correcting records.
Contact any company where fraud occurred using a number from its official website or statement. Ask it to close or block the fraudulent account, document the case number, and send written confirmation. Change passwords for affected accounts and for any other account where you reused the same password.
Review all three credit reports for unfamiliar accounts, inquiries, addresses, or collections. Dispute inaccurate information with both the credit bureau and the business that supplied it. Keep copies of reports, letters, confirmation pages, and delivery records.
Protect existing financial accounts
A credit freeze focuses on new credit. It will not stop someone who already has access to your checking account, credit card, payment app, or online banking credentials. Review recent transactions and turn on alerts for purchases, transfers, password changes, and new payees.
Ask affected institutions whether account numbers should be replaced. Secure your email first because password-reset links often arrive there. Use unique passwords and multifactor authentication, preferably an authenticator app or security key when supported.
Identity thieves often follow up with convincing calls that claim to be from a bank, bureau, or government agency. Do not move money to “protect” it, buy gift cards, install remote-access software, or share one-time codes. If you are unsure, end the conversation and contact the organization through a verified channel. DaiLova’s guide to spotting fake online stores offers additional warning signs for look-alike sites and payment scams.
How to lift a freeze for a legitimate application
When you apply for a loan, apartment, credit card, insurance policy, or certain services, the organization may need a credit report. Ask which bureau it plans to use. You can temporarily lift that bureau’s freeze for a defined date range or remove it for a specific creditor if the bureau offers that option.
Plan ahead rather than lifting every freeze indefinitely. Federal rules require bureaus to act within specified timeframes, but identity-verification problems can create delays. Once the legitimate check is complete, confirm that the freeze is active again.
Credit freeze versus credit lock
Do not assume a commercial “credit lock” is the same thing. A freeze is a right governed by federal law and is free. A lock may be a bureau product controlled by its service terms and may be bundled with paid monitoring. Read the terms before substituting a lock for a freeze.
Credit monitoring can notify you about certain changes, but notification comes after activity occurs. It does not create the preventive barrier that a freeze does. Monitoring, strong account security, and freezes can complement one another.
A practical response checklist
- Freeze Equifax, Experian, and TransUnion separately.
- Save confirmation details in a secure location.
- Consider adding a fraud alert.
- Use IdentityTheft.gov if information was misused.
- Review all three reports and dispute unfamiliar items.
- Secure email and financial accounts with unique passwords and multifactor authentication.
- Keep monitoring existing accounts because a freeze does not protect them directly.
- Lift only the necessary freeze when applying for legitimate credit.
Bottom line
Freezing your credit is free, does not lower your score, and can sharply reduce the risk of new-account fraud. The protection is most complete when you contact all three nationwide bureaus and combine the freezes with careful account monitoring. If identity theft has already occurred, document everything and follow a structured recovery plan rather than relying on the freeze alone.
