A security freeze — usually just called a credit freeze — restricts access to your credit report. Because most lenders will not open a new account without pulling a report, a freeze effectively blocks someone from opening credit in your name. Federal law requires all three nationwide bureaus to provide freezes, and to lift them, free of charge.
What a freeze does and does not do
A freeze stops new creditors from accessing your report, which stops most new-account fraud. It does not affect your credit score, does not stop you using existing accounts, and does not prevent fraud on a card you already hold — that is what checking your statements is for. Existing creditors, debt collectors acting for them, and certain government agencies can still access a frozen file.
How to freeze your credit
You have to do it separately with each of the three bureaus: Equifax, Experian and TransUnion. Each will give you a PIN or let you create an account to lift the freeze later. Lifting it — a thaw — is also free and can be done temporarily for a set period or permanently, usually within minutes online. If you are about to apply for credit, ask the lender which bureau they use so you only need to thaw one.
- Equifax, Experian and TransUnion each handle freezes separately — do all three
- Freezing and thawing are free by law, and the bureaus must act quickly on online and phone requests
- You can freeze a child's credit file too, and the file of an adult you have authority over, which is worth doing because child identity theft often goes undetected for years
- Keep the PIN or login details somewhere you will find them — needing to thaw in a hurry without them is the main inconvenience
Fraud alerts: the lighter alternative
A fraud alert asks lenders to take extra steps to verify your identity before extending credit, rather than blocking access altogether. It is free, you only need to place it with one bureau (which must notify the other two), and an initial alert lasts one year. An extended alert lasting seven years is available if you have been a victim of identity theft and file a report. Active-duty servicemembers can place a free active duty alert. A fraud alert is less protective than a freeze but less disruptive.
If you think you are already a victim
Go to IdentityTheft.gov, the FTC's official recovery site. It generates an identity theft report and a personalized recovery plan, including template letters. Then: place a fraud alert or freeze, pull all three credit reports at AnnualCreditReport.com and dispute the fraudulent entries, contact the companies where accounts were opened, and consider filing a police report. Under the Fair Credit Reporting Act you can request that information resulting from identity theft be blocked from your report.
Opting out of pre-screened offers
Pre-approved credit offers arriving in the mail are a minor but real fraud risk if they are intercepted. You can opt out of pre-screened credit and insurance offers for five years, or permanently, at optoutprescreen.com — the official site operated by the consumer reporting agencies. It is free and takes a couple of minutes.
General guidance only — not regulated financial advice.