A credit freeze blocks most prospective creditors from accessing your credit reports, which makes it difficult for an identity thief to open a new account in your name. A fraud alert leaves your reports available but tells businesses to take additional steps to verify that a credit application really came from you.
Both tools are free. Neither one lowers your credit score.
The main difference is strength versus convenience. A freeze provides stronger protection against new-account identity theft, but you may need to lift it before applying for credit. A fraud alert creates less friction because lenders can still access your reports, but it relies on the lender completing the required identity checks correctly.
You can also use both at the same time. That may be a sensible choice after identity theft or the exposure of sensitive information.
Credit freeze vs fraud alert at a glance
A credit freeze:
- Restricts access to your credit report for most new credit applications
- Usually prevents a lender from approving a new account until you lift the freeze
- Must be placed separately with Equifax, Experian, and TransUnion
- Stays in place until you remove it
- Can be temporarily lifted when you need to apply for credit
- Does not affect your credit score
A fraud alert:
- Leaves your credit report available to lenders
- Requires businesses to take reasonable steps to verify your identity before granting certain new credit
- Can be placed by contacting only one nationwide credit bureau
- Is then shared with the other two nationwide bureaus
- Usually lasts one year for an initial alert
- Can last seven years for qualifying identity theft victims
The FTC describes a credit freeze as the stronger option for preventing identity thieves from opening new accounts because prospective creditors generally cannot access a frozen report. A fraud alert does not block access, but it warns businesses to verify your identity first.
What is a credit freeze?
A credit freeze, also called a security freeze, restricts access to your credit file. Because most lenders want to review a credit report before approving a credit card or loan, the freeze can stop a criminal who has your personal information from opening a new account.
Think of it as locking the main entrance to your credit report.
The report still exists. Your accounts continue to be updated, and your credit scores can still change as lenders report new balances and payment information. The freeze simply limits who can access the file for many new-credit decisions.
Federal law allows you to freeze and unfreeze your files for free with Equifax, Experian, and TransUnion. A freeze does not affect your credit scores.
A freeze lasts until you remove it
A credit freeze does not expire after one year. It remains until you request a temporary lift or permanent removal.
That makes it useful as a long-term preventive tool. You do not need to wait until someone steals your identity.
You might freeze your credit because:
- Your Social Security number was exposed in a data breach
- Your wallet or identification was stolen
- You found an unfamiliar account or inquiry
- A family member misused your personal information
- You rarely apply for new credit
- You want stronger protection for a child or protected consumer
The catch is that you must remember the freeze when you legitimately apply for credit.
You must freeze all three bureaus separately
Placing a freeze with Equifax does not automatically freeze Experian or TransUnion.
You need to contact each bureau separately. If you freeze only one report, a thief may still succeed with a lender that checks one of the other two.
This is different from a fraud alert, where the bureau you contact must notify the other nationwide bureaus.
You can temporarily lift a freeze
You do not need to remove a freeze permanently every time you apply for credit.
You can request a temporary lift for a period you choose. For example, you might lift your reports for five days while shopping for an auto loan, then allow the freeze to return automatically.
You may also be able to lift only the bureau a lender intends to check. Ask the lender which report it uses, but remember that some companies check more than one.
Under federal requirements, a nationwide bureau generally must lift or remove a freeze within one hour after receiving a request by secure electronic means or toll-free telephone. A mailed request can take up to three business days after receipt.
Placing a freeze may not be instant by mail
When requested online or by phone, a nationwide credit reporting company generally must place the freeze within one business day. A request sent by mail may take up to three business days after the bureau receives it.
The bureau must also send confirmation and instructions for removing the freeze.
This is one reason to save your confirmation information.
A freeze is easy to forget when you do not apply for credit for several years.
What is a fraud alert?
A fraud alert adds a warning to your credit reports. It tells businesses reviewing your credit that they should take reasonable steps to confirm your identity before opening certain new accounts, issuing an additional card, or increasing a credit limit at your request.
The report is not locked.
A lender can still access it and may still approve the application after completing the required verification. That makes a fraud alert more convenient than a freeze, but also less restrictive.
If you provide a phone number with an initial fraud alert, a creditor must call that number or take other reasonable steps to verify that the person requesting credit is really you.
You contact only one bureau
You can place a fraud alert by contacting Equifax, Experian, or TransUnion. The bureau you contact must notify the other two.
This is much easier than placing three separate freezes.
Still, review the confirmation from each bureau and make sure your contact information is correct. An alert is less useful when the verification phone number is outdated.
A fraud alert does not guarantee a phone call
People often describe a fraud alert by saying, “The lender has to call me.”
That is a useful shorthand, but it is not the whole rule.
The business must take reasonable steps to verify your identity. Calling a number you supplied may be one method. The exact process can depend on the type of alert and the creditor’s verification procedures.
A fraud alert creates an extra checkpoint.
It is not a personal approval button that only you can press.
The three types of fraud alerts
There are three main fraud alert options: an initial fraud alert, an extended fraud alert, and an active-duty alert.
Initial fraud alert
You can request an initial fraud alert when you believe you are, or may soon become, a victim of fraud or identity theft.
You do not need to prove that a fraudulent account has already been opened.
An initial alert lasts for one year unless you remove it earlier. You can place another alert after it expires. It also allows you to request one free credit report from each nationwide bureau in addition to the reports otherwise available to you.
An initial alert can make sense after:
- Losing a wallet containing personal identification
- Responding to a phishing message
- Discovering that a password and personal details were exposed
- Seeing suspicious activity that has not yet become confirmed identity theft
- Receiving notice that sensitive personal information was compromised
Extended fraud alert
An extended fraud alert is for people who have experienced identity theft and completed an identity theft report, such as a report through IdentityTheft.gov.
It lasts for seven years.
With an extended alert, a creditor must contact you in person, by telephone, or through another method you choose before extending new credit. You are also entitled to two free reports from each nationwide credit bureau during a 12-month period.
Your name is removed from the nationwide bureaus’ prescreened credit and insurance marketing lists for five years.
The longer alert reduces the need to renew protection every year while recovering from a serious identity theft problem.
Active-duty alert
An active-duty alert is available to qualifying members of the armed forces who are assigned away from their usual duty station.
The alert lasts for 12 months and can be renewed when the deployment lasts longer. You can also appoint a personal representative to place or remove it when direct contact is difficult.
When you request an active-duty alert from one nationwide bureau, it applies at all three. Your name is also removed from prescreened credit and insurance marketing lists for two years.
Which one provides stronger protection?
A credit freeze usually provides stronger protection against new-account credit fraud.
The reason is practical. If a lender cannot access your report, it will usually refuse to open the account. With a fraud alert, the report remains available and the application can proceed after identity verification.
The FTC describes a freeze as the best way to protect against an identity thief opening new credit accounts.
But stronger does not mean complete.
A freeze does not stop:
- Fraud on an existing credit card or bank account
- Unauthorized use of a debit card
- Tax identity theft
- Medical identity theft
- Government benefit fraud
- Employment identity theft
- A thief using information with a company that does not check a nationwide credit report
A freeze protects one important door.
Identity thieves may try others.
Which one is easier to manage?
A fraud alert is easier.
You contact one bureau rather than three, and you generally do not need to lift the alert when applying for legitimate credit. The lender can access the report and complete additional identity checks.
A freeze requires more administration. You must place it separately with all three bureaus and lift the appropriate file when a legitimate lender needs access.
That inconvenience is usually manageable. Still, it can become annoying when you are:
- Shopping for a mortgage
- Applying with several auto lenders
- Opening a credit card
- Requesting certain financing at a store
- Changing mobile phone providers
- Applying for services that use credit-based identity checks
You may not know which bureau the business will check. Lifting only one report can delay the application when the lender tries another.
Can you use a freeze and fraud alert together?
Yes.
A freeze restricts access. A fraud alert adds an identity verification warning when a report can be accessed.
Using both can provide layers of protection, particularly after confirmed identity theft. The freeze may block most new-credit access, while the fraud alert remains useful if you temporarily lift the freeze or a business can lawfully obtain the report.
There is no fee for using both tools.
Do not assume that adding more protection removes the need to monitor your accounts. Neither tool will notify your bank that someone is already using your debit card.
When a credit freeze may be the better choice
A freeze may suit you when:
- You are not planning to apply for credit soon
- Your Social Security number or other sensitive information was exposed
- You are already a victim of identity theft
- You found an unfamiliar credit inquiry or account
- You want stronger preventive protection
- You are protecting a child or another protected consumer
After a data breach
Not every data breach requires the same response.
A breach involving only an old email address creates a different risk from one exposing Social Security numbers, dates of birth, and addresses.
When the exposed information could be used to apply for credit, a freeze is often more useful than relying only on monitoring alerts.
Monitoring may tell you an account was opened.
A freeze aims to stop the account from being opened in the first place.
When you rarely use new credit
A person who applies for credit once every few years may experience very little inconvenience from a permanent freeze.
You lift it when needed, complete the application, and freeze the reports again.
This is often a better trade than leaving the files open every day for an application you may not make until 2029.
When protecting a child
Federal law provides freeze protections for certain protected consumers, including children under age 16 and some people represented by guardians.
If a bureau does not already have a file for the child, it can create a protected record solely to place the freeze.
A child’s identity can be valuable to a thief because fraudulent activity may remain undiscovered until the child applies for credit years later.
When a fraud alert may be the better choice
An initial fraud alert may suit you when:
- You suspect possible fraud but have not confirmed identity theft
- You expect to apply for credit soon
- You want extra verification without locking your reports
- You lost personal information but are unsure whether it has been misused
- You do not want to manage three separate freezes
When you are actively shopping for credit
A fraud alert can be less disruptive during a mortgage or auto loan search. Lenders can still access your reports, but they must follow the alert’s verification requirements.
Be prepared for extra calls or identity questions.
Keep the phone number connected with the alert active, answer unfamiliar calls carefully, and verify that the caller is really connected with your application before sharing personal information.
When the risk is uncertain
Suppose you misplaced your wallet for two hours and then recovered it. Nothing appears missing, but someone could have copied your information.
An initial fraud alert gives you a year of additional verification without requiring you to manage freezes during upcoming applications.
A freeze would provide stronger protection. The alert may be a reasonable minimum step when you are not ready to lock the reports.
What neither tool can do
A credit freeze and fraud alert focus mainly on identity thieves trying to obtain new credit using your credit files.
They do not repair damage that has already appeared.
If a fraudulent account is already on your report, you still need to:
- Contact the creditor’s fraud department
- Report the identity theft
- Dispute or block the fraudulent information
- Review all three credit reports
- Secure compromised email and financial accounts
- Keep records of every conversation and correction
Identity theft victims can use an Identity Theft Report, proof of identity, and a letter identifying fraudulent information to request that credit bureaus block qualifying identity theft information. The bureaus generally must complete the block within four business days after receiving the required documents.
They do not monitor existing accounts
Your frozen credit card account can still be used by someone who has the card number or login details.
Turn on alerts for:
- Purchases
- Cash withdrawals
- Password changes
- New payees
- Address and phone number changes
- Requests for replacement cards
They do not remove credit report errors
A freeze does not correct an inaccurate late payment. A fraud alert does not delete a collection that belongs to someone else.
You must dispute inaccurate information separately with the bureau displaying it and the company that supplied it.
They do not guarantee that fraud will be stopped
A thief may target a company that does not use one of the nationwide credit reports. The thief may also attack your tax, medical, banking, email, or benefit accounts instead.
Use these tools as part of a larger identity protection plan, not as a complete solution.
Does a freeze affect your existing credit?
No. A freeze does not close your current credit cards or stop you from using them.
Your lenders can continue reporting balances and payment activity. Existing creditors may also retain access for certain account-management purposes.
A freeze does not stop you from:
- Using existing credit cards
- Making loan payments
- Checking your own reports
- Receiving your credit score
- Building payment history
The FTC also notes that a freeze does not prevent you from applying for a job, renting an apartment, or buying insurance, although the business may use other consumer reporting information and procedures permitted by law.
Does either option hurt your credit score?
No.
Placing, lifting, or removing a credit freeze does not lower your credit score. A fraud alert also does not create a hard inquiry or damage your score.
These tools change how businesses access or respond to your report. They do not change your payment history, balances, account age, or other scoring information.
A score might change while a freeze is active because your creditors continue reporting account activity.
The freeze is not causing the movement.
How to place a credit freeze
You need to contact all three nationwide credit bureaus individually.
Step 1: use the official bureau channel
Go directly to the official Equifax, Experian, and TransUnion websites, or use the verified telephone and mailing information provided by the CFPB or IdentityTheft.gov.
Avoid clicking sponsored search results or links in unexpected identity theft emails. A fake freeze website could collect the exact information you are trying to protect.
Step 2: provide the requested identification
The bureau may ask for your name, address history, date of birth, Social Security number, and identity documents.
Use secure upload systems when available. Do not send sensitive documents through an unverified email address.
Step 3: save the confirmation
Store the username, password, PIN, confirmation number, or other management details supplied by each bureau.
Keep them in a secure password manager or protected file. Do not place three freeze PINs on a note labeled “credit freeze” beside your computer.
Step 4: confirm all three files are frozen
Do not stop after the first bureau.
Create a small checklist:
- Equifax freeze confirmed
- Experian freeze confirmed
- TransUnion freeze confirmed
Save the date and confirmation for each one.
How to place a fraud alert
You need to contact only one nationwide credit bureau.
Choose the correct type
Request:
- An initial fraud alert when you suspect fraud or identity theft
- An extended alert when you have an Identity Theft Report
- An active-duty alert when you meet the military eligibility requirements
Provide reliable contact information
Use a telephone number or contact method you monitor regularly.
If you change your number, review the alert information. A creditor cannot reach you at a phone number you canceled six months ago.
Confirm the alert was shared
The bureau you contact is responsible for notifying the other two nationwide bureaus. Keep the confirmation and check that your reports reflect the alert.
An initial alert also gives you access to an additional free report from each nationwide bureau. Use those reports to look for unfamiliar accounts and inquiries.
What to do before applying for credit with a freeze
Ask which bureau the lender will check
Some lenders will tell you. Others may check more than one bureau or use a process that can change.
When the answer is unclear, you may need to lift all three temporarily.
Lift the freeze early enough
Online and phone requests are generally completed quickly, but do not wait until you are sitting at a dealership desk with a salesperson tapping a pen.
Lift the freeze before the application and confirm that the request was processed.
Use a limited time window
A temporary lift is usually better than permanently removing the freeze.
Choose a window long enough for the lender to complete the credit check, including possible follow-up checks. A mortgage process may require more time than a credit card application.
Refreeze after the application
When you manually removed rather than temporarily lifted the freeze, place it again after the lender has finished accessing the report.
Do not leave it open for six months because you forgot.
Watch for credit freeze and fraud alert scams
The freeze and alert themselves are free.
Be suspicious of a company charging a monthly fee merely to place them for you. A paid identity monitoring service may bundle additional features, but you do not need to subscribe to freeze your files or place an alert.
Warning signs include:
- A demand for gift card or cryptocurrency payment
- An unexpected caller offering to “activate” your freeze
- A website asking for payment before showing the freeze form
- A message claiming your freeze will expire unless you pay
- A caller asking for your bureau password or PIN
- A company guaranteeing that a fraud alert will stop every type of identity theft
Contact the bureaus through their verified official channels.
The business that called you does not need the password you use to manage your freeze.
Common myths about freezes and fraud alerts
A credit freeze stops all identity theft
No. It mainly helps prevent new accounts that require access to your credit report.
A fraud alert locks the report
No. The report remains available. The alert tells businesses to complete additional identity verification.
You must pay to freeze your credit
No. Placing, lifting, and removing a freeze with the nationwide bureaus is free under federal law.
You only need to freeze one bureau
No. You must contact all three separately for full nationwide-bureau freeze coverage.
A freeze damages your credit score
No. It has no effect on your score.
A freeze prevents existing lenders from reporting payments
No. Your account information can continue updating while the freeze is active.
A fraud alert lasts forever
No. An initial alert lasts one year. Extended alerts last seven years, and active-duty alerts generally last 12 months unless renewed.
You cannot use a freeze and fraud alert together
You can use both.
Frequently asked questions
Which is better, a credit freeze or fraud alert?
A freeze usually provides stronger protection against new-account credit fraud. A fraud alert is more convenient when you expect lenders to access your credit regularly.
Should I freeze my credit after a data breach?
Consider a freeze when sensitive information such as your Social Security number, date of birth, or other credit application details may have been exposed. The appropriate response depends on the information involved.
Can I apply for a loan with a credit freeze?
Yes, but you will usually need to lift the freeze before the lender can access your report. You can lift it temporarily rather than remove it permanently.
How long does a credit freeze last?
It remains until you remove it. A temporary lift lasts for the period you specify.
How long does a fraud alert last?
An initial alert lasts one year. An extended identity theft alert lasts seven years. An active-duty alert generally lasts 12 months and can be renewed for a longer deployment.
Do I need a police report for a fraud alert?
You do not need an identity theft report for an initial alert. An extended seven-year alert requires an Identity Theft Report, which you can create through IdentityTheft.gov.
Can I remove a fraud alert early?
Yes. Follow the bureau’s process for removing it and be prepared to verify your identity.
Can a thief open an account while my credit is frozen?
A freeze makes ordinary new-credit fraud much harder because most lenders will not approve an account without accessing a report. It is not an absolute guarantee, particularly for services that do not use one of the nationwide credit files.
Will a freeze stop someone from taking over my bank account?
No. Contact the bank, change passwords, review contact details, and strengthen account authentication when an existing account is compromised.
Will a fraud alert contact me every time someone checks my credit?
No. It is not a general notification service for every inquiry. It requires identity verification in connection with covered credit requests.
Should children have frozen credit?
A parent or guardian can request a security freeze for a qualifying child or protected consumer. This can make it harder for someone to create a credit file using the child’s identity.
Can I still check my report while it is frozen?
Yes. A freeze does not stop you from requesting or reviewing your own credit report.
A freeze blocks access, while an alert adds a warning
A credit freeze and fraud alert are both free identity protection tools, but they do different jobs.
A freeze restricts access to your credit report and usually provides stronger protection against new-account fraud. A fraud alert leaves the report accessible but requires creditors to take additional steps to confirm your identity.
Use a freeze when stronger prevention matters more than convenience. Use an initial fraud alert when you suspect possible fraud and want extra verification without locking the reports. After confirmed identity theft, consider both a freeze and an extended alert.
Then protect the rest of your financial life.
Review existing accounts, turn on transaction alerts, secure your email, use unique passwords, and check all three credit reports. A frozen credit file is useful, but it cannot protect an account a thief has already entered.