Among the tools available to guard against identity theft, a credit freeze is one of the strongest, and since a change in federal law it costs nothing to use at any of the three major credit bureaus. It works by cutting off the one thing a thief needs to open a loan or credit card in someone else’s name: access to that person’s credit file. For older Americans, who are frequent targets of identity fraud, it is protection that sits unused mostly because people assume it is complicated or expensive.
How a freeze actually stops fraud
A credit freeze restricts access to a person’s credit report. When a lender receives an application for a new credit card, car loan, or line of credit, it pulls the applicant’s file from a credit bureau to decide whether to approve it. With a freeze in place, the bureau will not release that file, so the lender cannot approve the account. As the Consumer Financial Protection Bureau describes it, a thief who has stolen a name, birth date, and Social Security number still cannot open new credit if the file behind it is locked.
Since 2018, federal law has required the three nationwide credit bureaus, Equifax, Experian, and TransUnion, to place and lift freezes at no charge. The Federal Trade Commission’s guidance confirms there is no fee to freeze or unfreeze, and that the same free protection can be extended to a child’s credit file. Because each bureau maintains its own file, a freeze has to be placed separately at all three to be fully effective.
The three nationwide bureaus are not the only files a criminal can exploit. Specialty consumer reporting companies track information such as checking-account and utility histories, and some of those can also be frozen separately, closing off avenues a thief might use to open a new bank account or set up phone or utility service in a stolen name. Placing a freeze at each takes more effort than a single call, but for an older adult who rarely opens new accounts, that one-time work shuts nearly every door a stranger has to borrow against their identity.
Free retirement updates: Miss an enrollment or claim deadline and it may be gone. The free Retirement Shield newsletter keeps readers ahead of the ones that matter. Get the free newsletter.
What a freeze does not block
A freeze is powerful but narrow, and understanding its limits keeps expectations realistic. It stops new accounts from being opened, but it does not affect accounts that already exist. Existing credit cards keep working, and a thief who has stolen an existing card number can still run up charges on it; a freeze does nothing to stop that, which is a separate fraud problem handled through the card issuer.
A freeze also does not lower a credit score, and it does not prevent the account holder from seeing their own credit reports. It has no effect on prescreened credit offers, which are governed by a different opt-out, and it does not interfere with a current creditor reviewing an existing account. The protection is aimed squarely at one scenario, new credit opened in the victim’s name, and it handles that scenario better than almost anything else available.
Because a freeze cannot undo fraud that has already occurred, a person who discovers accounts opened in their name needs a different response. Someone who has become a confirmed identity-theft victim, and who files a report, is entitled to place an extended fraud alert that lasts seven years and comes with additional free copies of their credit reports, a step the Federal Trade Commission describes alongside its guidance on freezes and fraud alerts. A freeze blocks the next fraudulent account, while those recovery steps clean up the ones a thief already opened, and the two are meant to work together rather than as substitutes.
Lifting it when credit is needed
The reason some people hesitate is the fear that a freeze will get in the way when they legitimately need credit. In practice, lifting it is quick. A freeze can be temporarily lifted for a specific lender or for a set period, then reinstated, all for free and often within minutes when done online or by phone. Someone applying for a mortgage or a new card simply thaws the file at the relevant bureau before applying and can refreeze it afterward.
Setting a freeze up requires contacting each bureau, verifying identity, and receiving a PIN or password that is later used to lift it. Keeping that credential in a safe place matters, because it is what allows the file to be reopened later. For those who want a lighter-touch option, a fraud alert is an alternative: the CFPB’s explanation of fraud alerts notes that an alert asks lenders to take extra steps to verify identity before opening an account, without locking the file outright. An alert is easier to live with but weaker than a freeze, since it relies on lenders following through on the extra verification.
For a retiree weighing the two, the freeze is the sturdier choice when new credit is not needed often, which describes many older households. The cost is a few minutes of setup at three websites and the minor inconvenience of thawing the file on the rare occasion a new loan comes up. Against the months of cleanup that follow a stolen identity, and the accounts opened before the theft is even noticed, that is a small price. The tool is free, it is a legal right, and it addresses the exact fraud that does the most lasting damage.
This article was researched and drafted with the assistance of AI and reviewed by The Financial Wire editorial team.
More Financial Reading
- What really happens to your joint savings account when you die?
- How many CDs can you park at 1 bank? FDIC rules you must know



