Identity thieves who obtain a Social Security number or other personal details still need one more thing to open a new credit card or loan: access to a credit file. A security freeze, commonly called a credit freeze, closes that door by blocking lenders from pulling a credit report at all, and unlike some identity-protection products sold online, federal law requires the service to be free at every major credit bureau. The freeze has been available at no cost since 2018, yet many people still assume it costs money or takes weeks to undo, a misconception that keeps some from using a strong, no-cost protection.
What a Freeze Actually Blocks
A credit freeze restricts access to a credit file so that a lender or other company cannot view it to approve a new account. Because most lenders will not extend credit without checking a report first, a freeze effectively stops the vast majority of fraudulent new-account applications made in someone’s name, even when a thief already has a Social Security number and other identifying details in hand.
According to the Federal Trade Commission, a freeze does not affect an existing credit score, does not prevent use of current credit cards, and does not interfere with a job application, apartment rental, or insurance quote, since those checks typically rely on information already on file or on a different type of report entirely.
Free retirement updates: Plain-English help keeping more retirement money is one signup away. The free Retirement Shield newsletter covers the benefits, deadlines, and money mistakes that cost retirees, a couple times a week. Subscribe free.
Placing and Lifting a Freeze Costs Nothing
A federal law passed in 2018, the Economic Growth, Regulatory Relief, and Consumer Protection Act, requires all three nationwide credit bureaus to place, lift, and remove a security freeze free of charge, according to an FTC consumer alert issued when the requirement took effect. Before that law, some bureaus charged a fee in certain states, which discouraged routine use; the current rule removed that cost nationwide, regardless of where an account holder lives.
A freeze requested online or by phone must be placed within one business day, and a request to lift it — whether permanently or for a short window to apply for new credit — must be honored within one hour when made online or by phone. That speed means a freeze can be lifted briefly to apply for a mortgage, a car loan, or a new credit card, then reinstated immediately afterward without losing the underlying protection.
Each of the Three Bureaus Must Be Contacted Separately
There is no single national freeze request that covers every bureau at once. Equifax, Experian, and TransUnion each maintain a separate credit file, so a freeze has to be requested with all three individually to fully close off new-account fraud, since a lender could still pull a report from whichever bureau was left unfrozen. Each bureau provides its own online portal, phone number, and mailing address for placing, lifting, and removing a freeze, and each assigns its own PIN or password used to manage the freeze going forward.
Freezing a Credit File for a Child or a Dependent Adult
A parent or legal guardian can request a freeze on behalf of a minor child, since children typically do not yet have an established credit file but can still be targeted by identity thieves who use a Social Security number to open fraudulent accounts years before the child is old enough to notice. The same option generally extends to an incapacitated adult under legal guardianship or conservatorship, where a guardian handles the request on that person’s behalf. Each bureau requires documentation proving the relationship and identity before creating and freezing a file for someone who cannot manage the process independently.
Retirees managing finances for an aging parent, a spouse with declining capacity, or a grandchild often overlook this option, assuming a freeze only applies to an adult who already has an active credit history. Because fraud on a dormant or newly created file can go unnoticed for years, requesting a freeze proactively for a dependent closes a gap that identity thieves have increasingly learned to exploit.
How a Freeze Differs From a Fraud Alert
A fraud alert is a lighter-touch option that does not block access to a credit file but instead requires a business to take extra steps to verify identity before extending credit. A standard fraud alert lasts one year and can be requested through any single bureau, which is then required to notify the other two. An extended fraud alert, available after filing an identity theft report, lasts seven years and adds stronger protections, including removal from prescreened credit offer lists for that period. A freeze offers a stronger block but requires action at all three bureaus and, unlike a fraud alert, stays in place until it is actively lifted or removed rather than expiring on its own.
Some people choose to use both protections together — a freeze at all three bureaus for the strongest ongoing block, paired with monitoring of financial statements for any sign that an application slipped through despite the freeze. Neither tool prevents an existing account from being misused, so reviewing bank and credit card statements regularly remains a separate, necessary habit even after a freeze is in place at every bureau.
This article was produced with AI assistance and reviewed by The Financial Wire editorial team.
More Financial Reading
- The ideal retirement withdrawal rate so your savings actually last
- Adding someone to your bank account: tax traps and smart moves
