The strongest single defense against having a loan or credit card opened in someone else’s name costs nothing and takes only a few minutes at each credit bureau. It is called a security freeze, and since 2018 federal law has made it free to place and free to lift for everyone. For retirees, whose Social Security numbers and financial details are exposed in data breaches and scam calls with grim regularity, a freeze is the closest thing to a lock on the credit file itself.
What a freeze actually stops, and what it leaves alone
A credit freeze works by restricting access to a person’s credit report, and access is the linchpin of new-account fraud. When a thief applies for a credit card, auto loan, or line of credit using a stolen identity, the lender pulls a credit report to decide whether to approve it. With a freeze in place, that report is locked, the lender cannot see it, and the application stalls. The Federal Trade Commission’s guidance on credit freezes and fraud alerts confirms that a freeze is free at all three nationwide bureaus and that it blocks new creditors from accessing the file.
Just as important is what a freeze does not disturb. It does not lower a credit score, and it does not touch existing accounts, so current credit cards, mortgages, and bank relationships keep working normally. A frozen file can still be accessed by existing creditors and for certain purposes such as an insurance quote in some cases, but the new-account door is shut to identity thieves.
Because the freeze must be placed separately at each of the three major bureaus, Equifax, Experian, and TransUnion, protection is only complete when all three are locked. A thief who finds one file frozen may simply steer the application to a lender that pulls from a bureau the person left open.
Free retirement updates: Scam calls targeting retirees change every week. Our free Retirement Shield newsletter flags the ones going around and the one tell that stops each. Sign up free.
Placing and lifting a freeze at all three bureaus
Setting up a freeze means contacting each bureau online, by phone, or by mail and creating an account or PIN that will later be used to lift it. Each bureau must place the freeze quickly once the request is made, and it stays in effect until the person removes it. There is no expiration and no fee, and a freeze can be placed for a spouse, and in many cases for a child or a dependent adult whose affairs a person manages.
Lifting a freeze is designed to be nearly as fast as placing one, which addresses the most common worry. When a person genuinely wants new credit, such as applying for a card or refinancing, the freeze can be temporarily thawed, either for a set period or for a specific creditor, and then it snaps back into place. Keeping the PINs or login credentials somewhere safe is what makes this quick; losing them adds friction to an otherwise simple lift.
A related tool, the fraud alert, is lighter-weight and free as well. It tells lenders to take extra steps to verify identity before extending credit, but it does not lock the file the way a freeze does. For sustained protection, the freeze is the stronger choice, with the fraud alert serving as a supplement rather than a substitute.
The one operational risk worth planning around is not the freeze itself but the credentials that control it. Because a frozen file can only be thawed by the person who holds the PIN or login, losing that information can turn a two-minute lift into a frustrating identity-verification ordeal at exactly the moment credit is needed, such as at a car dealership or a mortgage closing. Storing each bureau’s PIN and account details somewhere secure and known to a trusted family member solves this quietly. For a spouse or an adult child helping manage an older relative’s affairs, setting up the freeze together, and recording where the credentials live, means the protection can be maintained and lifted without a scramble later.
Pairing the freeze with monitoring and recovery tools
A freeze prevents new-account fraud, but it is most effective as part of a small routine. Checking credit reports periodically catches anything that slipped through before the freeze or any error already on file, and those reports are available for free from the federally authorized source described in the FTC’s overview of free credit reports. Spotting an unfamiliar account early is the difference between a quick dispute and a drawn-out cleanup.
If fraud has already occurred, a freeze does not undo it, and the recovery process runs through the government’s dedicated resource. The FTC’s hub at IdentityTheft.gov builds a personalized recovery plan, generates the affidavits needed to dispute fraudulent accounts, and walks a victim through contacting each company involved. Placing a freeze afterward then stops the same thief from opening still more accounts while the cleanup is underway.
The practical sequence for anyone worried about identity theft is short: freeze all three bureaus now while it is free and reversible, store the credentials, and check the reports on a schedule. A file that stays locked between the rare moments a person actually needs new credit is a file a thief cannot easily borrow against.
This article was created with AI assistance and was reviewed, edited, and fact-checked by The Financial Wire editorial team.
More Financial Reading
- The ideal retirement withdrawal rate so your savings actually last
- How many CDs can you park at 1 bank? FDIC rules you must know
Warren Cohen is a finance writer based in Phoenix, Arizona, covering personal finance topics including credit, banking, and beginner investing. He earned his degree in business administration from Arizona State University and began his career working in consumer finance, where he gained direct experience with lending and credit systems. He now writes for personal finance websites and fintech platforms, focusing on clear, practical content that helps readers make informed financial decisions.
