Identity thieves who get hold of a Social Security number rarely need much else to open a new credit card or loan in someone else’s name. One of the strongest defenses against that is also one of the cheapest: a credit freeze, which by federal law costs nothing to place, nothing to lift, and does not touch a credit score.
What a Credit Freeze Actually Blocks
A credit freeze prevents lenders and other creditors from pulling up a credit report, and since most businesses will not extend new credit without being able to check that report, a freeze effectively stops someone else from opening a new account in a consumer’s name, according to the Federal Trade Commission. It does not stop existing accounts from being misused, and it does not affect a person’s own ability to use accounts already open; it only blocks new ones from being created while the freeze is active. Anyone can place a freeze at any time, whether or not they have any reason to believe their information has been exposed.
Free retirement updates: Social Security and Medicare change every year, and nobody sends you a memo. Our free Retirement Shield newsletter breaks down what changed and what to do. Get it free in your inbox.
Placing a Freeze at All Three Bureaus
A freeze has to be requested separately from each of the three nationwide credit bureaus, Equifax, Experian, and TransUnion, because each maintains its own report and a lender may check any one of them. There is no cost at any of the three to place a freeze, and none to remove it later. A consumer who wants full protection needs to contact all three rather than assuming a freeze at one bureau covers the others.
Fraud Alerts Offer a Lighter-Touch Option
For someone who wants some protection without fully blocking access to their credit report, a fraud alert is a separate, also-free tool. An initial fraud alert tells businesses to verify a person’s identity, usually by contacting them directly, before opening a new account, and it lasts one year with the option to renew. Unlike a freeze, it does not stop a lender from seeing the report; it just requires an extra identity check first. Placing a fraud alert with just one of the three bureaus is enough, since that bureau is required to notify the other two. Consumers who have already filed an identity theft report with the FTC or a police report can instead place an extended fraud alert, which lasts seven years.
Protecting a Grandchild’s Credit, Too
Grandparents and parents raising a child under 16 can place a free credit freeze on the child’s credit file as well, since a minor’s Social Security number can be misused for years without the family noticing, often not until the child applies for their first credit card or student loan. The process for a minor differs from an adult freeze and is handled through separate instructions at each of the three bureaus rather than the standard adult request form.
Lifting a Freeze Without Losing the Protection
A freeze does not have to be permanent to be effective. It can be temporarily lifted, at one bureau or all three, when a consumer actually needs new credit, such as applying for a loan, renting an apartment, or starting new utility service, and then put back in place once that need has passed. Because lenders typically only check one specific bureau for a given application, a consumer can often identify which bureau a lender uses and lift the freeze there alone, leaving the other two in place the entire time.
Checking a Credit Report Even With a Freeze in Place
A credit freeze protects against new accounts, but it does not substitute for reviewing what is already on file. The FTC recommends regularly pulling a free copy of a credit report from each of the three bureaus to look for accounts that were not authorized, addresses that do not match, or other signs that identity theft has already occurred, since a freeze placed today does nothing to catch fraud that happened before it went into effect. A freeze and a periodic report review work as two separate layers of the same defense rather than one replacing the other.
Recovering After Identity Theft Has Already Happened
A freeze and a fraud alert are both meant to prevent new fraud, not undo damage that has already occurred. A consumer who finds an unfamiliar account or a hard inquiry they did not authorize can file a report directly with the FTC at IdentityTheft.gov, which generates a personalized recovery plan and the documentation needed to dispute fraudulent accounts with creditors and credit bureaus. That same FTC identity theft report is also what unlocks the longer, seven-year extended fraud alert described above, so filing it promptly can extend, not just document, the protection available afterward.
This article was produced with the assistance of AI and reviewed by The Financial Wire editorial team.
More Financial Reading
- Bank statements: how long to keep them and when to toss them
- How many CDs can you park at 1 bank? FDIC rules you must know
Warren Cohen is a finance writer based in Phoenix, Arizona, covering personal finance topics including credit, banking, and beginner investing. He earned his degree in business administration from Arizona State University and began his career working in consumer finance, where he gained direct experience with lending and credit systems. He now writes for personal finance websites and fintech platforms, focusing on clear, practical content that helps readers make informed financial decisions.
