Picture this: your child is 17, applying for their first student loan, and the lender calls to say the application was denied. The reason? A credit card opened eight years ago in a city your family has never visited, tied to your kid’s Social Security number. The account went to collections in 2022. You had no idea it existed.
That scenario plays out more often than most parents realize. Because minors rarely have credit histories and no one routinely checks for them, a stolen Social Security number can sit in a fraudster’s hands for years, quietly fueling loans, utility accounts, and credit cards. By the time the family finds out, the damage is deep and the cleanup is brutal.
Here is the part that stings: since September 2018, federal law has given every parent and legal guardian the right to freeze a child’s credit file at no cost, even when no file exists yet. The protection covers any minor under 16, and all three nationwide credit bureaus must comply. Yet as of mid-2026, most families have never done it.
The federal law that makes this possible
The right comes from the Economic Growth, Regulatory Relief, and Consumer Protection Act, signed on May 24, 2018. That law amended Section 605A of the Fair Credit Reporting Act to create two distinct tools: a free security freeze available to all consumers and a separate “protected consumer” freeze designed specifically for minors under 16 (and certain incapacitated adults). The protected-consumer provisions took effect on September 21, 2018.
The Consumer Financial Protection Bureau published guidance explaining the new protections and confirmed the effective date. According to the CFPB, a parent or legal guardian can request a freeze even when a child has no existing credit file. The bureau describes it as a preventive shield: it blocks new accounts from being opened in a child’s name before any damage occurs, not just after fraud is discovered.
Here is the key mechanical difference from an adult freeze. Under 15 U.S.C. 1681c-1, if a minor under 16 has no credit file, the bureau must create one and immediately freeze it. An adult freeze simply locks an existing record. A protected-consumer freeze generates a record that did not previously exist and seals it against unauthorized use, making it far harder for anyone to open accounts in that child’s name.
The Federal Trade Commission backs the same advice. The FTC’s child identity theft guidance calls a credit freeze for minors one of the most effective ways to prevent new-account fraud targeting children.
How to actually do it, bureau by bureau
There is no single portal that covers all three bureaus at once. Parents need to contact Equifax, Experian, and TransUnion individually, and each maintains its own process with overlapping but not identical documentation requirements.
In general, the law requires a parent or guardian to provide:
- Proof of the parent’s or guardian’s own identity (a government-issued photo ID)
- The child’s birth certificate
- Proof of legal authority over the child (for parents listed on the birth certificate, the certificate itself usually suffices; guardians may need a court order)
- The child’s Social Security number
Here is where to start with each bureau:
- Equifax: Requests can be submitted online or by mail. Equifax provides a dedicated freeze page with instructions for minors.
- Experian: Experian’s freeze center includes a process for requesting a minor’s freeze, typically handled by mail with supporting documents.
- TransUnion: TransUnion offers a freeze page that walks parents through the minor-specific steps, which generally require mailed documentation.
Processing times vary. Parents who have gone through the process report that it can take anywhere from a few days to several weeks per bureau, and some encounter initial confusion when the bureau cannot locate an existing file for the child. That is expected, since most children do not have credit files, but the internal workflows bureaus use to create and freeze a new record differ from one company to the next. Completing all three freezes may require patience, but the financial cost is zero.
Once a freeze is in place, the bureau issues a PIN or confirmation number. Store it somewhere secure, like a fireproof safe or a password manager. That PIN will be needed to temporarily lift or permanently remove the freeze later, such as when the child turns 16 and the protected-consumer provisions no longer apply, or when the young adult needs to open a legitimate account.
Why children are such attractive targets
A child’s Social Security number is valuable precisely because it is unused. When an adult’s identity is stolen, the victim often notices quickly: a denied credit application, an unexpected bill, a fraud alert from a bank. A child has none of those touchpoints. A thief who obtains a minor’s Social Security number can pair it with a fabricated name and date of birth to build what fraud investigators call a “synthetic identity” — a stitched-together profile that passes basic credit checks because the underlying SSN has no conflicting history.
Javelin Strategy & Research, a firm that tracks identity fraud, estimated in its 2021 Child Identity Fraud Study that roughly 1.25 million children in the United States were victims of identity fraud in the prior year. The study found that total costs associated with child identity fraud reached into the billions, with families often shouldering significant out-of-pocket expenses to resolve cases. While that figure covers all forms of child identity fraud, not just credit-file abuse, it illustrates the scale. Notably, the data showed that children known to the perpetrator, including victims of family-related fraud, accounted for a large share of cases.
Industry observers say the problem has only grown since that 2021 snapshot, driven by a surge in data breaches exposing personal information. The massive 2024 National Public Data breach, which reportedly compromised Social Security numbers for hundreds of millions of people, underscored how easily minors’ data can end up in criminal hands.
Both the CFPB and the FTC recommend the protected-consumer freeze as a tool every family should consider. Neither agency, however, has published data on how many families have actually placed a freeze since 2018, which makes it difficult to measure the gap between the protection available and the protection in use.
What a freeze does not cover
A credit freeze blocks new credit accounts from being opened, but it does not stop every type of identity theft. Someone can still file a fraudulent tax return using a child’s Social Security number, claim the child as a dependent on their own return, or use the number for employment fraud. Those risks require separate steps.
One worth considering: requesting an IRS Identity Protection PIN for the child. The IP PIN is a six-digit number assigned by the IRS that must be included on any tax return filed with that Social Security number, making it much harder for someone else to file a fraudulent return. The IRS expanded the program to all taxpayers (and their dependents) in recent years, and parents can request one on behalf of a minor.
Parents sometimes worry that a freeze will create problems down the road when a teenager needs to open a bank account, apply for a student loan, or start building credit. The freeze can be temporarily lifted or removed when the time comes. For children under 16, the parent or guardian controls that process using the PIN issued at the time of the freeze. Once the child turns 16, the standard adult freeze rules apply, and the young person can manage their own file. Planning ahead by keeping the PIN accessible and explaining the freeze to the child as they approach adulthood avoids last-minute scrambles.
It is also worth checking whether a child already has a credit file before requesting a freeze. If a bureau returns a file that the family did not expect, that is a red flag. Someone may have already used the child’s information. In that case, the next steps go beyond a freeze: file a report with the FTC at IdentityTheft.gov, dispute the fraudulent accounts directly with the bureaus, and consider filing a police report to support the disputes.
A few hours of paperwork now or years of credit disputes later
The legal right is clear, the cost is zero, and the process, while not seamless, is straightforward enough that a parent can complete it across a few sittings. So why do so few families bother?
Part of the answer is awareness: many parents simply do not know the option exists. Part of it is friction: gathering documents and submitting separate requests to three different bureaus feels like a chore with no immediate payoff. And part of it is the nature of the threat itself. Child identity theft is a slow-burning problem. The damage may not surface for a decade, and by then the trail is cold and the cleanup is expensive.
For families weighing whether the effort is worth it, the math is simple. A few hours of paperwork now can prevent years of credit disputes, collection calls, and financial headaches that land on a young adult who did nothing wrong. As of June 2026, the federal right remains free, it remains available to every parent and guardian of a child under 16, and it remains one of the most underused consumer protections in the country. The only thing standing between your child and a locked credit file is a stack of documents and a little bit of follow-through.
Warren Cohen is a finance writer based in Phoenix, Arizona, covering personal finance topics including credit, banking, and beginner investing. He earned his degree in business administration from Arizona State University and began his career working in consumer finance, where he gained direct experience with lending and credit systems. He now writes for personal finance websites and fintech platforms, focusing on clear, practical content that helps readers make informed financial decisions.
