Skip to main content
My Consumer Finance

Credit freezes and fraud alerts: how to lock your files

How to lock Equifax, Experian, and TransUnion files with a free freeze, when a fraud alert is enough, and how to thaw before a planned application.

A credit freeze (also called a security freeze) blocks most new creditors from pulling your Equifax, Experian, or TransUnion file until you lift the freeze. A fraud alert asks lenders to take extra steps to verify it is really you. Freezes are free under federal rules. Neither tool deletes accurate negative history or “boosts” a score.

This guide covers when to freeze, when an alert is enough, and how to thaw safely before a planned application.

Freeze vs fraud alert

ToolWhat it doesScore impactTypical use
Credit freezeBlocks new-account access to that bureau file until you unlockNone by itselfAfter a breach, lost wallet, or when you are not shopping for credit
Initial fraud alert (usually 1 year)Creditors should verify identity before opening new creditNone by itselfSuspected misuse; you still want some applications possible
Extended fraud alert (usually 7 years)Longer alert after you file an identity-theft reportNone by itselfConfirmed identity theft with a report

A freeze is stronger than an alert for stopping new accounts. An alert is lighter friction if you expect to apply soon and want lenders warned, not blocked. Lost passport or wallet on a trip is a classic freeze trigger: Credit freeze after travel. Parents can place a similar lock on a child’s file: Freeze credit for a minor. Freezes also slow synthetic identity fraud that tries to open new tradelines on a mixed real/fake file. Details on what lives on the underlying files: How credit reports work.

How to place a freeze (all three)

Place a freeze separately at Equifax, Experian, and TransUnion. One bureau does not freeze the others.

  1. Use each bureau’s official freeze page (type the URL yourself; do not follow a text-message link).
  2. Create or confirm your account; save the PIN or password they issue.
  3. Freeze each file you care about (many people freeze all three).
  4. Confirm status shows frozen before you assume new-account risk is closed.

Checking your own reports at AnnualCreditReport.com does not require thawing a freeze in most cases, and pulling your own file is typically a soft check—see Hard vs soft credit checks.

How to thaw for a real application

Step-by-step freeze and time-boxed thaw without panic: Freezing and unfreezing your credit.

Before a mortgage, auto loan, or card you intend to accept:

  1. Ask the lender which bureaus they pull.
  2. Lift (thaw) only those bureaus, for a set window if the site offers timed unlocks.
  3. Complete the application.
  4. Re-freeze when you are done shopping.

If staff cannot say which bureau they use, pause. Urgency is not underwriting. Score factor context: Understanding credit scores.

Worked example

Alex’s email appears in a large retail breach that included partial SSN data. Alex freezes Equifax, Experian, and TransUnion the same evening (about 20 minutes total) and places a one-year fraud alert at one bureau (alerts often propagate). Habit stack for limiting SSN exposure before the next breach: How to protect your Social Security number. Two weeks later Alex wants a credit-union auto loan. The credit union pulls Experian only. Alex thaws Experian for 48 hours, applies, then re-freezes. No other bureau stays open. The freeze did not change Alex’s score; it only controlled who could open new tradelines.

When a fraud alert is the better first move

  • You suspect misuse but need to apply for housing or a job-related screen soon and prefer warnings over full locks.
  • You already filed an FTC identity-theft report and qualify for an extended alert.
  • You want extra verification while you dispute a charge—pair with Disputing a credit card charge and CFPB recovery steps.

Full report sequence (FTC, bureaus, creditors): How to report credit report fraud. Alerts do not replace monitoring statements or freezing after confirmed theft.

Credit monitoring vs a freeze

Paid monitoring apps can alert you after a new account opens. A freeze tries to stop the account from opening in the first place. When an alert does fire, sort signal from noise with Credit monitoring alerts before you thaw or dispute. Many banks and card issuers already show free soft-pull scores and alert toggles; those are useful add-ons, not substitutes for Equifax/Experian/TransUnion freezes. If a company sells a “lock” that is not the federal freeze, read whether it is free to lift, whether it covers all three bureaus, and whether you can still pull your AnnualCreditReport.com files. Decline report-page upsells with Using AnnualCreditReport.com without buying upsells.

After any freeze or thaw, give the bureaus a day to sync before you assume a lender will see an open file. If an application fails with a freeze-related reason code, confirm which bureau was pulled and unlock that one only.

After a company data breach, pair freezes with password/MFA resets: Account takeover after a data breach.

What freezes do not do

  • They do not stop existing creditors from pulling for account management.
  • They do not block all soft-looking marketing prescreens in every case (opt out of prescreened offers separately if you want less junk mail).
  • They do not remove accurate late payments or fix a thin file—use Building credit from scratch for that work.
  • They are not the same as a paid “credit lock” upsell; federal freezes are free.

Scam angle: anyone who charges a large fee to “place your freeze for you,” or demands gift cards to unlock a fake freeze, is a red flag—see Credit and debt scams. If the trigger was a phished login or stolen one-time code, pair the freeze with How to spot phishing and account takeover.

Checklist

  1. Bookmark official Equifax, Experian, and TransUnion freeze pages (typed, not from a text).
  2. Freeze all three when you are not actively shopping for credit.
  3. Store PINs/passwords in a password manager, not a sticky note on the monitor.
  4. Thaw only the bureau(s) a lender will pull, for the shortest window that works.
  5. Place a fraud alert if you suspect identity theft; escalate to an extended alert with a report when appropriate.
  6. Re-check AnnualCreditReport.com files 30–60 days after any incident for new inquiries or accounts; dispute unknowns with How to dispute an error on your credit report.

After confirmed identity theft, freezes are step one of a longer rebuild: How to rebuild after identity theft.

Educational only. Not credit advice, legal advice, or an offer of credit. Freeze and alert procedures can change; follow current bureau and CFPB instructions.