Skip to content

Identity theft

How to freeze your credit, and how it differs from a fraud alert

Free at each of the three bureaus. Placed within one business day online or by phone, lifted within an hour.

Reviewed by Jake Lawrence on 4 sources2 min read

A security freeze, usually called a credit freeze, stops new lenders from pulling your credit file until you lift it. Since most lenders will not open an account without one, a freeze is the strongest single step against new accounts opened in your name. Federal law makes it free to place and to lift.

How to place one

You contact each of the three nationwide credit bureaus separately; a freeze at one does not reach the others. Each offers it online, by phone, or by mail. The CFPB's list of consumer reporting companies has the contact details.

  • Requested online or by phone, the bureau must place the freeze within one business day.
  • By mail, within three business days of receiving your request.
  • Each bureau gives you a PIN or an account login. Keep it; you will need it to lift the freeze.

Lifting it when you apply for credit

You can lift the freeze for a set time or for one lender, then let it return. Asked online or by phone, the bureau must lift it within one hour. If you know which bureau a lender uses, you only need to lift that one.

Freeze, fraud alert, or lock

FreezeInitial fraud alertExtended fraud alert
CostFreeFreeFree
WhereEach bureau separatelyOne bureau, which tells the othersOne bureau, which tells the others
EffectLenders cannot see your fileLenders must take reasonable steps to confirm it is youSame, more strictly, for seven years
How longUntil you lift itOne yearSeven years, with an Identity Theft Report

A "credit lock" is a product some bureaus offer under their own terms, sometimes with a fee. It is not the freeze federal law defines; read the terms before choosing it over a freeze.

What a freeze does not do

It does not affect your credit score or your existing accounts. It does not apply to companies you already have accounts with when they review or collect those accounts, or to employment and tenant screening. It does not stop misuse of an account you already have, so keep reading your statements. If someone has already used your information, follow the identity theft recovery steps.

Freezes for children and dependents

A parent or guardian can place a freeze for a child under 16, and a guardian or representative can place one for an incapacitated adult. The bureau will ask for proof of authority.

Sources

  1. 15 U.S.C. 1681c-1, fraud alerts and security freezes (Cornell LII)law.cornell.edu accessed 2026-10-24
  2. CFPB: What do I do if I think I have been a victim of identity theft?consumerfinance.gov accessed 2026-10-24
  3. CFPB: List of consumer reporting companiesconsumerfinance.gov accessed 2026-10-24
  4. FTC: IdentityTheft.gov, report and recovery planidentitytheft.gov accessed 2026-10-24

How this page was made

This page was drafted with a language model from the sources listed above. Jake Lawrence read it against those sources and signed it on October 24, 2026.

Legal information, not legal advice. Nothing here answers one reader's specific situation; state law can add to every rule above.

Found an error? See Corrections.

How to freeze your credit, and how it differs from a fraud alert | Credit Help