Credit Freeze vs. Fraud Alert: What Each One Actually Does

After a data breach, subscription notice, or lost wallet, two of the most common pieces of advice are 'freeze your credit' and 'place a fraud alert.' They sound similar but work in distinct ways, and understanding the difference can help consumers pick the right tool without unnecessary friction the next time they actually need to apply for a loan, credit card, or apartment.

What a Credit Freeze Does

A security freeze, sometimes called a credit freeze, restricts access to your credit report at Equifax, Experian, and TransUnion. Because most lenders won't extend credit without pulling a report, a freeze effectively stops new accounts from being opened in your name, even if someone has your Social Security number. Under the Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018, freezes are free for everyone and must be placed or lifted within specific time frames set by federal law, generally within one business day for online or phone requests.

A freeze stays in place until you remove it or temporarily lift it. That means if you plan to apply for a mortgage, auto loan, or new credit card, you'll need to thaw the freeze at each bureau the lender uses beforehand, then you can refreeze it afterward. Existing creditors, debt collectors working on their behalf, and certain government agencies can generally still access your file despite a freeze.

What a Fraud Alert Does

A fraud alert is lighter-touch. It doesn't block access to your credit report, but it requires businesses to take extra steps to verify your identity, such as calling you directly, before approving new credit in your name. Placing a fraud alert with any one of the three major bureaus triggers the other two to add one as well, so consumers don't need to contact all three separately, a convenience the freeze process does not automatically offer in the same way.

There are three types of fraud alerts recognized under the Fair Credit Reporting Act:

• Initial fraud alert: lasts one year, available to anyone who suspects they may be a fraud target, and is renewable.
• Extended fraud alert: lasts seven years, available to confirmed identity theft victims who file an FTC identity theft report, and removes them from prescreened credit and insurance offer lists for five years.
• Active-duty alert: lasts one year, designed for military service members deployed away from their usual duty station, to reduce the window for someone to open fraudulent accounts in their absence.

Freeze or Alert: Which One First

For most people responding to a data breach notice, a credit freeze offers stronger protection because it blocks access rather than merely flagging the file for extra verification. A fraud alert can still be useful when someone wants lenders to double-check identity without the hassle of thawing and refreezing, for example while shopping for several types of credit in a short window. Consumers are not limited to one or the other; it's possible to use both, though a freeze generally provides the more comprehensive shield.

How to Place or Lift Each One

Consumers can place, temporarily lift, or permanently remove a security freeze directly through each bureau's website, mobile app, or by phone, and each bureau is required to provide a way to do this without unreasonable delay. Because credit files are separate at each bureau, freezes and thaws typically need to be requested at all three unless you know which single bureau a specific lender will use. Fraud alerts, by contrast, require contacting only one bureau, which is obligated to notify the other two.

Both tools require verifying your identity, and bureaus will provide a PIN or password for freezes so that only you, or someone you authorize, can lift them later. It's worth storing these credentials securely, since losing them can complicate a future thaw request.

Other Protections Worth Knowing

• Fraud alerts and freezes are separate from credit monitoring services, which watch for changes but don't block new-account openings.
• Minors and incapacitated adults can have freezes placed by parents or guardians in many states, since children rarely need active credit files.
• Freezing credit does not stop existing account misuse, such as someone using a stolen credit card number, which should instead be reported to the card issuer directly.
• The Federal Trade Commission's IdentityTheft.gov provides a free recovery plan and sample letters for victims filing an identity theft report needed for an extended fraud alert.

This article is for general information and is not a substitute for guidance from the credit bureaus, the FTC, or a consumer protection attorney regarding a specific identity theft situation.