If you just got a “your information may have been exposed” email, or you noticed a weird credit inquiry you don’t recognize, your brain probably goes straight to: “Do I freeze my credit or set a fraud alert?”
In the U.S., both tools are free, both are backed by federal consumer protection laws, and both can help reduce new-account fraud. The difference is how strong the lock is, how much hassle it creates, and what you’re trying to prevent.
Quick safety note: breach emails are sometimes phishing. Don’t click the links in the message. Go directly to the official bureau sites, AnnualCreditReport.com for reports, and IdentityTheft.gov if you need to file an identity theft report.
If this happens, do this first
Here’s the quickest “flowchart in prose” I can give you.
1) You think someone is opening new credit in your name
Do this first: Place a credit freeze with all three bureaus (Equifax, Experian, TransUnion). Then check your credit reports for suspicious accounts and consider an identity theft report if fraud is confirmed.
2) Your data was in a breach, but you have no signs of fraud yet
Do this first: If you want the strongest “set it and forget it” protection, place a credit freeze. If you’re actively applying for credit soon and want less friction, start with a one-year fraud alert and monitor your reports closely.
3) You’re about to apply for a loan or move apartments soon
Do this first: Use a fraud alert if you want fewer interruptions, or use a freeze and plan to temporarily lift it before applications.
4) You have confirmed identity theft (not just a breach)
Do this first: Place a freeze and then request an extended fraud alert after you file an identity theft report (typically through IdentityTheft.gov, or sometimes a police report). The combo gives you strong blocking plus extra verification.
What a credit freeze is
A credit freeze (also called a security freeze) restricts access to your credit file for most new credit decisions. If a lender can’t access your report, they usually can’t open a new credit account in your name.
Think of it like putting your credit report behind a locked door. You can still use your existing credit cards, and your score can still change. But new creditors typically can’t pull your file unless you temporarily lift the freeze.
Important: freezes have exceptions. For example, some existing creditors may still access your file for account review or collections, and certain government uses can still happen. The main point is that freezes are designed to block most new-account credit underwriting.
What it helps prevent
- New credit cards opened in your name
- Personal loans and many financing accounts
- Some utilities or telecom providers that rely on bureau checks (varies widely)
What it doesn’t fix by itself
- Fraud on existing accounts (you’ll still need to contact the bank or card issuer)
- Someone using your SSN for tax fraud, medical fraud, or employment fraud
- Scams where you send money willingly (a freeze won’t stop that)
What a fraud alert is
A fraud alert is a notice on your credit report that tells businesses: “Take extra steps to verify this person’s identity before issuing new credit.”
Unlike a freeze, a fraud alert doesn’t block access to your credit report. It’s a speed bump, not a locked gate.
Fraud alert types
- Initial fraud alert: lasts 1 year. Good for “breach, no proof of fraud yet” situations.
- Extended fraud alert: lasts 7 years, available if you provide an identity theft report (often via IdentityTheft.gov, or a police report depending on the bureau and situation).
- Active duty alert: lasts 1 year, designed for service members on active duty who want extra identity verification protections while deployed.
What it helps with
- It can reduce the odds of a lender approving a new account without verifying you
- It’s easier if you’re applying for credit soon because it doesn’t require lifting and re-freezing
Where it can fall short
- Verification practices vary. Some companies are thorough, some aren’t.
- If a thief has enough of your info, a fraud alert may not stop them.
Freeze vs alert
Strength
- Freeze: strongest protection against new-account credit fraud because it blocks most third-party access for new credit decisions.
- Fraud alert: moderate protection because it relies on extra verification.
Convenience
- Freeze: more steps when you legitimately need credit, housing, or certain services. You may need to lift it.
- Fraud alert: less friction while applying for credit, but less “hard stop” protection.
Cost
- Both are free by law in the U.S.
How many places you must contact
- Freeze: you must place it with each bureau you want frozen. Many lenders pull only one bureau, but you don’t always know which one, so freezing all three is the safest play.
- Fraud alert: you can place it with one bureau, and that bureau must notify the other two.
How long it lasts
- Freeze: stays in place until you remove it.
- Initial fraud alert: 1 year.
- Extended fraud alert: 7 years with an identity theft report.
- Active duty alert: 1 year.
How long it lasts
Credit freeze: stays active until you lift or remove it. No annual renewal.
Fraud alerts: expire unless you renew them (initial) or qualify for the extended version.
Practical takeaway: if you’re in “maximum protection, minimum ongoing maintenance” mode, a freeze usually wins.
How to place a freeze
You place a freeze separately at each credit bureau. You can do it online, by phone, or by mail. Online is usually fastest.
What you’ll need
- Your full name, date of birth, and Social Security number
- Current address and possibly prior addresses
- Email and phone number
- You may be asked identity verification questions (past loans, streets you lived on, etc.)
Freeze the three bureaus
- Equifax
- Experian
- TransUnion
Afterward, save confirmation emails or screenshots. I also recommend writing down where you stored your bureau logins so you can lift the freeze quickly when you need it.
Tip from someone who’s been stressed and sleep-deprived during money messes: do all three in one sitting.
How to lift or remove a freeze
You’ve got two options, depending on what you need.
Temporary lift (most common)
Use this when you’re applying for a loan, credit card, apartment, or a job that runs a credit check.
- You can lift a freeze for a date range (for example, one week).
- Sometimes you can lift it for a specific creditor if the bureau supports that workflow.
Permanent removal
Use this only if you’re confident you no longer want the extra protection. Most people who’ve been through a breach keep freezes in place long term and lift them only when needed.
Either way, you do the lift or removal directly with each bureau where your file is frozen.
How to place a fraud alert
To place an initial fraud alert, you contact one of the three major bureaus. That bureau is required to notify the other two.
Initial fraud alert (1 year)
- Pick one bureau to start with
- Request an initial fraud alert
- Confirm your contact info is correct because businesses may use it to verify you
Extended fraud alert (7 years)
If you’ve confirmed identity theft, you can request the extended alert. You generally need documentation such as an identity theft report from IdentityTheft.gov (or a police report in some cases).
Consumer-rights note: the extended fraud alert is meant for people actively dealing with identity theft, not just a “maybe” breach.
Active duty alert (1 year)
If you’re on active duty, you can request an active duty alert. It’s similar to an initial alert, but it’s designed for that specific situation.
When a freeze makes sense
- You saw an unfamiliar credit inquiry or new account
- Your SSN or full identity info may have been exposed
- You’re not planning to apply for credit in the next month or two
- You want the strongest default protection with no expiration date
My personal bias as a “value-spender” who loves low-effort guardrails: if you can handle the minor inconvenience of lifting it later, a freeze is usually the best move after most modern breaches.
When a fraud alert makes sense
- You’re about to apply for a mortgage, car loan, credit card, or apartment soon
- You want extra verification without blocking lenders entirely
- You want a quick first step while you gather info
A fraud alert can be a good “today” solution if you’re mid-application season and don’t want to manage multiple temporary lifts.
Can you use both?
Yes, you can have a credit freeze and a fraud alert at the same time.
One nuance: if a freeze blocks a creditor from pulling your report, the creditor may never see the alert because they can’t access the file in the first place. So the freeze does most of the heavy lifting. The fraud alert is most useful during a temporary lift window, or in situations where a report is accessed in a way that isn’t blocked by a freeze.
Your rights and what to save
These protections are free (U.S.)
- Placing a credit freeze
- Lifting or removing a credit freeze
- Placing an initial fraud alert
- Requesting an extended fraud alert (with required documentation)
- Placing an active duty alert
You don’t have to buy monitoring
You might see upsells while you’re on bureau sites, including a paid credit lock. A credit lock can be convenient, but it’s not the same legal tool as a credit freeze and it may come with fees or different terms. You can skip the upsells and still complete a freeze or fraud alert for free.
What to save for your records
- Dates you placed freezes or alerts
- Confirmation numbers or emails
- Screenshots of successful submissions
- Notes on any suspicious inquiries or accounts you found
Extra steps that pair well
Check your credit reports
Look for unfamiliar inquiries, new accounts, or address changes. If you spot something you don’t recognize, contact the lender shown on the report.
Review existing accounts
Freezes and alerts are about new credit. For existing bank and card accounts, log in and check transactions, statements, and contact info.
Consider an IRS Identity Protection PIN
This helps reduce the risk of someone filing a tax return in your name. It’s a separate system from credit bureaus.
File documentation if identity theft is confirmed
If you’ve confirmed fraud, an identity theft report can help you access extended protections and streamline disputes with creditors.
Common questions
Will a credit freeze hurt my credit score?
No. A freeze doesn’t change your score. It just restricts access to your report for most new credit checks.
Can I still get a job or rent an apartment with a freeze?
Yes, but you may need to temporarily lift the freeze for the employer, property manager, or screening company to run the check.
What about smaller bureaus?
Some companies use specialty consumer reporting agencies for banking history, tenant screening, insurance, or utilities. A big-three freeze is still the best first move for new-credit fraud, but if you’re dealing with active fraud, ask the creditor which agency they used.
- ChexSystems: commonly used for bank account screening. This is a big one if your worry is “someone opened a checking account in my name,” which is different from a credit card.
- NCTUE: sometimes used by telecom and utility providers.
- LexisNexis: used in various identity and risk screening contexts.
- Innovis: a smaller credit bureau used by some lenders.
Should I freeze my child’s credit?
If you’re a parent or guardian and your child’s identity info may have been exposed, freezing a minor’s credit can be a smart move. It’s a separate process, and you generally have to request it with each bureau and provide documentation to prove identity and guardianship. It’s extra paperwork, but it can stop years of silent new-account fraud.
Bottom line
If you’re dealing with suspected identity theft or you want the strongest defense after a breach, a credit freeze is usually the best default because it blocks most new-account credit from being opened in your name.
If you’re applying for credit soon and want less hassle, an initial fraud alert can be a solid short-term choice. And if identity theft is confirmed, pairing a freeze with an extended fraud alert gives you serious protection without paying for anything.
Use the decision guide at the top, and if you’re unsure, pick the option that matches your next 30 days: if you’re not applying for anything, freeze. If you are, alert now and freeze as soon as your applications are done.