A credit freeze (also called a security freeze) restricts new lenders from pulling your credit file at that bureau. While it is on, it is much harder for someone else to open a new card, auto loan, or personal loan in your name. It is free under federal law. It does not change your credit score.
People search this after a data breach, a lost wallet, or a scary text about a card they never opened. This guide is the household version: freeze vs fraud alert vs paid “lock,” how to place one at Equifax, Experian, and TransUnion, and how to lift it for 20 minutes when you are the applicant.
It is education, not a claim that a freeze stops every kind of identity theft.
What searchers usually need answered first
Does a credit freeze hurt my score? No. The CFPB states that security freezes do not impact credit scores in any way. Existing accounts still report. Utilization, lates, and the rest of the file keep doing what they were doing. See what is a credit freeze.
Do I have to be a victim first? No. The FTC’s credit freezes and fraud alerts page is explicit: anyone can freeze, any time, even if nothing has been stolen yet.
Is a freeze the same as a credit lock? No. A freeze is a legal right, free at the three nationwide bureaus, with statutory timelines. A lock is typically a product, often bundled with paid monitoring. The CFPB’s tip: locks are no more effective than freezes, which you have a right to by law. Prefer the freeze.
A freeze is a door on new credit. It is not a vault around money already in your checking account, and it is not a substitute for pulling your reports at AnnualCreditReport.com.
What a freeze stops—and what it does not
| A freeze is built for | A freeze is a poor tool for |
|---|---|
| New credit accounts opened in your name at lenders who need a bureau pull | Someone using a card you already have (account takeover) |
| Quiet applications after a breach or a stolen Social Security number | Tax, medical, or unemployment identity theft that never touches a credit file |
| A default “closed” setting you thaw only when you apply | Blocking every possible look at your file |
The FTC’s one-line version: while a freeze is in place, nobody can open a new credit account in your name—including you—until you lift it.
The CFPB adds who can still see a frozen file in limited cases, including creditors on accounts you already hold, certain government entities (for example child support agencies), and companies you hired to monitor the file. You can still request and review your own reports.
Federal freeze rules do not apply the same way to someone requesting a report for employment, tenant-screening, or insurance. If a landlord or insurer cannot see a frozen file, you may need a temporary lift—ask them which bureau they use.
Freeze vs fraud alert vs lock
Three different tools. You can use a freeze and a fraud alert.
| Tool | What it does | Who can place it | How you place it | Cost |
|---|---|---|---|---|
| Credit / security freeze | Blocks most new-credit pulls until you lift it | Anyone, any reason | Each of Equifax, Experian, TransUnion | Free |
| Initial fraud alert | Tells lenders to take extra steps to verify it is you; does not block the report | Anyone who is or suspects they may be affected by identity theft | One bureau; it must tell the other two | Free; lasts one year, renewable |
| Extended fraud alert | Same idea, longer; also removes you from some prescreened offer lists for five years unless you say otherwise | Identity-theft victims with an FTC report at IdentityTheft.gov or a police report | One bureau; it must tell the other two | Free; lasts seven years |
| Active duty alert | Extra verification for servicemembers; also affects some marketing lists | Active duty servicemembers | One bureau; it must tell the other two | Free; lasts one year, renewable for a deployment |
| Credit lock | Product that restricts some access, often inside a paid bundle | Whoever buys or enrolls | The company’s app or site | Often not free; not the statutory freeze |
The CFPB’s identity-theft Ask CFPB (what do I do if I am a victim) is the companion: close compromised accounts, report at IdentityTheft.gov, then freeze or alert.
How to place a freeze at all three bureaus
You must contact each nationwide bureau. One freeze does not notify the others. That is the opposite of a fraud alert.
Use the bureau’s own freeze page—not a look-alike “credit lock” upsell:
Online and phone are usually fastest. You will prove identity (typically name, date of birth, Social Security number, address). Save the PINs or login credentials they give you in a password manager—not in the same notes app as your Social Security number screenshot.
Do Equifax, Experian, and TransUnion the same afternoon
A thief only needs the bureau the lender uses. Two frozen files and one open file is a half-closed door. Set a 30-minute timer. Finish all three.
Confirm the freeze, then pull your reports
Under federal timing rules the CFPB summarizes: a freeze requested by phone or secure electronic means must be placed within one business day; by mail, within three business days. Written confirmation is due within five business days, including how to remove it. Then get the facts from AnnualCreditReport.com—a freeze does not block you from your own reports.
If identity theft is already happening, add IdentityTheft.gov
File there for a recovery plan. Consider an initial or extended fraud alert in addition to the freeze. Alerts are not a substitute for the freeze; they are a second flag for lenders who can still see a file.
Put a thaw on the calendar only when you are the applicant
New card, auto loan, apartment, or insurance that needs a pull: ask which bureau they use, lift that one, then freeze it again. The FTC’s advice is to lift the bureau the lender will actually check—not all three by reflex if you do not need to.
Lift timing (CFPB): requested by toll-free phone or secure electronic means, the freeze must be removed within one hour; by mail, within three business days. Temporary lifts for a period you specify are also free.
If a bureau botches the freeze or the lift, the CFPB takes complaints. That is not a theoretical footnote: the Bureau has brought enforcement when freeze and lock requests were not processed as required.
Kids, guardians, and “protected consumers”
Federal law lets a parent or guardian request a freeze for a protected consumer under 16, and for certain incapacitated people. If the bureau has no file yet, it can create a record in order to freeze it. That record is not a starter credit line; it is a lock against someone else opening one.
The FTC’s freeze article points to each bureau’s minor-freeze instructions. The adult online PIN flow usually will not work for a child. Follow the bureau’s protected-consumer process and keep copies of what you mailed.
When to thaw (and how not to sabotage yourself)
You will need a lift to apply for new credit, and sometimes for a job, apartment, or insurance pull. Plan it like a dentist appointment, not like an emergency:
- Ask the lender which bureau and which day.
- Lift that bureau the morning of, or the window they specify.
- Complete the application.
- Freeze it again the same day.
If you shop a mortgage or auto loan, you may need more than one pull in a short window. Leave the relevant bureau thawed for that shopping period, then freeze. Do not leave all three open for six months because thawing felt annoying.
A freeze does not replace lowering credit utilization or a 90-day score cleanup. It just makes it harder for the next account to be one you did not open.
The habit: frozen by default
A freeze you place once after a headline and then forget is still useful. A freeze you treat like a deadbolt—thaw, apply, freeze—is a system.
That is why this article is tagged Habits as well as Credit. Identity theft is a calendar problem for criminals and a default-settings problem for everyone else. The cheap default is “closed until I open it.”
Check reports a few times a year anyway. A freeze does not catch a maxed card you already own, a collection you do not recognize, or a tax-refund theft. Those are different doors.
If you are in an active identity-theft mess, start at IdentityTheft.gov, not at a Facebook ad for “new file numbers.” The FTC also explains credit-repair scams.
Sources and notes
- FTC, Credit Freezes and Fraud Alerts.
- FTC, Get a credit freeze to stop identity thieves.
- CFPB, What is a credit freeze or security freeze? — including locks vs freezes and statutory timing.
- CFPB, What do I do if I am a victim of identity theft?.
- IdentityTheft.gov — FTC recovery plan.
- AnnualCreditReport.com — official FCRA reports.
- Bureau freeze pages: Equifax, Experian, TransUnion.
- This article does not promise that a freeze prevents every form of identity theft.
