Incident Response & Recovery

Credit Freeze vs. Fraud Alert: What Is the Difference?

A plain-language U.S. guide to choosing, placing, and managing credit freezes and fraud alerts without confusing them with credit locks or card freezes.

What this guide helps you do

Understand and use U.S. credit freezes and fraud alerts as part of a broader identity-protection and recovery plan.

A credit freeze and a fraud alert both make new-account identity theft harder, but they work differently. A freeze generally blocks prospective creditors from accessing your credit file. A fraud alert leaves the file available while requiring a creditor that checks it to take steps to verify your identity.

Credit freeze vs. fraud alert at a glance

QuestionCredit freezeInitial fraud alert
What does it do?Restricts prospective creditors’ access to the credit file, generally blocking new credit until access is restoredTells businesses that check the report to verify identity before granting new credit
Who can use it?Anyone, whether or not identity theft has occurredSomeone who is or suspects they may be affected by identity theft
Whom do you contact?Equifax, Experian, and TransUnion separatelyAny one of the three; that bureau must notify the other two
How long does it last?Until you lift or remove itOne year, with free renewal available
What does it cost?Free to place, lift, and removeFree
Can you use both?Yes. The FTC states that a fraud alert can be placed even when a freeze is already active.

When a credit freeze is usually the stronger choice

A freeze is useful when you want a continuing barrier against new-credit fraud and do not need your reports routinely available to new lenders. Anyone can place one proactively. It is especially worth considering when a Social Security number or other sensitive identity information was exposed, even if no misuse is visible yet.

To cover the three nationwide credit files, request a freeze separately from Equifax, Experian, and TransUnion. Use bureau links supplied by the FTC or CFPB, or type each bureau’s verified address yourself. Search advertisements and unsolicited “breach assistance” messages can lead to paid products or impersonation sites; the federal security freeze itself is free.

A freeze does not lower your credit score, close current accounts, or stop you from reviewing your own report. It is not a complete identity-theft solution. Existing creditors and certain other permitted entities may still access a file, and a thief may still misuse an existing card, file a fraudulent tax return, take over a phone account, or commit fraud that does not require a credit check.

When a fraud alert may fit

An initial fraud alert adds an identity-verification instruction without blocking report access. It can be useful when you suspect exposure, want an additional warning on the file, or expect to apply for credit and do not want to manage three freezes. Its protection depends on the creditor completing an effective verification step, so it is not equivalent to restricting access with a freeze.

There are three federal alert types:

  • Initial fraud alert: lasts one year and can be renewed. Contact one nationwide bureau.
  • Extended fraud alert: lasts seven years and is available to identity-theft victims who provide an FTC Identity Theft Report or police report. Contact one bureau.
  • Active-duty alert: lasts one year and can be renewed for the deployment period by eligible active-duty service members.

If identity information was exposed in a breach, first identify what data was involved and follow a measured data-breach response plan. A payment-card number calls for different actions than a Social Security number, account password, or medical identifier.

How to place and manage a credit freeze

  1. Protect your email and phone first. The bureaus may use them for notices and account recovery. Remove unfamiliar sessions or recovery methods.
  2. Visit each bureau through a verified address. Request a security freeze—not a paid credit lock or monitoring bundle unless you independently want that separate product.
  3. Complete identity verification. Provide information only through the bureau’s official process.
  4. Save the confirmation securely. Record which bureau was completed, the date, account access method, and any confirmation number.
  5. Repeat for all three bureaus. One freeze request does not automatically cover the other two.
  6. Review your credit reports. A freeze is preventive; it does not remove fraudulent information that is already present.

When applying for credit, ask the lender which bureau it expects to use. You may be able to lift only that freeze for a defined period, then confirm that it is active again. Avoid permanently removing every freeze merely for one application.

What to do when identity theft has already happened

A freeze or alert does not correct fraudulent accounts. If you find an unfamiliar account, inquiry, collection, address, or personal-information change:

  1. Contact the company where the fraud occurred through a verified channel.
  2. Report identity theft and build a recovery plan at IdentityTheft.gov.
  3. Dispute inaccurate information with the relevant credit bureau and information provider.
  4. Place or retain freezes at all three bureaus.
  5. Consider an extended fraud alert if you meet its documentation requirement.
  6. Keep copies of reports, letters, confirmation numbers, and a dated contact log.

The broader identity-theft warning signs include more than credit-report changes, so also review bank, card, tax, insurance, medical, utility, and phone-account activity as relevant.

Common misunderstandings

  • A credit freeze is not a credit-card freeze. Locking a card stops or limits transactions on that card; freezing a credit file addresses access used for new credit.
  • A security freeze is not the same as a commercial credit lock. The CFPB notes that locks may be sold with paid services, while federal law provides free security freezes.
  • A freeze does not freeze the score. Creditors can continue reporting activity, so a score may still change.
  • A fraud alert does not prevent report access. It adds a verification requirement.
  • Neither tool replaces account monitoring. Continue checking existing financial accounts and statements.

Decision checklist

  • Want the strongest practical barrier against new-credit applications? Freeze all three files.
  • Suspect exposure and want a verification warning without blocking access? Consider an initial fraud alert.
  • Confirmed identity theft? Use IdentityTheft.gov, retain freezes, and evaluate an extended alert.
  • Using a freeze and an alert together? That is permitted.
  • Applying for credit soon? Plan a temporary lift instead of abandoning long-term protection.

The right choice is not always either-or. A freeze supplies the access barrier; an alert supplies an identity-verification warning. Both work best as part of a larger plan that protects existing accounts and responds to actual misuse.

Sources and further reading

Primary and contextual sources used to verify definitions or give readers a relevant next resource.

IE

Prepared and reviewed by

Infortified Editorial Team

Research-led guides with explicit scope, source checks where facts require them, and an independence review before publication.

Search Infortified

Find a practical answer

Start typing to search all guides.

Open full search