A credit freeze and a fraud alert can both make identity theft harder, but they do different jobs. The right choice depends on whether you want to block most prospective creditors from seeing your credit file or simply require an extra identity check before new credit is approved.
The short answer: A freeze is the stronger preventive barrier for new accounts. A fraud alert is lighter-touch protection for someone who suspects fraud and wants lenders to verify identity. Both are free under federal law, and some people may use both.
How a credit freeze works
A credit freeze, also called a security freeze, restricts access to your credit file by prospective creditors. Because most lenders will not open an account without checking that file, a freeze can stop an identity thief from opening a new credit card or loan in your name.
Freezing does not close your existing accounts, stop you from using your cards, or lower your credit score. You can still review your own credit reports. Existing creditors, certain government agencies and companies you hired to monitor your credit may also retain access in circumstances described by the Consumer Financial Protection Bureau.
The tradeoff is friction when you legitimately apply for credit. You must contact Equifax, Experian and TransUnion separately to place freezes, then lift the relevant freeze before a lender checks your file. A temporary lift is free. The CFPB says an online or telephone lift generally must be completed within one hour after the bureau receives the request, while a request by mail can take up to three business days.
How a fraud alert works
A fraud alert does not block access to your credit report. Instead, it tells a business checking the report to take reasonable steps to confirm that the person asking for new credit is really you. That can mean contacting you before approving an account, an additional card or a credit-limit increase.
An initial alert lasts one year and can be renewed. You only need to contact one of the three nationwide credit bureaus; that bureau must notify the other two. People with a documented identity-theft report can request an extended alert lasting seven years. Active-duty service members also have a separate alert option.
Which one should you choose?
- Choose a freeze for the strongest new-account protection. It is a sensible default if your Social Security number or other sensitive identity data may have been exposed, or if you do not expect to apply for new credit soon.
- Choose an initial fraud alert when you suspect misuse but want to keep credit applications more convenient. It adds verification without closing access to the report.
- Consider both after identity theft. The Federal Trade Commission says a freeze and fraud alert can coexist. An extended alert may be available when you have an FTC Identity Theft Report.
- Plan ahead before a loan, card or apartment application. Ask which bureau the organization expects to check, then temporarily lift that freeze with enough time for the request to process.
What these tools do not fix
Neither protection is a complete identity-theft shield. A freeze is aimed primarily at new-credit access; it does not stop a criminal from trying to take over an existing bank, card, email or shopping account. A fraud alert still allows lenders to see your report, and verification processes can fail.
Keep monitoring existing accounts, use unique passwords and multifactor authentication, and review your credit reports for unfamiliar accounts or inquiries. If a breach notice offers free monitoring, read the terms and decide whether it adds useful detection. Monitoring can warn you about a change, but it does not create the same barrier as a freeze.
Common mistakes to avoid
Do not confuse a free security freeze with a commercial credit lock. Locks may be bundled with paid services, while federal law gives you the right to place and remove a security freeze for free. Also remember that freezing at only one bureau leaves the other two files available to prospective creditors.
Save the confirmation and account-recovery details from each bureau in a secure place. Keep your phone number and contact information current so an alert can work as intended. Never follow an unexpected email or text link that claims to lead to a bureau; navigate to the bureau or government site yourself.
What to do if identity theft already happened
- Report the theft at IdentityTheft.gov and create a recovery plan.
- Freeze all three credit files and consider an extended fraud alert.
- Review reports for accounts, balances or inquiries you do not recognize.
- Contact affected companies directly and secure existing accounts.
- Follow the recovery plan for disputing or blocking fraudulent information.
This is general consumer information, not individualized financial or legal advice. The practical distinction is simple: a freeze blocks most new-credit access until you lift it; an alert leaves access open but requires added identity checks. Choose the level of friction that matches the risk you are trying to manage.
