How to Freeze Your Credit to Stop Identity Theft

A credit freeze restricts access to your credit report, making it harder for someone to open certain new accounts in your name. In the United States, you can place and lift a security freeze for free at Equifax, Experian, and TransUnion.

You must contact each bureau separately. Freezing one report does not automatically freeze the other two, and a freeze does not prevent every kind of identity theft. Still, it is a useful step even if you have not discovered fraud.

Understand what a freeze actually protects

When a lender cannot access a credit report, it will often be unable to approve a new credit account. That creates an obstacle for someone applying with your stolen personal information. A freeze does not lower your credit score or stop you from using existing credit cards.

It also does not stop someone from misusing a card you already have, accessing your bank account, filing a fraudulent tax return, or committing every kind of benefits fraud. Some organizations retain legally permitted access to frozen reports, including certain existing creditors.

A security freeze is different from a fraud alert. An initial fraud alert tells prospective creditors to take extra steps to verify your identity. Contacting one of the three major bureaus to place a fraud alert triggers notification to the other two; a freeze requires three separate requests.

Paid “credit lock” products may use similar language but operate under different terms. If your goal is the free protection provided under federal law, look specifically for security freeze, not a monitoring trial or subscription bundle.

Gather information and use official websites

Expect identity-verification questions and requests for identifying details such as your name, address, date of birth, and Social Security number. Depending on the situation, a bureau may request documentation or require another submission method.

Start from these official consumer websites and navigate to their security-freeze pages:

• Equifax: Equifax provides security-freeze management through its consumer services.
• Experian: Experian provides a security-freeze center separate from its paid monitoring offers.
• TransUnion: TransUnion provides credit-freeze controls through its consumer service.

Do not use a sponsored search result without checking its destination. A site that asks you to pay to place a standard security freeze is not offering the free process you are looking for. Navigate carefully around optional upgrades on legitimate sites, too.

Use a private device and a connection you trust. If online verification fails, look up phone or mail instructions on the bureau's official site rather than sending documents to an address from an unsolicited message.

Place and confirm all three freezes

Set aside enough time to finish each bureau's process and save its confirmation. You may need to create an account, verify an existing account, or answer identity questions before the freeze becomes active.

1. Open the first bureau's official security-freeze page.
2. Complete its identity verification and select the free freeze option.
3. Submit the request and confirm that the status says frozen or equivalent.
4. Save the confirmation and account-recovery information securely.
5. Repeat the process independently with the other two bureaus.

An online or phone request generally must be implemented within one business day under federal rules. Mail requests generally have a three-business-day window after receipt. Do not assume a partially completed application means a freeze is active; check the final status.

Create a unique password for every bureau account. The Password & Hash Generator can help generate replacements, which you should save in a trusted password manager. Enable additional sign-in verification when available, and keep your recovery email secure.

Write down which bureaus are frozen and how you manage each one, but avoid leaving your Social Security number in an unprotected note. Store confirmation letters and any PINs a bureau provides with other sensitive financial records.

Lift a freeze when you need credit

You can temporarily lift a freeze when applying for a credit card, mortgage, auto loan, or another service that requires access. A temporary lift is different from permanently removing the freeze. Choosing an end date reduces the chance that you forget to restore protection.

1. Ask the lender which bureau or bureaus it expects to check.
2. Sign in directly to the relevant bureau accounts.
3. Choose a temporary lift and set the appropriate date range.
4. Confirm the report is available before the lender submits its request.
5. Check afterward that the freeze has resumed as expected.

Online or phone requests to lift a freeze generally must be completed within one hour. Even so, plan ahead when possible; identity-verification problems, maintenance, or a lender's workflow can still delay your application.

A landlord, utility, or phone provider may also need a credit check. Ask what access is necessary rather than removing all freezes indefinitely. If the business cannot identify its bureau, you may need a short lift at all three.

Respond separately if identity theft already happened

A freeze is prevention, not a way to erase an account someone already opened. If you find an unfamiliar account, contact the company's fraud department through independently verified contact information and dispute inaccurate information with the credit bureaus.

Visit IdentityTheft.gov, the Federal Trade Commission's reporting and recovery website, for a personalized recovery plan. Keep records of reports, correspondence, dates, and confirmation numbers. Depending on the incident, you may also need to secure financial accounts and replace compromised identification.

Review your credit reports through AnnualCreditReport.com, the federally authorized source for free reports. Check personal information, accounts, balances, and inquiries rather than relying only on a credit score. A score alone cannot tell you whether every listed account belongs to you.

Monitoring can help detect changes, but it does not replace a freeze. If you are comparing optional services, read identity theft protection services with that distinction in mind. Also check whether your passwords were leaked if the incident involved online accounts.

Common mistakes and family situations

Do not assume a spouse's freeze protects your file. Each adult must manage their own credit protection. Parents and guardians can request protected-consumer freezes for eligible children, but the process may require proof of authority and documentation sent to each bureau.

Avoid repeatedly guessing identity-verification answers when something fails. Follow the bureau's official alternative process. A failed online check does not necessarily mean someone stole your identity; an incomplete file or an address mismatch can also cause problems.

If you lose account access, recover it through the bureau rather than paying a third party to “unlock” your report. Never give an unsolicited caller your password or one-time sign-in code.

Keep the protection in place

Confirm all three freezes, keep your access details recoverable, and lift protection only when needed. Continue checking financial statements and credit reports, because a freeze covers only part of the identity-theft problem. It is a strong barrier, not a substitute for watching your accounts.