Credit Freezes and Fraud Alerts: When Each Makes Sense

Credit freezes and fraud alerts are the two main FCRA tools for protecting your credit file from unauthorized access. They serve different purposes and operate under different sections of the statute. Most consumers don't know the difference; some have one when they need the other.

This post walks through what each is, the FCRA framework, and when each is appropriate.

Credit freezes (§ 1681c-1(i))

A credit freeze (sometimes called a "security freeze") locks your credit file at all three bureaus. While the freeze is in place, the bureaus cannot release your file to a new lender — meaning a new credit card, loan, or account cannot be opened in your name without you lifting the freeze first.

The federal right to a free credit freeze was established in the 2018 Economic Growth, Regulatory Relief, and Consumer Protection Act, which amended FCRA § 1681c-1(i). Before 2018, freezes were governed by state law and often charged a fee. After 2018, they're free at all three bureaus, both to place and to lift.

How it works:

Place a freeze online or by mail at each of the three bureaus separately
Each bureau provides you a PIN you use to lift the freeze
Lift the freeze permanently, or temporarily for a specific lender or time window
Re-freeze when done, free of charge

Cornell LII for § 1681c-1: https://www.law.cornell.edu/uscode/text/15/1681c-1

What a freeze does NOT do:

It does not block existing creditors from accessing your file (your current credit-card issuer can still pull your report)
It does not block employment or insurance background checks if those are explicitly authorized
It does not block soft inquiries (like pre-approved offers — those have their own opt-out)
It does not affect your credit score or your existing accounts

Fraud alerts (§ 1681c-1(a)-(b))

A fraud alert tells lenders that they should take extra steps to verify your identity before opening new credit in your name. Unlike a freeze, a fraud alert doesn't block credit — it flags it.

Three types of fraud alerts under FCRA:

Initial fraud alert (§ 1681c-1(a)) — 1 year duration, available to anyone who certifies a good-faith belief that they've been or are about to be a victim of fraud. Free.

Extended fraud alert (§ 1681c-1(b)) — 7 year duration, available to identity-theft victims who provide an Identity Theft Report (typically from https://www.identitytheft.gov). Free.

Active-duty alert (§ 1681c-1(c)) — 1 year duration, available to active-duty military members deployed away from home. Free.

How it works:

Place an alert at any one bureau; that bureau notifies the other two within 24 hours
Lenders pulling your report see the alert and your contact information
Lenders are required to take "reasonable steps" to verify your identity before opening new credit

What a fraud alert does NOT do:

It does not block credit access (a determined identity thief who can answer verification questions may still open accounts)
It does not affect your credit score
It does not affect your existing accounts

When a freeze makes sense

A freeze is the stronger protection. It physically blocks new account openings (with rare exceptions for existing creditor expansions). Reasons to freeze:

You are not actively shopping for new credit
You've been a victim of identity theft or had data exposed in a breach
You're concerned about future fraud given your industry, profession, or visibility
You've been turning down pre-approved offers indefinitely

The trade-off: when you legitimately need new credit (a mortgage, an apartment, a new credit card), you have to lift the freeze first. The lift is fast (online lift is typically instant; mail lift is 1-3 days), but it adds a step to the credit-application process.

For most consumers who aren't actively shopping for credit, a freeze is the default protection.

When a fraud alert makes sense

A fraud alert is the lighter-touch protection. It doesn't block anything — it just flags. Reasons to alert:

You suspect you may be at risk but haven't decided to commit to a freeze
You're actively shopping for credit and can't deal with the friction of a freeze
You're an identity-theft victim who needs the additional free credit reports that come with an extended alert (§ 1681j(d))

The trade-off: a fraud alert provides less protection than a freeze. A determined identity thief who can answer verification questions may still open accounts despite the alert.

Stacking freezes and fraud alerts

You can have both at the same time. The freeze blocks new credit; the alert provides extra context to lenders who do legitimately receive your file (e.g., when you lift the freeze for a specific application).

For identity-theft victims, the recommended layering is:

File an Identity Theft Report at https://www.identitytheft.gov
Place an extended fraud alert (7 years, comes with two free credit reports per year)
Place a credit freeze at all three bureaus
Block any fraudulent items already on your report under § 1681c-2

Special considerations for minors

Minor children are increasingly the targets of identity theft because their files are usually clean and unmonitored for years. Federal law (added by the 2018 amendments) gives parents the right to place a freeze on a minor's credit file for free.

If you have a minor child and are concerned about identity theft (e.g., a breach affected their data, or you're in a high-risk profession), placing a freeze on the minor's file is a low-cost, high-benefit move. The freeze stays in place until the child turns 16 or until you choose to lift it.

Special considerations for deceased relatives

A deceased person's identity is sometimes used for fraud. The FTC and SSA have specific protocols for notifying the credit bureaus of a death:

Send a copy of the death certificate to each of the three bureaus
Request a "deceased indicator" on the file
The Social Security Administration also notifies bureaus through the Death Master File

If you're an executor or surviving family member dealing with a deceased relative's estate, this is a step worth taking early. Identity thieves do search obituaries.

Practical playbook

For most consumers:

Place credit freezes at all three bureaus (Equifax, Experian, TransUnion)
Save the PINs in a secure location
Lift temporarily when you need to apply for new credit
Re-freeze once the application closes

For identity-theft victims:

Layer Identity Theft Report + extended fraud alert + credit freezes at all three bureaus
Use the additional free credit reports to monitor for new unauthorized activity
Block fraudulent items under § 1681c-2

For minor children:

Place freezes on their files for free
Maintain the freeze until they need credit (typically 18-21 years old)

How to place freezes and alerts

Each of the three bureaus accepts freeze and alert requests directly:

Equifax: https://www.equifax.com/personal/credit-report-services/credit-freeze/
Experian: https://www.experian.com/freeze
TransUnion: https://www.transunion.com/credit-freeze

Identity-theft starting point: https://www.identitytheft.gov

Sources cited

15 U.S.C. § 1681c-1 — https://www.law.cornell.edu/uscode/text/15/1681c-1
15 U.S.C. § 1681c-2 — https://www.law.cornell.edu/uscode/text/15/1681c-2
15 U.S.C. § 1681j (free reports) — https://www.law.cornell.edu/uscode/text/15/1681j
IdentityTheft.gov — https://www.identitytheft.gov

Educational content. State-law overlays may add protections beyond federal. Cite specific situations to a credit-repair attorney.