Credit Freeze vs. Fraud Alert: Which One Should You Use?

A letter arrives from a credit card company. "Thank you for your application." You didn't apply for anything.

Or you get a data breach notification: your Social Security number was exposed. Or you notice a credit inquiry you don't recognize on your report. Or a collection call comes in for a debt that isn't yours.

The panic is immediate. You start searching for what to do, and two terms keep appearing: fraud alert and credit freeze. They sound similar. People use them interchangeably. But they are not the same tool, they do not provide the same level of protection, and choosing the wrong one at the wrong moment can leave you more exposed than you need to be.

I spent 17 years inside bank fraud investigations. I've seen how identity thieves operate, and I've seen how the right protection at the right time stops them cold. This guide tells you exactly which tool to use, when, and how to set it up.

“You cannot remove your name from every list. But you can make yourself a harder target.”

— Rebecca Harlow

Key Takeaways

• A fraud alert tells lenders to verify your identity. A credit freeze blocks them from seeing your report at all. A freeze is the stronger protection.

• Both are free under federal law. The Fair Credit Reporting Act (FCRA) as amended by the FACT Act guarantees your right to place, lift, and remove both at no cost.

• A fraud alert requires one phone call; a credit freeze requires contacting all three bureaus separately. A fraud alert placed with one bureau automatically notifies the other two. A freeze does not.

• An initial fraud alert lasts one year. An extended fraud alert lasts seven years. A credit freeze lasts indefinitely until you lift it.

• You can — and often should — use both. They stack. The freeze does the blocking. The alert flags the file for anyone who does get access.

The Difference in One Sentence

If you remember nothing else from this article, remember this:

A fraud alert is a caution sign. A credit freeze is a locked door.

A fraud alert tells lenders: "Be careful. Verify this person's identity before opening new credit." The lender still sees your credit report. The alert simply asks them to take reasonable steps — like calling you — before approving a new account.

A credit freeze tells lenders: "You cannot see this report at all until I unlock it." Most creditors will not extend credit without pulling a credit report. If they cannot pull one, the account generally does not get opened.

Here is how they compare side by side:

Which One Should You Use? A Decision Guide

The answer depends on your situation. Here is how to choose.

If you are worried but nothing has happened yet

Choose an initial fraud alert.

You can place one for any reason — no police report required, no proof of identity theft needed. It lasts one year and is free. One phone call to any of the three bureaus, and the other two are notified automatically.

If you received a data breach notification, or you misplaced your wallet, or you just want a safety net without disrupting your ability to apply for credit, an initial fraud alert is the right first step.

If you have confirmed identity theft

Choose a credit freeze. Then add an extended fraud alert.

A credit freeze is the strongest protection available. It blocks access to your credit report entirely. If a thief has your Social Security number and tries to open a credit card, the lender cannot pull your report — and the account won't be opened.

An extended fraud alert adds a seven-year flag to your file for anyone who does get access. It requires an identity theft report — which you get from IdentityTheft.gov — and it tells lenders to take extra steps to verify your identity before extending credit.

If you need to apply for credit soon

Choose an extended fraud alert instead of a freeze.

A freeze blocks lenders from seeing your report, which means you have to lift it before every credit application. That's manageable for most people — you can lift a freeze online or by phone in as little as one hour — but if you're actively shopping for a mortgage or auto loan, the constant unfreezing becomes a hassle.

An extended fraud alert gives you seven years of protection without requiring you to lift anything. Lenders can still see your report, but they must verify your identity first.

If you are a deployed service member

Choose an active duty fraud alert.

This works like an initial fraud alert but is designed for military personnel who are deployed and may not be able to respond to verification attempts quickly. It lasts one year and can be renewed as often as needed during deployment.

If you want the strongest possible protection

Use both.

The freeze does the blocking. The alert flags the file for anyone who does get access. They are not alternatives — they stack.

A TransUnion security freeze blocks access to your credit report. A fraud alert tells lenders to verify your identity when they do see your report. If a thief somehow gets through the freeze — for example, if a lender has a pre-existing relationship with you and can access your report for account review — the fraud alert is still there as a second layer.

The Federal Trade Commission specifically recommends that identity theft victims freeze their credit at all three bureaus. The FTC also notes that a fraud alert makes it harder for anyone to open accounts using your information.

How to Place a Fraud Alert

Contact one bureau. It notifies the other two.

You can place an initial fraud alert online, by phone, or by mail. The fastest method is online.

Experian: Online at experian.com, or call 1-888-397-3742.

TransUnion: Online at transunion.com, or call 800-916-8800.

Equifax: Online at equifax.com, or call 1-800-685-1111.

You will need to provide your name, address, Social Security number, date of birth, and proof of identity.

For an extended fraud alert, you will need to submit an identity theft report. File at IdentityTheft.gov to get your FTC Identity Theft Report, then submit it to the bureau. Extended alerts can only be placed online or by mail — not by phone.

What happens next: The bureau you contact must notify the other two, and all three will place the alert on your file. You will receive written confirmation. Verify a few days later that all three show the alert.

How to Place a Credit Freeze

Contact all three bureaus separately.

A freeze does not propagate from one bureau to the others. You must contact Equifax, Experian, and TransUnion individually.

Experian: Online at experian.com/freeze. Mail: Experian Security Freeze, P.O. Box 9554, Allen, TX 75013.

TransUnion: Online at transunion.com/credit-freeze. Mail: TransUnion, P.O. Box 160, Woodlyn, PA 19094.

Equifax: Online at equifax.com/personal/credit-report-services. Mail: Equifax Information Services LLC, P.O. Box 105788, Atlanta, GA 30348-5788.

You will need your full name, date of birth, all addresses used in the past two years, Social Security number, and government-issued identification.

The freeze is typically processed immediately when done online.

Lifting the freeze: You can lift a freeze temporarily when you need to apply for credit. Most bureaus allow you to lift it online or by phone in as little as one hour.

The Cost Question

Both fraud alerts and credit freezes are free at all three bureaus. This is federal law under the FCRA, as amended by the FACT Act. You cannot be charged to place, lift, or remove either one.

You may see paid services marketed as "credit locks" or "credit monitoring." A credit lock is not the same as a credit freeze. It offers similar protection, but it may cost extra and is not federally regulated. A credit freeze is the legal right that costs nothing and must be honored.

How Long Does Each Last?

The fact that a credit freeze never expires is one of its biggest advantages for confirmed identity theft victims. You do not have to remember to renew it. It stays in place until you decide to remove it.

Common Mistakes

Placing a fraud alert and thinking you're fully protected. A fraud alert asks lenders to verify your identity. It does not stop a determined thief with your personal information if the lender treats verification as a formality. If you have confirmed identity theft, you need a freeze.

Placing a freeze with one bureau and assuming it covers all three. It does not. You must contact Equifax, Experian, and TransUnion separately.

Forgetting to lift the freeze before applying for credit. If you're applying for a mortgage, auto loan, or new credit card, you need to lift the freeze first. Lifting takes as little as one hour online, but you need to plan for it.

Believing a fraud alert prevents you from using your existing credit. Neither a fraud alert nor a freeze affects your existing accounts. You can still use your current credit cards and loans. The freeze only blocks new creditors from accessing your report.

Paying for something that is free. If a company offers to "place a freeze for you" for a fee, you are paying for something you can do yourself in 15 minutes. The freeze itself is free.

The CFPB Escalation Path

If you have trouble placing a freeze or fraud alert, or if a bureau fails to honor your request, you have an escalation path.

The Consumer Financial Protection Bureau (CFPB) accepts complaints about credit reporting issues. As of June 24, 2026, the CFPB requires consumers to first exhaust their FCRA dispute directly with the credit bureau before filing a complaint with the Bureau. You must attest that at least 45 days have passed since you filed your dispute with the bureau, or that the dispute is no longer pending.

File at consumerfinance.gov/complaint. The company must respond, generally within 15 days.