Infobrief

Tag: fraud alert

  • Credit Freeze vs Fraud Alert vs Credit Lock: Which Do You Actually Need?

    Credit Freeze vs Fraud Alert vs Credit Lock: Which Do You Actually Need?

    Quick answer: A credit freeze is the strongest option and is free by federal law. It blocks new credit outright and lasts until you remove it. A fraud alert is weaker but easier: it asks lenders to verify your identity, lasts one year, and you place it at one bureau which notifies the other two. A credit lock works like a freeze with a faster toggle, but it is governed by a contract rather than by statute. For most people the freeze is the right default.

    Key Takeaways

    • Credit freeze is free by federal law, blocks new credit, and lasts until you lift it
    • Fraud alert does not block anything; it asks lenders to verify identity for one year
    • Credit lock is functionally similar to a freeze but governed by company terms, not statute
    • You must freeze at all three bureaus separately; a fraud alert propagates automatically
    • A freeze does not stop account takeover on cards you already have

    Side by side

    Freeze Fraud alert Lock
    Cost Free by law Free by law Free or bundled with paid monitoring
    Blocks new credit Yes No, verification only Yes
    Duration Until you lift it 1 year (7 with theft report) Until you unlock
    Where to place All three bureaus One bureau notifies the rest Each bureau’s app
    Governed by Federal law Federal law Company terms
    Speed to lift About an hour online N/A Seconds in an app

    The row that matters most is the last one about governance. A freeze is a statutory right, so the bureaus must honor it and cannot charge you. A lock is a product, and the terms can change.

    What a freeze actually stops

    People picture a wall that blocks everything. It is closer to a locked door with a doorbell.

    When a lender pulls your report, the bureau returns a message saying the file is frozen rather than returning your history. Most automated underwriting treats that as an incomplete application and stops. Neither outcome hurts your score, and a decline caused by a freeze is not recorded the way a decline for poor credit would be.

    What it does not cover matters too. Existing creditors can still review your file, so a card issuer can change your limit. Employers, landlords, and insurers may still access reports under permitted-purpose rules. And a freeze does nothing about account takeover: if someone has your existing card number, the freeze is irrelevant to that fraud. Our full guide to freezing your credit at all three bureaus covers the gaps and how to close them.

    When a fraud alert is the better choice

    A fraud alert does not block anything. It flags your file so lenders take extra steps to verify identity before opening an account.

    That weakness is sometimes the point. If you apply for credit frequently and a freeze would mean constant lifting, an alert adds friction for thieves without adding much for you. It also propagates automatically, so one phone call covers all three bureaus.

    The strongest version is the extended fraud alert, which lasts seven years and requires an Identity Theft Report from IdentityTheft.gov. If you have actually been a victim, this is worth doing in addition to a freeze rather than instead of one.

    Why locks exist at all

    Locks came from a real problem: freezing and unfreezing used to be slow and, before 2018, often cost money. Bureaus built app-based locks that toggle instantly.

    Since freezes became free and can be lifted online in about an hour, the convenience gap has narrowed. What remains is a genuine speed advantage for people who apply for credit often.

    The tradeoff is that a lock is a contract. Read what you are agreeing to, particularly whether the lock is bundled with a paid monitoring subscription that renews.

    What to do this week

    1. Freeze at all three bureaus. Equifax, Experian, and TransUnion are separate; freezing one does nothing for the others.
    2. Save your credentials. Losing the PIN or account login is the most common reason people cannot lift a freeze when they need to.
    3. Add a fraud alert if you have been a victim. It is free and complements the freeze.
    4. Freeze your children’s files if they are under 16. Child identity theft often goes unnoticed for a decade.
    5. Lift all three before mortgage or auto shopping, since multiple lenders may pull different bureaus.

    FAQ

    Does a freeze hurt my credit score? No. It has no effect on your score.

    Do I have to freeze at all three bureaus? Yes. They are separate companies and a freeze at one does not apply to the others.

    Is a credit lock as good as a freeze? Functionally similar, but a freeze is protected by federal law while a lock is governed by the company’s terms.

    Can I still use my existing cards with a freeze? Yes. A freeze affects new credit applications, not existing accounts.

    How fast can I lift a freeze? Online lifts typically take about an hour, and you can lift temporarily for a set window.

    Sources

    Last updated: August 20, 2026. Written by the InfoBrief Editorial team. Rules change; confirm with the official source before acting. See our disclosure.

  • How to Report Identity Theft and Recover Your Accounts (IdentityTheft.gov)

    How to Report Identity Theft and Recover Your Accounts (IdentityTheft.gov)

    Quick answer: Report the theft at IdentityTheft.gov, the FTC’s official site. It creates an Identity Theft Report and a step-by-step recovery plan. Then place a fraud alert or credit freeze, contact the companies where fraud occurred, and change compromised passwords.

    Key Takeaways

    • Report at IdentityTheft.gov to get an official FTC report and recovery plan
    • Place a fraud alert or credit freeze right away
    • Contact each affected company’s fraud department
    • Change passwords and enable two-factor authentication

    Step 1: Report to the FTC

    At IdentityTheft.gov describe what happened. You will receive an Identity Theft Report, which businesses and credit bureaus accept as proof, plus prefilled letters.

    Step 2: Place a fraud alert or freeze

    A fraud alert (free, one year, set at one bureau which notifies the others) tells lenders to verify identity. A credit freeze (free at all three bureaus) blocks new credit entirely and is stronger.

    Step 3: Contact affected companies

    Call the fraud department of each bank, card issuer, or company where an account was opened or misused. Ask them to close or freeze the account and send written confirmation.

    Step 4: Secure your accounts

    • Change passwords and enable two-factor authentication on email and financial accounts
    • Review credit reports at AnnualCreditReport.com
    • Set up transaction alerts on your cards

    Special situations

    • Tax identity theft: file IRS Form 14039 and get an Identity Protection PIN.
    • Medical identity theft: request records from providers and correct errors.
    • Stolen SSN used for employment: contact the Social Security Administration and check your earnings record.

    Should you file a police report?

    The FTC report is usually sufficient, but some creditors require a police report. Bring your FTC report and ID to your local department.

    FAQ

    Am I liable for fraudulent charges? Federal law limits credit card liability to $50, and most issuers waive it. Debit card protection depends on how quickly you report.

    How long does recovery take? Simple cases resolve in weeks; complex ones can take months. Keep a log of every call and letter.

    Should I pay for identity monitoring? Optional. Freezes and free monitoring from your bank cover most needs.

    The first hour matters more than the first week

    Identity theft response is a race against how fast the thief can convert access into money. Two actions in the first hour reduce damage more than anything you do later.

    First, secure your email account before anything else. Email is the recovery mechanism for every financial account you own, so a compromised inbox undoes every other protective step. Change the password and enable two-factor authentication with an authenticator app, not SMS.

    Second, place a credit freeze at all three bureaus rather than a fraud alert. A freeze blocks new credit outright; an alert only asks lenders to verify identity, which some do perfunctorily. Freezes are free by law and take effect within an hour when placed online.

    Building the paper trail that everything else depends on

    IdentityTheft.gov generates an Identity Theft Report, which is the document banks, creditors, and bureaus accept as proof. Without it, each company applies its own standard and you repeat your story indefinitely. With it, you gain specific legal rights: creditors must stop collection on disputed fraudulent accounts, bureaus must block fraudulent information from your report, and an extended seven-year fraud alert becomes available.

    The site also produces prefilled dispute letters and a checklist that tracks what you have completed. Before starting, gather your credit reports from all three bureaus, statements showing the fraudulent activity, any collection notices, and the breach notification if you received one.

    Keep a log from the first call onward: date, time, company, representative name, what was promised, and any reference number. This log is what settles disputes months later when a company claims it was never notified.

    Different types of identity theft need different agencies

    Credit card fraud is the version everyone pictures, but several other types require entirely different responses.

    Tax identity theft, where someone files a return using your Social Security number, is handled with IRS Form 14039 and by requesting an Identity Protection PIN, which prevents future fraudulent filings.

    Medical identity theft means someone received care under your name, which can corrupt your medical records with another person’s blood type or allergies. Request records from each provider and insurer, and ask for an accounting of disclosures.

    Employment-related theft, where your Social Security number is used to work, surfaces as unfamiliar income on your Social Security earnings record. Contact the Social Security Administration and review your earnings statement.

    Government benefits fraud, particularly unemployment claims filed in your name, is reported to the state agency involved as well as through IdentityTheft.gov.

    Child identity theft requires first checking whether a credit file exists for your child at all, then freezing it.

    Your actual liability, which is lower than most people fear

    Federal law caps credit card liability for unauthorized charges at $50, and virtually every major issuer waives even that under zero-liability policies. Debit cards are governed by different rules with a sliding scale: up to $50 if you report within two business days of learning about the loss, up to $500 if you report within 60 days of the statement, and potentially unlimited after that.

    This difference is the strongest practical argument for using a credit card rather than a debit card for online purchases and travel. With a credit card, disputed funds were never yours to begin with. With a debit card, the money leaves your account while the bank investigates, which can take weeks and cause bounced payments in the meantime.

    After the cleanup: what to keep in place permanently

    Most people restore access, breathe out, and remove the protections. Stolen data circulates for years, and re-victimization is common.

    Keep the credit freeze in place permanently and lift it only when you apply for credit, which takes about an hour online. Keep the IRS Identity Protection PIN. Create a my Social Security account so nobody else can create one using your number. Use a password manager so a breach at one company does not cascade. Opt out of prescreened offers at OptOutPrescreen.com. And review all three credit reports every few months for at least two years, which is free weekly at AnnualCreditReport.com.

    Sources

    Last updated: August 16, 2026. Written by the InfoBrief Editorial team. We link to official government and company sources and update articles when facts change. See our disclosure.