A credit freeze generally restricts access to a credit file, which can stop many new-credit accounts from being opened. A fraud alert tells businesses checking the report to verify identity first. Freezes are free but must be placed separately with Equifax, Experian, and TransUnion. One fraud-alert request generally reaches all three. People concerned about new-account fraud can use both.
A September 2026 identity-theft discussion about a recent breach repeatedly asked whether a monitoring lock was the same as a statutory freeze and whether all three bureaus mattered. The useful decision is the protection mechanism, not the breach headline.
Start here: a practical action plan
- Open the cited agency page and use only the official site or phone number.
- Save dated screenshots, confirmation numbers, letters, statements, and a short call log.
- Replace every hypothetical amount and date with the facts from the affected account.
- Recheck the report or account after the stated processing period and escalate any unresolved error.
- Assuming one freeze, alert, dispute, or report protects every financial system.
- Giving a caller, text sender, or paid recovery service credentials, codes, money, or sensitive documents.
- Waiting for a complete explanation before stopping new losses and preserving evidence.
Match the protection to the failure you fear
Use a freeze when the main risk is a thief applying for new credit. The lender may be unable to access the frozen report and can treat the application as incomplete. Use a fraud alert when you want a visible instruction that a business should verify identity before opening or expanding credit. The FTC says either tool is free.
A freeze does not clean fraudulent accounts from a report, stop transactions on an existing card, or cover every specialty consumer report. A fraud alert does not prevent report access. If exposed data includes a Social Security number, combining a three-bureau freeze with an alert can address different parts of the risk.
Place three freezes through three official channels
Go directly to Equifax, Experian, and TransUnion from the FTC or CFPB page. Create separate confirmations and store them in a password manager or protected record. Avoid sponsored search ads, paid protection bundles, and links from the breach notice until you independently verify the destination.
An initial fraud alert lasts one year and one bureau should notify the other two. An extended alert is available to an identity-theft victim who meets the documentation rules and lasts seven years. A freeze stays until the consumer lifts or removes it, subject to limited statutory exceptions.
Worked example: protect a mortgage applicant without staying exposed
Example: Morgan learns that a breached file included a Social Security number. Morgan freezes all three files on October 19 and records three confirmations. A mortgage application is planned for November 12, so Morgan asks the lender which bureau or bureaus it will use before changing anything.
If the lender needs two reports, Morgan schedules temporary lifts only at those two bureaus for November 11 through November 14. The third file stays frozen. The exposure window is four calendar days rather than permanently removing all three freezes. This example assumes the bureau accepts a date-range lift and the lender identifies its report sources.
| Tool | Where requested | Practical effect |
|---|---|---|
| Credit freeze | Each of 3 bureaus | Restricts report access |
| Initial fraud alert | One bureau | Verification notice at all 3 |
| Temporary lift | Needed bureau only | Allows planned application |
| Permanent removal | Each affected bureau | Ends freeze protection |
Keep monitoring because the freeze has limits
Review each credit report for unfamiliar inquiries, addresses, and accounts. Contact the business that furnished fraudulent information and use the identity-theft blocking process when appropriate. Watch existing bank, card, email, phone, and tax accounts because a credit freeze does not control them.
Set alerts for transactions and profile changes. If a thief already has access to an account or email address, change credentials from a trusted device and call the institution at a verified number. Treat a freeze confirmation as one control in a recovery file, not as proof that the incident is finished.
- Freeze all three nationwide credit files.
- Add a fraud alert if verification would help.
- Plan narrow temporary lifts before legitimate applications.
- Review existing accounts and reports on a calendar.
Frequently asked questions
Is a credit lock the same as a credit freeze?
Not always. A statutory credit freeze is free and governed by federal law. A bureau product called a lock can have different terms.
Do I need to freeze all three credit bureaus?
Yes if you want each nationwide report restricted. A freeze placed at one bureau does not automatically freeze the other two.
Does one fraud alert cover all three bureaus?
Generally yes. The bureau that receives an initial or extended fraud alert should notify the other two nationwide bureaus.
Can I have a freeze and fraud alert together?
Yes. The FTC says a person can use both because they perform different functions.
Will a freeze hurt my credit score?
No. A freeze restricts access to the report and does not change the score itself.
Does a freeze stop fraud on an existing account?
No. Monitor and secure existing bank, card, email, phone, and tax accounts separately.
Sources and review notes
The calculations and scenarios in this guide are original BreadWinnr worked examples. We recalculated each example and checked that its parts match the stated total. Official sources support the financial concepts. Forum links document the reader problem that prompted the guide and are not treated as financial authority.
- FTC, credit freezes and fraud alerts
- CFPB, credit freeze and fraud alert guide
- Reddit: data-breach freeze questions
Read our research, testing, corrections, and source policy.
This guide provides general financial education. It does not account for your complete financial, tax, legal, or contractual situation.
Make the example yours.
Use the emergency fund calculator to try a different starting point.