A credit freeze is the single most powerful tool available to protect yourself from identity theft — and it's free. Here's exactly how to freeze your credit at every major bureau, what it actually does, and how to lift it when you need to apply for credit.
You've probably heard that you should freeze your credit. Maybe you heard it after a data breach notification arrived in your inbox. Maybe someone mentioned it after news of the AT&T breach, or the AT&T breach, or any of the dozens of other major incidents that have put hundreds of millions of Americans' Social Security numbers into criminal hands.
Here's the thing: most people who've heard the advice haven't done it. Surveys suggest that even after major breaches, the majority of affected people don't place a credit freeze. The reasons vary — it sounds complicated, people worry it will affect their existing credit, they're not sure exactly what it does, or they just assume the banks will catch fraud before it gets out of hand.
None of those hesitations hold up. A credit freeze is free. It takes about fifteen minutes total. It doesn't affect your existing credit score or accounts. And it is, without exaggeration, the single most effective step you can take to prevent someone from opening fraudulent accounts in your name.
This article explains exactly what a credit freeze does, who you need to contact, what happens step by step, and how to manage it afterward.
When you apply for a new credit card, a new loan, a new mobile phone contract, a new apartment lease, or any other product where the provider wants to check your creditworthiness, they run a hard inquiry against one of the major credit bureaus. The bureau returns your credit report and score, the provider makes a decision, and credit is extended or denied.
A credit freeze (also called a security freeze) prevents that process from completing. When a freeze is in place, new hard inquiries cannot be processed — the bureau simply returns an error indicating the file is frozen. Even if a fraudster has your name, Social Security number, date of birth, and address, they cannot open new accounts in your name because the lender's credit inquiry will be blocked.
This matters because most identity theft that causes financial harm involves new account fraud: a criminal using your personal information to open credit cards, personal loans, or utility accounts that you don't know about until the debt collectors arrive or the damage shows up on your credit report.
A credit freeze doesn't protect against every form of identity theft. It won't prevent someone from using your existing accounts. It won't stop medical identity theft, tax fraud, or government benefits fraud. But it directly and effectively blocks the most common financial form of identity theft.
And it is completely free, in all US states, as of the Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018.
The single most persistent myth about credit freezes is that they hurt your credit score. This is false.
Your credit score is calculated from information in your existing credit file — your payment history, credit utilisation, age of accounts, and so on. A freeze doesn't change any of that information. It simply adds a flag that prevents the file from being accessed for new credit inquiries. Your score continues to update as before.
Your existing credit cards, loans, and accounts continue to work exactly as they did. You can still use your credit card at the grocery store. Your mortgage payments still get reported. Nothing about your existing credit relationship changes.
The only time a credit freeze has any practical effect is when you're trying to open something new that requires a hard inquiry — and in that case, you can temporarily lift the freeze for a specific bureau, for a specific window of time, or for a specific lender, and then refreeze.
In the United States, there are five places you need to contact to comprehensively protect yourself. The "big three" credit bureaus are the most important; the additional two cover specific account types.
Website: equifax.com/personal/credit-report-services/credit-freeze/ Phone: 1-800-349-9960 Online process: Create an Equifax account, then navigate to Security Freeze and select "Place a Security Freeze." You'll need to verify your identity.
Equifax is required to allow you to freeze for free. The process is online, and they'll confirm when the freeze is in place. Keep the PIN or confirmation number they provide — you may need it to manage the freeze later.
Website: experian.com/freeze/center.html Phone: 1-888-397-3742 Online process: Visit the freeze center link above. Experian allows you to place, temporarily lift, or permanently remove a freeze online.
Experian's process is straightforward and typically takes a few minutes. They'll ask for your name, address, Social Security number, and date of birth, and may prompt you to answer identity verification questions based on your credit history.
Website: transunion.com/credit-freeze Phone: 1-888-909-8872 Online process: TransUnion's online freeze portal allows you to freeze and manage your file. You'll create an account with them if you don't have one.
TransUnion also offers a mobile app that makes managing your freeze easier — including temporarily lifting it.
This is a lesser-known reporting agency that many telecommunications companies and utilities check when you apply for new service. If your Social Security number is compromised and someone tries to open a fraudulent mobile account or utility service in your name, NCTUE is the relevant bureau — not Equifax, Experian, or TransUnion.
Website: cteinnovations.com/security-freeze/ Process: Online form. It's quick. Most people have never heard of NCTUE, which is why criminals sometimes find it an easier route than the big three.
ChexSystems is used by banks and credit unions when you apply to open a new checking or savings account. It tracks problematic banking history — unpaid overdrafts, account closures for cause, and similar issues. But it's also the mechanism through which someone with your personal information might try to open a fraudulent bank account.
Website: chexsystems.com/security-freeze/ Process: Online, via mail, or by phone. 1-800-887-7652.
Freezing all five covers the primary channels a fraudster might exploit. Most guides focus only on the big three; adding NCTUE and ChexSystems is a meaningful additional protection, particularly if your SSN has been exposed in a major breach.
Set aside about twenty minutes. Here's the efficient way to do it:
Before you start, gather your:
Open separate browser tabs for each of the five websites above. Work through them one at a time.
For each bureau:
When you've finished all five, you're done. You now have comprehensive protection against new account fraud.
At some point, you'll probably need to apply for credit — a new card, a car loan, a mortgage refinancing. When that happens, you need to temporarily lift the freeze.
Here's the process:
First, find out which bureau your lender uses. Many lenders check a specific bureau, and some check all three. Before lifting any freeze, ask your lender which bureau they'll pull. You only need to lift the freeze at the bureau they're checking.
If you don't know, or if you're applying to multiple places, you may need to lift all three temporarily.
Lift the freeze for a specific time window. Each bureau's online system lets you unfreeze temporarily — you can specify that the freeze should be lifted for a period (commonly 1, 3, 7, or 30 days) and it will automatically reinstate afterward. This is more convenient and secure than permanently removing the freeze.
At Equifax: Log into your account, go to Security Freeze, choose "Lift Temporarily," and select your time range. At Experian: Visit the freeze centre, log in, and choose to temporarily lift the freeze with a date range. At TransUnion: Log in or use their app, navigate to your freeze, and select a temporary lift.
After the application is processed, if you set an automatic reinstatement date, the freeze goes back in place without any action from you. If you manually removed the freeze, manually reinstate it as soon as the application is done.
The key thing to know: the temporary lift process usually takes effect immediately online, though phone-based requests can take up to three business days. Plan accordingly — if you need the freeze lifted for a specific appointment at a car dealership, do it the day before.
Many services — some offered by the bureaus themselves, others by third parties — offer to monitor your credit and alert you when new inquiries or accounts appear. These services have value but are often misunderstood.
Credit monitoring doesn't prevent fraud. It tells you after something has happened. If someone opens a fraudulent account in your name, you'll get an alert — but the account is already open. You then have to go through the process of disputing the fraudulent account, which can be time-consuming and stressful.
A credit freeze prevents the account from being opened in the first place. It's proactive rather than reactive.
The most useful role for credit monitoring is as a complement to freezes, not a substitute. If you have a freeze in place but get an alert that a new inquiry was made on your file, that's a sign someone is attempting fraud and that your personal information is actively circulating. It prompts you to take additional protective action.
Free credit monitoring is available through several sources. CreditKarma (which uses TransUnion and Equifax data) offers free monitoring. Many credit cards now include free credit monitoring as a benefit. AnnualCreditReport.com gives you free weekly access to your actual reports from all three major bureaus.
Being honest about the limits of a credit freeze matters.
It doesn't prevent tax fraud. If someone files a fraudulent tax return using your SSN before you do, you'll face a complicated process to prove you're the legitimate filer. The IRS's Identity Protection PIN program is the relevant tool for this — eligible taxpayers can obtain a six-digit PIN that must be included on their tax return, preventing fraudulent returns from being accepted.
It doesn't stop medical identity theft. If someone uses your identity to receive healthcare services in your name, this happens through healthcare billing systems that don't rely on the standard credit reporting bureaus. You should periodically review your medical records and explanation of benefits statements from your insurer.
It doesn't protect existing accounts. If someone gets your credit card number, bank account details, or login credentials for existing accounts, a credit freeze doesn't help. The protections there are strong unique passwords, multi-factor authentication, and regular account monitoring.
It doesn't stop government benefits fraud. Fraudulent unemployment claims, stimulus payment theft, and similar government benefit fraud use systems separate from consumer credit reporting.
The short answer: everyone. The breach ecosystem that now includes your Social Security number — AT&T, the National Public Data breach of 2024 (which exposed SSNs for most US adults), various healthcare breaches, and others — means that the question is no longer "might my SSN be out there?" It's "when will someone try to use it?"
Freezes are particularly important for:
A freeze costs nothing, takes fifteen minutes, and can be managed from your phone. The cost-benefit calculation is essentially unambiguous. If you haven't done it yet, this is the article that should change that.
References:
A good password manager is the single most effective step most people can take to improve their digital security. We tested the leading options across ease of use, security model, cross-platform support, and price.
VPNs are marketed as essential privacy tools. The reality is more nuanced: they solve specific problems well, and are often irrelevant for the threats most people actually face. We break down when a VPN helps — and when it doesn't.
Credential stuffing is one of the most common forms of account takeover — and it works by exploiting something millions of people do every day: reusing passwords. Here's how it works, why it's so effective, and how to stop it.
