Does Freezing Your Credit Report Prevent Identity Theft?

Freezing your credit prevents one specific kind of identity theft — the kind where a criminal opens new accounts in your name — and does nothing against several others. When a freeze is active, the three major credit bureaus refuse to release your credit report, so lenders checking a fraudulent application can’t approve it. But thieves who drain accounts you already have, file tax returns with your Social Security number, or bill your health insurance for care they received never trigger a credit check, and a freeze won’t touch them. Federal law makes placing and lifting a freeze free at all three bureaus, with online requests taking effect within one business day.¹

What a Credit Freeze Actually Blocks

Under federal law, a security freeze prohibits a credit bureau from releasing your credit report to anyone who requests it.¹ When a thief applies for a credit card, car loan, or mortgage using your stolen information, the lender pulls your credit report to assess the application. The bureau refuses, the lender denies, and the fraud dies at the point of application.

The protection reaches beyond traditional lending. Utility companies routinely check credit before activating gas, electric, or water service for new customers, usually to decide whether to require a security deposit.² Cell phone carriers, landlords screening tenants, and some retail store card issuers also pull credit. A freeze blocks all of these inquiries until you specifically authorize access, which means nobody can open new accounts in your name while the freeze is active — including you.³

A freeze stays in place indefinitely until you remove it. There is no expiration date or annual renewal requirement, and the Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018 eliminated all fees.⁴

What a Freeze Will Not Stop

A credit freeze only blocks access to your credit report. Any identity theft that doesn’t involve a credit check runs right through it.

Account takeover is the clearest example. When a criminal gains access to a bank account or credit card you already hold, the financial institution has no reason to pull a new credit report. The account is already open. The FBI’s Internet Crime Complaint Center has flagged account takeover as a growing threat, with criminals impersonating bank support staff to extract login credentials and drain accounts.⁵ Strong, unique passwords and two-factor authentication are your defenses here. A freeze does nothing.

Tax identity theft works the same way. A thief with your Social Security number can file a fraudulent return with the IRS and claim your refund before you file your legitimate one.⁶ The IRS doesn’t check your credit when processing returns. Filing early each year and requesting an IRS Identity Protection PIN are the countermeasures that actually matter.

Medical identity theft is someone using your name or health insurance information to receive medical care, fill prescriptions, or submit claims to your insurer.⁷ Beyond the financial damage, this can corrupt your medical records with someone else’s diagnoses and drug allergies, a consequence most people don’t think about. No credit inquiry is involved, so a freeze is irrelevant.

Synthetic identity fraud is the slipperiest version. Criminals combine a real Social Security number (often a child’s or an elderly person’s) with fabricated personal information to manufacture a new identity that doesn’t match any existing credit file. Because the synthetic identity is designed to look like a brand-new consumer rather than you, a freeze on your own file may not block the creation of that phantom profile. Victims often have no idea it’s happening.

Who Can Still See Your Credit Report

A freeze doesn’t lock out everyone, and the exceptions matter if you’re trying to predict how it will affect your daily life. Companies you already do business with — your credit card issuer, your mortgage servicer, your auto lender — retain access to monitor your existing accounts.⁸ Government agencies such as child support enforcement can also pull your report, as can credit monitoring services you’ve authorized.

The federal freeze law also doesn’t cover requests made for employment background checks, tenant screening, or insurance underwriting.⁸ An employer running a background check or an insurance company setting your premiums can access credit data without you lifting the freeze. If you’re job hunting or shopping for insurance, the freeze generally won’t get in the way.

Credit Freeze vs. Fraud Alert

Fraud alerts and credit freezes often get discussed together, but they do different jobs. A freeze is a hard block: nobody sees your report, and no new accounts get opened. A fraud alert is a flag on your file that tells businesses to verify your identity before opening a new account, but it doesn’t prevent them from seeing your credit report.³

Fraud alerts come in two varieties. An initial fraud alert lasts one year and requires no proof you’ve been a victim. An extended fraud alert lasts seven years but requires either an FTC Identity Theft Report from IdentityTheft.gov or a police report.³ One operational difference matters: when you place a fraud alert with one bureau, that bureau must notify the other two. With a freeze, you contact each bureau separately.

For most people who haven’t been victimized and want proactive protection, a freeze is the stronger tool because it physically prevents access rather than relying on a lender to follow through on verification. A fraud alert makes a reasonable complement, especially right after a data breach, but it’s a speed bump rather than a wall.

How to Place a Freeze

You must contact each of the three major credit bureaus individually. Freezing your report at Equifax does not freeze it at Experian or TransUnion.³ Each bureau offers an online portal, a toll-free phone number, and a mailing address. The online route is fastest and takes about ten minutes per bureau.

You’ll need your full legal name, Social Security number, date of birth, and residential addresses from the past two years. Mail requests additionally require copies of a government-issued ID and a document proving your address, such as a recent utility bill or bank statement.

Federal law sets firm deadlines. Online and phone requests must be processed within one business day. Mail requests must be processed within three business days of the bureau receiving your letter.¹

How you manage the freeze afterward depends on the bureau. Experian no longer uses a PIN; you manage your freeze through a free Experian account.⁹ TransUnion uses a similar account-based system through its Service Center.¹⁰ Equifax may still issue a PIN. Whatever credentials your bureau provides, store them somewhere secure. Losing them will slow things down when you need to lift the freeze quickly.

Lifting the Freeze When You Need Credit

When you apply for a mortgage, a new credit card, or anything else that requires a credit check, you’ll need to lift the freeze temporarily. You can lift it for a specific creditor or for a set time window, and lifting is free.

The timeline is fast. Online or phone lift requests must be removed within one hour under federal law.¹ You can call a lender in the morning, lift the freeze during the conversation, and have the credit check run the same day. Mail requests follow the three-business-day rule, and the same one-hour deadline applies to temporary lifts scheduled for a specific date range.⁸

One practical tip: when you apply for credit, ask the lender which bureau they plan to pull from. You may only need to lift the freeze at one bureau rather than all three.

Freezing a Child’s Credit

Children are attractive targets for identity thieves because the fraud can go undetected for years, often until the child applies for their first student loan or credit card and discovers the damage. Since 2018, federal law has allowed parents and legal guardians to place a free freeze on behalf of anyone under 16.¹¹

Parents need to provide proof of authority, such as a birth certificate. Child welfare or probation agency representatives acting on behalf of a minor in foster care must provide documentation certifying the child is in their care.¹¹ If the child doesn’t already have a credit file, which is normal for young children, the bureau will create one specifically to freeze. The process typically requires mailing documents.

Specialty Bureaus Worth Freezing

Equifax, Experian, and TransUnion aren’t the only consumer reporting agencies. ChexSystems tracks banking history and is used by banks when you open a checking or savings account. A freeze there prevents someone from opening bank accounts in your name, and it must be requested directly through ChexSystems.¹²

Other specialty bureaus include Innovis (a fourth credit bureau used by some lenders), the National Consumer Telecom & Utilities Exchange (used by phone and utility companies), and LexisNexis (used for insurance and employment screening). Freezing your file at these agencies closes additional entry points. Each requires a separate request.

If Identity Theft Has Already Happened

If you’ve already been victimized, a credit freeze is one piece of recovery, not the whole response. The federal government’s central resource is IdentityTheft.gov, which walks you through reporting the theft and generates a personalized recovery plan based on the specific type of fraud.¹³ The site creates an FTC Identity Theft Report that you’ll need for disputing fraudulent accounts, placing an extended fraud alert, and dealing with creditors.

A workable sequence: freeze your credit at all three major bureaus immediately to stop new fraudulent accounts, then file your report at IdentityTheft.gov. That report qualifies you for a seven-year extended fraud alert, which only requires contacting one bureau. That bureau must notify the other two.³ From there, follow the recovery plan to dispute fraudulent accounts, alert your financial institutions, and monitor your credit. The longer you wait, the harder cleanup gets.

1
Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts
2
Federal Trade Commission. Getting Utility Services: Why Your Credit Matters
3
Consumer Advice. Credit Freezes and Fraud Alerts
4
Federal Trade Commission. Starting Today, New Federal Law Allows Consumers to Place Free Credit Freezes and Yearlong Fraud Alerts
5
Internet Crime Complaint Center (IC3). Account Takeover Fraud via Impersonation of Financial Institution Support
6
Federal Trade Commission. What To Know About Tax Identity Theft
7
Federal Trade Commission. What To Know About Medical Identity Theft
8
Consumer Financial Protection Bureau. What Is a Credit Freeze or Security Freeze on My Credit Report
9
Experian. Freeze or Unfreeze Your Credit File for Free
10
TransUnion. Credit Freeze – Freeze My Credit
11
Federal Trade Commission. New Protections Available for Minors Under 16
12
ChexSystems. Security Freeze Information
13
IdentityTheft.gov. IdentityTheft.gov – Report Identity Theft