Fraud Alerts on Credit Reports: Initial, Extended, and Active Duty

A fraud alert on your credit report is a free notice that tells any lender pulling your file to verify your identity before opening new accounts in your name.¹ Federal law offers three versions: a one-year initial alert for anyone who suspects fraud, a seven-year extended alert for confirmed identity theft victims, and an active duty alert for deployed service members. Placing one takes a single request to one of the three national credit bureaus, and none of them affects your credit score.

What the Alert Actually Does

A fraud alert does not block anyone from seeing your credit report. It signals that the business pulling it should take extra steps to confirm the applicant is really you.¹ With an initial alert, creditors must use reasonable policies and procedures to verify identity, and if you left a phone number, they should call it. With an extended alert, the standard is stricter: the creditor must actually contact you in person, by phone, or through another method you specified before extending new credit.²

Two limits are worth knowing up front. The alert only affects new credit applications. It does nothing about charges on accounts already open, and it does not stop someone using a card number stolen from an existing account.

The Three Types and Who Qualifies

Initial Fraud Alert

Anyone who suspects in good faith that they have been or are about to become a victim of fraud or identity theft can request an initial alert.³ No proof is required. A suspicious charge, a data breach notification, or a lost wallet is enough.

The alert stays on your file for at least one year, and you can remove it earlier if you no longer need it.³ Once placed, each of the three bureaus must give you one free copy of your credit report on request, on top of the free annual report you already get.¹ Pull those reports right away and read all three for accounts or inquiries you do not recognize.

Extended Fraud Alert

If identity theft has already happened, you qualify for an extended alert lasting seven years.³ To place one you must submit an identity theft report, which is a copy of an official complaint filed with a federal, state, or local law enforcement agency. Filing a false report carries criminal penalties.⁴

The easiest way to create that report is through IdentityTheft.gov, the FTC’s online portal. The site walks you through describing the fraud and generates a report with a reference number that satisfies the federal requirement. Complete this step before you contact any credit bureau, because the bureau will ask for the report during the process.

Extended alerts do more than initial ones. Beyond the tighter creditor verification standard, the bureau must exclude you from prescreened credit and insurance offer lists for five years, and you are entitled to two free copies of your credit report from each bureau during the first twelve months.³

Active Duty Alert

Service members on active duty can place an active duty alert. It works like an initial alert but is designed for someone who may be deployed and unable to check their own credit. It lasts at least twelve months and requires creditors to take reasonable steps to verify identity before opening an account, issuing an additional card, or increasing a credit limit. It also removes you from prescreened credit and insurance offer lists for two years, and a personal representative can place or remove it on your behalf.³

How to Place a Fraud Alert

Contact just one of the three national credit bureaus. Federal law requires the bureau that receives your request to notify the other two, so a single submission activates the alert across all three files.³

Each bureau accepts requests online, by phone, or by mail:

Equifax: 888-836-6351 or equifax.com
Experian: 888-397-3742 or experian.com
TransUnion: 800-916-8800 or transunion.com

For an initial or active duty alert, the process is fast. You provide your name, Social Security number, date of birth, and current and previous addresses. The bureau must send you a confirmation and let you know you can request a free credit report.³ If you submit by mail, use certified mail with a return receipt.

For an extended alert, add your finalized identity theft report from IdentityTheft.gov or local law enforcement. The bureau will not place the seven-year alert without it.

Removing an Alert Early

The one-call rule stops working here. Placing an alert requires one bureau; removing one early requires contacting all three separately. Each bureau will verify your identity again. If you mail the request, expect to include a copy of a government-issued ID and a utility bill or bank statement showing your current address.

There is no penalty for early removal. If an initial alert was placed after a scare that turned out to be nothing, or if it is slowing down a mortgage approval, you can lift it once you are comfortable the risk has passed. Just remember that creditors will no longer be flagged to verify your identity on new applications.

Fraud Alert vs. Credit Freeze

Both tools protect against unauthorized new accounts, but they operate differently. A fraud alert leaves your report accessible; lenders can pull it and are told to verify your identity first. A credit freeze blocks access to your report entirely. Nobody can open new credit in your name while it is in place, including you.¹ To apply for a loan, rent an apartment, or clear a background check, you have to temporarily lift the freeze.

Lifting is quick. Online or phone requests must be processed within one hour; mail requests take up to three business days.⁵ You can lift at just one bureau if you know which one the lender will check, or at all three otherwise. Both freezes and alerts are free under federal law.⁶

You can use both at once. A freeze blocks access; an alert adds a verification layer if a creditor somehow pulls the report anyway. For most identity theft victims, that combination is the strongest free protection available.

When a Creditor Ignores Your Alert

A fraud alert only helps if creditors follow it, and some do not. The Fair Credit Reporting Act imposes civil liability on anyone who willfully fails to comply. A consumer can recover actual damages, statutory damages between $100 and $1,000, punitive damages as the court allows, and attorney’s fees.⁷

Proving a creditor willfully ignored the alert is harder than it sounds. Many lenders do check, and the ones that skip verification tend to be smaller operations. If a fraudulent account was opened despite your alert, dispute it with the credit bureaus, report it through IdentityTheft.gov, and consider consulting a consumer protection attorney. The alert being on your file at the time the account was opened strengthens any later claim that the creditor failed to follow the law.

1
Federal Trade Commission. Credit Freezes and Fraud Alerts
2
Consumer Financial Protection Bureau. What Do I Do if I Think I Have Been a Victim of Identity Theft?
3
Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts
4
GovInfo. 15 USC Chapter 41 – Consumer Credit Protection
5
USAGov. How to Place or Lift a Security Freeze on Your Credit Report
6
Federal Trade Commission. Starting Today, New Federal Law Allows Consumers to Place Free Credit Freezes and Yearlong Fraud Alerts
7
Federal Reserve System. Section 616 Civil Liability for Willful Noncompliance