If you just got denied for a loan or card and were told your credit file is restricted, the cause is almost always one of five things: a security freeze you placed and forgot about, a fraud alert on your file, a credit lock you turned on through a bank or identity protection app, a freeze placed by a parent or guardian, or an error at the credit bureau itself. Each has a different fix, and the reason your credit is locked determines both how fast you can unlock it and whether federal law is on your side while you do.
Freeze, Lock, or Alert: Which One Is on Your File
These three restrictions look similar from the outside but work differently, and sorting out which you have is the first step.
A security freeze is a federal right under the Fair Credit Reporting Act. The bureaus have to place it for free, they have to lift it within legally mandated timeframes, and the protections are backed by statute. A credit lock is a commercial product the bureaus and third-party apps sell, often inside a paid subscription. It looks the same to a lender but operates under a private contract instead of federal law, so if something goes wrong the bureau is not legally obligated to make you whole the way it is with a freeze.1Consumer Financial Protection Bureau. What Is a Credit Freeze or Security Freeze on My Credit Report
A fraud alert is a third option. It doesn’t stop lenders from pulling your file, but it tells them to take extra steps to verify your identity before opening an account. If they can’t reach you, they often decline rather than take the risk.
You Placed a Security Freeze and Forgot About It
This is the single most common reason people get blindsided by a denial. You froze your credit after a data breach or during a stretch when you weren’t borrowing, then months or years passed. A security freeze stays in place indefinitely until you actively remove it, so it is still doing exactly what you told it to do.2Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts
To fix it, you have to lift the freeze at every bureau where you placed it before you apply again. Requests made online or by phone must be processed within one hour. Mailed requests give the bureau three business days.2Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts If you only need one lender to pull your report, you can ask for a temporary lift over a specific date range instead of removing the freeze altogether. Placing and lifting are both free.
A practical wrinkle: Experian no longer uses PINs and lets you manage the freeze through your online account. Equifax and TransUnion may still require a PIN depending on how you originally set the freeze up. If you’ve lost yours, expect an identity verification step to reset access before you can lift anything.
A Fraud Alert Is Slowing Down Your Applications
If a lender declined you but said nothing about a freeze, look for a fraud alert. There are three kinds, and each is placed at your own request; bureaus do not add them on their own.
An initial fraud alert lasts one year and asks only for proof of identity. You contact one of the three bureaus and that bureau notifies the other two. An extended fraud alert lasts seven years but requires you to submit an identity theft report; it’s meant for people who have already been victimized, not just those who suspect they might be. An active duty military alert lasts at least 12 months and also removes your name from prescreened credit and insurance offer lists for two years.2Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts
If a fraud alert is on your file and you don’t remember placing one, it may have gone on during a data breach notification you forgot about, or someone with authority to act on your behalf may have added it. You can request removal of an initial fraud alert at any time by contacting the bureau and verifying your identity.2Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts
A Bank or Identity Protection App Locked It
Banking apps and identity theft protection services often include a one-tap credit lock. It’s convenient, and it’s easy to forget. If you switched phones, cancelled a subscription without turning the lock off first, or signed up for a free trial and moved on, the lock can still be sitting there.
Because these services act as an intermediary between you and the bureau, the restriction may not show up when you check the bureau directly the way a freeze does. Search your email for signup confirmations from services like Experian’s CreditWorks, Equifax’s paid plans, or a standalone identity theft company. Logging back into the service usually reveals the toggle, though you may have to reactivate a lapsed subscription to reach it.
A Parent or Guardian Placed the Freeze
Federal law lets parents and legal guardians place a security freeze on the credit file of a child under 16. If the child has no file yet, the bureau has to create one and freeze it immediately. These freezes stay in place until the child reaches adulthood and asks for them to be removed.2Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts If you’re a young adult applying for your first credit card or student loan and hitting a wall, this is worth checking with a parent.
The same protection is available for incapacitated adults, placed by a legal guardian or authorized representative. To place or lift either kind of freeze, the guardian has to provide proof of the relationship (birth certificate, court order, or similar) along with identity verification for both people.3Equifax. How Do I Place a Security Freeze on an Incapacitated Adult’s or Minor’s Equifax Credit Report Each bureau has its own paperwork, so plan on contacting Equifax, Experian, and TransUnion separately.
The Bureau Made a Mistake
Sometimes nobody asked for the restriction. Mixed files are the most common bureau-side problem: two people with similar names, birth dates, or Social Security numbers end up with their credit data merged into a single record. When the bureau or a consumer catches the error, the bureau may restrict access while it sorts out which accounts belong to whom.4Equifax. What Can I Do if I Believe My Credit File Has Been Mixed with Someone Else’s System migrations and technical updates can also cause restrictions that the bureau doesn’t proactively explain.
The fix is a formal dispute with the bureau, backed by identity documents: full name, date of birth, Social Security number, and current address.4Equifax. What Can I Do if I Believe My Credit File Has Been Mixed with Someone Else’s Under federal law, the bureau generally has 30 days from the date it receives your dispute to complete its investigation, with up to 15 extra days if you send additional documentation during that window.5Office of the Law Revision Counsel. 15 USC 1681i – Procedure in Case of Disputed Accuracy Mixed file disputes usually take the longer end of that window because they require manual review.
Who Can Still See a Frozen File
A freeze does not make your file invisible to everyone, which sometimes confuses people who see their existing bank still reviewing their account. Federal law carves out specific exceptions:2Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts
- Existing creditors can still review your file for account maintenance, credit line increases, and collections.
- Government agencies acting under a court order, warrant, or subpoena retain access, as do child support agencies and tax authorities investigating fraud or delinquency.
- Insurance underwriters can pull your report despite a freeze.
- Employers and landlords running background checks can access your file, though some states add restrictions.
- Credit monitoring services you’ve subscribed to can still see your report.
- You can always request and review your own file.
The freeze targets new credit applications from lenders you don’t already have a relationship with, which is exactly the scenario identity thieves exploit.
How to Check Your Status and Get It Lifted
If you don’t know which of these is causing the block, check at each bureau directly.
- Equifax: log in at myEquifax.com or call 888-298-0045. The automated system will tell you whether a freeze is active and give you options to manage it.
- TransUnion: log in and look for the Credit Freeze tile, or call 800-916-8800 and verify your identity.
- Experian: use the Security Freeze Center online or call 888-397-3742. The system uses your Social Security number and the phone number you’re calling from to identify you.
If you find a freeze you placed yourself, lifting it online or by phone starts the one-hour federal deadline for removal.2Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts If a third-party service is the culprit, you’ll have to log back into that service to switch it off. If you suspect a bureau error, file a dispute and be ready with identity documents. Whichever cause you find, handle it at each bureau separately. Lifting a restriction at one does not clear the others.