Identity protection
Credit Freeze vs Fraud Alert
A freeze blocks most new credit checks. An alert tells lenders to verify you. After a leak, the right choice depends on the data that was exposed and how often you apply for credit.
What each tool actually does
Credit freeze (security freeze) While it is on, most lenders cannot see the file they need in order to open a new credit account in your name. The FTC says a freeze is free to place or lift, does not affect your credit score, is available to anyone for any reason, and lasts until you lift it. You place it separately at each of the three nationwide bureaus. Fraud alert An alert does not lock the file shut. It tells a business to verify your identity before it grants new credit. An initial alert lasts one year and can be renewed. If you already have an Identity Theft Report from IdentityTheft.gov, an extended alert can last seven years. Active-duty military consumers have a separate alert option. The CFPB describes the freeze as a stop on new creditor access and the alert as a requirement that creditors make sure it is you.
When a freeze is the better first move
Choose a freeze first when:
A freeze is less urgent when the only exposed item was an email address and you already use unique passwords and multifactor authentication. You can still freeze as a precaution. The FTC is explicit: you do not have to wait for a breach or for proven theft. The inconvenience is real. If you forget the freeze, an application can stall. That is the tradeoff, not a flaw in the tool.
- A notice listed a Social Security number, driver’s license, or a full identity packet
- You do not expect to apply for a card, car loan, apartment, or insurance in the next few weeks
- You want the stronger block and can remember to lift it later
- You are placing protection for a child or a relative who will not be opening credit
When an alert may be enough — or a useful extra
An alert is often enough when:
It is weaker as a standalone control after a serious SSN exposure. Lenders can still reach the file. They are only told to verify you. Verification quality varies. If identity theft is already happening — new accounts, a tax filing you did not submit, a job you did not take — start at IdentityTheft.gov, then use the freeze and the extended alert path that fits the report.
- You apply for credit often and would be lifting a freeze every month
- You want lenders to slow down without locking the file
- You already froze the file and want a second signal
How to place each one without paying a reseller
Type the official bureau addresses yourself. The FTC’s freeze and alert page points to the credit-report service areas for Equifax, Experian, and TransUnion. For a freeze:
For an initial fraud alert:
Do not give your Social Security number to a caller who offers to “set this up for you.” The bureaus do not need a freelancer in the middle.
- Open each bureau’s official freeze page.
- Prove who you are through that bureau’s process.
- Save the confirmation and any PIN or password used to lift the freeze.
- Repeat until all three files are frozen.
- Contact one bureau.
- That bureau must tell the other two.
- Use the free credit reports that come with an initial alert, and still prefer AnnualCreditReport.com as the authorized source for the free reports the law provides.
Living with the choice
If you froze the file and now need a loan, ask which bureau the lender will use. Lift only that one if you know. Lift all three if you do not. Put the freeze back when the check is done. If you chose only an alert, still read your reports. An alert does not hide new accounts that already posted. AnnualCreditReport.com is the official starting point for those reports. Neither tool watches an existing Visa or checking account. A stolen card number is a bank problem. A reused password is an account problem. Keep those steps on the list even after the freeze confirmation arrives.
What this comparison should not decide for you
A credit freeze vs a fraud alert is not a verdict about lawsuits, refunds, or deletion of leaked copies. Those outcomes depend on the incident and the law that applies. The tools are practical. They are free. They are incomplete on purpose. If a company that sent a verified notice also offers no-cost monitoring, the FTC has said it can be worth using. Treat that as extra visibility, not as a replacement for the freeze when identity data was involved.
Practical checklist
- Read the notice for SSN or ID data, not only an email.
- Freeze all three bureaus if you want the harder block.
- Add a one-year alert if you want lenders to verify you.
- Save lift credentials offline or in a password manager.
- Pull reports at AnnualCreditReport.com.
- Lift a freeze only for the bureau a lender will use, then lock it again.
- Report confirmed misuse at IdentityTheft.gov.
- Ignore paid middlemen who sell a “government freeze.”
Frequently asked questions
Can I have a freeze and an alert at the same time?
Yes. The FTC says you can place an alert even if a freeze is already in place.
Does a freeze stop someone from using a card I already opened?
No. Watch existing accounts with the bank. The freeze is aimed at new credit.
Which option should I pick if I am not sure what was leaked?
If the official notice is vague and you can live with lifting a freeze later, the freeze is the more conservative credit control. If you apply for credit constantly, start with an alert and reports, then freeze if you see trouble.
Sources
This guide is reviewed against official guidance. External pages may be updated by their respective owners.