Credit Freeze vs. Fraud Alert: Which Do You Need?

Updated July 2026 · 8 min read

If you're worried about identity theft — whether you've just spotted a suspicious account, been caught in a data breach, or simply want to lock things down before there's a problem — you've probably run into two tools that sound similar but work very differently: the credit freeze and the fraud alert. Both are free, both are your right under federal law, and both make it harder for a thief to open credit in your name. The difference is in how much friction each one adds and who it inconveniences. This guide compares them side by side so you can pick the right one — or use both together.

The short version: a freeze is the stronger, more restrictive option that blocks access to your credit file entirely; a fraud alert is a lighter-touch flag that tells lenders to verify your identity before extending credit. Here's how each works.

What a credit freeze does

A credit freeze (also called a "security freeze") restricts access to your credit report. When your file is frozen, credit bureaus won't release your report to most new creditors — which means a lender can't approve a new account, because they can't pull the report they rely on. Since almost all new-credit applications trigger a credit pull, a freeze effectively stops fraudsters (and you) from opening most new accounts until the freeze is lifted.

Key things to know about a freeze:

• It's free to place, temporarily lift, and permanently remove, at each bureau.
• It does not affect your credit score and doesn't stop you from using existing accounts.
• You still get your free reports, and pre-existing creditors can still access your file.
• You must place it separately with all three major bureaus — Equifax, Experian, and TransUnion — because a freeze at one doesn't cover the others.
• To apply for new credit, you temporarily lift ("thaw") the freeze, then re-freeze afterward.

What a fraud alert does

A fraud alert is a notice placed on your credit file that tells any lender pulling your report to take extra steps to verify that it's really you before opening or changing an account — for example, by calling a phone number you provide. Unlike a freeze, it doesn't block access to your file; it just adds a verification step. There are three kinds:

• Initial fraud alert: Lasts one year and is available to anyone who is concerned about fraud or has been exposed in a breach.
• Extended fraud alert: Lasts seven years and is available to confirmed identity theft victims who provide an identity-theft report.
• Active-duty alert: Lasts one year (renewable) and is for military members deployed away from home.

A convenient bonus: you only need to contact one of the three bureaus to place a fraud alert. That bureau is required to notify the other two, so a single request covers all three.

Side-by-side comparison

How to place and lift a freeze

Because a freeze must be set at each bureau, plan to make three separate requests. You can do it online, by phone, or by mail. Each bureau maintains a dedicated security-freeze page:

• Equifax — visit the bureau's security-freeze page.
• Experian — visit the bureau's security-freeze page.
• TransUnion — visit the bureau's security-freeze page.

When you place a freeze, each bureau gives you a way to manage it — usually a PIN or an online account. Keep those credentials somewhere safe, because you'll need them to lift the freeze later. To apply for a loan, credit card, or even some utilities and rentals, temporarily thaw the freeze (you can often specify which bureau the lender will use and for how long), then it re-freezes automatically or you re-freeze it yourself. Lifting is free and, done online, usually takes effect within about an hour.

How to place and lift a fraud alert

Placing a fraud alert is quicker: contact any one of the three bureaus online or by phone and request the alert. That bureau notifies the other two. An initial alert lasts one year and can be renewed; an extended alert (for confirmed victims) lasts seven years and comes with additional perks like extra free credit reports. You can remove a fraud alert early if you choose. Because the alert only asks lenders to verify your identity — rather than blocking access — it's the lower-friction choice when you still expect to apply for credit.

When to use which

Neither option is universally "better"; the right choice depends on your situation.

1. Choose a freeze if you want the strongest protection and don't expect to apply for new credit soon. It's ideal after a serious breach, after confirmed identity theft, or as a default lockdown you thaw only when needed.
2. Choose a fraud alert if you want a lighter safeguard with less hassle — for example, if you're cautious after a minor exposure but still shopping for a car loan or mortgage and don't want to juggle thaws across three bureaus.
3. Use both together for maximum coverage. A freeze blocks new-account access while a fraud alert adds a verification layer for any access that does occur. They don't conflict.

Think of a freeze as locking the door and a fraud alert as a note on the door asking visitors to show ID. You can do one, the other, or both — and all of it is free.

If you're already a victim of identity theft

If someone has already misused your identity, move quickly and in this order:

1. Report it and get a recovery plan at IdentityTheft.gov, the federal government's official identity-theft reporting site run by the FTC. It generates an official Identity Theft Report and a personalized step-by-step recovery plan.
2. Place a fraud alert or freeze with the bureaus (an extended alert requires your identity-theft report).
3. Contact the affected companies' fraud departments to close or freeze the fraudulent accounts.
4. Review your credit reports for accounts and inquiries you don't recognize.
5. Dispute the fraudulent items with the bureaus so they're removed from your file.

To formally notify a bureau of accounts opened by a thief and request a block, use our free identity theft letter template, and pair it with our credit report dispute letter to remove fraudulent entries. For a broader walkthrough of correcting your file, see How to Dispute Credit Report Errors.

The bottom line

Both tools are free, neither hurts your score, and you can layer them. If you want the strongest protection and can tolerate thawing your file when you need credit, freeze all three bureaus. If you want lighter, lower-maintenance coverage, place a fraud alert with one bureau and let it notify the others. And if identity theft has already happened, start at IdentityTheft.gov, lock down your files, and dispute every fraudulent item until your report is clean.

← Back to all guides