A thief with your Social Security number doesn’t need your wallet. They need one lender willing to pull your credit report, and by default all three nationwide bureaus will hand it over to anyone with a credit application in your name.
A credit freeze closes that door, it’s free by federal law, and it takes about 15 minutes online. The catch is that you have to do it yourself, at every bureau, one at a time, and a freeze only guards the future.
Who Needs a Credit Freeze, and Who Can Skip It
Most adults who aren’t shopping for credit this month should freeze. The FTC received more than 1.1 million reports of identity theft through IdentityTheft.gov in 2024 (FTC, 2025). A freeze is the cheapest way to keep your name off next year’s list. It costs nothing to place, lift, or remove, and it never touches your score.
The freeze is placed separately at Equifax, Experian, and TransUnion. For fuller protection, you can also add the smaller specialty bureaus that feed lending decisions. Under the Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018, which amended the Fair Credit Reporting Act, there’s no fee at any of the three nationwide bureaus.
Your situation decides how urgent it is. Here’s how common situations line up.
| Your situation | Freeze now? | What else to do |
|---|---|---|
| Your data was in a breach | Yes, all three bureaus | Watch existing accounts for strange charges |
| Your identity was already stolen | Yes, all three bureaus | File an FTC report and dispute fraud at each bureau |
| You’re applying for a loan this week | Wait, or lift it for that lender | Freeze again once the loan closes |
| You have a child with a Social Security number | Yes, a child freeze | Keep proof of authority on file |
| You lost your wallet | A fraud alert is enough for many people | Upgrade to a freeze if charges show up |
A Credit Freeze Blocks New Lenders Under the FCRA
A freeze, formally called a security freeze, stops a bureau from releasing your report to most new lenders. When a lender asks for a frozen file, the bureau replies that the file is frozen. The application is then usually declined or held until you lift the freeze. The rules come from the Fair Credit Reporting Act and its 2018 amendments.
That shuts down the most common path for new account identity theft. A criminal who has your Social Security number can’t open a credit card, auto loan, or mortgage in your name without first lifting the freeze. That takes the PIN or login that only you hold.
A freeze leaves a lot alone. Existing creditors keep reporting, and debt collectors can still pull your file for collection. Prescreened offers keep coming until you opt out at OptOutPrescreen.com, and insurance score pulls go on in states that allow them. Your score doesn’t drop, and your file keeps updating normally.
Gather These Five Items Before You Start
Every bureau asks for the same basic facts, so collect them once and move through all three in one sitting. Online requests ask for your full name, address, date of birth, and Social Security number. Some bureaus also quiz you on items in your own file. Mailed requests add paper proof.
Use this as your checklist.
| What to have ready | Needed online | Needed by mail |
|---|---|---|
| Full legal name and date of birth | Yes, at all three bureaus | Yes, in the written request |
| Social Security number | Yes, at all three bureaus | Yes, in the written request |
| Current address | Yes, at all three bureaus | Yes, plus a utility bill as proof |
| Photo ID | Usually not asked | Copy of a driver’s license or passport |
| Recent account details from your report | Yes, for security questions | No |
Have a password manager open before you start. Each bureau makes you a login or PIN, and you’ll need it every time you lift the freeze later.
How to Freeze Your Credit at Equifax, Step by Step
Equifax lets you freeze online, by phone, or by mail, and online is fastest. The portal asks for your Social Security number, date of birth, current address, and two security questions drawn from your file. Once you pass, the freeze goes on right away with no fee.
- Go to the Equifax credit freeze portal and create an account or verify your identity.
- Answer the two security questions drawn from your file.
- Place the freeze and save the confirmation for your records.
By phone, call 1-800-685-1111 and the agent walks you through verification. By mail, send a written request with a copy of your driver’s license or passport and a utility bill. Equifax has up to three business days to process a mailed request after it arrives.
Equifax has had the most incidents of mishandled data, including the 2017 breach that exposed 147 million Americans. A freeze at Equifax is legally separate from your freezes at Experian and TransUnion, even though all three hold similar account data. Each bureau must be frozen on its own.
How to Freeze Your Credit at Experian, Step by Step
Experian runs its freeze through the Experian Freeze Center online, by phone at 1-888-397-3742, or by mail. Online, it checks your name, address, Social Security number, and date of birth. Then it asks questions pulled from your own file. You’ll set up a login for future lifts.
- Open the Experian Freeze Center and enter your identity details.
- Answer the knowledge-based questions from your file.
- Turn the freeze on and save your login.
Once it’s on, you manage the freeze from the same account. You can lift it for a set date range or for one creditor by name. Experian also markets a free CreditLock product that works like a freeze. It runs on Experian’s terms of service, though, so the legal protections differ even when the screens look alike.
Experian’s security questions sometimes fail on thin files or files with lots of recent activity. When that happens, Experian sends the request to manual review, which can take up to three business days. You can also freeze by phone or mail, and those routes skip the quiz.
How to Freeze Your Credit at TransUnion, Step by Step
TransUnion sets up its freeze through the TransUnion Service Center website or by phone at 1-888-909-8872. The portal asks for your Social Security number, date of birth, address, and details of recent credit activity. You’ll get a login so you can handle future lifts from the same account.
- Go to the TransUnion Service Center and create an account.
- Verify your identity with your recent credit activity.
- Place the freeze and skip any paid offers.
TransUnion sometimes nudges people toward TrueIdentity or premium monitoring during the freeze flow. The freeze itself is free under federal law. You don’t need to buy anything to place, lift, or remove it, and any upsell on the way is optional and has nothing to do with the freeze.
How Long Does a Credit Freeze Take to Work?
Online and phone freezes take effect within one business day at each bureau. Mailed requests take up to three business days after the bureau gets them. The freeze then stays on until you lift it, either for good or for a set window.
| How you ask | Freeze takes effect | Lifting it later |
|---|---|---|
| Online | Within one business day | Typically within one hour |
| Phone | Within one business day | Up to three business days |
| Up to three business days after receipt | Up to three business days |
Plan around the slowest route you use. If you mailed Equifax and went online at the other two, count three business days before you call yourself fully frozen.
Innovis and NCTUE Are the Bureaus Most People Forget
Two specialty bureaus also feed many account decisions, and a big-three freeze doesn’t cover them. Innovis is a fourth credit bureau used mainly for fraud screening. NCTUE, the National Consumer Telecom and Utilities Exchange, tracks phone, utility, and pay-TV accounts used when those accounts are opened.
Innovis freezes are free, online at the Innovis security freeze portal or by phone at 1-800-540-2505. NCTUE freezes are placed by phone at 1-866-349-5355. Adding both makes a real difference, since many phone, internet, and utility accounts are opened with NCTUE data instead of a tri-bureau pull.
Freeze, Fraud Alert, or Lock: Only the Freeze Is Federal Law
The freeze gives you the strongest legal protection, and it’s free at all three bureaus. A fraud alert is lighter and still lets new credit through after extra checks. A lock trades legal protection for a faster on-off switch. Our full breakdown of credit freeze vs fraud alert vs credit lock goes deeper.
| Tool | What it does | Rules that govern it |
|---|---|---|
| Credit freeze | Blocks most new lenders from your report | The FCRA, free at all three bureaus |
| Initial fraud alert | Asks lenders to verify you, lasts one year | Place at one bureau, it notifies the other two |
| Extended fraud alert | Same request, lasts seven years | Needs an FTC report from IdentityTheft.gov |
| Credit lock | Toggles access in a bureau app | The bureau’s terms of service |
Locks flip on and off instantly in a mobile app, which is handier than a thaw. FCRA protections don’t reach them, and some bureaus charge a subscription. Most consumer advocates recommend a freeze as the default after identity theft and a fraud alert for lower-risk cases like a lost wallet. The seven-year alert has its own rules, covered in our guide to the extended fraud alert under FCRA Section 605A.
How to Lift a Credit Freeze for One Loan
Lift only the bureau your lender pulls, and only for as long as you need. A temporary lift, sometimes called a thaw, lets one named lender or one date range reach your file without ending the freeze. All three bureaus offer it free under the 2018 law, and full removal is also free.
Online lifts typically take effect within one hour at all three bureaus. Phone and mail lifts take up to three business days. Ask the lender which bureau it pulls before you lift anything. Mortgage applications usually need tri-merge files from all three bureaus, so all three freezes have to come down.
Be choosy about what you apply for while the file is open. A lift lets a hard inquiry through, and people get burned when an app talks them into a long shot. “Credit Karma gets people to apply for loans or credit cards with outstanding approval odds which I believe to be a complete lie. So they make me hurt your credit score with hard inquiries, when in actuality you have 0 approval odds, not outstanding.” That’s Eduardo F, in a 1-star Trustpilot review of Credit Karma, September 14, 2026.
If you used a date range or a single-lender lift, you don’t have to freeze again by hand. The freeze comes back at the end of the window or after the named lender pulls. A full removal leaves the file open until you place a new freeze.
A Freeze Cannot Touch Accounts Already Open
A freeze only blocks new accounts. Existing creditors keep reporting, and an account a thief opened before you froze can keep running up charges that land on your report. Debt collectors, government agencies enforcing child support or court orders, and your current creditors running account reviews all still get through.
What already sits on your file is often wrong. 1 in 5 consumers had an error on at least one of their three credit reports in the FTC’s national accuracy study (FTC, 2013). In our own read of 3,482,718 complaints recorded in the CFPB’s public Consumer Complaint Database under “Incorrect information on your report” from July 2025 through June 2026, 66.9% were tagged “Information belongs to someone else.” These are unverified consumer allegations, and the CFPB doesn’t confirm the facts in them.
Insurance companies in states that allow credit-based insurance scores may still pull a frozen file in limited cases, depending on state law. If fraud is already on your report, start with our guide to identity theft and credit reports and the 7 steps to take if your identity is stolen.
Parents Can Freeze a Child’s Credit for Free
The same 2018 law that made freezes free for adults also made them free for children. Parents and legal guardians can freeze a minor’s file even before one exists. If there’s no file yet, the bureau creates a record just to hold the freeze.
Child identity theft is among the hardest fraud to spot, because kids don’t check their reports. A thief can use a child’s Social Security number to open accounts nobody finds until the child applies for credit at 18. A freeze placed in childhood closes that path until it’s lifted.
To freeze a child’s file, send each bureau a written request with the parent’s proof of identity. Add proof of authority over the child, like a birth certificate or court order, and the child’s Social Security number. The freeze stays until the child turns 16, when they can manage or remove it under bureau rules. Our guide on how to freeze a child’s credit walks through each bureau.
Four Mistakes That Leave a Freeze Half Done
Most failed freezes come from a missed step. Each of these leaves a door open.
- Freezing one bureau. Lenders pull from whichever bureau they like, so freezing only Equifax leaves Experian and TransUnion open. Freeze all three, then add Innovis and NCTUE.
- Losing your PIN or login. Freezes placed before 2018 used a bureau PIN, and newer ones use an online account. Recovery can take days or weeks and may need mailed papers, so store them in a password manager or a safe paper file.
- Treating a lock like a freeze. A lock isn’t covered by federal law, the bureau can drop it any time, and it may carry a fee. If legal protection matters most to you, the FCRA freeze is the stronger choice even when both sit in the same app.
- Forgetting the timing. Mailed requests take up to three business days. Don’t assume you’re covered the day you drop the letter in the box.
Which Tool Handles the Errors a Freeze Leaves Behind?
Once your freeze is on, the job left is checking what’s already on all three reports and disputing what’s wrong. Here’s how the options compare on price, what you get for that problem, and how many bureaus they reach.
| Tool | What you pay | What that buys after a freeze | Bureaus | Trustpilot |
|---|---|---|---|---|
| CreditRefresh | $49.99/mo, no setup fee, cancel anytime. Mail letters yourself free, or pay RushMail per letter | Scans all three reports, drafts an FCRA letter per flagged item, you sign first | All three | 4.3 (9 reviews) |
| Dispute Beast | From $49.99/mo for required monitoring. Mail letters yourself free, or pay Sprint Mail per letter | AI dispute letters bundled with paid monitoring and an iOS app | All three | 4.2 (2,067 reviews) |
| DisputeBee | $49/mo personal, $129/mo business | Letter templates; you import, print, mail, and track responses yourself | All three | 3.2 (68 reviews) |
| The Credit People | $99/mo standard, $119/mo premium, or $599 for 6 months | Done-for-you service; you don’t see or approve each letter | All three | 1.7 (17 reviews) |
| Lexington Law | $139.95/mo, invoiced at the end of each service period | Attorney-backed service with no self-serve dispute tool | All three | 3.2 (624 reviews) |
| Credit Karma | Free, paid for by lender referrals | Free monitoring; its Direct Dispute works with TransUnion only | TransUnion | 1.1 (912 reviews) |
Every price is that company’s own published rate, read off that company’s own site on September 15, 2026. Trustpilot scores and review counts as published on September 24, 2026.
How CreditRefresh Disputes What a Freeze Can’t Block Across All Three Bureaus
A freeze stops the next fraudulent account, and it does nothing about the ones already reported. That’s the part we built CreditRefresh for. In CreditRefresh’s September 18, 2026 member-data extract, 2.3% of disputed bureau-level items in mailed rounds had a recorded outcome. Within that subset, 47.9% were no longer reported on a newer pull of the same bureau, while 52.1% remained reported with a changed balance, status or negative flag.
Our AI reads your Equifax, Experian, and TransUnion reports and flags items that look inaccurate, incomplete, unverifiable, or too old to report. It drafts a print-ready FCRA dispute letter for each item you pick. You review and sign every one before anything goes out, then mail it yourself or hand the round to RushMail for a small per-letter fee. We track each letter against the roughly 30-day investigation window.
It’s included with Refresh Monitoring at $49.99 a month, with no setup fee, no per-dispute charge, and no contract. There’s nothing to learn and no training session. The bureaus decide every dispute, and we show you every letter we draft.
It is backed by our 100% money-back guarantee: members who work the full program and see no bureau score rise above where they started can claim back every Refresh Monitoring payment. It is a refund promise, never a score promise.
Frequently Asked Questions
Does freezing my credit hurt my score?
No. A freeze doesn’t lower your score, and your file keeps updating as your creditors report.
Can I still use my credit cards with a freeze on?
Yes. Existing accounts work as usual, and your card issuers keep reporting and reviewing your account.
Do I have to pay to freeze my credit in 2026?
No. Placing, lifting, and removing a freeze is free at Equifax, Experian, and TransUnion under the 2018 federal law, and Innovis freezes are free too.
What happens if I lose my freeze PIN or login?
Each bureau has a recovery process, but it can take days or weeks and may need mailed documents. Save your credentials the day you freeze.
Will a credit freeze stop prescreened credit card offers?
No. Prescreened offers have their own opt-out at OptOutPrescreen.com.
Should I freeze my credit if my identity was already stolen?
Yes, freeze first, then file an FTC identity theft report and dispute the fraudulent accounts at each bureau. The FCRA requires a bureau to investigate a dispute and generally finish within 30 days (FCRA Section 611).
How long do old negative items stay on a frozen report?
A freeze doesn’t change how long items stay. Most negative items, like collections and charge-offs, can be reported for seven years, and a Chapter 7 bankruptcy for ten (FCRA Section 605).
CreditRefresh handles what a freeze leaves behind, the errors already sitting on your Equifax, Experian, and TransUnion reports. Backed by a 100% money-back guarantee.
