Paid credit monitoring sells you the watching. The watching is already free, and the one thing that actually stops a fraudulent account from opening is free too, guaranteed for life by federal law at 15 U.S.C. § 1681c-1.
What a subscription genuinely adds is the cleanup: a restoration caseworker and an insurance policy for the week your file is under attack. That is a real product for a narrow set of readers, and it is worth knowing which reader you are before the card is charged.
Credit monitoring alerts after the theft, and only the freeze blocks it for free
The CFPB defines a credit monitoring service as a commercial service that charges a fee to watch your credit reports and alert you to changes in the accounts listed on them, and says in the same breath that most such services do not protect your personal information from being stolen and merely alert you after it has been stolen (CFPB, 2025). Some cost over $15 a month.
The four tools a consumer gets offered are routinely described as though they were interchangeable, and they differ on exactly that timing.
| Tool | What it does to your file | What it costs |
|---|---|---|
| Credit monitoring | Sends an alert once a change has already posted | Over $15 a month at some services, free from many banks |
| Security freeze | Blocks release of the file to a prospective new creditor | Free at Equifax, Experian and TransUnion, by statute |
| Fraud alert | Tells a lender to verify identity before extending credit | Free, and renewable |
| Credit lock | Blocks new-account access on the bureau’s own terms | Sold inside a bureau subscription |
The freeze is the row that blocks a new account and costs nothing for life. The lock blocks on the bureau’s own terms, inside a subscription; the other two report or warn. Our guide to credit monitoring services covers what a plan includes, and credit freeze versus fraud alert versus credit lock covers which of these three to reach for first.
Equifax, Experian and TransUnion already watch your file for nothing
All three bureaus supply a free report every week through AnnualCreditReport.com, the one official channel, and card issuers and banks hand out scores and change alerts at no charge. Pull one bureau every ten days on rotation and you read all three files end to end every month, which is more of your report than an alert ever shows you.
Feature by feature, here is what the subscription is charging for and where the same thing sits for free.
| Feature | In a paid subscription | The free equivalent |
|---|---|---|
| New account and inquiry alerts | Emailed once the change posts | Issuer and bank alerts, plus a weekly report pull |
| All three bureau reports | Gathered into one dashboard | Free every week from Equifax, Experian and TransUnion |
| Score tracking | Refreshed monthly or daily | Free inside card issuer and bank apps that publish a score |
| Blocking a new account | Not sold at any price | Security freeze, free under 15 U.S.C. § 1681c-1 |
| Dark web scanning | Searches breach dumps for your data | No equivalent, and no decision changes either way |
| Insurance and restoration | Policy limits plus a caseworker | No free equivalent |
Blocking a new account is the line that settles this for a reader who has not yet been defrauded. The strongest protection here is the one no subscription sells, because the bureaus are required to give it away, and our guide to freezing your credit walks the three enrollments.
Section 605A makes the freeze free and caps a lift at 1 hour
A security freeze blocks release of your file to a prospective new creditor, so the fraudulent application is declined at the lender’s pull and there is no new account left to send an alert about. Under FCRA Section 605A, at 15 U.S.C. § 1681c-1, a nationwide bureau must place one free of charge within 1 business day of a phone or secure electronic request, and must remove it within 1 hour of a request made the same way.
The freeze’s real price is friction, and Congress already put a ceiling on it. One hour is the statutory deadline for a thaw, so a planned application costs you a phone call the day before and nothing else.
Freezes and fraud alerts also generate very little grief. They account for 0.3% of the 5,861,954 credit-reporting complaints recorded in the CFPB’s public Consumer Complaint Database between July 2025 and June 2026, in our own analysis of that database. The extended fraud alert available to identity theft victims runs on the same section of the law, and we cover it in FCRA extended fraud alerts under Section 605A. These are unverified consumer allegations, and a count tracks a company’s size as well as its conduct.
Freeze first, then rotate the three free reports through AnnualCreditReport.com
Five steps, one afternoon, nothing to cancel later. The order is prevention, then detection, then a response path decided before you need it.
- Freeze the file at all three bureaus and thaw only for a planned application.
- Pull one bureau’s free report every ten days, through AnnualCreditReport.com and no other site.
- Turn on every transaction, login and balance alert your bank and card issuers offer.
- Use a password manager and two-factor login on every financial account.
- Decide the response path now: IdentityTheft.gov, a dispute to each bureau, and the FCRA Section 605B block for anything a thief opened.
Step two has one trap and it is the address bar. AnnualCreditReport.com is the site the three bureaus jointly operate, and the lookalikes that advertise against it sell leads. Honore, 1 star, June 25, 2026, on Credit Karma: “Ads to free credit report take you to a 3rd party chat that sells your private info. NO credit reports or live help available. If you do, you start getting spammed incessantly from 3rd parties.”
Type the address yourself. Our guide to getting a free credit report sets out the rotation, the Section 605B identity theft block covers step five’s strongest tool, and the full recovery sequence is in our identity theft and credit reports guide.
When is paid credit monitoring actually worth the cost?
In three situations, and only one of them has anything to do with surveillance. A victim mid-cleanup is buying a caseworker, a household that prefers one dashboard to five free tools is buying convenience and should price it consciously, and anyone handed the product by an employer or a breach settlement is not paying for it at all.
| Your situation | What a paid plan adds | What to do first |
|---|---|---|
| Active identity theft victim | A restoration caseworker and a policy that covers recovery costs | File at IdentityTheft.gov, then freeze all three bureaus |
| Breach notice in the mail | Duplicate cover if the settlement already offers a year free | Freeze first, then claim whatever the notice offers |
| Wants one dashboard | Convenience, one login instead of several free tools | Weigh the fee against a freeze plus a weekly report pull |
| Errors on the report, no fraud | Alerts on changes, and no dispute of anything | Read all three reports and dispute the item |
| Thin or empty credit file | Very little to watch | Open a reportable account before paying to watch one |
The first row is the honest case for paying. Everything under it is a reader being sold detection they already have.
Identity theft insurance pays recovery costs, and federal law caps card fraud at $50
The policy bundled into a paid plan covers the expense of cleaning up, which is notarization, postage, legal fees and sometimes lost wages, all within stated limits. It does not reimburse money a thief takes, and federal law has already capped that exposure: under the Fair Credit Billing Act, at 15 U.S.C. § 1643, a cardholder’s liability for unauthorized use of a credit card is $50.
A headline limit of $1 million is therefore not the number to read. Three lines further down the policy decide whether it is worth anything.
- The sub-limits. The caps on lost wages, legal fees and notarisation are what a cleanup actually bills against, and they are a small fraction of the headline figure.
- The exclusions. The stolen funds are excluded by design, so the exclusions page is where you find out what a claim would actually pay.
- What restoration means. A caseworker who files disputes with Equifax, Experian and TransUnion on your behalf is a different product from a call center that emails you a checklist.
Dark web scans report exposure, and the same 3 steps answer either way
A dark web alert tells you your data sits in a breach dump. A Social Security number cannot be reissued because it appeared in one, so the response to a hit and the response to no hit are identical: freeze the file, use unique passwords, and turn on two-factor login.
The FTC received more than 1.1 million identity theft reports through IdentityTheft.gov in 2024 (FTC, 2025), and its consumer guidance at consumer.ftc.gov puts the freeze at the center of the response for the same reason a scan cannot. Assuming exposure costs nothing and produces the same actions a paid confirmation would.
The bureaus rent you a lock Section 605A already makes free
A credit lock sold inside a bureau subscription does what the statutory freeze does, and the freeze costs nothing for life. The lock is a contract term the bureau writes and can rewrite; the freeze is a right the same bureau owes you whether or not you are paying it anything.
Nothing in a bureau bundle is required to exercise a right. Free file disclosures under 15 U.S.C. § 1681j, disputes under FCRA Section 611, and the freeze under Section 605A all stay free regardless of subscription status. A consumer paying monthly for a lock is renting the freeze the same company must hand over for nothing.
Monitoring flags the change, and 66.9% of incorrect-information complaints say the file is someone else’s
An alert tells you an item changed. It does not tell you whose item it is, and that is the commonest thing consumers complain about on a credit report: 66.9% of the 3,482,718 complaints recorded in the CFPB’s public Consumer Complaint Database between July 2025 and June 2026 about incorrect information on a credit report said the information belongs to someone else, in our own analysis of that database. These are unverified consumer allegations, and the CFPB does not confirm the facts alleged.
A mixed file is not fraud and no alert catches it, because nothing changed on the day the error appeared. It arrived attached to a name close to yours, and we cover how that happens in mixed credit files.
Detection shortens the time to discovery. The dispute is what removes the item, and Equifax, Experian and TransUnion generally have 30 days to investigate one under FCRA Section 611. Credit reporting is by a wide margin the most complained-about consumer financial product in the country (CFPB, 2026), and the complaint is almost never that nobody sent an alert. For finding the items in the first place, a tool that reads the reports beats one that watches them, which is the argument in credit report errors and how to dispute them.
Skip the paperwork. Start your dispute.
CreditRefresh drafts your FCRA dispute letter and tracks the 30-day investigation window. You review, approve, and send. You stay in control.
Get StartedOnly a dispute can challenge the line, and an alert never does
Paid monitoring earns its fee when someone is already inside your file and you want a caseworker and a policy behind you. Before that, what the pitch sells is detection, and detection is not what fixes a report. Whoever you pay, Equifax, Experian and TransUnion are still the three companies a correction has to go through.
That 66.9% figure is the tell. The commonest thing consumers complain about on a credit report is that it describes somebody else, and no alert has ever removed a line from anyone’s file. A dispute does, and the bureaus generally have 30 days to answer it under FCRA Section 611.
Once you’re paying for monitoring, who fixes what it finds
A useful comparison starts with what you need after an alert. In our September 18, 2026 data, 35.1% of paying CreditRefresh members had a negative entry already marked as disputed by the consumer. That note does not tell us who filed the dispute or how it ended. It does show why checking a report and following a dispute can be parts of the same job. Here is what each option includes.
| Tool | Monthly cost | Bureaus reached | After it finds something | Trustpilot |
|---|---|---|---|---|
| CreditRefresh | $49.99, no setup fee, cancel anytime | All three | Drafts an FCRA letter for each item you choose to dispute. You read and sign it, then mail it yourself or pay RushMail per letter; monitoring helps you check later reports | 4.3 (9 reviews) |
| Dispute Beast | Monitoring from $49.99, required for the free tool | All three | Also turns it into a letter, mailed by you free or by Sprint Mail for a fee | 4.2 (2,067 reviews) |
| Credit Karma | Free, paid for by lender referrals | TransUnion on its dispute path | Shows you the change and a card offer, not a letter | 1.1 (912 reviews) |
| DisputeBee | $49 personal, $129 business | All three | Hands you a template; you print, mail and log the reply yourself | 3.2 (68 reviews) |
| The Credit People | $99 standard, $119 premium, or $599 for 6 months | All three | Runs the challenge for you, but you never see a letter | 1.7 (17 reviews) |
| Lexington Law | $139.95, invoiced at the end of each service period | All three | A law firm runs the case; there is no self-serve tool or monitoring here | 3.2 (624 reviews) |
| Doing it yourself | Postage only | All three, if you pull all three | You do every step yourself: find it, write it, mail it, track the 30 days |
Every price is that company’s own published rate, read off that company’s own site on September 15, 2026. Trustpilot scores and review counts as published on September 24, 2026.
If you only want to watch for changes, free monitoring may cover that need. When an entry looks wrong, compare who writes the letter, how many bureaus the dispute can reach and who tracks the reply. Doing those steps yourself remains an option.
Get help with the next step after an alert with CreditRefresh
An alert can tell you something changed without helping you decide what to do. If you’re rebuilding and spot a debt you do not know or a balance that looks wrong, CreditRefresh helps you work through it. We scan all three reports and draft a letter for each item you choose to dispute. You read and sign each letter, with ongoing monitoring to help you follow the report afterward.
That follow-up can show real changes in what is reported. In our paying-member data, 47.9% of disputed items with a recorded outcome no longer appeared on a later report from the same bureau. Outcomes were recorded for 2.3% of items in mailed rounds in our September 18, 2026 data, across all dispute types.
Badtank, 5 stars, July 28, 2026: “They showed me debt I didn’t even know about…” Becca, 5 stars, July 25, 2026: “it instantly pulled up my reports and flagged the things that were bringing down my credit score so that I could review and address those problem areas…”
Refresh Monitoring costs $49.99 a month and includes CreditRefresh. There is no setup fee, charge per dispute or contract, and you can cancel any time. The value is help preparing the challenge as well as a place to keep checking your three reports.
It is backed by our 100% money-back guarantee: members who work the full program and see no bureau score rise above where they started can claim back every Refresh Monitoring payment. It is a refund promise, never a score promise.
Frequently asked questions
What is the cheapest credit monitoring service?
The free ones. Every bureau supplies a report weekly through AnnualCreditReport.com, and banks and card issuers publish scores and change alerts at no charge, which covers the watching that some paid plans bill above $15 a month for.
Does a security freeze stop me from using my own credit cards?
No. A freeze blocks release of your file to a prospective new creditor, so existing cards, loans and autopay are untouched. It only bites when someone applies for new credit in your name, including you.
Does freezing my credit hurt my credit score?
No. A freeze is not an input to any scoring model; it controls who may pull the file, and FICO scores what is inside the file. Placing and lifting one as often as you like costs nothing and changes no score.
Can credit monitoring hurt my credit score?
No. Monitoring runs on soft pulls, which no scoring model counts, at any frequency. The only thing at stake is the fee, weighed against free tools doing the same watching.
Should I buy monitoring after a data breach notice?
Freeze first, then read the notice. If the settlement offers the monitoring product free, claiming it costs nothing, and a freeze remains the stronger answer because breached data is exactly what a fraudster uses to open an account.
Does monitoring do anything for a thin credit file?
Very little, because there is almost nothing on the file to watch. FICO will not even generate a score until a report carries an account opened six months or more and an account reported within the past six months (myFICO, 2026), so building a reportable account comes before paying to monitor one.
Is free monitoring from a card issuer enough?
For the watching, yes, once it is paired with a freeze and a weekly report pull. Issuer alerts cover transactions and score moves, the rotation covers what is actually written on the three files, and the freeze covers the part no subscription sells.
Last reviewed: September 2026
This article is for educational purposes only and does not constitute legal or financial advice. The Fair Credit Reporting Act and related regulations are complex, and outcomes depend on individual circumstances. Consumers with specific questions about their credit reports or rights under federal law should consult a licensed attorney or contact the Consumer Financial Protection Bureau directly.
CreditRefresh is what you reach for after the watching finds something, which is the step no alert and no freeze takes for you. Connecting your three reports takes a few minutes, and the first scan is ready the same day. Backed by a 100% money-back guarantee.
