Credit Freeze

A credit freeze (also called a security freeze) is a restriction you place on your credit report with each of the three major credit bureaus (Equifax, Experian, TransUnion) that prevents lenders from viewing your full credit file. Without access to your report, a potential creditor cannot approve new accounts, making it nearly impossible for an identity thief to open credit cards, mortgages, or loans in your name. Freezes are free, permanent until you unfreeze them, and the strongest consumer identity-theft defence available.

Why identity theft is rising and why freezes matter

Identity theft occurs when someone uses your personal information—name, SSN, date of birth—to open accounts without consent. The simplest method is applying for new credit in your name using publicly available data. A thief orders a credit card, opens a utility account, or takes out a personal loan, then ignores bills while your credit report records the delinquency. By the time you discover it, your score has plummeted and collection accounts are pursuing you.

A credit freeze obliterates this attack vector. Lenders require access to your credit report to approve new accounts. When your file is frozen, the bureau returns an access denial rather than the report. Without the report, the lender cannot approve the application, no matter how perfect the thief’s credentials are. Freezes do not prevent every form of identity theft, but they prevent the most common and costly kind: unauthorized credit.

How a freeze works: the three-bureau requirement

The three major bureaus operate independently, meaning a freeze at one does not freeze the others. You must contact Equifax, Experian, and TransUnion separately to lock down your file. Each will assign you a unique PIN (or allow you to use a password-based approach). You must guard this PIN carefully; it is your key to unfreezing.

When you initiate a freeze, each bureau logs a restriction on your file. When a lender requests access, the bureau returns a message stating the file is frozen and provides your PIN requirement. The lender cannot bypass this—if you have not provided consent through your PIN, the account cannot be approved.

Freezes are permanent. You do not need to renew them annually or worry about expiration. They remain in place across address changes, job changes, and time. If you freeze your credit today, it stays frozen in ten years unless you actively remove it.

Unfreezing: temporary thaws and full removal

Life requires unfreezing sometimes. When you apply for legitimate credit—a mortgage, auto loan, or credit card—the lender will tell you they received a freeze notice. You then have two options:

1. Full unfreeze: Contact the bureau via phone or online, provide your PIN, and ask to remove the freeze permanently. The removal usually takes effect within one business day.

2. Temporary thaw: Some bureaus allow you to temporarily lift the freeze for a specific timeframe (hours or days) or for a particular company. You provide your PIN, specify the thaw window, and the bureau lifts the restriction for that period. After the window expires, the freeze reactivates automatically.

Temporary thaws are more secure than full removal if you need credit infrequently. You thaw for one mortgage application, the lender pulls your report, and then the freeze reactivates. A thief cannot apply for accounts during that window because they lack your PIN.

Freeze versus fraud alert: complementary tools

A fraud alert is related but different. You can place a fraud alert (also called an initial fraud alert) at one bureau, which typically extends to the others. The alert instructs lenders to verify your identity before approving credit, using secondary documentation or phone verification. It is free, lasts one year (renewable), and does not block access to your report—it just flags it for extra scrutiny.

A fraud alert is lighter-touch than a freeze and is appropriate if you suspect fraud but lack firm evidence. A freeze is the nuclear option: no access without your explicit PIN. Most security experts recommend freezes for anyone concerned about theft, particularly after a data breach affects your SSN or address.

Some debtors place both: a permanent freeze for day-to-day protection and a fraud alert to catch any slip-ups. Others favour just the freeze because unfreezing for legitimate credit is manageable.

What a freeze does NOT protect

Freezes are powerful but have limits. They do not prevent:

• Existing creditors from reporting or collecting: A freeze does not stop your bank, credit card issuer, or loan servicer from pulling your report or reporting payment history.
• Employment or rental background checks: Many employers and landlords use alternative reports (not credit reports) or use specialized bureaus. A credit freeze does not stop them.
• Insurance quotes or underwriting: Insurers may access alternative credit data; freezes do not bind them.
• Tax refund theft: Thieves can file false tax returns in your name even if your credit is frozen.
• Medical identity theft: Some healthcare theft bypasses credit reports entirely.
• Social security benefit fraud: Freezing does not prevent criminals from applying for benefits using your SSN.

A credit freeze is narrowly focused on stopping new-account credit fraud. It is essential, but it is one layer of a multi-layer defence (strong passwords, monitoring, regular credit report reviews).

When to freeze and when to thaw

Freeze immediately if:

• You experience a data breach affecting your SSN, address, or DOB
• You suspect you are a victim of identity theft
• You want maximum security and do not anticipate frequent new-credit applications
• You are a minor (many states allow parents to freeze children’s reports)

Thaw or use a temporary freeze if:

• You are actively shopping for a mortgage, auto loan, or credit card
• You are renting and expect a landlord credit check
• You are changing jobs and expect an employment background check

Many debtors freeze permanently and simply thaw for a few days when they apply for credit. The inconvenience is minimal; the security gain is substantial.

The free freeze and opt-in credit locks

Following high-profile breaches (notably Equifax’s 2017 hack), the FREEZE Act of 2018 made credit freezes free in all 50 states. Before 2018, some states charged up to $10 per freeze. Now, every consumer can freeze and unfreeze at no cost.

Note that “credit locks” offered by the bureaus or third parties are different from freezes. A lock may be faster to set up but does not carry the same legal guarantee as a statutory freeze. Locks can also be suspended by the issuer or, in some cases, disabled by the company (which occurred when Equifax’s security was compromised). Use the official free freeze first; credit locks are supplementary.

Practical implementation

To freeze, visit each bureau’s security freeze page:

• Equifax.com (security freeze section)
• Experian.com (security freeze section)
• TransUnion.com (security freeze section)

You will provide your SSN, address, and other identity information. Each bureau will assign a PIN and provide a confirmation number. Save these confirmation numbers and PINs in a secure location (password manager, not a sticky note).

The entire process takes 20–30 minutes across all three bureaus. It is one of the most effective uses of your time for personal finance security.

See also