The free credit freeze: the highest-impact move against identity theft
A credit freeze is free, doesn’t hurt your score, and blocks crooks from opening new accounts in your name. Here’s what it does, how to set one up, and what to do if your identity is stolen.
If a scam, a data breach, or plain bad luck puts your personal details in the wrong hands, the damage usually comes from one move: someone opens a new account in your name. The single most effective way to stop that is free, takes minutes, and almost nobody does it before they need it — a credit freeze.
What a credit freeze does
A freeze locks your credit file so no one can open new credit in your name — because lenders can’t pull the report they need to approve it. According to the FTC:
- It is free to place and to lift.
- It doesn’t affect your credit score.
- It doesn’t stop you using existing cards, renting, applying for a job, or buying insurance.
- It lasts until you lift it — and you can lift it temporarily, for free, when you genuinely need new credit.
How to set one up
Place a freeze with each of the three national credit bureaus — Equifax, Experian, and TransUnion — separately, because a freeze at one doesn’t apply to the others. Keep the PIN or login each bureau gives you; you’ll use it to lift the freeze later.
If a freeze feels like more than you need, a fraud alert is a lighter option: contact just one bureau and it must tell the other two to flag your file, prompting lenders to verify your identity first. A freeze is the stronger lock; a fraud alert is the lighter touch.
If your identity is already stolen
Go to IdentityTheft.gov. You’ll get a free, personalized recovery plan with the exact steps — disputing fraudulent accounts, contacting the bureaus, and documenting everything — tailored to what happened to you.
The free move first
You don’t need to buy monitoring to take the highest-impact step — the credit freeze is free and comes first (see the defense box). It pairs with Lock the Front Door: two-factor authentication and a password manager so one leak can’t cascade. If you later want alerts and recovery help on top, see our honest tools page — but the free freeze does the heavy lifting. For more, see our defense moves or test your eye on the 60-second quiz.
- You see accounts, cards, or credit inquiries on your report that you don’t recognize.
- Bills or debt-collection notices arrive for accounts you never opened.
- Your details were exposed in a data breach, or you’ve just been through a romance or investment scam.
- Place a free credit freeze with all three bureaus (Equifax, Experian, TransUnion). It blocks new accounts in your name and doesn’t affect your credit score.
- A freeze lasts until you lift it — and lifting it is free and quick when you genuinely need new credit.
- Turn on two-factor authentication and use a password manager so a single leak can’t cascade into many hacked accounts.
- If your identity is already stolen, report it at IdentityTheft.gov for a free, step-by-step recovery plan.
A credit freeze is the rare security step that’s free, fast, and genuinely powerful — and almost nobody sets one up until after they’ve been hit. I think of it like locking the front door: you don’t wait for a burglary to start. Freeze all three bureaus this week; you can thaw it in minutes the day you actually need credit.
Sources
Frequently asked
Does a credit freeze cost money or hurt my credit score?
Neither. The FTC confirms that placing and lifting a freeze is free and does not affect your credit score. You can still use your existing cards, rent, apply for jobs, and buy insurance.
Freeze or fraud alert — what’s the difference?
A freeze blocks new accounts until you lift it, and you set it at all three bureaus. A fraud alert tells lenders to verify your identity first; you contact only one bureau and it notifies the other two. A freeze is the stronger lock.
I already think my identity was stolen. Where do I start?
Go to IdentityTheft.gov. You’ll get a free, personalized recovery plan, links to the credit bureaus, and the exact steps to dispute fraudulent accounts.