Credit Freeze, Fraud Alert, or Credit Lock?

A security freeze, a fraud alert, and a credit lock sound like three names for the same thing. They are not. One is a legal right that is free and strong, one is a warning flag that is free and weaker, and one is a product offered by the bureaus themselves.

Knowing the difference matters, because the bureaus market the product harder than they mention the right.

Three Tools, Often Confused

The short version before the detail:

  • Security freeze — a statutory right. Free. Blocks new creditors from accessing your report, which in practice blocks new accounts from being opened in your name.
  • Fraud alert — a statutory right. Free. Does not block access; it flags your file so that a creditor is expected to take steps to verify identity before extending credit.
  • Credit lock — a commercial product offered by the bureaus, governed by their terms of service rather than by statute. Sometimes free, sometimes bundled with a paid subscription.
The distinction that matters most A freeze is backed by federal law, with defined obligations and timelines the bureaus must meet. A lock is a contract between you and a company. If a lock fails, your recourse is whatever that contract provides. If a freeze fails, your recourse is statutory. For protection against new-account identity theft, the freeze is the stronger instrument.

Security Freeze

A freeze restricts access to your credit report. Most lenders will not open a new account without pulling a report, so a frozen file blocks the usual route to opening credit in your name.

Key points:

  • It is free to place, lift, and remove. Federal law made this so nationwide — if a bureau asks you to pay, you are in the wrong place or looking at a different product.
  • You must do it at each bureau separately. Equifax, Experian, and TransUnion do not share the instruction. There are also smaller specialty reporting agencies worth considering if your situation warrants it.
  • It does not expire. A freeze stays until you lift it.
  • You can lift it temporarily. When applying for credit, lift the freeze for a set window or for a specific creditor, then let it resume.
  • It does not affect your score, and it does not stop you using existing accounts.

The friction is real but modest: you need to remember which bureau a lender pulls from, or lift all three. Keep your PINs or account credentials somewhere you can actually find them.

Fraud Alert

A fraud alert does not block access. It places a notice on your file indicating that creditors should take reasonable steps to verify your identity before extending credit.

  • Free, and you only need to contact one bureau — that bureau is required to notify the other two.
  • An initial alert lasts one year and can be renewed.
  • An extended alert lasts seven years and is available to identity theft victims who provide an identity theft report.
  • Active duty alerts are available to deployed servicemembers.

The weakness is that compliance depends on the creditor actually taking those verification steps. An alert is a request for care, not a barrier.

Credit Lock

A lock is a product. It typically offers the same practical effect as a freeze — restricting access to your file — with a friendlier interface, often an app with a toggle.

What to understand before choosing one:

  • It is governed by contract, not statute. The bureau's terms of service define what it does and what happens if it fails.
  • It may be bundled with a paid subscription for credit monitoring or related services.
  • Terms can change. A statutory right cannot be modified by a company; a product's terms can.
  • Convenience is the real selling point. Toggling a lock in an app is genuinely easier than lifting a freeze.

None of which makes locks bad. If the convenience means you will actually use it where you would otherwise leave your file open, that is worth something. Just know which one you have.

Which One You Actually Want

  • You want general protection against new-account fraud → security freeze at all three bureaus. Free, strong, permanent until you lift it.
  • Your data was in a breach but nothing has happened → freeze is still the better answer. A fraud alert is the lighter option if you expect to apply for credit frequently.
  • You are actively applying for a mortgage or several accounts → fraud alert may cause less friction, or a freeze you lift deliberately.
  • You are an identity theft victim → freeze plus an extended fraud alert, and file at IdentityTheft.gov to get the identity theft report that unlocks other protections.
  • You want app-based convenience and already have the subscription → a lock is reasonable, but place freezes at the bureaus you are not locking.

Freezing a Child's File

Children are targeted for identity theft precisely because nobody checks their credit for eighteen years. Federal law gives a parent or guardian the right to place a free freeze on a minor's file.

A child typically has no credit file at all, so the bureau creates one in order to freeze it. That sounds counterintuitive and is the correct thing to do — a frozen file cannot be used to open accounts.

This is also why the CPN trade is so damaging. Numbers sold as "credit privacy numbers" are frequently stolen Social Security numbers, often belonging to children, which is one reason we treat that practice as fraud rather than a grey area. See how to spot a credit repair scam.

How to Place a Freeze

Go directly to each bureau — Equifax, Experian, and TransUnion. Use their official sites; search results for "credit freeze" surface a great many lookalike pages selling subscriptions.

You will need to verify your identity, typically with your Social Security number, date of birth, and address history. You will receive a PIN or create account credentials. Record them somewhere durable; retrieving them later is the most common friction point.

Each bureau must place the freeze within the timeline federal law sets — quickly for online and phone requests. Lifting is likewise governed by statutory timelines, which is one more practical advantage of a freeze over a product.

What a Freeze Does Not Do

  • It does not fix existing errors. Freezing a file has no effect on inaccurate information already reported. That is what the dispute process is for.
  • It does not stop misuse of existing accounts. A stolen card number does not require a credit pull. Monitor statements.
  • It does not block all access. Existing creditors, debt collectors working on accounts you already have, and certain other permitted purposes continue.
  • It does not affect your credit score.
  • It does not prevent tax or medical identity fraud, which do not run through credit reports.

Common Questions

Does a credit freeze cost anything?

No. Placing, lifting, and removing a freeze is free at all three nationwide bureaus under federal law. A fee means you are looking at a product rather than the statutory freeze.

What is the difference between a freeze and a lock?

A freeze is a statutory right with obligations and timelines set by federal law. A lock is a commercial product governed by the bureau's terms of service. They have a similar practical effect; the legal footing is different.

Do I have to freeze at all three bureaus?

Yes. They do not share the instruction, and a lender may pull from any of them.

Does freezing my credit hurt my score?

No. A freeze restricts access to your report; it does not change what is in it.

Can I freeze my child's credit?

Yes. A parent or guardian may place a free freeze on a minor's file. If no file exists, the bureau creates one in order to freeze it.

This page is general information, not legal advice. CCA is a professional association, not a law firm or a regulator. Procedures and timelines are set by federal law and by each bureau; confirm current details with the bureau directly. If you are an identity theft victim, start at IdentityTheft.gov.

Last updated: · Published by the Credit Consultants Association