How to Freeze Your Credit After Identity Theft: FAQs

Identity theft recovery is easiest to manage when the first steps are clear: limit new account fraud, check what has already happened, report the theft, and keep records. This FAQ explains the difference between a credit freeze and a fraud alert, when to use each one, and what to check after your personal information is stolen, leaked, or used without permission.

What should I do first if my information was stolen?

Start by securing the account or document involved. Change passwords on affected accounts, turn on multi-factor authentication where available, and contact your bank, card issuer, mobile provider, employer, school, health provider, or government agency if the stolen information came from one of those relationships.

Then check whether the incident could lead to financial identity theft. If a scammer has your Social Security number or enough personal details to apply for credit, a credit freeze is one of the strongest preventive steps. If you are still figuring out what happened, a fraud alert can also tell lenders to take extra steps before opening new credit in your name.

For a structured recovery plan, the U.S. Federal Trade Commission directs identity theft victims to IdentityTheft.gov, where users can report identity theft and generate recovery steps based on what was stolen or misused.

What is a credit freeze?

A credit freeze, also called a security freeze, restricts access to your credit report. The Consumer Financial Protection Bureau explains that this makes it harder for someone to open a new credit account in your name because many lenders need to review a credit report before approving new credit.

A freeze does not close your existing accounts, cancel your cards, block charges on an existing card, or stop all forms of fraud. It is mainly a protection against new credit being opened with your identity.

Is a credit freeze free?

Yes. The FTC says credit freezes are free. You must place the freeze separately with each of the three nationwide credit bureaus: Equifax, Experian, and TransUnion. Freezing only one bureau may leave gaps because a lender might check a different bureau.

Keep the login details or PINs used to manage each freeze in a secure place. You will need them when you want to temporarily lift or remove the freeze.

How is a fraud alert different from a credit freeze?

A fraud alert leaves your credit report available, but it tells businesses that check your report to verify your identity before issuing new credit, increasing a credit limit, or opening another account based on a consumer request.

The CFPB says an initial fraud alert lasts up to one year unless you remove it sooner. The FTC explains that you only need to contact one of the three nationwide credit bureaus to place a fraud alert; that bureau must tell the other two.

In simple terms, a freeze is stronger because it restricts access to your report. A fraud alert is more flexible because lenders can still access the report after verification.

Should I use a credit freeze, a fraud alert, or both?

Use a credit freeze when you want stronger protection against new credit fraud and you do not need immediate approval for a loan, credit card, phone financing, apartment screening, or another service that may require a credit check.

Use a fraud alert when you may need legitimate credit checks to continue but want creditors to verify identity more carefully. Some people use both after confirmed identity theft: a freeze to block most new credit checks, and a fraud alert as an additional warning in case the freeze is lifted later.

If you are about to apply for credit, ask the lender which bureau it checks, then temporarily lift the freeze at that bureau for the necessary window. Do not remove freezes permanently unless you have a reason.

Will a credit freeze affect my credit score?

No. A credit freeze does not damage your credit score. It also does not stop you from using existing credit cards or loans. It does not prevent you from getting your own free credit reports.

The practical inconvenience is that you must lift the freeze before many new-credit applications. That friction is the point: it makes it harder for an impostor to move quickly.

How do I check whether accounts were opened in my name?

Review your credit reports from all three nationwide credit bureaus. The official site AnnualCreditReport.com says free weekly online credit reports are available from Equifax, Experian, and TransUnion.

Look for names, addresses, employers, loans, credit cards, collection accounts, hard inquiries, or account balances you do not recognize. A new inquiry can be an early sign that someone tried to apply for credit. A new account or collection record may mean the fraud has already moved further.

The FTC warns that AnnualCreditReport.com is the authorized site for free credit reports. Be careful with lookalike sites or services that turn a free report request into a paid product.

What if I find a fraudulent account or wrong information?

Report identity theft at IdentityTheft.gov and save the recovery plan and report. Contact the company where the fraudulent account was opened and ask it to close the account as identity theft. Ask for written confirmation.

Next, dispute the fraudulent account or inaccurate information with the credit bureau reporting it. Include the identity theft report and any supporting records. Keep copies of letters, confirmation numbers, screenshots, and dates.

If a bank account, payment app, mobile number, tax account, health record, benefits account, or government login was affected, contact that provider directly too. A credit freeze protects credit reports; it does not fix every type of identity misuse.

Does a credit freeze stop tax, medical, or account takeover fraud?

No. A credit freeze is useful, but it is not a complete identity theft response. It does not stop someone from trying to access an existing email inbox, bank account, mobile account, tax account, benefits account, or health portal.

For those risks, change passwords, revoke unknown sessions, replace compromised cards, review recent transactions, set account alerts, and ask the provider whether extra security controls are available. If a phone number was transferred or a SIM swap occurred, contact the mobile provider immediately because phone access can be used to reset other accounts.

What records should I keep?

Keep a simple incident file. Include the date you discovered the problem, what information was exposed, which accounts were affected, the credit bureaus contacted, freeze or fraud alert confirmations, police or identity theft reports if applicable, dispute letters, company replies, and screenshots of suspicious activity.

Good records matter because recovery often happens in stages. A collection notice, rejected application, tax notice, or medical bill can arrive weeks or months later. The faster you can show what happened and when you reported it, the easier it is to challenge the misuse.

When can I relax the freeze?

Keep the freeze in place until you have a specific reason to lift it. A temporary lift is usually enough for a planned credit check. After the application or screening is complete, restore the freeze.

Continue reviewing credit reports periodically even after the first cleanup. Identity theft recovery is not always a single event. The FTC describes recovery as a process, and that is the right mindset: block new damage, repair existing damage, and keep watch for delayed misuse.