How to Freeze Your Credit After a Data Breach: FAQs

A credit freeze is one of the strongest free steps you can take after your Social Security number, date of birth, address, or other identity details may have been exposed. It does not stop every kind of fraud, but it can make it much harder for someone to open a new loan, credit card, or other credit account in your name.

This FAQ explains when a freeze helps, how it differs from a fraud alert, and what to keep in mind before you apply for new credit.

What does a credit freeze actually do?

A credit freeze, also called a security freeze, limits access to your credit report. The Consumer Financial Protection Bureau describes it as a block that prevents prospective creditors from accessing your credit file. Because many lenders check a credit report before opening a new account, a freeze can stop a fraudulent application from moving forward.

The freeze applies to new access for credit decisions. It does not erase your credit history, cancel existing accounts, or stop every organization from seeing information that the law still allows them to access.

Is a credit freeze free?

Yes. The Federal Trade Commission, USAGov, and the major credit bureaus all state that placing, lifting, and removing a credit freeze is free.

Be careful not to confuse a free security freeze with a paid credit monitoring product or a credit lock subscription. Monitoring can tell you about activity after it happens. A freeze is designed to restrict access before a new credit account is approved.

Do I need to freeze my credit at all three bureaus?

Yes. You need to contact Equifax, Experian, and TransUnion separately. A freeze at one bureau does not automatically freeze the other two.

USAGov lists the three major credit reporting agencies as the places to manage a freeze, and each bureau provides its own online, phone, or mail process. If you stop after one bureau, a lender that checks a different bureau may still be able to access a report.

Will a freeze hurt my credit score?

No. A security freeze does not lower your credit score. It also does not prevent you from using existing credit cards, paying loans, or checking your own credit report.

The tradeoff is convenience. If you want to open a new credit card, finance a car, apply for a mortgage, rent housing where a credit check is required, or set up a service that reviews your credit file, you may need to lift the freeze first.

How do I freeze my credit?

Start with the official freeze pages for Equifax, Experian, and TransUnion. Use the bureau websites directly rather than search ads or links in unsolicited emails. You can usually place a freeze online, by phone, or by mail.

Expect to verify your identity. Save the confirmation details in a password manager or another secure place. If you later need to lift the freeze for a lender, utility, landlord, or phone provider, those details can save time.

Should I freeze my credit after any data breach?

Consider it when exposed information could be used to apply for credit, especially if a Social Security number, taxpayer ID, date of birth, address history, account number, or identity document information may be involved.

IdentityTheft.gov advises people whose information is lost or exposed to freeze their credit to make it harder for someone to misuse that information. A freeze is also reasonable before fraud occurs if you do not expect to apply for new credit soon.

What is the difference between a credit freeze and a fraud alert?

A freeze restricts access to your credit report until you lift it. A fraud alert tells businesses to take extra steps to verify your identity before opening new credit.

The FTC says both are free, but they work differently. For a fraud alert, you contact one of the three major credit bureaus and that bureau must tell the other two. For a freeze, you must place it separately with each bureau.

When would a fraud alert make more sense?

A fraud alert may be more convenient if you are actively applying for credit and want lenders to verify you carefully without blocking access to your report. Initial fraud alerts generally last one year. Extended fraud alerts are available for identity theft victims who have completed the required identity theft report process.

Active duty military members can also use an active duty alert, which is designed for people deployed away from their usual duty station.

How do I temporarily lift a freeze?

Use the same bureau accounts or contact methods you used to place the freezes. You can usually lift a freeze temporarily for a date range or remove it until you freeze again.

Before applying, ask the lender, landlord, or service provider which bureau they plan to check. If they know, you may only need to lift one freeze. If they do not know, you may need to lift all three for a short window.

Can I freeze a child’s credit?

Yes, parents and guardians can request a freeze for a minor child through the credit bureaus. This can be useful because child identity theft may go unnoticed for years.

The process can require identity documents for both the adult and the child, and mail may be required in some cases. Use the bureau instructions directly and keep copies of what you submit.

What does a credit freeze not protect?

A freeze does not stop fraud on accounts you already have. It will not block phishing, debit card theft, wire fraud, payment app scams, tax identity theft, medical identity theft, or someone using an existing username and password.

Keep watching bank, card, insurance, tax, and benefits accounts. Use strong unique passwords, turn on multifactor authentication where available, review free credit reports, and report identity theft at IdentityTheft.gov if someone misuses your information.

What is a simple plan after exposed personal information?

Freeze your credit at Equifax, Experian, and TransUnion. Check your credit reports through AnnualCreditReport.com. Place a fraud alert if you want lenders to verify your identity before opening credit. Review financial accounts for unfamiliar activity. Change passwords on affected accounts and turn on multifactor authentication.

If you find evidence that someone already used your identity, create a recovery plan at IdentityTheft.gov and follow the steps for disputing fraudulent accounts, closing affected accounts, and documenting the theft.