Credit Freezes vs Credit Locks vs Fraud Alerts

Credit freezes, credit locks, and fraud alerts get lumped together as “identity theft protection,” but they’re three legally distinct tools with different costs, different mechanics, and different levels of protection. Picking the wrong one for your situation can leave a real gap.

The three tools compared

	Credit freeze	Credit lock	Fraud alert
Cost	Free at all three bureaus, by federal law	Often free, sometimes bundled into a paid monitoring product	Free
Basis	Statutory right (federal law)	Contractual — an app or account feature, not a legal right	Statutory right (federal law)
What it does	Blocks lenders from pulling your file to open new credit	Same practical effect as a freeze, toggled via an app	Flags your file so lenders must verify your identity before extending new credit
How strong	Strongest — new-account pulls are blocked outright	Similar in practice, but rests on a contract, not a law	Weaker — lenders can still proceed if they complete verification
Duration	Indefinite, until you lift it	Indefinite, until you unlock it	Initial: 1 year. Extended (with an identity-theft report): 7 years
Toggling	Free to place and free to lift, any time	Instant via app, but governed by the provider’s terms	Automatically renewable; extended alerts require documentation

Credit freezes — the strongest option

A credit freeze restricts access to your credit file so that new creditors can’t pull it to approve a new account in your name. Since 2018, federal law requires all three bureaus (Equifax, Experian, TransUnion) to offer freezes for free, and lifting a freeze — whether temporarily for a specific lender or permanently — is free too. This is a durable, nationwide right, not a promotional offer that can be withdrawn.

A freeze is the strongest of the three tools because it doesn’t rely on a lender choosing to notice a flag and call you to verify — it blocks the file pull outright. Most lenders simply can’t proceed with an application if the file is frozen, which stops new-account fraud cold.

The trade-off is friction for you: if you’re planning to apply for credit yourself — a mortgage, a car loan, a new card — you’ll need to lift the freeze at whichever bureau the lender pulls from, ahead of time.

Credit locks — the convenience version

Credit locks aim for the same practical outcome as a freeze — blocking new-account access — but they’re delivered through an app or online account rather than through the federal freeze process, and they’re a contractual product rather than a statutory right. Locks are often bundled into paid credit-monitoring subscriptions, and the terms of what a lock actually guarantees are set by the bureau’s contract with you, not by law.

In practice, a lock can feel faster to toggle than a freeze, since it’s designed as a one-tap app feature. But because it isn’t the same legal mechanism, always check the current terms of whatever lock product you’re using rather than assuming it carries the same guarantees as a statutory freeze.

Fraud alerts — the lighter-touch option

A fraud alert doesn’t block file access at all. Instead, it flags your file so that any lender pulling it is required to take extra steps to verify your identity before extending new credit — a phone call, additional documentation, or another verification step. It’s free, and placing an alert with one bureau requires that bureau to notify the other two, so a single request covers your file at all three.

There are two tiers:

• Initial fraud alert — lasts one year, available to anyone who requests one, no proof of identity theft required.
• Extended fraud alert — lasts seven years, but requires an identity-theft report (typically filed with the FTC and, often, local police) to activate. This is a durable, long-running protection once in place.

A fraud alert is weaker than a freeze because it depends on the lender actually following through on verification — some do this more rigorously than others — but it’s also less friction if you expect to apply for credit yourself during the alert period, since it doesn’t require lifting anything.

What none of them do

It’s worth being precise about the limits, because all three tools address the same narrow problem — someone opening new credit in your name:

• They don’t protect existing accounts. A freeze, lock, or alert has no effect on credit cards or loans you already have open. If someone has your existing card number, that’s a call to the card issuer, not a freeze.
• They don’t stop tax fraud. Someone filing a fraudulent tax return in your name uses a completely different system (the IRS), and none of these three tools touch it. That requires separate IRS identity-theft protections.
• They don’t stop employment fraud. Someone using your Social Security number to gain employment doesn’t go through a credit file pull in the way new-account fraud does, so these tools don’t address it either.

How to actually place a freeze

Freezes have to be placed separately at each of the three bureaus — there’s no single combined request, because each bureau maintains its own file:

1. Equifax — via their freeze centre online, by phone, or by post.
2. Experian — via their freeze centre online, by phone, or by post.
3. TransUnion — via their freeze centre online, by phone, or by post.

Each bureau will issue you a PIN or set up online credentials so you can lift the freeze later without re-verifying your identity from scratch. Keep that credential somewhere retrievable — losing it turns a quick online lift into a slower identity-verification process.

When to choose which

• Freeze if you want the strongest available protection and don’t expect to need new credit soon, or after any exposure of your personal information (a data breach, a lost wallet, mail theft).
• Lock if your bureau app makes it genuinely more convenient and you understand it’s a contractual feature rather than the statutory freeze.
• Fraud alert if you expect to be applying for credit yourself in the near term and want a lighter-touch flag rather than a full block, or as an added layer after filing an identity-theft report (extended alert).

Many people reasonably use more than one at once — a freeze as the default state, lifted temporarily around a planned application.

Freezes for children

Parents and guardians can place credit freezes for minors, since child identity theft is a real and often long-undetected problem — a child’s Social Security number can be misused for years before anyone checks, because children don’t normally have a credit file to monitor. All three bureaus offer a process for placing a freeze on a minor’s file (or creating one to freeze, if no file yet exists), free of charge. Check each bureau’s current process, since the documentation required for a minor’s freeze differs from an adult’s own request.

If you’re dealing with existing negative marks alongside identity-theft concerns, see how long negative marks stay on your credit report and how to dispute credit report errors for the separate process of correcting anything that lands on your file incorrectly.