Identity thieves usually need one thing to open a credit card or loan in someone else’s name: a lender’s ability to pull that person’s credit report. A security freeze cuts off that access, and it is the single most direct way to block new-account fraud before it starts. For retirees, whose credit is often stable and rarely checked, the tradeoff is close to painless.
The protection is also free. Federal law requires each of the three national credit bureaus to place, lift, and remove a freeze at no charge, which removes the cost barrier that once discouraged people from using it. What trips most consumers up is not the price but the mechanics of how a freeze works and where it has to be applied.
What a security freeze actually restricts
A freeze locks a credit report so that new creditors cannot review it. Because most lenders will not approve an application without checking the file, a locked report stops the approval process cold. According to the Federal Trade Commission, a freeze restricts access to the report and is free to place at all three bureaus, which is what makes it effective against the most common form of identity theft: an account opened in a victim’s name without their knowledge.
Importantly, a freeze targets the report rather than the person’s existing finances. It does not close accounts, cancel cards, or stop scheduled payments, and it does not touch the credit already in use. Its job is narrow and specific, which is also its strength: it blocks the one action a thief needs to take while leaving normal financial life untouched.
Free retirement updates: Scam calls targeting retirees change every week. Our free Retirement Shield newsletter flags the ones going around and the one tell that stops each. Sign up free.
Why one freeze is not enough
The most common mistake is treating a freeze as a single action. There are three national bureaus, and a freeze placed with one does nothing at the other two. Equifax, Experian, and TransUnion each maintain their own file, and a lender may pull from any of them, so a report left open at even one bureau leaves the door ajar. Full protection requires contacting all three separately and confirming a freeze at each.
Each bureau issues a PIN or sets up an account login when the freeze is placed, and that credential is what allows the owner to lift it later. Keeping those details somewhere retrievable matters, because a freeze is meant to be temporary when the account holder needs credit. Applying for a card, a car loan, or a mortgage requires briefly thawing the report, and losing the PIN can turn a two-minute task into a longer verification process.
Freeze versus fraud alert, and what neither one does
A freeze is often confused with a fraud alert, but the two work differently. A fraud alert asks lenders to take extra steps to verify identity before extending credit; it warns, but it does not block access to the report. A freeze is the stronger tool because it stops the report from being pulled at all. A fraud alert can be useful for someone who wants notice of activity without locking their file, though it leaves more room for a determined thief.
Lifting a freeze is as free as placing it, and it can be done temporarily for a set window or permanently. That flexibility is what makes a freeze practical to keep in place year-round: it can stay active during the long stretches when no new credit is needed and be thawed only for the occasional application. The absence of any fee for lifting it removes the last reason to leave a report exposed.
Placing a freeze takes only a request to each bureau, made online, by phone, or by mail, and the bureaus are required to act on a properly submitted request within a short window. The same protection can be extended to others who are exposed to identity theft, including minor children and adults whose finances are handled under a power of attorney, because a dormant credit file that no one is watching is exactly what a thief prefers. For an older adult who applies for new credit only rarely, a freeze left in place year-round guards a report that would otherwise sit open, unmonitored, and available to anyone with the right personal details.
A freeze is not a cure-all. It does nothing to stop fraud on accounts that already exist, such as a stolen card number used on a current account, and it does not prevent tax-refund or benefits fraud that runs outside the credit system. Those risks call for their own defenses, from account alerts to monitoring statements. What a freeze does, it does completely: it shuts off the mechanism behind new-account identity theft, at no cost to keep it locked. That narrow, reliable function is the core protection the FTC’s consumer guidance urges households to put in place before a thief ever tries.
This article was produced with AI assistance and reviewed against primary sources by The Money Overview editorial team.
More Financial Reading
