A credit freeze is one of the few fraud defenses that is both free and close to airtight, and federal regulators single it out as the strongest step available for locking down a credit file. Placing a freeze at Equifax, Experian and TransUnion restricts access to the reports lenders check before approving a new account, which is exactly what an identity thief needs. Without that access, a stolen Social Security number and date of birth are far harder to turn into a fraudulent loan or card. For older Americans, whose savings make them frequent targets, it is a rare no-cost safeguard.
What a security freeze does, and why it costs nothing
A security freeze, the formal name for a credit freeze, restricts access to a consumer’s credit report so that most lenders cannot pull it. Because a bank or card issuer will not open a new account without reviewing that report, a frozen file stops the approval before it starts. The protection is specific and worth understanding: a freeze blocks new-account fraud, the kind where a thief opens a credit line in someone else’s name, but it does not touch accounts that already exist.
Since a federal law took effect in 2018, placing and lifting a freeze at each of the three nationwide bureaus is free, a change the Federal Trade Commission announced when the protection first became free for all consumers. A freeze also does nothing to a credit score, and it leaves existing credit cards, job applications, apartment rentals and insurance untouched. The only real cost is a few minutes of setup at each bureau.
Free retirement updates: Miss an enrollment or claim deadline and it may be gone. Our free Retirement Shield newsletter keeps readers ahead of the ones that matter. Get the free newsletter.
Setting one up at all three bureaus
A freeze has to be requested separately at Equifax, Experian and TransUnion, because each keeps its own file and a thief can apply for credit through any one of them. Requests can be made online or by phone, and under the FTC’s rules the bureau must put the freeze in place within one business day of an online or phone request. Each bureau issues a PIN or lets the consumer set up an account, which is what allows the file to be reopened later.
The freeze is reversible on demand rather than a permanent lockout. The FTC’s guidance on freezes and fraud alerts notes that a consumer who needs to apply for a loan or a new card can lift the freeze temporarily, and the bureau must act on that request within one hour when it is made online or by phone. That speed removes the main reason people hesitate to freeze in the first place, the fear of being locked out of their own credit at the moment they need it.
For anyone not ready to freeze, a fraud alert is the lighter alternative. A free alert lasts one year, is renewable, and tells lenders to take extra steps to verify identity before opening an account, though it stops short of blocking access outright. Placing an alert at one bureau requires that bureau to notify the other two, so a single request covers all three, a meaningful difference from a freeze, which must be set at each one individually.
A freeze also applies to one person’s file at a time, which matters for couples and families. Each adult has a separate credit file at each bureau, so a household protecting both spouses has to place six separate freezes. A parent or guardian can freeze the file of a minor child as well, a step that guards against a form of identity theft in which a thief opens accounts under a child’s unused Social Security number and the fraud goes undiscovered for years. The extra requests take time, but the protection scales with the number of files a thief could exploit.
Why the tool matters most for retirees’ money
Older Americans are disproportionately targeted for new-account fraud, partly because they often have established credit, home equity and retirement savings that make a stolen identity valuable. A fraudulent account can go undetected for months, damaging a credit record and creating a dispute process that takes time and energy to unwind. A freeze cuts off that entire category of loss before it begins rather than cleaning up after it.
Freezing a file does not replace vigilance elsewhere. It does not stop fraud on existing accounts, block tax or benefits identity theft, or undo a scam in which someone is tricked into sending money directly. The FTC still recommends checking credit reports and deciding whether a freeze or an alert fits a person’s situation. But among the moves available at no cost, none does more to keep a thief from borrowing against another person’s name.
The open question for most households is not whether a freeze works, since regulators are unusually direct that it does, but why so few people use it. The tool has been free and available at all three bureaus for years, yet new-account identity theft persists, much of it against the very retirees who would gain the most from a safeguard that costs nothing but a few minutes and can be reversed in under an hour.
This article was researched and drafted with the assistance of AI and reviewed by The Money Overview editorial team.
More Financial Reading
