A single stolen Social Security number can turn into a credit card, an auto loan, or a store account opened in a victim’s name, and the bills often surface months later after the debt has piled up. Federal law offers a free defense that stops that fraud at the source. Since a 2018 law took effect nationwide, every American can place and lift a credit freeze at all three major bureaus at no charge, closing the door thieves use to open new accounts. For retirees on fixed incomes, that free tool can protect thousands of dollars.
What a credit freeze actually blocks
A credit freeze, sometimes called a security freeze, restricts access to a consumer’s credit report. Because a lender pulls that report before approving a new account, a frozen file gives most applications nowhere to go. The Federal Trade Commission explains that while a freeze is in place, no one can open a new credit account in that person’s name, including the account holder, until the freeze is lifted. That is precisely the barrier that defeats new-account identity theft, the kind that runs up fresh debt rather than misusing an existing card.
The freeze is deliberately narrow, and understanding its limits keeps expectations honest. It does not affect a credit score, and it does not block access to existing accounts, so current cards, mortgages, and bank relationships keep working normally. It also does not stop charges on cards a thief has already stolen, which is a job for fraud monitoring rather than a freeze. What it does is prevent the opening of something new, and new-account fraud is among the costliest forms because the victim rarely learns of it until a collector calls.
Free retirement updates: A quiet rule change can shrink a Social Security or Medicare check, and no one warns you. The free Retirement Shield newsletter catches these early and explains what to do. Get it free.
The federal law that made the freeze free
The no-cost guarantee is not a bureau courtesy that can be withdrawn; it is written into federal law. Congress passed the Economic Growth, Regulatory Relief, and Consumer Protection Act, and the FTC announced that starting September 21, 2018, consumers could place free credit freezes at all three nationwide bureaus. Before that date, freezing a file could cost a fee in many states, and lifting it cost another, a friction that discouraged people from using the strongest available protection. The 2018 law reached further than adults, too: it gave parents and guardians the right to place a free freeze on the credit file of a child under 16, shutting down a quiet but growing form of fraud in which thieves exploit a young person’s unused Social Security number for years before anyone thinks to check.
The same law strengthened a related tool, the fraud alert. It extended the standard alert from 90 days to a full year, and a fraud alert requires a business to verify identity before extending new credit. The alert is a lighter touch than a freeze, because it flags rather than blocks, but both are now free and both attack the same target. A retiree who prefers not to manage lift-and-refreeze steps for every loan application may lean on the yearlong alert instead. The alert also comes in a stronger form for those already victimized. A consumer who has filed an identity-theft report with the FTC can obtain an extended fraud alert that lasts seven years, and active-duty service members can place a one-year alert that shields their file while they are deployed. Each is free, and each forces a lender to take an extra verification step before opening credit in that name.
Placing the freeze at all three bureaus
Protection is only complete when all three files are covered, because a lender may check any one of them. That means contacting Equifax, Experian, and TransUnion separately, each through its own website, phone line, or mail request. The FTC’s guidance on how to stop identity thieves notes that a bureau must place a freeze within one business day when the request comes by phone or online, and must lift it within one hour on the same channels. A freeze left on just one or two files leaves an open lane a thief can still use. Each bureau also issues a PIN or password when a freeze is set, and that credential is what unlocks a later lift, so storing it somewhere safe is part of the routine rather than an afterthought.
The temporary lift is where the free structure pays off in practice. Anyone applying for a mortgage, a car loan, or a new card can lift the freeze for a set window or at a specific bureau, then let it snap back into place, all without a fee under the federal rule. That reversibility answers the most common objection, that a freeze is too much hassle, because there is no financial penalty for turning it off and on as legitimate borrowing requires.
For older Americans, the math is stark. The freeze costs nothing, the bureaus are legally bound to honor it, and it neutralizes the single most damaging category of identity theft before any debt is ever created. A thief who obtains a name, birth date, and Social Security number still cannot convert that data into a new loan against a frozen file. The protection sits unused by millions of people who qualify for it automatically, and the only thing standing between the fraud and the freeze is the short set of requests to three bureaus.
This article was produced with AI assistance and reviewed against primary sources by The Money Overview editorial team.
More Financial Reading
