A credit freeze and fraud alert both reduce identity-theft risk, but they work differently. A freeze limits access to a credit report and generally requires contacting each nationwide bureau separately; it lasts until lifted or removed. A basic fraud alert tells creditors to verify identity, lasts one year, and can be placed by contacting one bureau, which must notify the other two.
Information checked: September 10, 2026.
Credit freeze
A freeze is free to place, lift and remove and is available to anyone. It restricts prospective creditors' access, so the consumer must lift it when legitimately applying for credit. Contact Equifax, Experian and TransUnion separately and safeguard each PIN or account credential.
One-year fraud alert
A basic alert is free and available when identity theft is suspected. Contact one nationwide bureau; that bureau must notify the others. Businesses obtaining the report must take reasonable steps to verify identity. The alert expires after one year unless renewed.
Extended alert
An identity-theft victim with an FTC Identity Theft Report can request a seven-year extended fraud alert. The consumer contacts one bureau for the alert, but should follow the bureau's documentation instructions. Extended-alert rights include additional free credit reports.
What neither tool fixes
A freeze or alert does not remove a fraudulent account, refund a charge, secure a bank account or stop tax identity theft. Report identity theft, dispute fraudulent credit information, contact affected creditors, replace compromised passwords and consider an IRS Identity Protection PIN for tax fraud risk.
Plan for legitimate applications
Before applying for a mortgage, rental, utility, phone plan or credit card, ask which bureau will be checked and temporarily lift that freeze for an appropriate period or creditor. Never give a caller remote access or payment to place a freeze; the bureaus offer it free.
Action checklist
Start at the official agency page linked below and confirm that it applies to your location, tax year, account, property, or claim. Write down the deadline and the event that starts it. Gather notices, contracts, statements, payment records, identification, and dated correspondence before submitting. Save a complete copy, confirmation number, delivery proof, and the name of any agency representative. Review the resulting decision promptly and calendar every appeal or follow-up date.
Common mistakes to avoid
Do not rely on an undated search snippet, a commercial calculator, or a rule from another state or county. Do not assume an application pauses a lawsuit, collection action, tax deadline, or housing deadline unless the responsible authority confirms it. Avoid sending original records or sensitive information through an unverified link. When a deadline or legal consequence is disputed, obtain the written rule and consider qualified local advice.
Frequently asked questions
Which is stronger?
A freeze generally creates the stronger barrier because it limits report access.
Must I contact all three bureaus?
For a freeze, yes. For a fraud alert, contacting one bureau triggers notice to the others.
How long do they last?
A freeze lasts until lifted or removed; a basic alert lasts one year and an eligible extended alert lasts seven years.
Summary
After confirmed identity theft, freeze all three credit files for the strongest new-account barrier and create an IdentityTheft.gov recovery plan. Add a fraud alert when verification protection is useful, but do not treat either tool as a substitute for disputing fraudulent accounts. Verify current agency instructions before acting.