LIFE · BMC FIELD MANUAL

The Credit Freeze Guide: Protect All Three Credit Files

A credit freeze works as a three-bureau system: place it everywhere, save the record and build a clean temporary-lift routine before an application is urgent.

Published September 13, 2026. General U.S. consumer education, not legal, credit-repair or financial advice. Procedures and law can change; verify current instructions with the FTC and each bureau.

The useful answer

  • A freeze is free, can be placed before identity theft occurs and remains until you lift or remove it.
  • Freeze Equifax, Experian and TransUnion separately; placing one freeze does not complete the other two.
  • Save dated confirmations and use unique credentials in a protected record that you can recover away from one device.
  • A freeze restricts access for new-credit decisions; it does not erase fraud, close existing accounts or replace report review.
  • For a planned application, ask which bureau will be checked, lift only what is necessary and confirm the freeze resumes afterward.

Know what a freeze changes

The FTC says a credit freeze makes it harder for someone to open a new credit account in your name by restricting access to your credit report. It is available to anyone, is free to place or lift, does not affect your credit score and lasts until you lift it. That makes it a preventive control, not a statement that fraud has already occurred.

The boundary matters. A freeze does not cancel a stolen card, stop charges on an existing account, correct an inaccurate report, change a password or prevent every form of identity misuse. Existing creditors and certain other parties may retain permitted access. Keep account alerts, strong authentication, statement review and credit-report review as separate layers rather than asking the freeze to solve every problem.

A commercial credit lock may be packaged with monitoring or other services. Do not assume a paid lock is the same legal tool as a security freeze or that convenience features justify the cost. This guide is about the free freeze described by the FTC. Read terms before enrolling in any separate product, trial or subscription.

Complete the three-bureau circuit

Freeze the file separately with Equifax, Experian and TransUnion through contact details reached from the FTC’s official guidance. A freeze at one bureau does not automatically place freezes at the other two. Avoid search advertisements, lookalike domains and unsolicited calls. Type the known official address or follow links from an official federal page, then confirm the bureau name before entering sensitive information.

Prepare identifying information in a private setting on a device and network you trust. Each bureau can have a different identity-verification flow, account design and recovery process. Follow the current instructions rather than a screenshot from an old article. Never pay a third party merely to place a standard freeze that federal guidance says is free.

Finish the circuit in one sitting when possible, then record each result separately. A simple table needs bureau, date, status, official URL used, account email and where the confirmation is stored. Do not put full passwords, Social Security numbers or answers to identity questions in an unprotected note. The system is complete only when all three statuses are known.

Store access without creating a new weakness

Use unique credentials for each bureau and a reputable password manager if that fits your security plan. Enable multifactor authentication where offered, and protect the email account used for recovery. A freeze record that depends on one unlocked phone or one reused password can become difficult to manage precisely when identity information has been exposed.

Save confirmation emails or downloadable notices in a protected folder, then note any bureau-specific recovery method. Older advice often emphasizes a PIN; current interfaces and procedures may differ, so follow the instruction shown by the bureau today. Do not publish confirmation numbers, forward them casually or leave printed copies in an obvious desk tray.

Give a trusted household member only the access appropriate to your circumstances, and document what should happen if you are unavailable. For a child under sixteen, the FTC says a parent or guardian can request a free freeze through a different process using bureau-specific instructions. Do not improvise an adult online application for a minor.

Plan temporary lifts before the application

A freeze also blocks you from opening new credit until access is restored. Before applying for a loan, card, apartment, insurance or a role involving a credit check, ask whether a report will be requested, which bureau or bureaus will be used and when. The FTC recommends identifying the bureau and lifting only that freeze when possible.

Choose a temporary lift window that covers the legitimate inquiry without leaving the file open indefinitely. Record the request and expected refreeze date. If the bureau offers a status view, verify the change rather than relying only on memory. Application timing and bureau processing can vary, so do not wait until the final minute or promise another party that access is instantaneous.

After the inquiry period, confirm each lifted file is frozen again. A calendar reminder is helpful but is not proof of status. If an application is denied or delayed, ask the legitimate organization which report it attempted to access before opening every file. Keep the interaction inside verified channels, especially if an unexpected caller pressures you to remove a freeze.

Separate freezes, alerts and report review

A fraud alert tells businesses to verify identity before granting new credit but does not prevent them from seeing the report. The FTC says an initial alert is placed by contacting one bureau, which must notify the other two, while a freeze must be placed separately at all three. Alerts and freezes can coexist; choose based on the actual situation and current official guidance.

Reviewing credit reports answers a different question: what is being reported. Use AnnualCreditReport.com, the federally authorized source identified by the FTC, and inspect names, addresses, accounts, balances and inquiries you do not recognize. A clean report does not guarantee that all personal data is safe, and an unfamiliar entry is not automatically fraud; investigate through verified creditor and bureau contacts.

Opt-outs, monitoring services, account alerts and identity-theft plans are additional tools with different scopes. Avoid buying a dashboard merely because it uses alarming language. Start with the free controls, understand what each does, and pay only for a service whose exact features and recurring cost solve a defined need.

Respond methodically when misuse appears

If an account or inquiry looks fraudulent, contact the real company using a statement, card or independently verified website—not contact details in an unexpected message. Preserve dates, names, reference numbers and copies of disputed information. Change compromised credentials and review connected accounts. Do not send sensitive documents through an unverified email address simply because the request sounds urgent.

Use IdentityTheft.gov to report identity theft and build a recovery plan tailored to the information and accounts involved. The site can generate an FTC Identity Theft Report, which may be needed for certain steps such as an extended fraud alert. A police report may also be relevant in some circumstances. Follow the instructions for your facts rather than treating one checklist as universal legal advice.

Revisit the three-bureau table after recovery actions, applications, address changes and account migrations. Confirm the freezes remain active, recovery contact information is current and records are readable. The system should be boring: three known statuses, protected access and a repeatable lift process. That is far stronger than trying to remember which button you clicked after the next breach notice arrives.

Frequently asked questions

Does a credit freeze cost money?

No. FTC guidance says placing, lifting and removing a credit freeze are free.

Do I need to freeze all three credit bureaus?

Yes. A freeze must be placed separately with Equifax, Experian and TransUnion; completing one bureau does not freeze the other files.

Will freezing my credit lower my score?

No. The FTC says a credit freeze does not affect your credit score, though it can prevent a legitimate new-credit check until you lift it.

Is a fraud alert the same as a credit freeze?

No. An alert tells businesses to verify identity and still allows report access; a freeze restricts access for new-credit decisions. Current eligibility and duration rules differ.

Sources and further reading

Claims checked against these official or professional sources on September 13, 2026.