A credit freeze is the best free thing in personal security, and most people who place one walk away believing they bought more protection than they did.
Here is the whole mechanism in one sentence. A freeze tells Equifax, Experian and TransUnion to stop handing out your credit report. A lender who cannot pull your report will not approve an application, so the fraudulent account never opens.
That is it. That is the entire thing it does. Everything below follows from understanding that it works at the credit-report layer and nowhere else.
What it stops cold
Anything that requires a lender to check your credit before saying yes:
- A credit card opened in your name
- A car loan, a mortgage, a personal loan
- A new phone contract, which is the one people forget and the one that leads to SIM swaps
- A utility or cable account opened at an address you have never lived at
- Most “buy now, pay later” accounts, though these check inconsistently
This is the most common shape of identity theft, so a freeze covers a real majority of what people are afraid of. It is free at all three bureaus by federal law since September 2018, and anybody charging you for it is selling something you already have.
What it does not touch
This is the part that costs people money, because they froze their credit in an afternoon and then stopped paying attention.
Your existing accounts. A freeze does nothing about the credit card sitting in your wallet. If the number leaks, someone runs charges on it, and the freeze is irrelevant to that transaction because no lender is pulling anything. Watch the statements, and call the bank for a reissue when a number is exposed.
Your bank account. Freezes govern credit reports. A checking account drained through a compromised login has nothing to do with the bureaus. That is a password and two-factor problem.
Your tax refund. Someone filing a return in your name to collect your refund never touches your credit. The IRS Identity Protection PIN is the control for that one, it is free, and it is separate from everything the bureaus do.
Medical and insurance fraud. Care billed under your name runs through a different system entirely.
Anyone you already gave permission to. Your existing creditors can still see your report. So can debt collectors, and so can anyone doing a background check you consented to.
So the honest summary is that a freeze closes the front door on new credit and leaves every other door exactly as it was.
Working out which doors are still open after your data leaks is the part people skip. The Breach Recovery Playbook walks the full sequence as a checklist, with the bureau links, the IRS PIN steps and the carrier lockdown already laid out. $11.99.
Freeze, fraud alert, credit lock: they are not the same
Three products, similar names, and the marketing blurs them on purpose.
- Credit freeze. Free, backed by federal law, blocks report access outright. Lasts until you lift it. This is the strong one.
- Fraud alert. Free, lasts one year, and it does not block anything. It flags your file so a lender is supposed to take extra steps to verify identity. Whether they bother varies. The FTC lays out the difference plainly if you want the official version.
- Credit lock. A bureau product, sometimes bundled into a paid subscription, doing roughly what a freeze does. The difference is that a freeze is a legal right with legal obligations attached and a lock is a contract with terms the bureau can change. Choose the one written into law.
If you are placing a freeze, place all three. Lenders do not all pull from the same bureau, and one unfrozen file is an unlocked door.
Unfreezing is easier than people expect
The main reason people avoid freezes is a belief that they will make buying a car miserable. That was truer a decade ago.
You lift a freeze online or in the app, at no charge, and you can lift it for a set window or at a single bureau if the lender tells you which one they use. It takes a few minutes and goes into effect within the hour. Keep the PIN or login for each bureau somewhere you will find it, because hunting for an Equifax PIN while a salesperson waits is the actual inconvenience, and it is avoidable.
Freeze your kids too, if you have them. Child credit fraud runs undetected for years because nobody thinks to check a nine-year-old’s credit report, and it surfaces when they apply for their first student loan.
How to place one, bureau by bureau
Fifteen minutes total, and the friction is different at each one.
- Equifax. The online flow is the smoothest of the three. Create an account, verify identity, freeze. No PIN is issued, which removes the classic problem of losing it.
- Experian. Online, and it issues a PIN you will need later. Save it somewhere durable the moment it appears, because recovering it is a phone call with hold music.
- TransUnion. Online, account required, similar to Equifax.
All three will ask for your Social Security number, date of birth and address history to confirm you are who you say. That feels wrong given why you are there, and it is the same verification a lender would do. Type it into the bureau’s own site reached by typing the address yourself, never a link from an email.
Expect one of the three to fail identity verification and demand documents by mail. This happens to plenty of people, usually because of a recent move, and it is tedious rather than a sign of anything. Send the documents and finish the job, because two frozen bureaus and one open one is a door standing open.
The freeze you place for somebody else
You can freeze credit for anyone you are legally responsible for, and two groups are worth doing.
Children. A minor has no credit file, so the bureaus create one and freeze it. It stays frozen until they need it at eighteen. Child identity theft runs undetected for years precisely because nobody checks, and the discovery usually happens during a student loan application at the worst possible moment.
An adult you hold power of attorney for. A parent with dementia is a frequent target, and a freeze removes the most damaging outcome without needing them to change any daily habit.
Both take longer than freezing your own, because they are paperwork by mail rather than an online form. Set aside an evening and do them together.
The bottom line
A freeze is free, it takes fifteen minutes across all three bureaus, and it shuts down the most common form of identity theft. Place one.
Then be clear with yourself about what you just bought. New credit in your name is blocked. Your existing cards, your bank login, your tax refund and your medical billing are all exactly as exposed as they were this morning, and each one has its own separate control. The freeze is the first move and not the last one.