How to Freeze Your Credit — And Why It Is Not Enough on Its Own

A credit freeze is the most underused free tool in consumer protection. It takes 15 minutes, costs nothing under federal law, and is the closest thing available to making yourself immune to new credit account fraud.

A credit freeze protects your credit file only. It does nothing about the people-search sites that currently show your address, employer, relatives' names, and phone number to anyone who searches for you. A frozen credit file on top of an exposed data broker profile is like locking your front door with the windows open.

This guide covers both — the complete freeze process, and the step most guides skip.

What a credit freeze actually does

A security freeze instructs the three major credit bureaus — Equifax, Experian, and TransUnion — not to share your credit file with lenders who request it.

When a lender cannot pull your credit file, they cannot approve a new account application. The application gets declined even if the fraudster has your Social Security number, birthdate, and address.

What a credit freeze does not do:

• Does not protect existing accounts — your current cards and bank accounts remain vulnerable to account takeover
• Does not affect your credit score — scores are calculated independently of freezes
• Does not freeze ChexSystems — used for new bank accounts; requires a separate freeze
• Does not prevent medical identity theft — insurers use different verification systems
• Does not stop tax fraud or government benefits fraud — the IRS and SSA use their own identity verification

How to freeze your credit — the complete list

Most articles mention only three bureaus. Lenders pull from different sources depending on loan type, so freeze all of these:

The three major bureaus (all free):

• Equifax — equifax.com/personal/credit-report-services — account required
• Experian — experian.com/freeze — no prior account required
• TransUnion — transunion.com/credit-freeze — account required

The secondary bureaus (all free):

• ChexSystems — chexsystems.com/web/chexsystems/securityfreeze — controls new checking and savings account openings
• Innovis — innovis.com/personal/securityFreeze — used by some specialty lenders
• NCTUE — nctue.com/freeze — controls new utility and telecom accounts

Each bureau is independent. There is no universal freeze — you must contact each one. Online freezes are typically instant or same-day. Mail-in requests take 3-5 business days.

The 2018 Economic Growth, Regulatory Relief, and Consumer Protection Act made all credit freezes free nationwide. Some bureaus advertise paid "credit lock" products — these are marketing products, not improvements over the free legal freeze.

How to lift a freeze when you need to apply for credit

When you apply for a loan or new credit card, you need to temporarily lift the freeze.

• Lift for a specific lender — ask which bureau they pull from, then lift only that bureau's freeze. Minimizes exposure.
• Lift for a specific time window — set a date range (e.g., 7 days). It re-freezes automatically.
• Lift permanently — remove entirely. You can re-freeze at any time.

Lifting a freeze takes minutes online. Plan 24 hours ahead for lenders requiring an immediate hard pull.

Why a credit freeze alone is not enough

A frozen credit file stops new account fraud. It does not stop:

• Tax refund fraud — the IRS does not use credit bureau data. An IRS Identity Protection PIN (irs.gov/identity-theft-central) prevents this.
• Government benefits fraud — state unemployment agencies and the SSA have separate identity verification systems.
• Account takeover on existing accounts — fraudsters use account recovery flows (security questions, phone verification) to access existing email, banking, or brokerage accounts.
• Medical identity theft — insurers verify identity through their own systems.

All of these fraud types rely on the same input: your personal profile — current address, phone number, employer, relatives' names — freely available on people-search sites like Spokeo, Radaris, and Whitepages.

The National Public Data breach (2024-2025) exposed 2.9 billion records from a data broker that scraped and sold personal data before failing to secure it. See the full 2026 identity theft statistics → That breach gave fraudsters not just SSNs but the complete profile data that makes account recovery bypasses, tax fraud, and benefits fraud viable. A credit freeze helps against the credit fraud portion only.

The missing step: data broker opt-outs

Removing your profile from people-search sites does not undo a breach. But it raises the cost of fraud by removing the enrichment layer that converts a partial breach record into a complete identity dossier. For the fastest address removals, the personal safety removal guide covers 24-hour opt-outs by broker.

The practical combination:

1. Freeze credit at all 6 bureaus above — stops new account fraud
2. Remove yourself from data broker databases — limits profile enrichment for tax, benefits, and account takeover fraud
3. Get an IRS Identity Protection PIN — stops tax refund fraud
4. Enable 2FA on financial accounts using an authenticator app — stops account takeover via SIM-swap

OfflistMe removes your profile from 300+ data brokers for a one-time $5. No subscription, no ongoing charges.

Credit freeze vs. fraud alert — which to choose

A fraud alert is a one-year notice on your credit file that instructs lenders to take extra verification steps before approving credit. It does not block access to your file.

A credit freeze blocks access to your file entirely.

Fraud alert: easier to manage, no need to lift for applications, weaker protection.

Credit freeze: stronger protection, minor friction when applying for legitimate credit.

For anyone who has experienced identity theft or a high-risk breach with SSN exposure, a credit freeze at all six bureaus is the right choice. If you are recovering from a breach, see the 48-hour breach action plan → for the full recovery sequence.

Frequently Asked Questions

Does a credit freeze affect my credit score?

No. A credit freeze has zero effect on your credit score, existing accounts, or ability to use current credit cards. It only affects applications for new credit lines.

How long does a credit freeze last?

Indefinitely, until you lift it. It does not expire or need renewal. Federal law eliminated the expiration rules that some states previously imposed.

Can I still use my existing credit cards if my credit is frozen?

Yes. A credit freeze does not affect existing accounts in any way.

What is the difference between a credit freeze and a credit lock?

A credit lock is a paid product from the bureaus offering similar protection with slightly faster toggle. A credit freeze is a free federal right. Consumer advocates generally recommend the free freeze over the paid lock.

Do I need to freeze my credit at all three major bureaus?

Yes. Each bureau operates independently. Freeze all three plus ChexSystems and Innovis for complete coverage.

Remove your data from people-search sites → | Read: What to Do After a Data Breach →