How to Freeze Your Credit—and Why It Is Only One Privacy Layer

A credit freeze, also called a security freeze, limits prospective creditors' access to your file at the three nationwide consumer-reporting companies. It can make it harder for someone to open a new credit account in your name, but it does not remove your address from people-search sites, change public records, protect an existing account or control every identity-verification system.

The Consumer Financial Protection Bureau explains that freezes at Equifax, Experian and TransUnion are free and must be requested separately. This guide uses that official scope and keeps credit protection separate from data-broker removal, tax protection and account security.

Key takeaways

• Freeze your files separately at Equifax, Experian and TransUnion.
• A freeze is free and does not affect your credit score or existing credit accounts, but a lender may be unable to approve new credit without access to the file.
• You can temporarily lift or remove a freeze when you apply for credit; use the bureau and time window the lender identifies.
• Specialty reporting companies, bank-account screening, utility records and insurance databases have different products and controls. A freeze at the three nationwide bureaus is not a universal freeze.
• An IRS Identity Protection PIN is a separate tax-fraud safeguard. It helps the IRS verify returns; it does not replace a credit freeze.
• Data-broker opt-outs address a different exposure: public or commercial profiles that may reveal contact or household information. They do not replace a credit freeze or fraud response.

What a credit freeze does

When a security freeze is active, prospective creditors generally cannot access your credit file to evaluate a new application. Existing creditors and certain permitted entities can still access information under applicable rules. The freeze is designed for new-account risk; it is not a complete identity-security program.

A freeze generally does not:

• remove inaccurate information from a credit report;
• close or secure an existing bank, card, email or investment account;
• stop a fraudster who already has access to an existing account;
• remove a people-search profile or public-record page;
• stop a tax return from being attempted; or
• control every specialty consumer-reporting, bank-screening, utility or insurance database.

For a suspected identity-theft event, use IdentityTheft.gov and contact the affected financial institution. A freeze is a preventive control, not a substitute for incident response.

How to place the three nationwide freezes

Each bureau is independent. Use the official pages, create or recover the account if required, save the confirmation and keep your credentials in a password manager.

1. Equifax: use the Equifax security-freeze page.
2. Experian: use the Experian freeze center.
3. TransUnion: use the TransUnion credit-freeze page.

Do not use a paid “credit lock” when your objective is the statutory security freeze. The CFPB says locks are separate commercial products and are not more effective than the free freeze for this purpose.

After each request, save:

• confirmation number or page;
• account username or recovery method, not the password in a shared note;
• date the freeze was placed;
• instructions for a temporary lift; and
• the bureau's current contact route for a lost PIN, where that bureau uses one, or an account problem.

The CFPB states that nationwide bureaus must place an electronic or telephone freeze within one business day when the request meets the requirements, with different timing for mail requests. Follow the bureau's current confirmation and official instructions if the process differs.

Should you freeze specialty reports too?

There is no single “all bureaus” switch. ChexSystems, Innovis, NCTUE and other specialty reporting companies may have their own consumer controls, but the right action depends on the product and the risk you are addressing. Do not describe a specialty freeze as controlling all bank, utility, telecom, rental or insurance decisions.

If a specific institution tells you that it uses a specialty report, identify the reporting company and read that company's official freeze, disclosure or dispute instructions. Start with the CFPB consumer-reporting resources when you need to identify the report involved.

How to lift a freeze for a legitimate application

Ask the lender which bureau or bureaus it will check. Then use that bureau's official account to:

• lift the freeze temporarily for a selected period;
• lift it for a named creditor where the service offers that option; or
• remove the freeze and place it again later.

The CFPB says a temporary lift can be requested free of charge. A lender may need time to retry an application after the lift, so follow its current instructions. Do not send a freeze PIN to a lender by email unless the official bureau route specifically requires it.

Review your reports separately

A freeze does not show whether an account already exists or whether a report contains an error. Use AnnualCreditReport.com, the official federally directed source for free credit reports, and review each report for:

• accounts or inquiries you do not recognize;
• addresses or employers that do not belong to you;
• incorrect names or identifying details; and
• collection or public-record information that appears inaccurate.

If you find an error, follow the reporting company's dispute instructions and keep the report, supporting evidence and delivery record. A freeze and a dispute are different actions.

Add the tax-protection layer

The IRS Identity Protection PIN is a six-digit number known to you and the IRS. The IRS says it helps verify your identity when you file an electronic or paper federal return and that a new PIN is issued each year. Eligible taxpayers can request one through an IRS Online Account after identity verification; the IRS also publishes alternative methods for some people who cannot verify online.

Use the official IRS IP PIN page. The IRS says it will not ask for your PIN by an unsolicited phone call, email or text. Never disclose it to a person who contacts you unexpectedly.

An IP PIN helps with federal tax-return identity verification. It does not prevent every tax scam, state-tax issue, benefits fraud or account takeover. Use the IRS's current instructions for an incident.

Add the account-security layer

Credit freezes do not protect existing accounts. Review the controls that protect the accounts most likely to be used for recovery:

1. use a unique password for email, banking and financial accounts;
2. prefer a phishing-resistant hardware key or authenticator app over SMS where the provider supports it;
3. add an account PIN or port-out lock with your mobile carrier;
4. review recovery email addresses, phone numbers and trusted devices; and
5. turn on transaction and login alerts.

These steps reduce account-takeover risk but do not guarantee that an account cannot be compromised.

Why a credit freeze does not remove data-broker exposure

Credit files and people-search profiles are different systems. A freeze can limit a prospective creditor's access to a credit file while a separate website continues to display a name, address, phone number or relative link. Removing a data-broker profile does not freeze credit or correct a credit report.

For a data-broker review, document the exact public result, use the provider's current route, preserve the response and recheck the same scope. Do not state that an opt-out prevents identity theft or removes a breach record. It may reduce one publicly accessible enrichment source, but the source, downstream copies and account controls remain separate.

OfflistMe can prepare reviewable request drafts for recorded catalog workflows. You decide what to submit and send requests from your own channel. A catalog route is not proof that a provider has your data or that removal will be completed.

Credit freeze versus fraud alert

The FTC explains that a fraud alert tells businesses to verify your identity before opening new credit in your name, but it does not block access to your report in the same way as a freeze. An initial fraud alert is free and generally lasts one year; people who have experienced identity theft may have access to a longer alert under the applicable rules.

Use a freeze when you want to restrict prospective-credit access. Consider a fraud alert when the verification signal is more appropriate or when an identity-theft response calls for it. They are not mutually exclusive, and the FTC's current guidance should control the process.

A practical checklist

• [ ] Place a freeze at Equifax, Experian and TransUnion through their official sites.
• [ ] Save each confirmation and recovery method privately.
• [ ] Request your reports at AnnualCreditReport.com and review for unfamiliar activity.
• [ ] Dispute inaccurate report information through the relevant reporting company.
• [ ] Request an IRS IP PIN through IRS.gov if it fits your tax-protection needs.
• [ ] Secure existing financial, email and mobile accounts with strong authentication.
• [ ] Review specialty reporting companies only when the product or risk makes them relevant.
• [ ] Treat data-broker removal as a separate evidence and source-control workflow.

Frequently asked questions

Does a credit freeze lower my score?

No. The CFPB says a security freeze does not affect credit scores. It can affect whether a prospective creditor can access the file needed for a new application.

Do I need all three nationwide freezes?

Each bureau is independent, so contact all three if you want the broad nationwide-credit-file protection described by the CFPB. A specialty-report control is a separate decision.

Does a freeze expire?

A security freeze remains until you request a lift or removal, subject to the bureau's current process. Keep recovery information so you can manage it when you apply for credit.

Does a freeze protect my bank account?

Not by itself. It is aimed at prospective creditors and new credit accounts. Secure existing accounts and contact the institution if you see unauthorized activity.

Does a freeze remove my name from Google or people-search sites?

No. Those are separate systems. Use the provider's current privacy route and a search-engine process only when its rules fit the result.

Sources

• CFPB: What is a credit freeze or security freeze?
• CFPB: Consumer reporting companies
• FTC: Credit freezes and fraud alerts
• IRS: Get an Identity Protection PIN
• CISA: More than a Password
• AnnualCreditReport.com
• FTC: What to know about people-search sites
• IdentityTheft.gov
• OfflistMe Privacy Policy

Reviewed August 25, 2026. CFPB guidance supports the descriptions of nationwide security freezes, separate bureau requests, free placement and lifting, timing, credit-score impact, and the distinction between freezes and locks. FTC guidance supports the descriptions of freezes, fraud alerts, and people-search opt-outs. IRS guidance supports the current IP PIN scope and annual process; CISA supports the bounded MFA comparison. Specialty-report controls, provider routes, identity-verification requirements, and legal remedies can vary or change, so confirm the current first-party instructions before submitting sensitive information.

Related guides

• What to Do After a Data Breach
• How to Remove Your Data from Data Brokers
• How to Remove Your Home Address from the Internet
• Identity Theft Statistics 2026