Credit Freeze vs Fraud Alert: How the Two Protections Differ
Both tools restrict access to your credit file, but they work differently. A credit freeze blocks most lenders from viewing your report until you remove it, while a fraud alert asks lenders to verify your identity before extending new credit. Fraud alerts expire automatically; a freeze stays until you remove it.
This guide is general educational information for U.S. readers. It is not financial advice and does not describe your individual credit file. Figures such as score ranges and timeline estimates are typical examples, not promises.
Key takeaways
- A fraud alert asks lenders to verify your identity before extending credit, while a security freeze blocks most access to your credit report.
- An initial fraud alert lasts 1 year, an extended fraud alert lasts 7 years, and a security freeze remains in place until you remove it.
- A fraud alert placed with one nationwide agency is passed along to the other two, while a freeze must be placed separately with each agency.
- Under federal law a security freeze is free to place, temporarily lift, or remove.
- Neither tool changes the contents of your credit report or has a direct effect on credit scores, which are calculated from the report itself.
Both tools restrict access to your credit file, but they work differently. A fraud alert tells lenders to take extra steps to verify your identity before extending new credit, and it ends on a set schedule. A security freeze blocks most access to your credit report until you remove it. One is a request for caution; the other is a restriction on access.
Credit freeze vs fraud alert: the difference in one sentence
A fraud alert is a note placed on your credit file that asks businesses to confirm your identity before they act on an application, while a security freeze is a legal restriction that prevents most businesses from obtaining your credit report at all. The Federal Trade Commission describes both as tools consumers may use after a data breach or suspected identity theft, and both can be in place at the same time. In practice the choice comes down to how long the restriction should last, how much access it should block, and how much documentation is available.
How a security freeze works
A freeze must be requested separately from each of the three nationwide credit reporting agencies — Equifax, Experian, and TransUnion. Once in place, it stops most creditors, landlords, insurers, and other users from pulling your report to evaluate a new application. Creditors that already hold an account in your name generally can still review that account, and a freeze never prevents you from obtaining your own credit report.
Under federal law, a security freeze is free to place, temporarily lift, or remove. A freeze does not change any information inside your file; it changes who can look at the report, not what the report contains. Because credit scores are calculated from the contents of the report, a freeze has no direct effect on a score. The guide to how credit scores are calculated walks through the inputs.
A freeze remains until you ask the agency to remove it. Many agencies also allow a temporary lift scheduled around a specific application, after which the freeze returns automatically. The credit freeze hub covers the placement and removal process in more detail.
How a fraud alert works
A fraud alert is lighter and shorter-lived. It is placed with one nationwide agency, and that agency must notify the other two, so the alert appears on all three files without three separate requests. Rather than blocking access, the alert asks businesses to take reasonable steps to verify your identity before extending credit, usually by contacting you at a phone number you provide for that purpose.
Initial fraud alert: 1 year
An initial fraud alert lasts 1 year. It is available to anyone who suspects their personal information may be misused, and it does not require a police report or documented proof of identity theft. It is commonly placed after a breach notification arrives when there is no confirmed misuse of the data.
Extended fraud alert: 7 years
An extended fraud alert lasts 7 years and requires an identity theft report, such as a report filed with a law enforcement agency, along with proof of your identity. Because it rests on documented identity theft rather than suspicion, it lasts longer and carries additional rights under the Fair Credit Reporting Act.
Side-by-side comparison
| Feature | Security freeze | Fraud alert |
|---|---|---|
| Primary effect | Blocks most access to your credit report | Asks businesses to verify your identity before extending credit |
| Duration | Remains until you remove it | 1 year for an initial alert; 7 years for an extended alert |
| How many agencies to contact | Each of the three nationwide agencies separately | One agency, which notifies the other two |
| Documentation required | Proof of identity to place or remove | None for an initial alert; an identity theft report for an extended alert |
| Phone number on file | Not required | Required, so lenders can reach you |
| Effect on credit scores | None directly | None directly |
What neither tool does
- Neither removes or corrects information already in your credit file; both act on access and verification rather than on the underlying data.
- Neither blocks a creditor that already has an account relationship with you from reviewing or collecting on that account.
- Neither prevents you from obtaining your own credit report.
- Neither has a direct effect on credit scores, because scores are calculated from the contents of the report rather than from who is allowed to see it.
- Neither replaces the dispute process. If information in your file is inaccurate, the FCRA gives you a separate right to dispute it, and an agency generally must investigate within 30 days — a period that can extend to 45 days if you provide additional information during the initial 30-day window.
Where these rights come from in federal law
Fraud alerts are addressed in FCRA section 605A, codified at 15 U.S.C. section 1681c-1. A related right — blocking information that resulted from identity theft — appears in FCRA section 605B at 15 U.S.C. section 1681c-2. The Fair Credit Reporting Act was enacted in 1970 and amended by the Fair and Accurate Credit Transactions Act in 2003, which expanded the fraud alert framework. The Consumer Financial Protection Bureau, created by the Dodd-Frank Act in 2010 and operating since 2011, supervises consumer reporting agencies and publishes consumer-facing material on these topics.
Situations where each tool tends to be used
A freeze tends to be chosen when the priority is stopping new accounts from being opened and there is no near-term need for lenders to see the file. A fraud alert tends to be used when someone suspects a problem but has not confirmed it, or when the goal is to have lenders slow down and verify identity without cutting off access entirely. Both are common after a data breach. When identity theft is confirmed, the process usually widens: a report can be filed at IdentityTheft.gov, and the IRS accepts Form 14039. The identity theft section explains how those reports interact with notations on a credit file.
Credit locks, monitoring, and related tools
A credit lock is sometimes confused with a freeze. A lock is a product offered by a credit reporting agency under terms the company sets, while a freeze is a right established in federal law. The two are not interchangeable, and the credit lock page compares them directly.
Monitoring is a third, separate function. Monitoring services watch for changes to your credit file and send notifications when new accounts, inquiries, or address changes appear. They do not restrict access to anything. The credit monitoring page covers what those services track.
Separately, the FCRA gives consumers the right to a free credit report from each nationwide agency every 12 months, and the three agencies currently provide free reports weekly through AnnualCreditReport.com. Reviews of the file itself are covered on the credit reports hub.
Credit scoring factors that a freeze or alert does not change
Most credit scores, including FICO and VantageScore, use a range of 300 to 850. The FICO model weights its factors roughly as follows: payment history 35%, amounts owed 30%, length of credit history 15%, new credit 10%, and credit mix 10%. VantageScore uses its own weighting and does not publish fixed percentages. Placing a freeze or a fraud alert does not add a hard inquiry, and hard inquiries typically remain on a credit report for 2 years. For background on how the two models compare, see FICO vs VantageScore and credit score ranges explained.
None of those factors are affected by a freeze or an alert, because both operate on access and verification rather than on the underlying account history, balances, or inquiry record. Negative information such as a late payment generally stays on a report for 7 years, a Chapter 7 bankruptcy for 10 years, and a Chapter 13 bankruptcy for 7 years — none of which a freeze or alert changes.
This page is published for education only and is not financial advice.
Compare three-bureau credit scores and reports from a single place. Educational links, disclosed below.
Three Bureau Credit Scores and ReportsCreditMonitored.com may earn a commission from partner links at no additional cost to you.
Frequently asked questions
What is the main difference between a credit freeze and a fraud alert?
A freeze restricts access to your credit report so most businesses cannot pull it, while a fraud alert leaves the file accessible but asks businesses to verify your identity before extending credit. A freeze stays until you remove it; an initial fraud alert lasts 1 year and an extended one lasts 7 years.
Do you have to contact all three credit bureaus for each tool?
For a fraud alert, contacting one nationwide agency is enough, because that agency must notify the other two. A security freeze has to be placed separately with Equifax, Experian, and TransUnion.
Do a credit freeze or a fraud alert change credit scores?
Not directly. Credit scores are calculated from the information in your credit report, such as payment history, amounts owed, and length of credit history. A freeze or alert changes who can access the report or what verification is required, not the data a score is based on.
Does a credit freeze cost anything?
Under federal law a security freeze is free to place, temporarily lift, or remove. No fee applies to those actions.
Can a credit freeze and a fraud alert be active at the same time?
Yes. They are separate tools and can be active simultaneously. Placing one does not cancel or override the other.
What does an extended fraud alert require that an initial one does not?
An initial fraud alert lasts 1 year and requires only a suspicion that your information may be misused. An extended fraud alert lasts 7 years and requires an identity theft report, such as a report filed with a law enforcement agency, plus proof of your identity.
Related guides
- How Credit Scores Are Calculated
- Fico Vs Vantagescore
- Credit Score Ranges Explained
- Payment History And Credit Scores